last executing test programs:

29m40.409169289s ago: executing program 32 (id=40):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0xfffffffd)
r1 = eventfd2(0x0, 0x0)
io_setup(0x4, &(0x7f0000000080)=<r2=>0x0)
io_pgetevents(r2, 0x2, 0x0, 0x0, 0x0, 0x0)
io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
shutdown(r0, 0x0)

29m26.537948557s ago: executing program 33 (id=42):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0)

28m48.12224239s ago: executing program 34 (id=161):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)

27m21.00600734s ago: executing program 35 (id=316):
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000006c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@uqnoenforce}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080))
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x165840, 0x2)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
getpriority(0x2, r0)
fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000300), 0x0, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d00000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0)

22m37.69112894s ago: executing program 36 (id=805):
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mkdir(&(0x7f0000000080)='./bus\x00', 0x3)
open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000002c0)="$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")
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$FUSE(r2, &(0x7f0000003680)={0x2020}, 0x2020)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, &(0x7f0000001200))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

19m46.099101309s ago: executing program 37 (id=1173):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5a)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
r0 = socket(0x10, 0x3, 0x0)
recvmmsg$unix(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x13d)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x3a, 0x0, "33d080577968b3107694c2858f48c27f17ef54caf822abcfad9399c494d846140482c7e40195d5f034a72c69ed7330f3000f530ff9525fad6b3db9851a4354d70cc3734d319f852c370cbc9e69c75987"}, 0xd8)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, 0x0, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r4 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x2, 0x1, {0x6, 0xfd, 0x20ff, 0x8, 0xe, 0xf33a, 0x9, 0x4, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x8}}, {0x0, 0x13}}}, 0xa0)
sendfile(r4, r4, &(0x7f0000000080), 0x7f03)

19m13.839050463s ago: executing program 38 (id=1251):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r5, 0x0, 0x20040040)
r6 = dup(r3)
syz_emit_ethernet(0x6e, &(0x7f0000000a80)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, '|6M', 0x6, 0x2f, 0xff, @mcast2, @private0, [@fragment={0x33, 0x0, 0x1a, 0x0, 0x0, 0x8, 0x66}]}}}}}}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read(0xffffffffffffffff, &(0x7f0000000040)=""/138, 0x8a)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080)
sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)

15m12.260364191s ago: executing program 39 (id=1730):
syz_io_uring_setup(0x29c, &(0x7f0000000300)={0x0, 0x14ba, 0x8, 0x1, 0x133}, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000000))
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x5}, 0x2)
syz_open_dev$radio(0x0, 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50)

14m35.483614636s ago: executing program 40 (id=1809):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0)
socket$nl_netfilter(0x10, 0x3, 0xc)
getrusage(0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="060000000400"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000680)={'broute\x00', 0x0, 0x4, 0x3f, [0x49, 0x80000000, 0x4, 0x1, 0x1, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400)=""/63}, &(0x7f0000000280)=0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x2)
mount$tmpfs(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x32]}}}, 0x4e}]})

11m5.145294719s ago: executing program 41 (id=2199):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}}, 0x0)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t\x04/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae', 0x42, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
sched_setaffinity(0x0, 0x62, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000)
timer_create(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, 0x80000)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})

9m32.874108066s ago: executing program 42 (id=2388):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x1, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0x3, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000)
r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r10, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000baffda6e4a4d83"}, 0x40)
setsockopt$RDS_GET_MR(r10, 0x114, 0x2, &(0x7f0000000040)={{&(0x7f00000000c0)=""/238, 0xee}}, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

8m47.833593288s ago: executing program 43 (id=2526):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0)
bind$inet6(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t\x04/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae', 0x42, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
sched_setaffinity(0x0, 0x62, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000)
timer_create(0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})

7m27.332964092s ago: executing program 44 (id=2772):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
getpeername$netrom(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420102e61afb9fdd672bad09dfb78c7699c74db91a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
syz_emit_ethernet(0x6e, &(0x7f0000000a80)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, '|6M', 0x6, 0x2f, 0xff, @mcast2, @private0, [@fragment={0x33, 0x0, 0x1a, 0x0, 0x0, 0x8, 0x66}]}}}}}}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c)
read(0xffffffffffffffff, &(0x7f0000000040)=""/138, 0x8a)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080)
sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)

6m14.367828141s ago: executing program 8 (id=3024):
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7})
io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x2d3})
clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6m12.680521261s ago: executing program 8 (id=3028):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000077cb000085000000820000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

6m12.368204532s ago: executing program 8 (id=3029):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0)

6m11.97964873s ago: executing program 8 (id=3033):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113)

6m9.875178316s ago: executing program 8 (id=3039):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x4004000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
fsopen(&(0x7f0000000200)='cifs\x00', 0x0)
syz_open_dev$video(0x0, 0x6, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00000000000000004093 '], 0x2a, 0x0)
add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYRES32=r5], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x1)
bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c)

6m4.992095749s ago: executing program 8 (id=3054):
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r2 = syz_open_dev$loop(0x0, 0x5, 0x88102)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x9, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0)

6m2.874933412s ago: executing program 45 (id=3054):
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r2 = syz_open_dev$loop(0x0, 0x5, 0x88102)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x9, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0)

5m48.457145116s ago: executing program 2 (id=3096):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0)
ftruncate(r0, 0x6000000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x4000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
r1 = inotify_init()
r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x40400, 0x8)
fcntl$notify(r2, 0x402, 0x8000003b)
inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x420008c9)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

5m44.027931196s ago: executing program 2 (id=3107):
r0 = socket$pptp(0x18, 0x1, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$pptp(r0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m42.194153952s ago: executing program 2 (id=3111):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x70, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0xa}, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x60}}, @val={0x76, 0x6, {0xe, 0x1, 0x3f, 0x8}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20000014)

5m37.841065402s ago: executing program 2 (id=3118):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$IPC_RMID(0x0, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xfd9, 0x4000000)

5m36.672092108s ago: executing program 2 (id=3122):
r0 = socket$pptp(0x18, 0x1, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$pptp(r0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m34.813704159s ago: executing program 2 (id=3124):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000002680)=ANY=[@ANYRES16=0x0, @ANYRES16=r0, @ANYRES64, @ANYRES8, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES32], 0x1, 0xa08, &(0x7f0000008280)="$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")
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffc07d0cca931c683b84ad643dce693532d0720ca6292d75d400fb0c42c9838f9414533b2410a973967dc92a9efbb4c6fb5c69eb1359d148d4b62e789c0f7db97db28e401a04dc5943d72f51021840c486925bfb99dcb3f69669c6fabc7b7ba9b3a3086cbabbe3bf0c6517b75f88fb9956a6eb0d82a73c8927ade6106ce23bcefae5bc08d4553b76b71ee41b6e8191a8796adb97e84aafc63ffa3e3a9b", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB])

5m19.524539534s ago: executing program 46 (id=3124):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000002680)=ANY=[@ANYRES16=0x0, @ANYRES16=r0, @ANYRES64, @ANYRES8, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES32], 0x1, 0xa08, &(0x7f0000008280)="$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")
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffc07d0cca931c683b84ad643dce693532d0720ca6292d75d400fb0c42c9838f9414533b2410a973967dc92a9efbb4c6fb5c69eb1359d148d4b62e789c0f7db97db28e401a04dc5943d72f51021840c486925bfb99dcb3f69669c6fabc7b7ba9b3a3086cbabbe3bf0c6517b75f88fb9956a6eb0d82a73c8927ade6106ce23bcefae5bc08d4553b76b71ee41b6e8191a8796adb97e84aafc63ffa3e3a9b", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB])

4m8.561548961s ago: executing program 3 (id=3358):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000408010100000000000000000000000d0600024088"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x800)

4m7.527257833s ago: executing program 3 (id=3360):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[], 0x48}}, 0x10)

4m5.940487816s ago: executing program 3 (id=3365):
syz_create_resource$binfmt(0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xd, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000100)={0xdc9, 0x3386})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~//\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

4m0.200273791s ago: executing program 3 (id=3375):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1], 0x2c}}, 0x808)

3m58.239293442s ago: executing program 3 (id=3379):
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000ab3000/0x400000)=nil)
move_pages(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000b1a000/0x2000)=nil], 0x0, 0x0, 0x2)
r3 = syz_open_procfs(0x0, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x4e20, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108)
preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x5b, 0x100)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
io_setup(0x3, &(0x7f0000000040))
openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080)

3m56.949385992s ago: executing program 3 (id=3383):
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f00000000c0))
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4850}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})

3m40.614511409s ago: executing program 47 (id=3383):
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f00000000c0))
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4850}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})

3m28.756004518s ago: executing program 9 (id=3434):
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x74, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000600)="bad330fb", 0x48, 0x810, &(0x7f00000001c0)={0x11, 0xd, r1, 0x1, 0xd8, 0x6, @multicast}, 0x14)

3m28.330076418s ago: executing program 9 (id=3435):
r0 = request_key(0x0, 0x0, &(0x7f0000000080)='\x00', 0xfffffffffffffff9)
keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f00000000c0)='\xea%,+\x00', 0x0)
getcwd(0x0, 0xfffffffffffffd43)
r1 = getpgid(0x0)
syz_pidfd_open(r1, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000900)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="00000000000010051a409ed86813", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m26.341118935s ago: executing program 9 (id=3438):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
socket(0x2c, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0a000000040000000200000002"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r2}, 0x38)

3m24.713823841s ago: executing program 9 (id=3442):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x9, 0xfc}, 'port0\x00', 0x0, 0x60000, 0x0, 0xfffffffb, 0x6, 0xfffffffc, 0x10000003, 0x0, 0x1})

3m24.432798547s ago: executing program 9 (id=3445):
mount$9p_fd(0x0, 0x0, 0x0, 0x14000, &(0x7f0000000b00)=ANY=[@ANYBLOB="6cd3b14c7c966ebb6b38cb551fcedb6d285a02515ebf793f7d3df9", @ANYBLOB])
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x28)
r3 = socket$kcm(0x29, 0x2, 0x0)
close(r3)
close(0xffffffffffffffff)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004040)
setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x2cb)

3m23.091011906s ago: executing program 9 (id=3447):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0)
syslog(0x9, 0x0, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt(r3, 0xff, 0x1, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r4)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0)
recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4093, 0xffd}, {&(0x7f0000001600)=""/4093, 0xffd}, {&(0x7f0000000640)=""/251, 0xfb}, {0x0}], 0x4}, 0x40020162)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)

3m6.968443924s ago: executing program 48 (id=3447):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0)
syslog(0x9, 0x0, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt(r3, 0xff, 0x1, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r4)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0)
recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4093, 0xffd}, {&(0x7f0000001600)=""/4093, 0xffd}, {&(0x7f0000000640)=""/251, 0xfb}, {0x0}], 0x4}, 0x40020162)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)

42.128303186s ago: executing program 0 (id=3934):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0)

41.446488233s ago: executing program 0 (id=3940):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r2, 0x16, 0x0, @void}, 0x10)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x98)

40.491730532s ago: executing program 0 (id=3944):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x6353, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0)

38.814633048s ago: executing program 0 (id=3954):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x40800)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0)

37.733255173s ago: executing program 0 (id=3957):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000001600)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0)
r2 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, 0x0, r2, 0x0, 0x2)
read$FUSE(r1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0)

36.512029208s ago: executing program 0 (id=3968):
move_pages(0x0, 0x200000000000003d, &(0x7f0000000080)=[&(0x7f0000003000/0x4000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020)

20.982846331s ago: executing program 49 (id=3968):
move_pages(0x0, 0x200000000000003d, &(0x7f0000000080)=[&(0x7f0000003000/0x4000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020)

10.530771673s ago: executing program 5 (id=4055):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000c40), 0x4)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff)
add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000180)="d5be14db64c726df55d4e3465d5409caf4eb2b78c8c34ebb2cbbeb79f10302c6bfb9a42a0734cff0c6967a2ff8b665cb02aece4326111bbe5626a207bb0ba741303afb07c5b7047801a97615148afbcacf34b14bfdd1718f0ed73c5939a80be76ca2ba5347d588", 0xfffffffffffffffa, 0xfffffffffffffffb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x143042, 0xd1)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000000)={0x6, 0xffffffffff7ffe01, 0x0, 0x53d9, 0x3, [0xe, 0x2500, 0x1000000, 0x18]})

9.951861695s ago: executing program 4 (id=4057):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)

8.437165654s ago: executing program 5 (id=4060):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8=0x0], 0x3, 0x257, &(0x7f0000000300)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x321b42, 0x5)
mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000004c0)='./bus/file0\x00', 0x2)
renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f00000001c0)='./file1\x00', 0x2)

7.91528381s ago: executing program 1 (id=4062):
timer_create(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff)
bpf$OBJ_GET_PROG(0x9, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b40000000000000061115c00000000001600000000000000950074000000000059552ac209e29f456e80207ac53a6a01d6931dc2d04f52654d4da6dab982d865703217850208f70d7e7592241198618784af3f24185e95d7edc1d6c1e075c088d6a828610ca463ccb90a50a4b38d9bb9656528a6d92c7ceed1d0f375afcd65408ccac06a9f131ab1d0642bdeea21d307e97734e40bbcb962cee8b49ea2c376e68d6302f4d3f6"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64=r0], 0x20)

7.435788799s ago: executing program 1 (id=4064):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0400000004000000040000001200000004000000", @ANYRES32, @ANYBLOB="0100"/19, @ANYRES32, @ANYRES32, @ANYBLOB="0010"], 0x50)

7.06487074s ago: executing program 1 (id=4065):
r0 = semget(0x3, 0x1, 0x283)
semop(r0, &(0x7f0000000080)=[{0x0, 0xfff5}], 0x1)
semctl$IPC_RMID(r0, 0x0, 0x0)

6.961723916s ago: executing program 5 (id=4066):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36b, 0xc000, 0x4, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, &(0x7f0000000000)=0x9, 0x4)
io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x42, 0xffffffffffffffff, 0x0, 0x1d, 0x36}])
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6.759472801s ago: executing program 6 (id=4067):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
socket$inet6_icmp(0xa, 0x2, 0x3a)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6.692052978s ago: executing program 1 (id=4068):
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0)

6.395123884s ago: executing program 7 (id=4069):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x80003ff, 0xe, 0x407, 0x7, 0x9, 0x1a, 0xffffffff, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)

6.328802362s ago: executing program 5 (id=4070):
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)

6.273194021s ago: executing program 4 (id=4071):
socketpair(0x15, 0x5, 0xfffffffe, &(0x7f0000000200))
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c)
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x4, 0x4, 0x344, 0xffffffff, 0x20c, 0x20c, 0x20c, 0xfeffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xc8}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x6a4}}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [0xff000000, 0xffffffff, 0xffffffff, 0xff], [0xff, 0xffffffff, 0x0, 0xffffff00], 'team0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x87, 0x8, 0x6, 0xc}, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'bond_slave_1\x00', {0x8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3a0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000800)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

5.803720018s ago: executing program 5 (id=4072):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x62840, 0x0)
close(r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0xb2)

5.598798059s ago: executing program 6 (id=4073):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/oops_count', 0x40, 0x0)
sendfile(r0, r1, 0x0, 0x3)

5.557174776s ago: executing program 7 (id=4074):
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
membarrier(0x10, 0x0)

5.325525488s ago: executing program 6 (id=4075):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)=':', 0x1, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000840)='|', 0x1, 0x80009, 0x0, 0x0)
shutdown(r0, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='^', 0xfe6b}], 0x1)
sendmmsg(r0, 0x0, 0x0, 0x2000cc90)

5.092072327s ago: executing program 7 (id=4076):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x150, 0xb)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x9)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
recvmmsg(r1, &(0x7f0000006000), 0x0, 0x102, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000080)={0xa, 0x4e21, 0x10, @private2, 0xfffffffb}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800)

5.045298308s ago: executing program 4 (id=4077):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
write$tun(0xffffffffffffffff, &(0x7f00000013c0)=ANY=[@ANYBLOB="03000500030019000c"], 0x42)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)

4.082913495s ago: executing program 7 (id=4078):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x3, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fspick(r0, &(0x7f00000000c0)='.\x00', 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050", @ANYRES8=r1], 0x3c}}, 0x10)

3.888784446s ago: executing program 4 (id=4079):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000640)="91f86e849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000ff5c77f56d7c8254cbfc8d42601fa04afdf733400300388c1434bdcbfa40eccb4b1270a3279222da53b47732850bdf3901a6a586dd34c1", 0x78}, {&(0x7f0000000840)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035", 0x107}, {&(0x7f00000003c0)="641a6a2b863c4db48c232932fc2e37e327de21450df098c113e179a000000000", 0x20}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x161}, {&(0x7f00000009c0)="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", 0x16b}, {&(0x7f0000000700)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86af25d37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6157f1a48e86eec8223fd33fc83374393fbd0721628dae05769c47640774f48fe78", 0x89}], 0x3}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000001140)="cc816a9a9250e68f7ac20796b232954ff5a51ae0ffc618257a35d82ed7a22051202cfa5c64c4b3a7937502004748ac5451d18a2157afed8b23f1bdf951bddb2b210ef3dc279194746fdfe2d2bc4d04f4f4e7b3b9e6607e66c45e623f0eaac9acc898641148afd55323758ba07cf1181030c23cdd1602ce4df7baee0d38a95f16d75b32cb6bb0eacf1e66a30b653644726a30c8888529353c4d5f343e8d3aa92af6ee3162d2e7b3c0acd0436caaa11d8cdeab40b1425fd173567ae43ede6cbc039c5440727b4e307fedfdd83c898f56b68f85a58ea137bd297a6baaecb09b68e0ad5367cfb09c7f34caccde008406b264a938e5", 0xf3, 0x24000004, 0x0, 0x0)

3.707935787s ago: executing program 6 (id=4080):
r0 = socket(0x2, 0x3, 0x6)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10)
getpid()
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket(0x22, 0x2, 0x3)
ioctl$PPPOEIOCDFWD(r1, 0x80044944, 0x1000000000000)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, 0x0, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x9aa, @empty}, 0x2}}, 0x2e)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x29)
syz_open_dev$radio(0x0, 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffdcd, 0x0)
r5 = syz_open_procfs(0x0, 0x0)
connect$vsock_stream(r5, 0x0, 0x0)
read$FUSE(r5, 0x0, 0x0)

3.43626274s ago: executing program 4 (id=4081):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa8000aaaaaabb86dd6a00000000481100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e1d4e20"], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[], 0x0)

2.50801188s ago: executing program 6 (id=4082):
r0 = socket$nl_route(0x10, 0x3, 0x0)
accept(r0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4a22, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0)

1.444169722s ago: executing program 1 (id=4083):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
sendmmsg$inet6(r0, &(0x7f0000001380)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x1ff, @local, 0xa}, 0x1c, 0x0}}], 0x1, 0x4000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x21, 0x1, 0xffffffff, 0x0, {0xa, 0x20}, [@FRA_DST={0x14, 0x1, @empty}]}, 0x30}}, 0x14008064)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYBLOB="3c0000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a050023080000140012800900010076657468000000000400028008001c00caad"], 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8ae257a062cc3564)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8040, 0x108)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$cont(0x20, r7, 0x2, 0x5)
ptrace(0x11, r7)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, 0x0, &(0x7f0000000480))
lseek(r3, 0x8000000000000001, 0x2)

406.744288ms ago: executing program 7 (id=4084):
lsm_list_modules(0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000004c0)={'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})

358.31445ms ago: executing program 5 (id=4085):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50)
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x6, 0xcead, 0xffff, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x7, 0x79, 0xfffffffe, 0xb, 0x1, 0x2000, 0x6, r2, r3, 0x7, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

214.004345ms ago: executing program 4 (id=4086):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
r1 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x2)
fcntl$setsig(r2, 0xa, 0x12)
ppoll(&(0x7f0000000140)=[{r3, 0x8002}], 0x1, 0x0, 0x0, 0x0)
r5 = dup2(r2, r3)
fcntl$setown(r5, 0x8, r1)
tkill(r1, 0x13)

146.616604ms ago: executing program 6 (id=4087):
socket$inet6(0xa, 0xa, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil)
close(r0)

121.829197ms ago: executing program 1 (id=4088):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x400000c, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x40200, 0xf)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xb}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x4000000000000ffe, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x8000a]}})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)

0s ago: executing program 7 (id=4089):
socket$netlink(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000200), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$netlink(0x10, 0x3, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15)

kernel console output (not intermixed with test programs):

cast mode
[ 1699.003867][T21796] bridge_slave_0: entered promiscuous mode
[ 1699.521103][T21796] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1699.716297][T21796] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1699.836214][T21796] bridge_slave_1: entered allmulticast mode
[ 1699.890404][T21796] bridge_slave_1: entered promiscuous mode
[ 1700.037067][T21951] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3449'.
[ 1700.627137][T21796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1700.963286][T21796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1701.358983][T21967] loop6: detected capacity change from 0 to 512
[ 1701.374576][T21967] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1701.381780][T21967] EXT4-fs: Conflicting test_dummy_encryption options
[ 1703.345205][T21974] overlayfs: failed to resolve './file0': -2
[ 1703.389072][T21796] team0: Port device team_slave_0 added
[ 1703.393783][T21976] loop6: detected capacity change from 0 to 512
[ 1703.456836][T21796] team0: Port device team_slave_1 added
[ 1703.621882][T21976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1704.000703][T21982] loop4: detected capacity change from 0 to 40427
[ 1704.012491][T21982] F2FS-fs (loop4): invalid crc value
[ 1704.087171][T21982] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1704.102281][T21982] F2FS-fs (loop4): Start checkpoint disabled!
[ 1704.113700][T21982] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[ 1704.122865][T21982] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[ 1704.139117][   T30] audit: type=1800 audit(1775002517.224:213): pid=21982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3460" name="file1" dev="loop4" ino=10 res=0 errno=0
[ 1704.410984][T21986] bio_check_eod: 176 callbacks suppressed
[ 1704.411007][T21986] syz.4.3460: attempt to access beyond end of device
[ 1704.411007][T21986] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[ 1704.432705][T21986] syz.4.3460: attempt to access beyond end of device
[ 1704.432705][T21986] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[ 1704.447057][T21986] syz.4.3460: attempt to access beyond end of device
[ 1704.447057][T21986] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[ 1704.461515][T21986] syz.4.3460: attempt to access beyond end of device
[ 1704.461515][T21986] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[ 1704.475814][T21986] syz.4.3460: attempt to access beyond end of device
[ 1704.475814][T21986] loop4: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[ 1704.490241][T21986] syz.4.3460: attempt to access beyond end of device
[ 1704.490241][T21986] loop4: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[ 1704.504597][T21986] syz.4.3460: attempt to access beyond end of device
[ 1704.504597][T21986] loop4: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[ 1704.519625][T21986] syz.4.3460: attempt to access beyond end of device
[ 1704.519625][T21986] loop4: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[ 1704.533941][T21986] syz.4.3460: attempt to access beyond end of device
[ 1704.533941][T21986] loop4: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[ 1704.548221][T21986] syz.4.3460: attempt to access beyond end of device
[ 1704.548221][T21986] loop4: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[ 1705.108670][T21796] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1705.174565][T21796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1705.243612][T21796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1705.259054][   T76] CPU: 0 UID: 0 PID: 76 Comm: kworker/u8:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1705.259098][   T76] Tainted: [L]=SOFTLOCKUP
[ 1705.259110][   T76] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1705.259130][   T76] Workqueue: writeback wb_workfn (flush-7:4)
[ 1705.259178][   T76] Call Trace:
[ 1705.259188][   T76]  <TASK>
[ 1705.259200][   T76]  dump_stack_lvl+0x100/0x190
[ 1705.259247][   T76]  f2fs_handle_critical_error+0x5d7/0x970
[ 1705.259285][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.259321][   T76]  ? f2fs_build_fault_attr+0x53/0x280
[ 1705.259380][   T76]  f2fs_write_end_io+0xc3f/0xf30
[ 1705.259438][   T76]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1705.259496][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.259556][   T76]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1705.259606][   T76]  bio_endio+0x7a3/0x910
[ 1705.259656][   T76]  submit_bio_noacct+0x64c/0x2010
[ 1705.259721][   T76]  f2fs_submit_write_bio+0x133/0x350
[ 1705.259763][   T76]  __submit_merged_bio+0x331/0x7b0
[ 1705.259807][   T76]  __submit_merged_write_cond+0x3fe/0x510
[ 1705.259854][   T76]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1705.259903][   T76]  ? __pfx___might_resched+0x10/0x10
[ 1705.259936][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.259981][   T76]  f2fs_write_cache_pages+0x21c0/0x2720
[ 1705.260048][   T76]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[ 1705.260091][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.260137][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.260173][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.260208][   T76]  ? find_held_lock+0x2b/0x80
[ 1705.260244][   T76]  ? nr_blockdev_pages+0xde/0x120
[ 1705.260284][   T76]  ? nr_blockdev_pages+0xde/0x120
[ 1705.260323][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.260376][   T76]  ? si_meminfo+0x118/0x230
[ 1705.260403][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.260440][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.260537][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.260572][   T76]  ? rcu_is_watching+0x12/0xc0
[ 1705.260611][   T76]  f2fs_write_data_pages+0x799/0x16d0
[ 1705.260655][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.260718][   T76]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1705.260800][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.260849][   T76]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1705.260914][   T76]  do_writepages+0x278/0x600
[ 1705.260983][   T76]  ? __pfx_do_writepages+0x10/0x10
[ 1705.261047][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.261103][   T76]  __writeback_single_inode+0x164/0x13c0
[ 1705.261156][   T76]  ? find_held_lock+0x2b/0x80
[ 1705.261208][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.261260][   T76]  ? __pfx___writeback_single_inode+0x10/0x10
[ 1705.261312][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.261360][   T76]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1705.261404][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.261460][   T76]  writeback_sb_inodes+0x766/0x1c70
[ 1705.261540][   T76]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1705.261590][   T76]  ? do_raw_spin_lock+0x128/0x260
[ 1705.261635][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.261761][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.261803][   T76]  ? rcu_is_watching+0x12/0xc0
[ 1705.261836][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.261872][   T76]  ? queue_io+0x287/0x550
[ 1705.261909][   T76]  wb_writeback+0x1c0/0xbe0
[ 1705.261960][   T76]  ? __pfx_wb_writeback+0x10/0x10
[ 1705.262011][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.262047][   T76]  ? mark_held_locks+0x40/0x70
[ 1705.262092][   T76]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1705.262143][   T76]  wb_workfn+0x142/0xc00
[ 1705.262187][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.262223][   T76]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1705.262271][   T76]  ? __pfx_wb_workfn+0x10/0x10
[ 1705.262314][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.262354][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.262393][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.262428][   T76]  ? rcu_is_watching+0x12/0xc0
[ 1705.262469][   T76]  process_one_work+0xa23/0x19a0
[ 1705.262519][   T76]  ? __pfx_process_one_work+0x10/0x10
[ 1705.262547][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.262597][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.262640][   T76]  worker_thread+0x5ef/0xe50
[ 1705.262687][   T76]  ? kthread+0x13a/0x450
[ 1705.262711][   T76]  ? __pfx_worker_thread+0x10/0x10
[ 1705.262740][   T76]  kthread+0x370/0x450
[ 1705.262778][   T76]  ? __pfx_kthread+0x10/0x10
[ 1705.262818][   T76]  ret_from_fork+0x754/0xd80
[ 1705.262859][   T76]  ? __pfx_ret_from_fork+0x10/0x10
[ 1705.262901][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1705.262948][   T76]  ? __switch_to+0x7b4/0x1120
[ 1705.262996][   T76]  ? __pfx_kthread+0x10/0x10
[ 1705.263035][   T76]  ret_from_fork_asm+0x1a/0x30
[ 1705.263112][   T76]  </TASK>
[ 1705.263126][   T76] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[ 1705.327175][T20461] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1705.946034][T21796] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1706.003445][T21796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1706.126111][ T5832] Bluetooth: hci5: command 0x0405 tx timeout
[ 1706.173487][T21796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1706.594425][T21796] hsr_slave_0: entered promiscuous mode
[ 1706.628801][T21796] hsr_slave_1: entered promiscuous mode
[ 1706.907148][T21796] debugfs: 'hsr0' already exists in 'hsr'
[ 1706.912951][T21796] Cannot create hsr debugfs directory
[ 1707.040203][T22013] xt_nfacct: accounting object `syz0' does not exist
[ 1707.751131][T22014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3466'.
[ 1711.437095][T22030] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1711.701125][T22030] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1711.711167][T22030] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1711.721701][T22030] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1711.729848][T22030] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1713.243625][ T5804] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[ 1713.448513][ T5804] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[ 1713.672082][ T5804] usb 2-1: config 0 has no interface number 0
[ 1713.983756][ T5804] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[ 1714.109166][ T5804] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1714.163485][ T5804] usb 2-1: config 0 interface 12 has no altsetting 0
[ 1714.211171][ T5804] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1714.256905][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1714.280166][ T1146] bridge_slave_1: left allmulticast mode
[ 1714.313110][ T1146] bridge_slave_1: left promiscuous mode
[ 1714.314704][ T5804] usb 2-1: Product: syz
[ 1714.323636][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1714.342622][ T5804] usb 2-1: Manufacturer: syz
[ 1714.374343][ T5804] usb 2-1: SerialNumber: syz
[ 1714.447550][ T1146] bridge_slave_0: left allmulticast mode
[ 1714.454913][ T5804] usb 2-1: config 0 descriptor??
[ 1714.460185][ T1146] bridge_slave_0: left promiscuous mode
[ 1714.467155][T22044] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1714.480027][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1714.525629][ T5804] f81534 2-1:0.12: unsupported endpoint max packet size
[ 1714.845819][T20463] Bluetooth: hci4: command tx timeout
[ 1715.150999][T13057] usb 2-1: USB disconnect, device number 43
[ 1716.625033][T22086] comedi comedi0: Minor 3 could not be opened
[ 1717.171290][T20463] Bluetooth: hci4: command tx timeout
[ 1717.226836][T13057] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1717.399643][T13057] usb 2-1: Using ep0 maxpacket: 16
[ 1717.446271][T13057] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1717.481295][T13057] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1717.501724][T13057] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1717.509167][T13057] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1717.524256][T13057] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1717.599868][T13057] usb 2-1: config 0 descriptor??
[ 1718.347322][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1718.385886][T13057] hid (null): usage index exceeded
[ 1718.391470][T13057] hid (null): unknown global tag 0xe
[ 1718.403536][T13057] hid (null): usage index exceeded
[ 1718.412205][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1718.424727][T13057] hid (null): unknown global tag 0xc
[ 1718.430608][T13057] hid (null): report_id 0 is invalid
[ 1718.455686][ T1146] bond0 (unregistering): Released all slaves
[ 1718.513598][T22068] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3479'.
[ 1718.571605][T13057] usb 2-1: USB disconnect, device number 44
[ 1718.927182][T22115] fuse: Unknown parameter '0x0000000000000003'
[ 1719.073517][ T5931] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1719.244315][T20463] Bluetooth: hci4: command tx timeout
[ 1720.134188][ T5931] usb 5-1: Using ep0 maxpacket: 32
[ 1720.266068][ T5931] usb 5-1: config 0 has no interfaces?
[ 1720.271624][ T5931] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[ 1720.330643][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1720.474264][ T5931] usb 5-1: config 0 descriptor??
[ 1720.721652][ T1146] hsr_slave_0: left promiscuous mode
[ 1720.765296][ T1146] hsr_slave_1: left promiscuous mode
[ 1720.784670][T22136] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3493'.
[ 1720.800379][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1720.830035][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1720.857556][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1720.886089][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1720.953182][ T1146] veth1_macvtap: left promiscuous mode
[ 1720.967519][ T1146] veth0_macvtap: left promiscuous mode
[ 1720.985894][ T1146] veth1_vlan: left promiscuous mode
[ 1720.999396][ T1146] veth0_vlan: left promiscuous mode
[ 1721.327051][T20463] Bluetooth: hci4: command tx timeout
[ 1722.801036][ T1146] team0 (unregistering): Port device team_slave_1 removed
[ 1722.851949][ T1146] team0 (unregistering): Port device team_slave_0 removed
[ 1723.291471][T22155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3497'.
[ 1723.305458][T13057] usb 5-1: USB disconnect, device number 10
[ 1723.637558][T22163] fuse: Unknown parameter '0x0000000000000003'
[ 1723.765477][T21796] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1723.913712][T13057] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[ 1724.228728][T13057] usb 5-1: not running at top speed; connect to a high speed hub
[ 1724.280066][T21796] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1724.372870][T13057] usb 5-1: config 11 has an invalid interface number: 95 but max is 0
[ 1724.840438][T13057] usb 5-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config
[ 1724.903018][T13057] usb 5-1: config 11 has no interface number 0
[ 1724.909781][T13057] usb 5-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 1724.952068][T13057] usb 5-1: config 11 interface 95 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1724.973500][T19044] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1724.984365][T21796] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1724.993619][T13057] usb 5-1: config 11 interface 95 has no altsetting 0
[ 1725.016402][T13057] usb 5-1: language id specifier not provided by device, defaulting to English
[ 1725.042481][T13057] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d
[ 1725.063508][T13057] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[ 1725.071590][T13057] usb 5-1: Manufacturer: ヹ憎◘鷿羯䜧ᡝ㛆谉醣큵概鴜跩䠩ỷⷧそ䩃玣瞛陆픁昗玷̧㤫뼸狠띉㚐⁛ԓ菍魠䋗襺룮
[ 1725.103538][T22165] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1725.113471][T19044] usb 2-1: device descriptor read/64, error -71
[ 1725.199880][T22028] chnl_net:caif_netlink_parms(): no params data found
[ 1725.224250][T21796] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1725.364613][T22182] input: syz0 as /devices/virtual/input/input13
[ 1725.385787][T19044] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1726.279804][T13057] usb 5-1: USB disconnect, device number 11
[ 1726.457371][T19044] usb 2-1: device descriptor read/64, error -71
[ 1726.592068][T19044] usb usb2-port1: attempt power cycle
[ 1727.193507][T19044] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1727.249172][T19044] usb 2-1: device descriptor read/8, error -71
[ 1729.193936][T22201] loop1: detected capacity change from 0 to 32768
[ 1729.250961][T22201] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3509 (22201)
[ 1729.298584][T22201] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1729.308903][T22201] BTRFS info (device loop1): using sha256 checksum algorithm
[ 1729.467101][T22028] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1729.507045][T22201] BTRFS info (device loop1): rebuilding free space tree
[ 1729.522509][T22201] BTRFS info (device loop1): disabling free space tree
[ 1729.529659][T22201] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1729.539392][T22201] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1729.556384][T22201] BTRFS info (device loop1): setting nodatasum
[ 1729.558839][T22028] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1729.562646][T22201] BTRFS info (device loop1): setting nodatacow
[ 1729.577245][T22201] BTRFS info (device loop1): turning off barriers
[ 1729.583919][T22201] BTRFS info (device loop1): force clearing of disk cache
[ 1729.618342][T22028] bridge_slave_0: entered allmulticast mode
[ 1729.650826][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1729.668639][T22028] bridge_slave_0: entered promiscuous mode
[ 1729.712319][T22028] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1729.747130][T22028] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1729.763679][T22028] bridge_slave_1: entered allmulticast mode
[ 1729.777102][T22028] bridge_slave_1: entered promiscuous mode
[ 1729.923479][T13057] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1729.956909][T22227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3512'.
[ 1730.026229][T22028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1730.179385][T22233] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1730.832352][T22028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1730.888308][T21796] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1730.895160][T13057] usb 7-1: Using ep0 maxpacket: 32
[ 1730.902428][T13057] usb 7-1: config 0 has no interfaces?
[ 1730.923546][T13057] usb 7-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[ 1730.937241][T19112] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1730.943490][T13057] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1731.013220][T13057] usb 7-1: config 0 descriptor??
[ 1731.214687][T22028] team0: Port device team_slave_0 added
[ 1731.772966][T22028] team0: Port device team_slave_1 added
[ 1731.807450][T22243] fuse: Unknown parameter '0x0000000000000003'
[ 1731.860985][ T5804] usb 7-1: USB disconnect, device number 11
[ 1731.945139][T21796] 8021q: adding VLAN 0 to HW filter on device team0
[ 1733.438283][T22028] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1733.445597][T22028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1733.495350][T22028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1733.510387][T22028] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1733.517605][T22028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1733.544852][T22028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1733.675915][   T76] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1733.683267][   T76] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1733.713311][   T76] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1733.720617][   T76] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1735.001013][T22028] hsr_slave_0: entered promiscuous mode
[ 1735.063156][T22028] hsr_slave_1: entered promiscuous mode
[ 1735.093840][T22028] debugfs: 'hsr0' already exists in 'hsr'
[ 1735.109948][T22028] Cannot create hsr debugfs directory
[ 1735.594806][T22282] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3524'.
[ 1735.629506][T22280] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3524'.
[ 1736.065933][T22285] loop6: detected capacity change from 0 to 40427
[ 1736.146194][T22285] F2FS-fs (loop6): invalid crc value
[ 1736.231720][T22285] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1736.243896][T22285] F2FS-fs (loop6): Start checkpoint disabled!
[ 1736.251957][T22285] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[ 1736.262191][T22285] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[ 1736.278582][   T30] audit: type=1800 audit(1775002549.364:214): pid=22285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3525" name="file1" dev="loop6" ino=10 res=0 errno=0
[ 1736.520854][T22287] fuse: Unknown parameter '0x0000000000000003'
[ 1736.654538][T22292] bio_check_eod: 6 callbacks suppressed
[ 1736.654594][T22292] syz.6.3525: attempt to access beyond end of device
[ 1736.654594][T22292] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[ 1736.677365][T22292] syz.6.3525: attempt to access beyond end of device
[ 1736.677365][T22292] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[ 1736.696198][T22292] syz.6.3525: attempt to access beyond end of device
[ 1736.696198][T22292] loop6: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[ 1736.715017][T22292] syz.6.3525: attempt to access beyond end of device
[ 1736.715017][T22292] loop6: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[ 1736.733435][T22292] syz.6.3525: attempt to access beyond end of device
[ 1736.733435][T22292] loop6: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[ 1736.801110][T22292] syz.6.3525: attempt to access beyond end of device
[ 1736.801110][T22292] loop6: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[ 1736.819713][T22292] syz.6.3525: attempt to access beyond end of device
[ 1736.819713][T22292] loop6: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[ 1736.838274][T22292] syz.6.3525: attempt to access beyond end of device
[ 1736.838274][T22292] loop6: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[ 1736.856509][T22292] syz.6.3525: attempt to access beyond end of device
[ 1736.856509][T22292] loop6: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[ 1736.875370][T22292] syz.6.3525: attempt to access beyond end of device
[ 1736.875370][T22292] loop6: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[ 1737.389770][T15934] CPU: 0 UID: 0 PID: 15934 Comm: kworker/u8:14 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1737.389816][T15934] Tainted: [L]=SOFTLOCKUP
[ 1737.389827][T15934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1737.389847][T15934] Workqueue: writeback wb_workfn (flush-7:6)
[ 1737.389896][T15934] Call Trace:
[ 1737.389907][T15934]  <TASK>
[ 1737.389918][T15934]  dump_stack_lvl+0x100/0x190
[ 1737.389966][T15934]  f2fs_handle_critical_error+0x5d7/0x970
[ 1737.390009][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.390046][T15934]  ? f2fs_build_fault_attr+0x53/0x280
[ 1737.390104][T15934]  f2fs_write_end_io+0xc3f/0xf30
[ 1737.390148][T15934]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1737.390191][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.390239][T15934]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1737.390277][T15934]  bio_endio+0x7a3/0x910
[ 1737.390313][T15934]  submit_bio_noacct+0x64c/0x2010
[ 1737.390367][T15934]  f2fs_submit_write_bio+0x133/0x350
[ 1737.390404][T15934]  __submit_merged_bio+0x331/0x7b0
[ 1737.390448][T15934]  __submit_merged_write_cond+0x3fe/0x510
[ 1737.390495][T15934]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1737.390544][T15934]  ? __pfx___might_resched+0x10/0x10
[ 1737.390577][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.390622][T15934]  f2fs_write_cache_pages+0x21c0/0x2720
[ 1737.390688][T15934]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[ 1737.390731][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.390777][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.390814][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.390849][T15934]  ? find_held_lock+0x2b/0x80
[ 1737.390885][T15934]  ? nr_blockdev_pages+0xde/0x120
[ 1737.390925][T15934]  ? nr_blockdev_pages+0xde/0x120
[ 1737.390964][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.391021][T15934]  ? si_meminfo+0x118/0x230
[ 1737.391049][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.391085][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.391181][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.391216][T15934]  ? rcu_is_watching+0x12/0xc0
[ 1737.391256][T15934]  f2fs_write_data_pages+0x799/0x16d0
[ 1737.391299][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.391347][T15934]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1737.391404][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.391441][T15934]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1737.391489][T15934]  do_writepages+0x278/0x600
[ 1737.391539][T15934]  ? __pfx_do_writepages+0x10/0x10
[ 1737.391602][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.391643][T15934]  __writeback_single_inode+0x164/0x13c0
[ 1737.391682][T15934]  ? find_held_lock+0x2b/0x80
[ 1737.391720][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.391760][T15934]  ? __pfx___writeback_single_inode+0x10/0x10
[ 1737.391799][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.391834][T15934]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1737.391867][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.391908][T15934]  writeback_sb_inodes+0x766/0x1c70
[ 1737.391967][T15934]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1737.392092][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.392128][T15934]  ? rcu_is_watching+0x12/0xc0
[ 1737.392160][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.392195][T15934]  ? queue_io+0x287/0x550
[ 1737.392232][T15934]  wb_writeback+0x1c0/0xbe0
[ 1737.392282][T15934]  ? __pfx_wb_writeback+0x10/0x10
[ 1737.392331][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.392366][T15934]  ? mark_held_locks+0x40/0x70
[ 1737.392411][T15934]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1737.392462][T15934]  wb_workfn+0x142/0xc00
[ 1737.392505][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.392540][T15934]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1737.392589][T15934]  ? __pfx_wb_workfn+0x10/0x10
[ 1737.392631][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.392670][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.392710][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.392745][T15934]  ? rcu_is_watching+0x12/0xc0
[ 1737.392790][T15934]  process_one_work+0xa23/0x19a0
[ 1737.392839][T15934]  ? __pfx_process_one_work+0x10/0x10
[ 1737.392867][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.392916][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.392958][T15934]  worker_thread+0x5ef/0xe50
[ 1737.393009][T15934]  ? kthread+0x13a/0x450
[ 1737.393034][T15934]  ? __pfx_worker_thread+0x10/0x10
[ 1737.393061][T15934]  kthread+0x370/0x450
[ 1737.393086][T15934]  ? __pfx_kthread+0x10/0x10
[ 1737.393122][T15934]  ret_from_fork+0x754/0xd80
[ 1737.393153][T15934]  ? __pfx_ret_from_fork+0x10/0x10
[ 1737.393181][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.393216][T15934]  ? rcu_is_watching+0x12/0xc0
[ 1737.393249][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1737.393284][T15934]  ? __switch_to+0x7b4/0x1120
[ 1737.393319][T15934]  ? __pfx_kthread+0x10/0x10
[ 1737.393349][T15934]  ret_from_fork_asm+0x1a/0x30
[ 1737.393424][T15934]  </TASK>
[ 1738.206561][T15934] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[ 1738.754224][T20463] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1738.779351][T20463] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1738.794029][T20463] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1738.803095][T20463] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1738.812579][T20463] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1740.930641][T20463] Bluetooth: hci3: command tx timeout
[ 1742.533680][   T29] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1742.690765][T22344] xt_nfacct: accounting object `syz0' does not exist
[ 1743.013506][T20463] Bluetooth: hci3: command tx timeout
[ 1743.459622][   T29] usb 7-1: Using ep0 maxpacket: 32
[ 1743.477198][   T29] usb 7-1: config 0 has no interfaces?
[ 1743.482895][   T29] usb 7-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[ 1743.492144][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1743.593101][   T29] usb 7-1: config 0 descriptor??
[ 1745.083513][T20463] Bluetooth: hci3: command tx timeout
[ 1745.329909][T22367] loop4: detected capacity change from 0 to 256
[ 1745.343293][T22367] exfat: Deprecated parameter 'utf8'
[ 1745.407002][T22367] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[ 1745.639042][ T5804] usb 7-1: USB disconnect, device number 12
[ 1746.526439][T22380] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3549'.
[ 1747.132019][   T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1747.173419][T20463] Bluetooth: hci3: command tx timeout
[ 1747.417666][   T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1747.558439][   T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1748.014684][T22397] fuse: Unknown parameter 'fd0x0000000000000003'
[ 1748.038947][   T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1748.476163][T22399] loop7: detected capacity change from 0 to 40427
[ 1748.497254][T22399] F2FS-fs (loop7): invalid crc value
[ 1748.610984][T22399] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1748.621446][T22399] F2FS-fs (loop7): Start checkpoint disabled!
[ 1748.631504][T22399] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[ 1748.654784][T22399] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[ 1748.997240][   T30] audit: type=1800 audit(1775002561.754:215): pid=22399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3552" name="file1" dev="loop7" ino=10 res=0 errno=0
[ 1749.187317][T22411] bio_check_eod: 176 callbacks suppressed
[ 1749.187373][T22411] syz.7.3552: attempt to access beyond end of device
[ 1749.187373][T22411] loop7: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[ 1749.209999][T22411] syz.7.3552: attempt to access beyond end of device
[ 1749.209999][T22411] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[ 1749.228343][T22411] syz.7.3552: attempt to access beyond end of device
[ 1749.228343][T22411] loop7: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[ 1749.245928][T22411] syz.7.3552: attempt to access beyond end of device
[ 1749.245928][T22411] loop7: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[ 1749.264112][T22411] syz.7.3552: attempt to access beyond end of device
[ 1749.264112][T22411] loop7: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[ 1749.319193][T22411] syz.7.3552: attempt to access beyond end of device
[ 1749.319193][T22411] loop7: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[ 1749.337751][T22411] syz.7.3552: attempt to access beyond end of device
[ 1749.337751][T22411] loop7: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[ 1749.356409][T22411] syz.7.3552: attempt to access beyond end of device
[ 1749.356409][T22411] loop7: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[ 1749.375507][T22411] syz.7.3552: attempt to access beyond end of device
[ 1749.375507][T22411] loop7: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[ 1749.394004][T22411] syz.7.3552: attempt to access beyond end of device
[ 1749.394004][T22411] loop7: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[ 1750.047818][T15934] CPU: 0 UID: 0 PID: 15934 Comm: kworker/u8:14 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1750.047882][T15934] Tainted: [L]=SOFTLOCKUP
[ 1750.047896][T15934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1750.047923][T15934] Workqueue: writeback wb_workfn (flush-7:7)
[ 1750.047988][T15934] Call Trace:
[ 1750.048001][T15934]  <TASK>
[ 1750.048021][T15934]  dump_stack_lvl+0x100/0x190
[ 1750.048085][T15934]  f2fs_handle_critical_error+0x5d7/0x970
[ 1750.048137][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.048186][T15934]  ? f2fs_build_fault_attr+0x53/0x280
[ 1750.048265][T15934]  f2fs_write_end_io+0xc3f/0xf30
[ 1750.048322][T15934]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1750.048381][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.048443][T15934]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1750.048495][T15934]  bio_endio+0x7a3/0x910
[ 1750.048544][T15934]  submit_bio_noacct+0x64c/0x2010
[ 1750.048618][T15934]  f2fs_submit_write_bio+0x133/0x350
[ 1750.048668][T15934]  __submit_merged_bio+0x331/0x7b0
[ 1750.048726][T15934]  __submit_merged_write_cond+0x3fe/0x510
[ 1750.048790][T15934]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1750.048855][T15934]  ? __pfx___might_resched+0x10/0x10
[ 1750.048899][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.048958][T15934]  f2fs_write_cache_pages+0x21c0/0x2720
[ 1750.049052][T15934]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[ 1750.049110][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.049170][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.049220][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.049269][T15934]  ? find_held_lock+0x2b/0x80
[ 1750.049317][T15934]  ? nr_blockdev_pages+0xde/0x120
[ 1750.049373][T15934]  ? nr_blockdev_pages+0xde/0x120
[ 1750.049427][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.049499][T15934]  ? si_meminfo+0x118/0x230
[ 1750.049536][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.049585][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.049714][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.049761][T15934]  ? rcu_is_watching+0x12/0xc0
[ 1750.049813][T15934]  f2fs_write_data_pages+0x799/0x16d0
[ 1750.049873][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.049937][T15934]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1750.050019][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.050069][T15934]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1750.050135][T15934]  do_writepages+0x278/0x600
[ 1750.050205][T15934]  ? __pfx_do_writepages+0x10/0x10
[ 1750.050270][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.050327][T15934]  __writeback_single_inode+0x164/0x13c0
[ 1750.050380][T15934]  ? find_held_lock+0x2b/0x80
[ 1750.050431][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.050483][T15934]  ? __pfx___writeback_single_inode+0x10/0x10
[ 1750.050535][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.050583][T15934]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1750.050628][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.050717][T15934]  writeback_sb_inodes+0x766/0x1c70
[ 1750.050796][T15934]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1750.050924][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.050972][T15934]  ? rcu_is_watching+0x12/0xc0
[ 1750.051022][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.051070][T15934]  ? queue_io+0x287/0x550
[ 1750.051121][T15934]  wb_writeback+0x1c0/0xbe0
[ 1750.051189][T15934]  ? __pfx_wb_writeback+0x10/0x10
[ 1750.051257][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.051305][T15934]  ? mark_held_locks+0x40/0x70
[ 1750.051366][T15934]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1750.051435][T15934]  wb_workfn+0x142/0xc00
[ 1750.051492][T15934]  ? try_to_wake_up+0x160/0x1a80
[ 1750.051546][T15934]  ? __pfx_wb_workfn+0x10/0x10
[ 1750.051625][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.051678][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.051732][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.051776][T15934]  ? rcu_is_watching+0x12/0xc0
[ 1750.051830][T15934]  process_one_work+0xa23/0x19a0
[ 1750.051895][T15934]  ? __pfx_process_one_work+0x10/0x10
[ 1750.051946][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.052018][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.052077][T15934]  worker_thread+0x5ef/0xe50
[ 1750.052140][T15934]  ? kthread+0x13a/0x450
[ 1750.052173][T15934]  ? __pfx_worker_thread+0x10/0x10
[ 1750.052211][T15934]  kthread+0x370/0x450
[ 1750.052244][T15934]  ? __pfx_kthread+0x10/0x10
[ 1750.052283][T15934]  ret_from_fork+0x754/0xd80
[ 1750.052325][T15934]  ? __pfx_ret_from_fork+0x10/0x10
[ 1750.052363][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.052411][T15934]  ? rcu_is_watching+0x12/0xc0
[ 1750.052454][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1750.052502][T15934]  ? __switch_to+0x7b4/0x1120
[ 1750.052550][T15934]  ? __pfx_kthread+0x10/0x10
[ 1750.052595][T15934]  ret_from_fork_asm+0x1a/0x30
[ 1750.052670][T15934]  </TASK>
[ 1750.590553][T15934] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[ 1750.648529][T22028] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1750.856562][   T13] bridge0: port 3(batadv0) entered disabled state
[ 1751.069613][   T13] bridge_slave_1: left allmulticast mode
[ 1751.091288][   T13] bridge_slave_1: left promiscuous mode
[ 1751.223176][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1751.293480][T15815] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[ 1751.341620][   T13] bridge_slave_0: left allmulticast mode
[ 1751.364604][   T13] bridge_slave_0: left promiscuous mode
[ 1751.414886][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1751.456086][T15815] usb 5-1: not running at top speed; connect to a high speed hub
[ 1751.481829][T15815] usb 5-1: config 11 has an invalid interface number: 95 but max is 0
[ 1751.522923][T15815] usb 5-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config
[ 1751.580256][T15815] usb 5-1: config 11 has no interface number 0
[ 1751.602149][T15815] usb 5-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 1751.622195][T15815] usb 5-1: config 11 interface 95 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1751.640981][T15815] usb 5-1: config 11 interface 95 has no altsetting 0
[ 1751.652577][T15815] usb 5-1: language id specifier not provided by device, defaulting to English
[ 1751.665514][T15815] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d
[ 1751.724303][T15815] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[ 1751.844560][T15815] usb 5-1: Manufacturer: ヹ憎◘鷿羯䜧ᡝ㛆谉醣큵概鴜跩䠩ỷⷧそ䩃玣瞛陆픁昗玷̧㤫뼸狠띉㚐⁛ԓ菍魠䋗襺룮
[ 1751.996127][T22420] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1752.286158][ T5804] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1752.297256][T15815] usb 5-1: USB disconnect, device number 12
[ 1752.564144][ T5804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1752.628045][ T5804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1752.669712][ T5804] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1752.696060][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1752.720738][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1752.741662][ T5804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1752.768066][   T13] bond0 (unregistering): Released all slaves
[ 1752.786358][ T5804] usb 7-1: config 0 descriptor??
[ 1752.822998][T22028] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1752.861362][T22028] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1752.925381][T22028] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1753.035669][T22431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1753.044570][T15815] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1753.056230][T22301] chnl_net:caif_netlink_parms(): no params data found
[ 1753.112397][T22431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1753.182410][ T5804] usbhid 7-1:0.0: can't add hid device: -71
[ 1753.195338][ T5804] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1753.227646][ T5804] usb 7-1: USB disconnect, device number 13
[ 1753.254113][T15815] usb 2-1: Using ep0 maxpacket: 32
[ 1753.267441][T15815] usb 2-1: config 0 has no interfaces?
[ 1753.286304][T15815] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[ 1753.317913][T15815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1753.381724][T15815] usb 2-1: config 0 descriptor??
[ 1753.681996][   T13] hsr_slave_0: left promiscuous mode
[ 1753.692191][   T13] hsr_slave_1: left promiscuous mode
[ 1753.716792][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1753.725160][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1753.735554][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1753.743576][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1753.763482][ T5804] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1753.779535][   T13] veth1_macvtap: left promiscuous mode
[ 1753.786271][   T13] veth0_macvtap: left promiscuous mode
[ 1753.794499][   T13] veth1_vlan: left promiscuous mode
[ 1753.803180][   T13] veth0_vlan: left promiscuous mode
[ 1753.945728][ T5804] usb 7-1: Using ep0 maxpacket: 16
[ 1753.962543][ T5804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1754.012549][ T5804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1754.031944][ T5804] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.40
[ 1754.048863][ T5804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1754.067208][T22448] fuse: Unknown parameter 'fd0x0000000000000003'
[ 1754.074206][ T5804] usb 7-1: config 0 descriptor??
[ 1754.097029][   T13] pim6reg99999999 (unregistering): left allmulticast mode
[ 1754.607889][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1754.664700][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1755.053968][T22452] loop7: detected capacity change from 0 to 32768
[ 1755.078996][T22452] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3564 (22452)
[ 1755.285783][T22452] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1755.290699][ T5804] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[ 1755.410218][T22452] BTRFS info (device loop7): using crc32c checksum algorithm
[ 1755.417259][ T5804] mcp2221 0003:04D8:00DD.0005: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[ 1755.423913][T22301] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1755.482169][T20985] usb 2-1: USB disconnect, device number 49
[ 1755.590535][T22301] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1755.665101][T22301] bridge_slave_0: entered allmulticast mode
[ 1755.756780][T22301] bridge_slave_0: entered promiscuous mode
[ 1755.785661][ T5804] usb 7-1: USB disconnect, device number 14
[ 1755.812129][T22455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3565'.
[ 1755.849469][T22301] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1755.886735][T22301] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1755.929806][T22301] bridge_slave_1: entered allmulticast mode
[ 1756.010225][T22452] BTRFS info (device loop7): setting nodatasum
[ 1756.016744][T22301] bridge_slave_1: entered promiscuous mode
[ 1756.057611][T22452] BTRFS info (device loop7): setting nodatacow
[ 1756.096707][T22452] BTRFS info (device loop7): turning on async discard
[ 1756.137968][T22452] BTRFS info (device loop7): enabling free space tree
[ 1756.178625][T22452] BTRFS info (device loop7): enabling auto defrag
[ 1756.189286][T22452] BTRFS info (device loop7): max_inline set to 0
[ 1756.484838][T22301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1756.507935][T22301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1756.907117][T22301] team0: Port device team_slave_0 added
[ 1757.002237][T22301] team0: Port device team_slave_1 added
[ 1757.041903][T17961] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1757.264235][T22301] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1757.271276][T22301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1757.374159][T22301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1757.419294][T22301] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1757.455482][T22301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1757.587356][T22301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1758.316500][T22301] hsr_slave_0: entered promiscuous mode
[ 1758.355003][T22301] hsr_slave_1: entered promiscuous mode
[ 1758.375706][T22301] debugfs: 'hsr0' already exists in 'hsr'
[ 1758.401910][T22301] Cannot create hsr debugfs directory
[ 1758.663982][T22028] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1759.213865][ T5804] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1759.396044][ T5804] usb 7-1: Using ep0 maxpacket: 32
[ 1759.428176][ T5804] usb 7-1: config 0 has no interfaces?
[ 1759.434578][ T5804] usb 7-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[ 1759.469747][ T5804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1759.506586][ T5804] usb 7-1: config 0 descriptor??
[ 1759.662754][T22028] 8021q: adding VLAN 0 to HW filter on device team0
[ 1759.717011][T15928] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1759.724539][T15928] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1759.862357][ T5931] usb 7-1: USB disconnect, device number 15
[ 1759.998745][T15931] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1760.005991][T15931] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1760.058095][T22544] loop4: detected capacity change from 0 to 256
[ 1760.081333][   T13] bridge_slave_1: left allmulticast mode
[ 1760.086517][T22544] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1760.093400][   T13] bridge_slave_1: left promiscuous mode
[ 1760.134539][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1760.171895][   T13] bridge_slave_0: left allmulticast mode
[ 1760.186789][T22544] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1760.198221][   T13] bridge_slave_0: left promiscuous mode
[ 1760.216594][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1760.786116][T22555] overlay: ./file0 is not a directory
[ 1760.998522][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1761.029638][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1761.062600][   T13] bond0 (unregistering): Released all slaves
[ 1761.693493][   T13] hsr_slave_0: left promiscuous mode
[ 1761.748247][   T13] hsr_slave_1: left promiscuous mode
[ 1761.795633][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1761.945350][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1762.195738][T22578] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3587'.
[ 1763.827408][T22591] FAT-fs (nbd7): unable to read boot sector
[ 1764.289900][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1764.335222][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1764.813982][T22606] loop7: detected capacity change from 0 to 128
[ 1764.876893][T22606] FAT-fs (loop7): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1)
[ 1764.985721][T22574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3587'.
[ 1766.688126][T22301] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1766.795520][T22301] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1766.878734][T22301] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1766.941814][T22301] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1767.798688][T22028] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1768.146373][T22301] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1768.252623][T22301] 8021q: adding VLAN 0 to HW filter on device team0
[ 1768.584092][T15931] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1768.591391][T15931] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1768.796995][T22663] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[ 1769.743147][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1769.750485][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1771.592888][T22028] veth0_vlan: entered promiscuous mode
[ 1771.982981][T22301] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1772.252901][T22301] veth0_vlan: entered promiscuous mode
[ 1772.341406][T22301] veth1_vlan: entered promiscuous mode
[ 1772.414865][T22702] overlay: Unknown parameter '\'
[ 1772.456984][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1772.475206][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1772.488495][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1772.506614][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1772.514458][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1772.629367][T22301] veth0_macvtap: entered promiscuous mode
[ 1772.699032][T22301] veth1_macvtap: entered promiscuous mode
[ 1773.712613][T22301] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1774.610336][T20463] Bluetooth: hci6: command tx timeout
[ 1775.098598][T22301] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1775.947735][T22724] ip6gre1: entered allmulticast mode
[ 1775.983849][T22728] sit0: entered promiscuous mode
[ 1776.014677][T22728] netlink: 'syz.6.3617': attribute type 1 has an invalid length.
[ 1776.032808][T22728] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3617'.
[ 1776.180016][ T5804] usb 8-1: new full-speed USB device number 37 using dummy_hcd
[ 1776.377426][ T5804] usb 8-1: not running at top speed; connect to a high speed hub
[ 1776.456669][ T5804] usb 8-1: config 11 has an invalid interface number: 95 but max is 0
[ 1776.511874][ T5804] usb 8-1: config 11 has no interface number 0
[ 1776.569766][ T5804] usb 8-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 1776.630630][ T5804] usb 8-1: config 11 interface 95 altsetting 64 has an invalid descriptor for endpoint zero, skipping
[ 1776.683698][T20463] Bluetooth: hci6: command tx timeout
[ 1776.715583][ T5804] usb 8-1: config 11 interface 95 has no altsetting 0
[ 1776.762480][ T5804] usb 8-1: language id specifier not provided by device, defaulting to English
[ 1776.923712][ T5804] usb 8-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d
[ 1776.944524][ T5804] usb 8-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[ 1776.952592][ T5804] usb 8-1: Manufacturer: ヹ憎◘鷿羯䜧ᡝ㛆谉醣큵概鴜跩䠩ỷⷧそ䩃玣瞛陆픁昗玷̧㤫뼸狠띉㚐⁛ԓ菍魠䋗襺룮
[ 1777.043966][T22732] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1777.051603][T15931] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1777.367638][ T5804] usb 8-1: USB disconnect, device number 37
[ 1777.669401][T15931] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1778.085962][T15931] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1778.575047][T15934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1778.783820][T20463] Bluetooth: hci6: command tx timeout
[ 1780.883403][T20463] Bluetooth: hci6: command tx timeout
[ 1780.905862][T22777] loop1: detected capacity change from 0 to 40427
[ 1780.953819][T22777] F2FS-fs (loop1): invalid crc value
[ 1781.076572][T22777] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1781.092377][T22777] F2FS-fs (loop1): Start checkpoint disabled!
[ 1781.107997][T22777] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[ 1781.115992][T22777] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[ 1781.383483][   T30] audit: type=1800 audit(1775002594.214:216): pid=22777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3631" name="file1" dev="loop1" ino=10 res=0 errno=0
[ 1781.548655][T22789] bio_check_eod: 176 callbacks suppressed
[ 1781.548711][T22789] syz.1.3631: attempt to access beyond end of device
[ 1781.548711][T22789] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[ 1781.571620][T22789] syz.1.3631: attempt to access beyond end of device
[ 1781.571620][T22789] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[ 1781.590099][T22789] syz.1.3631: attempt to access beyond end of device
[ 1781.590099][T22789] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[ 1781.608706][T22789] syz.1.3631: attempt to access beyond end of device
[ 1781.608706][T22789] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[ 1781.627941][T22789] syz.1.3631: attempt to access beyond end of device
[ 1781.627941][T22789] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[ 1781.647470][T22789] syz.1.3631: attempt to access beyond end of device
[ 1781.647470][T22789] loop1: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[ 1781.715710][T22789] syz.1.3631: attempt to access beyond end of device
[ 1781.715710][T22789] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[ 1781.735165][T22789] syz.1.3631: attempt to access beyond end of device
[ 1781.735165][T22789] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[ 1781.759355][T22789] syz.1.3631: attempt to access beyond end of device
[ 1781.759355][T22789] loop1: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[ 1781.777798][T22789] syz.1.3631: attempt to access beyond end of device
[ 1781.777798][T22789] loop1: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[ 1782.132050][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1782.283991][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1782.338017][T22703] chnl_net:caif_netlink_parms(): no params data found
[ 1782.463599][   T76] CPU: 1 UID: 0 PID: 76 Comm: kworker/u8:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1782.463660][   T76] Tainted: [L]=SOFTLOCKUP
[ 1782.463674][   T76] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1782.463701][   T76] Workqueue: writeback wb_workfn (flush-7:1)
[ 1782.463764][   T76] Call Trace:
[ 1782.463788][   T76]  <TASK>
[ 1782.463803][   T76]  dump_stack_lvl+0x100/0x190
[ 1782.463866][   T76]  f2fs_handle_critical_error+0x5d7/0x970
[ 1782.463916][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.463964][   T76]  ? f2fs_build_fault_attr+0x53/0x280
[ 1782.464040][   T76]  f2fs_write_end_io+0xc3f/0xf30
[ 1782.464094][   T76]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1782.464150][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.464208][   T76]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1782.464256][   T76]  bio_endio+0x7a3/0x910
[ 1782.464303][   T76]  submit_bio_noacct+0x64c/0x2010
[ 1782.464370][   T76]  f2fs_submit_write_bio+0x133/0x350
[ 1782.464417][   T76]  __submit_merged_bio+0x331/0x7b0
[ 1782.464471][   T76]  __submit_merged_write_cond+0x3fe/0x510
[ 1782.464531][   T76]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1782.464596][   T76]  ? __pfx___might_resched+0x10/0x10
[ 1782.464642][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.464699][   T76]  f2fs_write_cache_pages+0x21c0/0x2720
[ 1782.464787][   T76]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[ 1782.464846][   T76]  ? kfree+0x1f6/0x6b0
[ 1782.464881][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.464923][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.464958][   T76]  ? ieee80211_inform_bss+0x8da/0x1150
[ 1782.465014][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.465068][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.465103][   T76]  ? rcu_is_watching+0x12/0xc0
[ 1782.465161][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.465196][   T76]  ? lock_acquire+0x1cf/0x380
[ 1782.465240][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.465275][   T76]  ? find_held_lock+0x2b/0x80
[ 1782.465311][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.465346][   T76]  ? rcu_is_watching+0x12/0xc0
[ 1782.465382][   T76]  f2fs_write_data_pages+0x799/0x16d0
[ 1782.465425][   T76]  ? lockdep_hardirqs_on+0x78/0x100
[ 1782.465464][   T76]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1782.465520][   T76]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1782.465566][   T76]  do_writepages+0x278/0x600
[ 1782.465616][   T76]  ? __pfx_do_writepages+0x10/0x10
[ 1782.465662][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.465702][   T76]  __writeback_single_inode+0x164/0x13c0
[ 1782.465755][   T76]  ? preempt_schedule_common+0x42/0xc0
[ 1782.465812][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.465851][   T76]  ? __pfx___writeback_single_inode+0x10/0x10
[ 1782.465893][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.465932][   T76]  writeback_sb_inodes+0x766/0x1c70
[ 1782.465987][   T76]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1782.466028][   T76]  ? __pfx___schedule+0x10/0x10
[ 1782.466114][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.466149][   T76]  ? rcu_is_watching+0x12/0xc0
[ 1782.466180][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.466215][   T76]  ? queue_io+0x287/0x550
[ 1782.466250][   T76]  wb_writeback+0x1c0/0xbe0
[ 1782.466297][   T76]  ? __pfx_wb_writeback+0x10/0x10
[ 1782.466344][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.466379][   T76]  ? mark_held_locks+0x40/0x70
[ 1782.466423][   T76]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1782.466471][   T76]  wb_workfn+0x142/0xc00
[ 1782.466512][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.466547][   T76]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1782.466595][   T76]  ? __pfx_wb_workfn+0x10/0x10
[ 1782.466635][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.466673][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.466711][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.466746][   T76]  ? rcu_is_watching+0x12/0xc0
[ 1782.466787][   T76]  process_one_work+0xa23/0x19a0
[ 1782.466832][   T76]  ? __pfx_process_one_work+0x10/0x10
[ 1782.466860][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.466907][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.466947][   T76]  worker_thread+0x5ef/0xe50
[ 1782.466990][   T76]  ? kthread+0x13a/0x450
[ 1782.467014][   T76]  ? __pfx_worker_thread+0x10/0x10
[ 1782.467042][   T76]  kthread+0x370/0x450
[ 1782.467066][   T76]  ? __pfx_kthread+0x10/0x10
[ 1782.467095][   T76]  ret_from_fork+0x754/0xd80
[ 1782.467124][   T76]  ? __pfx_ret_from_fork+0x10/0x10
[ 1782.467154][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1782.467189][   T76]  ? __switch_to+0x7b4/0x1120
[ 1782.467223][   T76]  ? __pfx_kthread+0x10/0x10
[ 1782.467251][   T76]  ret_from_fork_asm+0x1a/0x30
[ 1782.467302][   T76]  </TASK>
[ 1783.524535][  T168] bridge_slave_1: left allmulticast mode
[ 1783.530217][  T168] bridge_slave_1: left promiscuous mode
[ 1783.543889][   T76] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[ 1783.600947][  T168] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1783.689677][  T168] bridge_slave_0: left allmulticast mode
[ 1783.720547][  T168] bridge_slave_0: left promiscuous mode
[ 1783.754235][  T168] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1784.714329][  T168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1784.784317][  T168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1784.878246][  T168] bond0 (unregistering): Released all slaves
[ 1785.017744][ T8005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1785.069779][ T8005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1785.479313][  T168] hsr_slave_0: left promiscuous mode
[ 1785.518973][  T168] hsr_slave_1: left promiscuous mode
[ 1785.526310][  T168] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1785.557228][  T168] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1785.602336][  T168] veth0_vlan: left promiscuous mode
[ 1786.880813][  T168] team0 (unregistering): Port device team_slave_1 removed
[ 1786.965550][  T168] team0 (unregistering): Port device team_slave_0 removed
[ 1787.274143][T22849] syzkaller0: tun_chr_ioctl cmd 35108
[ 1787.520997][T22703] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1787.563790][T22703] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1787.571101][T22703] bridge_slave_0: entered allmulticast mode
[ 1787.638513][T22703] bridge_slave_0: entered promiscuous mode
[ 1787.695154][T22703] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1787.754424][T22703] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1787.803994][T22703] bridge_slave_1: entered allmulticast mode
[ 1787.828767][T22703] bridge_slave_1: entered promiscuous mode
[ 1788.104944][T22703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1788.167360][T22703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1788.334601][T22703] team0: Port device team_slave_0 added
[ 1788.371096][T22703] team0: Port device team_slave_1 added
[ 1788.616515][T22703] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1788.623723][T22703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1788.702589][T22703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1788.761020][T22886] loop1: detected capacity change from 0 to 164
[ 1788.771551][T22703] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1788.809965][T22703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1788.931182][T22703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1789.342191][T22703] hsr_slave_0: entered promiscuous mode
[ 1789.398331][T22703] hsr_slave_1: entered promiscuous mode
[ 1789.448425][T22703] debugfs: 'hsr0' already exists in 'hsr'
[ 1789.477802][T22703] Cannot create hsr debugfs directory
[ 1789.878812][T22909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3666'.
[ 1791.115751][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1792.490178][T22947] team0: Port device syz_tun added
[ 1792.550105][T22953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3680'.
[ 1792.586742][T22952] team0: Port device syz_tun removed
[ 1792.649353][T22952] bridge_slave_0: left allmulticast mode
[ 1792.671116][T22952] bridge_slave_0: left promiscuous mode
[ 1792.726424][T22952] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1792.788120][T22952] bridge_slave_1: left allmulticast mode
[ 1792.809607][T22952] bridge_slave_1: left promiscuous mode
[ 1792.902801][T22952] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1792.972190][T22961] FAT-fs (nbd6): unable to read boot sector
[ 1793.348467][T22962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3682'.
[ 1793.406795][T22952] bond0: (slave bond_slave_0): Releasing backup interface
[ 1793.455330][T22952] bond0: (slave bond_slave_1): Releasing backup interface
[ 1793.518566][T22952] team0: Port device team_slave_0 removed
[ 1793.749346][T22952] team0: Port device team_slave_1 removed
[ 1793.774243][T22952] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1793.783564][T22952] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1793.806454][T22952] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1793.816118][T22952] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1793.841071][T22952] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1794.194819][T22974] x_tables: duplicate underflow at hook 1
[ 1794.296344][T22981] netlink: 'syz.4.3686': attribute type 1 has an invalid length.
[ 1794.300737][T22703] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1794.425079][T22703] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1794.718800][T22983] bond1: (slave bridge1): making interface the new active one
[ 1794.737211][T22983] bond1: (slave bridge1): Enslaving as an active interface with an up link
[ 1794.875372][T22985] syzkaller0: entered promiscuous mode
[ 1794.903251][T22985] syzkaller0: entered allmulticast mode
[ 1794.966351][T22986] bond1: (slave gretap1): Enslaving as an active interface with an up link
[ 1794.991623][T22703] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1795.030512][T22703] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1795.204347][T23008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3693'.
[ 1796.085752][T23020] FAT-fs (nbd6): unable to read boot sector
[ 1796.752502][   T30] audit: type=1326 audit(1775002609.834:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c79c819 code=0x7ffc0000
[ 1796.800671][   T30] audit: type=1326 audit(1775002609.834:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c79c819 code=0x7ffc0000
[ 1796.899657][   T30] audit: type=1326 audit(1775002609.834:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c79c819 code=0x7ffc0000
[ 1796.996001][   T30] audit: type=1326 audit(1775002609.834:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c79c819 code=0x7ffc0000
[ 1797.079343][   T30] audit: type=1326 audit(1775002609.834:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f159c79c819 code=0x7ffc0000
[ 1797.163750][   T30] audit: type=1326 audit(1775002609.834:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c79c819 code=0x7ffc0000
[ 1797.476371][T23037] loop4: detected capacity change from 0 to 40427
[ 1797.512371][T23037] F2FS-fs (loop4): invalid crc value
[ 1797.595044][T23037] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1797.605670][T23037] F2FS-fs (loop4): Start checkpoint disabled!
[ 1797.613236][T23037] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[ 1797.626136][T23037] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[ 1797.845597][   T30] audit: type=1326 audit(1775002609.864:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c79c819 code=0x7ffc0000
[ 1798.130441][T23046] bio_check_eod: 176 callbacks suppressed
[ 1798.130471][T23046] syz.4.3703: attempt to access beyond end of device
[ 1798.130471][T23046] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[ 1798.150921][T23046] syz.4.3703: attempt to access beyond end of device
[ 1798.150921][T23046] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[ 1798.165390][T23046] syz.4.3703: attempt to access beyond end of device
[ 1798.165390][T23046] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[ 1798.179742][T23046] syz.4.3703: attempt to access beyond end of device
[ 1798.179742][T23046] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[ 1798.194122][T23046] syz.4.3703: attempt to access beyond end of device
[ 1798.194122][T23046] loop4: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[ 1798.210478][T23046] syz.4.3703: attempt to access beyond end of device
[ 1798.210478][T23046] loop4: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[ 1798.225019][T23046] syz.4.3703: attempt to access beyond end of device
[ 1798.225019][T23046] loop4: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[ 1798.239330][T23046] syz.4.3703: attempt to access beyond end of device
[ 1798.239330][T23046] loop4: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[ 1798.253659][T23046] syz.4.3703: attempt to access beyond end of device
[ 1798.253659][T23046] loop4: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[ 1798.268052][T23046] syz.4.3703: attempt to access beyond end of device
[ 1798.268052][T23046] loop4: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[ 1798.862631][   T30] audit: type=1326 audit(1775002609.864:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c79c819 code=0x7ffc0000
[ 1799.860043][   T30] audit: type=1326 audit(1775002609.864:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c79c819 code=0x7ffc0000
[ 1799.936394][ T8005] CPU: 1 UID: 0 PID: 8005 Comm: kworker/u8:15 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1799.936457][ T8005] Tainted: [L]=SOFTLOCKUP
[ 1799.936472][ T8005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1799.936498][ T8005] Workqueue: writeback wb_workfn (flush-7:4)
[ 1799.936562][ T8005] Call Trace:
[ 1799.936575][ T8005]  <TASK>
[ 1799.936589][ T8005]  dump_stack_lvl+0x100/0x190
[ 1799.936652][ T8005]  f2fs_handle_critical_error+0x5d7/0x970
[ 1799.936701][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.936748][ T8005]  ? f2fs_build_fault_attr+0x53/0x280
[ 1799.936833][ T8005]  f2fs_write_end_io+0xc3f/0xf30
[ 1799.936890][ T8005]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1799.936946][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.937003][ T8005]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1799.937052][ T8005]  bio_endio+0x7a3/0x910
[ 1799.937098][ T8005]  submit_bio_noacct+0x64c/0x2010
[ 1799.937168][ T8005]  f2fs_submit_write_bio+0x133/0x350
[ 1799.937215][ T8005]  __submit_merged_bio+0x331/0x7b0
[ 1799.937271][ T8005]  __submit_merged_write_cond+0x3fe/0x510
[ 1799.937332][ T8005]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1799.937394][ T8005]  ? __pfx___might_resched+0x10/0x10
[ 1799.937437][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.937494][ T8005]  f2fs_write_cache_pages+0x21c0/0x2720
[ 1799.937576][ T8005]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[ 1799.937633][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.937689][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.937738][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.937784][ T8005]  ? find_held_lock+0x2b/0x80
[ 1799.937838][ T8005]  ? nr_blockdev_pages+0xde/0x120
[ 1799.937891][ T8005]  ? nr_blockdev_pages+0xde/0x120
[ 1799.937942][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.938016][ T8005]  ? si_meminfo+0x118/0x230
[ 1799.938053][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.938101][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.938215][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.938264][ T8005]  ? rcu_is_watching+0x12/0xc0
[ 1799.938315][ T8005]  f2fs_write_data_pages+0x799/0x16d0
[ 1799.938373][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.938433][ T8005]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1799.938507][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.938556][ T8005]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1799.938618][ T8005]  do_writepages+0x278/0x600
[ 1799.938685][ T8005]  ? __pfx_do_writepages+0x10/0x10
[ 1799.938748][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.938802][ T8005]  __writeback_single_inode+0x164/0x13c0
[ 1799.938861][ T8005]  ? find_held_lock+0x2b/0x80
[ 1799.938911][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.938961][ T8005]  ? __pfx___writeback_single_inode+0x10/0x10
[ 1799.939012][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.939061][ T8005]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1799.939105][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.939159][ T8005]  writeback_sb_inodes+0x766/0x1c70
[ 1799.939233][ T8005]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1799.939288][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.939393][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.939440][ T8005]  ? rcu_is_watching+0x12/0xc0
[ 1799.939483][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.939530][ T8005]  ? queue_io+0x287/0x550
[ 1799.939577][ T8005]  wb_writeback+0x1c0/0xbe0
[ 1799.939624][ T8005]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1799.939700][ T8005]  ? __pfx_wb_writeback+0x10/0x10
[ 1799.939762][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.939809][ T8005]  ? mark_held_locks+0x40/0x70
[ 1799.939873][ T8005]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1799.939937][ T8005]  wb_workfn+0x142/0xc00
[ 1799.939991][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.940038][ T8005]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1799.940102][ T8005]  ? __pfx_wb_workfn+0x10/0x10
[ 1799.940162][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.940214][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.940266][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.940313][ T8005]  ? rcu_is_watching+0x12/0xc0
[ 1799.940365][ T8005]  process_one_work+0xa23/0x19a0
[ 1799.940425][ T8005]  ? __pfx_process_one_work+0x10/0x10
[ 1799.940463][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.940525][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.940580][ T8005]  worker_thread+0x5ef/0xe50
[ 1799.940632][ T8005]  ? __pfx_worker_thread+0x10/0x10
[ 1799.940674][ T8005]  ? kthread+0x13a/0x450
[ 1799.940705][ T8005]  ? __pfx_worker_thread+0x10/0x10
[ 1799.940742][ T8005]  kthread+0x370/0x450
[ 1799.940776][ T8005]  ? __pfx_kthread+0x10/0x10
[ 1799.940821][ T8005]  ret_from_fork+0x754/0xd80
[ 1799.940860][ T8005]  ? __pfx_ret_from_fork+0x10/0x10
[ 1799.940901][ T8005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1799.940949][ T8005]  ? __switch_to+0x7b4/0x1120
[ 1799.940995][ T8005]  ? __pfx_kthread+0x10/0x10
[ 1799.941033][ T8005]  ret_from_fork_asm+0x1a/0x30
[ 1799.941108][ T8005]  </TASK>
[ 1799.941123][ T8005] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[ 1800.063519][   T30] audit: type=1326 audit(1775002609.864:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c79c819 code=0x7ffc0000
[ 1801.128893][T23062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3705'.
[ 1802.792078][T23075] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3711'.
[ 1802.846522][T23076] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3711'.
[ 1803.483937][T23025] team0: Port device syz_tun added
[ 1803.544956][T23026] team0: Port device syz_tun removed
[ 1803.592712][T23026] bridge_slave_0: left allmulticast mode
[ 1803.610333][T23026] bridge_slave_0: left promiscuous mode
[ 1803.634248][T23026] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1803.657126][T23026] bridge_slave_1: left allmulticast mode
[ 1803.662848][T23026] bridge_slave_1: left promiscuous mode
[ 1803.680228][T23026] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1803.823479][T23026] bond0: (slave bond_slave_0): Releasing backup interface
[ 1803.836888][T23085] FAT-fs (nbd1): unable to read boot sector
[ 1804.016281][T23026] bond0: (slave bond_slave_1): Releasing backup interface
[ 1804.294354][T23026] team0: Port device team_slave_0 removed
[ 1804.316298][T23026] team0: Port device team_slave_1 removed
[ 1804.324598][T23026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1804.331989][T23026] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1804.382888][T23026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1804.405603][T23026] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1804.418580][T23026] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1804.576532][T23075] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1804.585027][T23075] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1804.696020][T23076] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1804.703616][T23076] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1804.711162][T23076] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1804.718442][T23076] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1804.951351][T23076] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3711'.
[ 1805.121659][T23076] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1805.129027][T23076] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1807.472778][T22703] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1807.675185][T22703] 8021q: adding VLAN 0 to HW filter on device team0
[ 1807.906837][T23139] FAT-fs (nbd6): unable to read boot sector
[ 1808.074241][T15931] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1808.081457][T15931] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1808.295920][T15931] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1808.303120][T15931] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1809.394144][T23162] netlink: 'syz.6.3736': attribute type 9 has an invalid length.
[ 1809.751811][T22703] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1809.793422][ T5931] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1810.015823][ T5931] usb 5-1: Using ep0 maxpacket: 32
[ 1810.059123][ T5931] usb 5-1: config 0 has no interfaces?
[ 1810.073412][ T5931] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[ 1810.112909][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1810.151630][ T5931] usb 5-1: config 0 descriptor??
[ 1810.429122][T20985] usb 5-1: USB disconnect, device number 13
[ 1810.959180][T22703] veth0_vlan: entered promiscuous mode
[ 1811.022401][T22703] veth1_vlan: entered promiscuous mode
[ 1811.259797][T23200] bond1: option lacp_rate: invalid value (128)
[ 1811.316975][T23200] bond1 (unregistering): Released all slaves
[ 1811.541001][T22703] veth0_macvtap: entered promiscuous mode
[ 1811.581129][T22703] veth1_macvtap: entered promiscuous mode
[ 1811.806251][T22703] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1811.858387][T22703] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1811.959135][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1811.995859][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1812.036318][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1812.143941][  T704] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1812.992953][T15934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1813.067414][T15934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1813.205211][T23228] team0: Failed to send port change of device bridge1 via netlink (err -105)
[ 1813.240965][T23228] team0: Failed to send options change via netlink (err -105)
[ 1813.272904][T23228] team0: Port device bridge1 added
[ 1813.768993][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1813.821985][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1813.994107][T20985] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1814.390722][T23246] loop5: detected capacity change from 0 to 2048
[ 1814.425169][T23256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3761'.
[ 1814.473132][T23246] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1814.669100][T20985] usb 5-1: Using ep0 maxpacket: 32
[ 1814.678173][T20985] usb 5-1: config 0 has no interfaces?
[ 1814.694033][T20985] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[ 1814.703133][T20985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1815.644786][T20985] usb 5-1: config 0 descriptor??
[ 1815.871478][  T791] usb 5-1: USB disconnect, device number 14
[ 1816.993852][  T791] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1817.179692][  T791] usb 1-1: Using ep0 maxpacket: 16
[ 1817.214731][  T791] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1817.277216][  T791] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1817.315599][  T791] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1817.335041][T23300] netlink: 'syz.5.3773': attribute type 1 has an invalid length.
[ 1817.344307][  T791] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1817.356776][T23301] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3774'.
[ 1817.382792][  T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1817.434777][  T791] usb 1-1: config 0 descriptor??
[ 1817.909739][  T791] hid (null): usage index exceeded
[ 1817.933405][  T791] hid (null): unknown global tag 0xe
[ 1817.949233][  T791] hid (null): usage index exceeded
[ 1817.969908][  T791] hid (null): unknown global tag 0xc
[ 1817.984244][  T791] hid (null): report_id 0 is invalid
[ 1818.216191][  T791] usb 1-1: USB disconnect, device number 4
[ 1819.757072][T23332] vlan2: entered promiscuous mode
[ 1819.793289][T23333] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3780'.
[ 1819.795136][T23332] syz_tun: entered promiscuous mode
[ 1821.104165][T23346] loop5: detected capacity change from 0 to 128
[ 1821.279678][T23327] bio_check_eod: 176 callbacks suppressed
[ 1821.279707][T23327] syz.5.3779: attempt to access beyond end of device
[ 1821.279707][T23327] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128
[ 1821.493438][T19044] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1821.654626][T19044] usb 1-1: Using ep0 maxpacket: 32
[ 1821.675182][T19044] usb 1-1: config 0 has no interfaces?
[ 1821.680709][T19044] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[ 1821.701518][T19044] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1821.927167][T19044] usb 1-1: config 0 descriptor??
[ 1822.742459][ T5929] usb 1-1: USB disconnect, device number 5
[ 1823.376219][T23385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3790'.
[ 1823.564257][T23388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3794'.
[ 1824.595829][T23397] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1824.992480][T23407] loop1: detected capacity change from 0 to 512
[ 1825.023430][T23407] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1825.195792][   T30] kauditd_printk_skb: 21 callbacks suppressed
[ 1825.195820][   T30] audit: type=1804 audit(1775002638.274:248): pid=23407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3801" name="/newroot/183/file0/bus" dev="loop1" ino=1048728 res=1 errno=0
[ 1826.918700][T19044] libceph: connect (1)[c::]:6789 error -101
[ 1826.954712][T19044] libceph: mon0 (1)[c::]:6789 connect error
[ 1827.091904][T23441] ceph: No mds server is up or the cluster is laggy
[ 1827.507687][T23454] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3811'.
[ 1827.725308][T23462] FAT-fs (nbd7): unable to read boot sector
[ 1827.993630][   T29] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1828.193519][   T29] usb 1-1: Using ep0 maxpacket: 32
[ 1828.234804][   T29] usb 1-1: config 0 has no interfaces?
[ 1828.282964][   T29] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[ 1828.336899][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1828.384517][   T29] usb 1-1: config 0 descriptor??
[ 1828.635460][ T5929] usb 1-1: USB disconnect, device number 6
[ 1832.097050][T23526] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3828'.
[ 1832.437336][T23523] loop0: detected capacity change from 0 to 40427
[ 1832.448198][T23523] F2FS-fs (loop0): invalid crc value
[ 1832.606617][T23523] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1832.618094][T23523] F2FS-fs (loop0): Start checkpoint disabled!
[ 1832.631767][T23523] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[ 1832.641474][T23523] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[ 1832.659819][   T30] audit: type=1800 audit(1775002645.744:249): pid=23523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3826" name="file1" dev="loop0" ino=10 res=0 errno=0
[ 1833.106276][T23542] syz.0.3826: attempt to access beyond end of device
[ 1833.106276][T23542] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[ 1833.122906][T23542] syz.0.3826: attempt to access beyond end of device
[ 1833.122906][T23542] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[ 1833.142040][T23542] syz.0.3826: attempt to access beyond end of device
[ 1833.142040][T23542] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[ 1833.160829][T23542] syz.0.3826: attempt to access beyond end of device
[ 1833.160829][T23542] loop0: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[ 1833.179126][T23542] syz.0.3826: attempt to access beyond end of device
[ 1833.179126][T23542] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[ 1833.242638][T23542] syz.0.3826: attempt to access beyond end of device
[ 1833.242638][T23542] loop0: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[ 1833.261777][T23542] syz.0.3826: attempt to access beyond end of device
[ 1833.261777][T23542] loop0: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[ 1833.280202][T23542] syz.0.3826: attempt to access beyond end of device
[ 1833.280202][T23542] loop0: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[ 1833.298615][T23542] syz.0.3826: attempt to access beyond end of device
[ 1833.298615][T23542] loop0: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[ 1833.316459][T23542] syz.0.3826: attempt to access beyond end of device
[ 1833.316459][T23542] loop0: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[ 1833.698071][ T5929] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1834.044453][ T5929] usb 2-1: Using ep0 maxpacket: 32
[ 1834.084331][   T76] CPU: 1 UID: 0 PID: 76 Comm: kworker/u8:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1834.084392][   T76] Tainted: [L]=SOFTLOCKUP
[ 1834.084406][   T76] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1834.084432][   T76] Workqueue: writeback wb_workfn (flush-7:0)
[ 1834.084496][   T76] Call Trace:
[ 1834.084509][   T76]  <TASK>
[ 1834.084524][   T76]  dump_stack_lvl+0x100/0x190
[ 1834.084587][   T76]  f2fs_handle_critical_error+0x5d7/0x970
[ 1834.084637][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.084686][   T76]  ? f2fs_build_fault_attr+0x53/0x280
[ 1834.084762][   T76]  f2fs_write_end_io+0xc3f/0xf30
[ 1834.084822][   T76]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1834.084879][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.084936][   T76]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1834.084986][   T76]  bio_endio+0x7a3/0x910
[ 1834.085033][   T76]  submit_bio_noacct+0x64c/0x2010
[ 1834.085103][   T76]  f2fs_submit_write_bio+0x133/0x350
[ 1834.085150][   T76]  __submit_merged_bio+0x331/0x7b0
[ 1834.085206][   T76]  __submit_merged_write_cond+0x3fe/0x510
[ 1834.085268][   T76]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1834.085331][   T76]  ? f2fs_write_cache_pages+0x212a/0x2720
[ 1834.085400][   T76]  f2fs_write_cache_pages+0x21c0/0x2720
[ 1834.085483][   T76]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[ 1834.085550][   T76]  ? preempt_schedule_thunk+0x16/0x30
[ 1834.085605][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.085659][   T76]  ? __lock_acquire+0x4a5/0x2630
[ 1834.085761][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.085813][   T76]  ? rcu_is_watching+0x12/0xc0
[ 1834.085892][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.085940][   T76]  ? lock_acquire+0x1cf/0x380
[ 1834.085999][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.086046][   T76]  ? find_held_lock+0x2b/0x80
[ 1834.086096][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.086143][   T76]  ? rcu_is_watching+0x12/0xc0
[ 1834.086193][   T76]  f2fs_write_data_pages+0x799/0x16d0
[ 1834.086250][   T76]  ? lockdep_hardirqs_on+0x78/0x100
[ 1834.086303][   T76]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1834.086379][   T76]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1834.086442][   T76]  do_writepages+0x278/0x600
[ 1834.086510][   T76]  ? __pfx_do_writepages+0x10/0x10
[ 1834.086576][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.086630][   T76]  __writeback_single_inode+0x164/0x13c0
[ 1834.086682][   T76]  ? preempt_schedule_common+0x42/0xc0
[ 1834.086747][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.086805][   T76]  ? __pfx___writeback_single_inode+0x10/0x10
[ 1834.086862][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.086915][   T76]  writeback_sb_inodes+0x766/0x1c70
[ 1834.086989][   T76]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1834.087103][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.087151][   T76]  ? rcu_is_watching+0x12/0xc0
[ 1834.087194][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.087241][   T76]  ? queue_io+0x287/0x550
[ 1834.087289][   T76]  wb_writeback+0x1c0/0xbe0
[ 1834.087352][   T76]  ? __pfx_wb_writeback+0x10/0x10
[ 1834.087416][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.087463][   T76]  ? mark_held_locks+0x40/0x70
[ 1834.087523][   T76]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1834.087589][   T76]  wb_workfn+0x142/0xc00
[ 1834.087645][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.087691][   T76]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1834.087755][   T76]  ? __pfx_wb_workfn+0x10/0x10
[ 1834.087814][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.087866][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.087917][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.087964][   T76]  ? rcu_is_watching+0x12/0xc0
[ 1834.088015][   T76]  process_one_work+0xa23/0x19a0
[ 1834.088075][   T76]  ? __pfx_process_one_work+0x10/0x10
[ 1834.088113][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.088175][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.088230][   T76]  worker_thread+0x5ef/0xe50
[ 1834.088287][   T76]  ? kthread+0x13a/0x450
[ 1834.088319][   T76]  ? __pfx_worker_thread+0x10/0x10
[ 1834.088356][   T76]  kthread+0x370/0x450
[ 1834.088388][   T76]  ? __pfx_kthread+0x10/0x10
[ 1834.088426][   T76]  ret_from_fork+0x754/0xd80
[ 1834.088465][   T76]  ? __pfx_ret_from_fork+0x10/0x10
[ 1834.088505][   T76]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1834.088553][   T76]  ? __switch_to+0x7b4/0x1120
[ 1834.088599][   T76]  ? __pfx_kthread+0x10/0x10
[ 1834.088636][   T76]  ret_from_fork_asm+0x1a/0x30
[ 1834.088704][   T76]  </TASK>
[ 1834.820624][ T5929] usb 2-1: config 0 has no interfaces?
[ 1834.856470][   T76] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[ 1834.873973][ T5929] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[ 1834.883098][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1835.114549][ T5929] usb 2-1: config 0 descriptor??
[ 1835.638355][T23560] xt_nfacct: accounting object `syz0' does not exist
[ 1836.370659][T20985] usb 2-1: USB disconnect, device number 50
[ 1838.806778][T23592] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3848'.
[ 1839.081197][T23594] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1839.409889][T23608] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 1840.061979][T23623] xt_nfacct: accounting object `syz0' does not exist
[ 1841.184329][T19044] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1841.362746][T19044] usb 7-1: Using ep0 maxpacket: 32
[ 1841.378881][T19044] usb 7-1: config 0 has no interfaces?
[ 1841.419434][T19044] usb 7-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[ 1841.459794][T19044] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1841.516579][T19044] usb 7-1: config 0 descriptor??
[ 1842.170650][T20985] usb 7-1: USB disconnect, device number 16
[ 1842.836632][T23661] xt_hashlimit: size too large, truncated to 1048576
[ 1842.836770][T19044] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[ 1843.015455][T19044] usb 5-1: not running at top speed; connect to a high speed hub
[ 1843.030249][T19044] usb 5-1: config 11 has an invalid interface number: 95 but max is 0
[ 1843.049827][T19044] usb 5-1: config 11 has no interface number 0
[ 1843.079650][T19044] usb 5-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 1843.122256][T19044] usb 5-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1843.153037][T19044] usb 5-1: config 11 interface 95 has no altsetting 0
[ 1843.172386][T19044] usb 5-1: language id specifier not provided by device, defaulting to English
[ 1843.192089][T19044] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d
[ 1843.214314][T19044] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[ 1843.243247][T23655] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1843.523427][T19044] usbtouchscreen 5-1:11.95: probe with driver usbtouchscreen failed with error -8
[ 1843.579559][T19044] usb 5-1: USB disconnect, device number 15
[ 1845.873417][T19044] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1846.065270][T19044] usb 5-1: Using ep0 maxpacket: 32
[ 1846.887633][T19044] usb 5-1: config 0 has no interfaces?
[ 1846.893185][T19044] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[ 1847.002365][T19044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1847.094065][T19044] usb 5-1: config 0 descriptor??
[ 1847.345748][ T5907] usb 5-1: USB disconnect, device number 16
[ 1847.791954][T23751] FAT-fs (nbd7): unable to read boot sector
[ 1848.821734][T23764] loop7: detected capacity change from 0 to 128
[ 1848.941301][T23764] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fff0000)
[ 1848.967116][T23764] FAT-fs (loop7): Filesystem has been set read-only
[ 1849.043989][T23767] ICMPv6: RA: ndisc_router_discovery failed to add default route
[ 1849.052487][T23767] ICMPv6: RA: ndisc_router_discovery failed to add default route
[ 1849.060442][T23767] ICMPv6: RA: ndisc_router_discovery failed to add default route
[ 1849.068358][T23767] ICMPv6: RA: ndisc_router_discovery failed to add default route
[ 1849.076295][T23767] ICMPv6: RA: ndisc_router_discovery failed to add default route
[ 1849.084223][T23767] ICMPv6: RA: ndisc_router_discovery failed to add default route
[ 1849.092124][T23767] ICMPv6: RA: ndisc_router_discovery failed to add default route
[ 1849.100107][T23767] ICMPv6: RA: ndisc_router_discovery failed to add default route
[ 1849.108061][T23767] ICMPv6: RA: ndisc_router_discovery failed to add default route
[ 1849.116102][T23767] ICMPv6: RA: ndisc_router_discovery failed to add default route
[ 1851.070800][T23807] loop5: detected capacity change from 0 to 128
[ 1851.124946][T23807] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1851.193862][T23807] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1851.775250][T23820] loop4: detected capacity change from 0 to 40427
[ 1851.785870][T23820] F2FS-fs (loop4): invalid crc value
[ 1851.877117][T23820] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1851.890407][T23820] F2FS-fs (loop4): Start checkpoint disabled!
[ 1851.899648][T23820] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[ 1851.907733][T23820] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[ 1851.925570][   T30] audit: type=1800 audit(1775002665.014:250): pid=23820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3917" name="file1" dev="loop4" ino=10 res=0 errno=0
[ 1852.365533][T23835] bio_check_eod: 176 callbacks suppressed
[ 1852.365591][T23835] syz.4.3917: attempt to access beyond end of device
[ 1852.365591][T23835] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[ 1852.389707][T23835] syz.4.3917: attempt to access beyond end of device
[ 1852.389707][T23835] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[ 1852.408948][T23835] syz.4.3917: attempt to access beyond end of device
[ 1852.408948][T23835] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[ 1852.427026][T23835] syz.4.3917: attempt to access beyond end of device
[ 1852.427026][T23835] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[ 1852.494960][T23835] syz.4.3917: attempt to access beyond end of device
[ 1852.494960][T23835] loop4: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[ 1852.513677][T23835] syz.4.3917: attempt to access beyond end of device
[ 1852.513677][T23835] loop4: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[ 1852.533160][T23835] syz.4.3917: attempt to access beyond end of device
[ 1852.533160][T23835] loop4: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[ 1852.551253][T23835] syz.4.3917: attempt to access beyond end of device
[ 1852.551253][T23835] loop4: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[ 1852.569950][T23835] syz.4.3917: attempt to access beyond end of device
[ 1852.569950][T23835] loop4: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[ 1852.588566][T23835] syz.4.3917: attempt to access beyond end of device
[ 1852.588566][T23835] loop4: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[ 1852.861613][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.124417][T15934] CPU: 1 UID: 0 PID: 15934 Comm: kworker/u8:14 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1853.124479][T15934] Tainted: [L]=SOFTLOCKUP
[ 1853.124493][T15934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1853.124519][T15934] Workqueue: writeback wb_workfn (flush-7:4)
[ 1853.124582][T15934] Call Trace:
[ 1853.124595][T15934]  <TASK>
[ 1853.124610][T15934]  dump_stack_lvl+0x100/0x190
[ 1853.124673][T15934]  f2fs_handle_critical_error+0x5d7/0x970
[ 1853.124723][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.124773][T15934]  ? f2fs_build_fault_attr+0x53/0x280
[ 1853.124849][T15934]  f2fs_write_end_io+0xc3f/0xf30
[ 1853.124903][T15934]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1853.124960][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.125018][T15934]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1853.125075][T15934]  bio_endio+0x7a3/0x910
[ 1853.125123][T15934]  submit_bio_noacct+0x64c/0x2010
[ 1853.125194][T15934]  f2fs_submit_write_bio+0x133/0x350
[ 1853.125242][T15934]  __submit_merged_bio+0x331/0x7b0
[ 1853.125298][T15934]  __submit_merged_write_cond+0x3fe/0x510
[ 1853.125359][T15934]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1853.125422][T15934]  ? __pfx___might_resched+0x10/0x10
[ 1853.125467][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.125523][T15934]  f2fs_write_cache_pages+0x21c0/0x2720
[ 1853.125611][T15934]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[ 1853.125671][T15934]  ? kfree+0x1f6/0x6b0
[ 1853.125709][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.125765][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.125813][T15934]  ? ieee80211_inform_bss+0x8da/0x1150
[ 1853.125890][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.126002][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.126050][T15934]  ? __asan_memset+0x23/0x50
[ 1853.126099][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.126147][T15934]  ? rcu_is_watching+0x12/0xc0
[ 1853.126197][T15934]  f2fs_write_data_pages+0x799/0x16d0
[ 1853.126269][T15934]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1853.126342][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.126391][T15934]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1853.126454][T15934]  do_writepages+0x278/0x600
[ 1853.126523][T15934]  ? __pfx_do_writepages+0x10/0x10
[ 1853.126586][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.126641][T15934]  __writeback_single_inode+0x164/0x13c0
[ 1853.126695][T15934]  ? find_held_lock+0x2b/0x80
[ 1853.126747][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.126798][T15934]  ? __pfx___writeback_single_inode+0x10/0x10
[ 1853.126850][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.126898][T15934]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1853.126942][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.126996][T15934]  writeback_sb_inodes+0x766/0x1c70
[ 1853.127076][T15934]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1853.127127][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.127174][T15934]  ? __lock_acquire+0x4a5/0x2630
[ 1853.127236][T15934]  ? ret_from_fork_asm+0x1a/0x30
[ 1853.127337][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.127386][T15934]  ? rcu_is_watching+0x12/0xc0
[ 1853.127431][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.127478][T15934]  ? queue_io+0x287/0x550
[ 1853.127526][T15934]  wb_writeback+0x1c0/0xbe0
[ 1853.127573][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.127633][T15934]  ? __pfx_wb_writeback+0x10/0x10
[ 1853.127696][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.127747][T15934]  ? mark_held_locks+0x40/0x70
[ 1853.127808][T15934]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1853.127875][T15934]  wb_workfn+0x142/0xc00
[ 1853.127932][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.127980][T15934]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1853.128046][T15934]  ? __pfx_wb_workfn+0x10/0x10
[ 1853.128108][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.128161][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.128214][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.128261][T15934]  ? rcu_is_watching+0x12/0xc0
[ 1853.128314][T15934]  process_one_work+0xa23/0x19a0
[ 1853.128375][T15934]  ? __pfx_process_one_work+0x10/0x10
[ 1853.128414][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.128477][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.128534][T15934]  worker_thread+0x5ef/0xe50
[ 1853.128593][T15934]  ? kthread+0x13a/0x450
[ 1853.128626][T15934]  ? __pfx_worker_thread+0x10/0x10
[ 1853.128663][T15934]  kthread+0x370/0x450
[ 1853.128697][T15934]  ? __pfx_kthread+0x10/0x10
[ 1853.128736][T15934]  ret_from_fork+0x754/0xd80
[ 1853.128777][T15934]  ? __pfx_ret_from_fork+0x10/0x10
[ 1853.128814][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.128863][T15934]  ? rcu_is_watching+0x12/0xc0
[ 1853.128907][T15934]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1853.128956][T15934]  ? __switch_to+0x7b4/0x1120
[ 1853.129004][T15934]  ? __pfx_kthread+0x10/0x10
[ 1853.129042][T15934]  ret_from_fork_asm+0x1a/0x30
[ 1853.129119][T15934]  </TASK>
[ 1853.173463][T15934] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[ 1854.477087][T23860] blk_print_req_error: 10 callbacks suppressed
[ 1854.477111][T23860] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[ 1854.493114][T23860] buffer_io_error: 10 callbacks suppressed
[ 1854.493133][T23860] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1854.507056][T23860] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[ 1854.516570][T23860] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1854.524381][T23860] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[ 1854.534683][T23860] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1854.542476][T23860] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[ 1854.552142][T23860] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1854.560014][T23860] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[ 1854.569652][T23860] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1854.577483][T23860] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[ 1854.587000][T23860] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1854.594828][T23860] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[ 1854.604419][T23860] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1854.612199][T23860] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[ 1854.621749][T23860] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1854.630434][T23860] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[ 1854.639971][T23860] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1854.647868][T23860] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[ 1854.657426][T23860] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1854.665983][T23860] ldm_validate_partition_table(): Disk read failed.
[ 1854.673606][T23860] Dev nbd0: unable to read RDB block 0
[ 1854.680354][T23860]  nbd0: unable to read partition table
[ 1855.440309][T23878] loop4: detected capacity change from 0 to 128
[ 1855.873003][T23878] FAT-fs (loop4): FAT read failed (blocknr 128)
[ 1856.535658][T23897] loop4: detected capacity change from 0 to 256
[ 1856.565536][T23897] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1857.473643][   T30] audit: type=1800 audit(1775002670.564:251): pid=23897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3938" name="file1" dev="loop4" ino=1048730 res=0 errno=0
[ 1861.126465][T23976] loop5: detected capacity change from 0 to 128
[ 1862.873067][T24025] loop1: detected capacity change from 0 to 128
[ 1864.873367][ T5832] Bluetooth: hci3: command 0x0406 tx timeout
[ 1865.328742][T24074] loop7: detected capacity change from 0 to 40427
[ 1865.403158][T24074] F2FS-fs (loop7): invalid crc value
[ 1865.403441][T24076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3994'.
[ 1865.516363][T24074] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1865.533758][T24074] F2FS-fs (loop7): Start checkpoint disabled!
[ 1865.553639][T24074] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[ 1865.593471][T24074] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[ 1865.610694][   T30] audit: type=1800 audit(1775002678.694:252): pid=24074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3992" name="file1" dev="loop7" ino=10 res=0 errno=0
[ 1865.904611][T24082] loop4: detected capacity change from 0 to 512
[ 1866.129970][T24086] bio_check_eod: 176 callbacks suppressed
[ 1866.130026][T24086] syz.7.3992: attempt to access beyond end of device
[ 1866.130026][T24086] loop7: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[ 1866.152679][T24086] syz.7.3992: attempt to access beyond end of device
[ 1866.152679][T24086] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[ 1866.171240][T24086] syz.7.3992: attempt to access beyond end of device
[ 1866.171240][T24086] loop7: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[ 1866.189775][T24086] syz.7.3992: attempt to access beyond end of device
[ 1866.189775][T24086] loop7: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[ 1866.208641][T24086] syz.7.3992: attempt to access beyond end of device
[ 1866.208641][T24086] loop7: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[ 1866.227772][T24086] syz.7.3992: attempt to access beyond end of device
[ 1866.227772][T24086] loop7: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[ 1866.246125][T24086] syz.7.3992: attempt to access beyond end of device
[ 1866.246125][T24086] loop7: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[ 1866.263552][T24086] syz.7.3992: attempt to access beyond end of device
[ 1866.263552][T24086] loop7: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[ 1866.328089][T24086] syz.7.3992: attempt to access beyond end of device
[ 1866.328089][T24086] loop7: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[ 1866.346353][T24086] syz.7.3992: attempt to access beyond end of device
[ 1866.346353][T24086] loop7: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[ 1867.451378][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1867.451441][   T13] Tainted: [L]=SOFTLOCKUP
[ 1867.451456][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1867.451483][   T13] Workqueue: writeback wb_workfn (flush-7:7)
[ 1867.451549][   T13] Call Trace:
[ 1867.451562][   T13]  <TASK>
[ 1867.451577][   T13]  dump_stack_lvl+0x100/0x190
[ 1867.451671][   T13]  f2fs_handle_critical_error+0x5d7/0x970
[ 1867.451722][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.451772][   T13]  ? f2fs_build_fault_attr+0x53/0x280
[ 1867.451852][   T13]  f2fs_write_end_io+0xc3f/0xf30
[ 1867.451908][   T13]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1867.451967][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.452028][   T13]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1867.452085][   T13]  bio_endio+0x7a3/0x910
[ 1867.452135][   T13]  submit_bio_noacct+0x64c/0x2010
[ 1867.452208][   T13]  f2fs_submit_write_bio+0x133/0x350
[ 1867.452259][   T13]  __submit_merged_bio+0x331/0x7b0
[ 1867.452318][   T13]  __submit_merged_write_cond+0x3fe/0x510
[ 1867.452383][   T13]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1867.452449][   T13]  ? __pfx___might_resched+0x10/0x10
[ 1867.452494][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.452554][   T13]  f2fs_write_cache_pages+0x21c0/0x2720
[ 1867.452644][   T13]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[ 1867.452704][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.452765][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.452815][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.452863][   T13]  ? find_held_lock+0x2b/0x80
[ 1867.452912][   T13]  ? nr_blockdev_pages+0xde/0x120
[ 1867.452968][   T13]  ? nr_blockdev_pages+0xde/0x120
[ 1867.453021][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.453098][   T13]  ? si_meminfo+0x118/0x230
[ 1867.453135][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.453185][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.453315][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.453364][   T13]  ? rcu_is_watching+0x12/0xc0
[ 1867.453418][   T13]  f2fs_write_data_pages+0x799/0x16d0
[ 1867.453478][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.453542][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1867.453621][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.453671][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1867.453737][   T13]  do_writepages+0x278/0x600
[ 1867.453806][   T13]  ? __pfx_do_writepages+0x10/0x10
[ 1867.453871][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.453927][   T13]  __writeback_single_inode+0x164/0x13c0
[ 1867.453981][   T13]  ? find_held_lock+0x2b/0x80
[ 1867.454033][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.454090][   T13]  ? __pfx___writeback_single_inode+0x10/0x10
[ 1867.454144][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.454192][   T13]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1867.454237][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.454293][   T13]  writeback_sb_inodes+0x766/0x1c70
[ 1867.454374][   T13]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1867.454426][   T13]  ? do_raw_spin_lock+0x128/0x260
[ 1867.454471][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.454590][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.454638][   T13]  ? rcu_is_watching+0x12/0xc0
[ 1867.454683][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.454731][   T13]  ? queue_io+0x287/0x550
[ 1867.454781][   T13]  wb_writeback+0x1c0/0xbe0
[ 1867.454848][   T13]  ? __pfx_wb_writeback+0x10/0x10
[ 1867.454916][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.454965][   T13]  ? mark_held_locks+0x40/0x70
[ 1867.455026][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1867.455101][   T13]  wb_workfn+0x142/0xc00
[ 1867.455158][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.455206][   T13]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1867.455271][   T13]  ? __pfx_wb_workfn+0x10/0x10
[ 1867.455328][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.455381][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.455433][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.455481][   T13]  ? rcu_is_watching+0x12/0xc0
[ 1867.455535][   T13]  process_one_work+0xa23/0x19a0
[ 1867.455600][   T13]  ? __pfx_process_one_work+0x10/0x10
[ 1867.455637][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.455704][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.455777][   T13]  worker_thread+0x5ef/0xe50
[ 1867.455839][   T13]  ? kthread+0x13a/0x450
[ 1867.455872][   T13]  ? __pfx_worker_thread+0x10/0x10
[ 1867.455910][   T13]  kthread+0x370/0x450
[ 1867.455944][   T13]  ? __pfx_kthread+0x10/0x10
[ 1867.455985][   T13]  ret_from_fork+0x754/0xd80
[ 1867.456026][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[ 1867.456073][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1867.456122][   T13]  ? __switch_to+0x7b4/0x1120
[ 1867.456170][   T13]  ? __pfx_kthread+0x10/0x10
[ 1867.456210][   T13]  ret_from_fork_asm+0x1a/0x30
[ 1867.456285][   T13]  </TASK>
[ 1868.013433][   T13] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[ 1871.164576][T24145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4010'.
[ 1871.266205][T24145] bond1: entered promiscuous mode
[ 1871.273753][T24145] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1871.850970][T24155] loop4: detected capacity change from 0 to 256
[ 1871.982370][T24155] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1872.042257][T24155] FAT-fs (loop4): Filesystem has been set read-only
[ 1872.060323][T24155] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1872.185547][T24155] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1872.287199][   T30] audit: type=1800 audit(1775002685.364:253): pid=24155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4011" name="file1" dev="loop4" ino=1048732 res=0 errno=0
[ 1872.338578][T24160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4012'.
[ 1873.052718][T24167] xt_nfacct: accounting object `syz0' does not exist
[ 1874.757821][T24190] loop6: detected capacity change from 0 to 164
[ 1874.825013][T24190] Unable to read rock-ridge attributes
[ 1874.836391][T24184] loop5: detected capacity change from 0 to 8192
[ 1874.874631][T24190] Unable to read rock-ridge attributes
[ 1875.198079][T24194] loop1: detected capacity change from 0 to 32768
[ 1875.215926][T24190] iso9660: Corrupted directory entry in block 4 of inode 1792
[ 1875.263927][T24194] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4023 (24194)
[ 1875.304408][T24194] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1875.316482][T24194] BTRFS info (device loop1): using sha256 checksum algorithm
[ 1875.569646][T24194] BTRFS info (device loop1): rebuilding free space tree
[ 1875.674964][T24194] BTRFS info (device loop1): disabling free space tree
[ 1875.681937][T24194] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1875.693775][T24194] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1875.733244][T24194] BTRFS info (device loop1): setting nodatasum
[ 1875.739509][T24194] BTRFS info (device loop1): setting nodatacow
[ 1875.745834][T24194] BTRFS info (device loop1): turning off barriers
[ 1875.752281][T24194] BTRFS info (device loop1): force clearing of disk cache
[ 1876.291563][T24215] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1876.972266][T19112] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1877.661308][T24229] xt_nfacct: accounting object `syz0' does not exist
[ 1878.649252][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1878.664365][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1878.682976][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1878.704964][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1878.712775][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1880.113743][   T30] audit: type=1326 audit(1775002693.124:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24248 comm="syz.7.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c79c819 code=0x7fc00000
[ 1880.773404][T20463] Bluetooth: hci4: command tx timeout
[ 1882.176403][T24263] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4038'.
[ 1882.275670][T15815] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[ 1882.498388][T15815] usb 5-1: not running at top speed; connect to a high speed hub
[ 1882.590410][T15815] usb 5-1: config 11 has an invalid interface number: 95 but max is 0
[ 1882.669623][T15815] usb 5-1: config 11 has no interface number 0
[ 1882.747128][T15815] usb 5-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 1882.787580][T24277] xt_nfacct: accounting object `syz0' does not exist
[ 1882.893395][T20463] Bluetooth: hci4: command tx timeout
[ 1882.914340][T15815] usb 5-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1883.015942][T15815] usb 5-1: config 11 interface 95 has no altsetting 0
[ 1883.075329][T15815] usb 5-1: language id specifier not provided by device, defaulting to English
[ 1883.172968][T15815] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d
[ 1883.206523][T24240] chnl_net:caif_netlink_parms(): no params data found
[ 1883.283340][T15815] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[ 1883.311761][T15815] usb 5-1: Manufacturer: ヹ憎◘鷿羯䜧ᡝ㛆谉醣큵概鴜跩䠩ỷⷧそ䩃玣瞛陆픁昗玷̧㤫뼸
[ 1883.485700][T24260] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1883.712794][T24290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4046'.
[ 1883.775041][T15815] usbtouchscreen 5-1:11.95: probe with driver usbtouchscreen failed with error -8
[ 1883.827872][T15815] usb 5-1: USB disconnect, device number 17
[ 1884.134938][T24240] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1884.172930][T24240] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1884.213759][T24240] bridge_slave_0: entered allmulticast mode
[ 1884.246309][T24240] bridge_slave_0: entered promiscuous mode
[ 1884.287455][T24240] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1884.332044][T24240] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1884.356082][T24240] bridge_slave_1: entered allmulticast mode
[ 1884.399077][T24240] bridge_slave_1: entered promiscuous mode
[ 1884.639366][T24240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1884.694379][T24240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1884.923641][T20463] Bluetooth: hci4: command tx timeout
[ 1886.164214][T24240] team0: Port device team_slave_0 added
[ 1886.220107][T24240] team0: Port device team_slave_1 added
[ 1886.496503][T24240] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1886.541447][T24240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1886.626720][T24240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1886.665804][T24240] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1886.698293][T24240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1886.831406][T24240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1887.003366][T20463] Bluetooth: hci4: command tx timeout
[ 1887.251501][T24240] hsr_slave_0: entered promiscuous mode
[ 1887.310290][T24240] hsr_slave_1: entered promiscuous mode
[ 1887.375045][T24240] debugfs: 'hsr0' already exists in 'hsr'
[ 1887.412681][T24240] Cannot create hsr debugfs directory
[ 1887.949924][T24336] loop5: detected capacity change from 0 to 32768
[ 1887.983944][T24336] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4055 (24336)
[ 1888.010024][T24336] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1888.022113][T24336] BTRFS info (device loop5): using sha256 checksum algorithm
[ 1888.353440][T24336] BTRFS info (device loop5): rebuilding free space tree
[ 1888.403540][T24336] BTRFS info (device loop5): disabling free space tree
[ 1888.410511][T24336] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1888.421058][T24336] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1888.438408][T24336] BTRFS info (device loop5): setting nodatasum
[ 1888.447583][T24336] BTRFS info (device loop5): setting nodatacow
[ 1888.453813][T24336] BTRFS info (device loop5): turning off barriers
[ 1888.460255][T24336] BTRFS info (device loop5): force clearing of disk cache
[ 1888.593620][T24357] loop7: detected capacity change from 0 to 16
[ 1888.812695][T24361] loop6: detected capacity change from 0 to 2048
[ 1888.907579][T24357] erofs (device loop7): mounted with root inode @ nid 36.
[ 1888.974249][T24364] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1889.314665][T24357] bio_check_eod: 176 callbacks suppressed
[ 1889.314694][T24357] syz.7.4058: attempt to access beyond end of device
[ 1889.314694][T24357] loop7: rw=524288, sector=1056, nr_sectors = 16 limit=16
[ 1889.671369][   T30] audit: type=1800 audit(1775002702.754:255): pid=24357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4058" name="file2" dev="loop7" ino=89 res=0 errno=0
[ 1889.695568][T24361] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1889.738846][T22703] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1893.157868][T24423] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1893.165147][T24423] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1893.172844][T24423] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1893.180037][T24423] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1893.608300][T24423] net_ratelimit: 502 callbacks suppressed
[ 1893.608325][T24423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1895.568409][T20463] Bluetooth: hci6: command 0x0406 tx timeout
[ 1897.590809][T24442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1897.724284][T24240] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1897.785312][T24240] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1897.866387][T24240] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1897.936231][T24240] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1898.031038][T24494] loop6: detected capacity change from 0 to 7
[ 1898.072695][    C1] blk_print_req_error: 54 callbacks suppressed
[ 1898.072721][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1898.088575][    C1] buffer_io_error: 54 callbacks suppressed
[ 1898.088600][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1898.106543][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1898.116194][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1898.124547][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1898.134238][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1898.158985][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1898.168714][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1898.191169][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1898.200904][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1898.217786][T24498] 
[ 1898.220168][T24498] ======================================================
[ 1898.227194][T24498] WARNING: possible circular locking dependency detected
[ 1898.234228][T24498] syzkaller #0 Tainted: G             L     
[ 1898.240222][T24498] ------------------------------------------------------
[ 1898.247375][T24498] syz.1.4088/24498 is trying to acquire lock:
[ 1898.253459][T24498] ffff88801c6ada20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0
[ 1898.263782][T24498] 
[ 1898.263782][T24498] but task is already holding lock:
[ 1898.271160][T24498] ffff888026aa8060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[ 1898.282491][T24498] 
[ 1898.282491][T24498] which lock already depends on the new lock.
[ 1898.282491][T24498] 
[ 1898.292912][T24498] 
[ 1898.292912][T24498] the existing dependency chain (in reverse order) is:
[ 1898.301942][T24498] 
[ 1898.301942][T24498] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}:
[ 1898.310618][T24498]        blk_alloc_queue+0x610/0x790
[ 1898.316012][T24498]        blk_mq_alloc_queue+0x174/0x290
[ 1898.321626][T24498]        __blk_mq_alloc_disk+0x29/0x120
[ 1898.327203][T24498]        loop_add+0x498/0xb60
[ 1898.331925][T24498]        loop_init+0x1d3/0x200
[ 1898.336709][T24498]        do_one_initcall+0x11d/0x760
[ 1898.342014][T24498]        kernel_init_freeable+0x6e5/0x7a0
[ 1898.347814][T24498]        kernel_init+0x1f/0x1e0
[ 1898.352718][T24498]        ret_from_fork+0x754/0xd80
[ 1898.357852][T24498]        ret_from_fork_asm+0x1a/0x30
[ 1898.363166][T24498] 
[ 1898.363166][T24498] -> #1 (fs_reclaim){+.+.}-{0:0}:
[ 1898.370419][T24498]        fs_reclaim_acquire+0xc4/0x100
[ 1898.375926][T24498]        kmem_cache_alloc_noprof+0x4c/0x6e0
[ 1898.381849][T24498]        __kernfs_iattrs+0x126/0x400
[ 1898.387157][T24498]        __kernfs_setattr+0x4d/0x3c0
[ 1898.392469][T24498]        kernfs_iop_setattr+0xda/0x130
[ 1898.397952][T24498]        notify_change+0xb25/0x1330
[ 1898.403176][T24498]        do_truncate+0x1df/0x240
[ 1898.408140][T24498]        path_openat+0x2a55/0x31a0
[ 1898.413302][T24498]        do_file_open+0x20e/0x430
[ 1898.418361][T24498]        do_sys_openat2+0x10d/0x1e0
[ 1898.423598][T24498]        __x64_sys_openat+0x12d/0x210
[ 1898.429073][T24498]        do_syscall_64+0x106/0xf80
[ 1898.434205][T24498]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1898.440637][T24498] 
[ 1898.440637][T24498] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[ 1898.449191][T24498]        __lock_acquire+0x14b8/0x2630
[ 1898.454602][T24498]        lock_acquire+0x1cf/0x380
[ 1898.459662][T24498]        down_read+0x99/0x460
[ 1898.464382][T24498]        kernfs_iop_getattr+0x9c/0xf0
[ 1898.469776][T24498]        vfs_getattr_nosec+0x2d4/0x430
[ 1898.475332][T24498]        vfs_getattr+0x4a/0x60
[ 1898.480133][T24498]        loop_query_min_dio_size.isra.0+0x117/0x250
[ 1898.486754][T24498]        lo_ioctl+0x13aa/0x1bc0
[ 1898.491656][T24498]        blkdev_ioctl+0x5ad/0x6f0
[ 1898.496709][T24498]        __x64_sys_ioctl+0x18e/0x210
[ 1898.502011][T24498]        do_syscall_64+0x106/0xf80
[ 1898.507133][T24498]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1898.513558][T24498] 
[ 1898.513558][T24498] other info that might help us debug this:
[ 1898.513558][T24498] 
[ 1898.523786][T24498] Chain exists of:
[ 1898.523786][T24498]   &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23
[ 1898.523786][T24498] 
[ 1898.538308][T24498]  Possible unsafe locking scenario:
[ 1898.538308][T24498] 
[ 1898.545758][T24498]        CPU0                    CPU1
[ 1898.551116][T24498]        ----                    ----
[ 1898.556472][T24498]   lock(&q->q_usage_counter(io)#23);
[ 1898.561871][T24498]                                lock(fs_reclaim);
[ 1898.568391][T24498]                                lock(&q->q_usage_counter(io)#23);
[ 1898.576328][T24498]   rlock(&root->kernfs_iattr_rwsem);
[ 1898.581729][T24498] 
[ 1898.581729][T24498]  *** DEADLOCK ***
[ 1898.581729][T24498] 
[ 1898.589863][T24498] 3 locks held by syz.1.4088/24498:
[ 1898.595059][T24498]  #0: ffff888026c09448 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0
[ 1898.605310][T24498]  #1: ffff888026aa8060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[ 1898.617053][T24498]  #2: ffff888026aa8098 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[ 1898.628973][T24498] 
[ 1898.628973][T24498] stack backtrace:
[ 1898.635121][T24498] CPU: 0 UID: 0 PID: 24498 Comm: syz.1.4088 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1898.635173][T24498] Tainted: [L]=SOFTLOCKUP
[ 1898.635186][T24498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1898.635209][T24498] Call Trace:
[ 1898.635220][T24498]  <TASK>
[ 1898.635234][T24498]  dump_stack_lvl+0x100/0x190
[ 1898.635291][T24498]  print_circular_bug.cold+0x178/0x1c7
[ 1898.635353][T24498]  check_noncircular+0x146/0x160
[ 1898.635415][T24498]  __lock_acquire+0x14b8/0x2630
[ 1898.635481][T24498]  lock_acquire+0x1cf/0x380
[ 1898.635535][T24498]  ? kernfs_iop_getattr+0x9c/0xf0
[ 1898.635584][T24498]  ? __pfx___might_resched+0x10/0x10
[ 1898.635628][T24498]  down_read+0x99/0x460
[ 1898.635670][T24498]  ? kernfs_iop_getattr+0x9c/0xf0
[ 1898.635714][T24498]  ? find_held_lock+0x2b/0x80
[ 1898.635757][T24498]  ? __pfx_down_read+0x10/0x10
[ 1898.635798][T24498]  ? kernfs_root+0xee/0x2a0
[ 1898.635843][T24498]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1898.635896][T24498]  kernfs_iop_getattr+0x9c/0xf0
[ 1898.635943][T24498]  vfs_getattr_nosec+0x2d4/0x430
[ 1898.636001][T24498]  ? __pfx_kernfs_iop_getattr+0x10/0x10
[ 1898.636064][T24498]  vfs_getattr+0x4a/0x60
[ 1898.636221][T24498]  loop_query_min_dio_size.isra.0+0x117/0x250
[ 1898.636281][T24498]  ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10
[ 1898.636355][T24498]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1898.636418][T24498]  lo_ioctl+0x13aa/0x1bc0
[ 1898.636484][T24498]  ? __pfx_lo_ioctl+0x10/0x10
[ 1898.636543][T24498]  ? tomoyo_path_number_perm+0x46d/0x580
[ 1898.636587][T24498]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1898.636632][T24498]  ? kasan_quarantine_put+0x104/0x240
[ 1898.636675][T24498]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1898.636719][T24498]  ? blk_get_meta_cap+0xd4/0x6c0
[ 1898.636771][T24498]  ? __pfx_blk_get_meta_cap+0x10/0x10
[ 1898.636823][T24498]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1898.636864][T24498]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1898.636913][T24498]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1898.636956][T24498]  ? blkdev_common_ioctl+0x515/0x2ba0
[ 1898.637015][T24498]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[ 1898.637151][T24498]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1898.637202][T24498]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1898.637254][T24498]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1898.637299][T24498]  ? do_vfs_ioctl+0x226/0x13e0
[ 1898.637346][T24498]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1898.637398][T24498]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1898.637442][T24498]  ? find_held_lock+0x2b/0x80
[ 1898.637487][T24498]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1898.637534][T24498]  ? __pfx_lo_ioctl+0x10/0x10
[ 1898.637590][T24498]  blkdev_ioctl+0x5ad/0x6f0
[ 1898.637646][T24498]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1898.637704][T24498]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1898.637759][T24498]  __x64_sys_ioctl+0x18e/0x210
[ 1898.637806][T24498]  do_syscall_64+0x106/0xf80
[ 1898.637843][T24498]  ? irqentry_exit+0x138/0x670
[ 1898.637882][T24498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1898.637920][T24498] RIP: 0033:0x7f009f59c819
[ 1898.637949][T24498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1898.637985][T24498] RSP: 002b:00007f00a041a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1898.638020][T24498] RAX: ffffffffffffffda RBX: 00007f009f816090 RCX: 00007f009f59c819
[ 1898.638046][T24498] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003
[ 1898.638069][T24498] RBP: 00007f009f632c91 R08: 0000000000000000 R09: 0000000000000000
[ 1898.638108][T24498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1898.638131][T24498] R13: 00007f009f816128 R14: 00007f009f816090 R15: 00007fff53e53868
[ 1898.638169][T24498]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1899.039503][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1899.049191][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1899.058368][ T8312] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1899.059575][T24494] ldm_validate_partition_table(): Disk read failed.
[ 1899.068935][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1899.084885][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1899.111553][T24501] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000
[ 1899.180926][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1899.190599][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1899.243326][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1899.253072][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1899.270591][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1899.280266][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1899.288323][T24494] Dev loop6: unable to read RDB block 0
[ 1899.313760][T24494]  loop6: unable to read partition table
[ 1899.366216][T24494] loop6: partition table beyond EOD, truncated
[ 1899.436628][T24494] loop_reread_partitions: partition scan of loop6 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[ 1899.468681][T24240] kthread_run failed with err -4
[ 1899.500055][T15010] ldm_validate_partition_table(): Disk read failed.
[ 1899.530704][T15010] Dev loop6: unable to read RDB block 0
[ 1899.603972][T15010]  loop6: unable to read partition table
[ 1899.609810][T15010] loop6: partition table beyond EOD, truncated
[ 1899.641220][T24498] ldm_validate_partition_table(): Disk read failed.
[ 1899.670373][T24498] Dev loop6: unable to read RDB block 0
[ 1899.689062][T24498]  loop6: unable to read partition table
[ 1899.704387][T24498] loop6: partition table beyond EOD, truncated
[ 1899.735690][T24498] loop_reread_partitions: partition scan of loop6 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[ 1899.939622][ T8312] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1900.184026][ T8312] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1900.357610][ T8312] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1900.780488][ T8312] bond0 (unregistering): Released all slaves
[ 1901.005487][ T8312] hsr_slave_0: left promiscuous mode
[ 1901.012193][ T8312] hsr_slave_1: left promiscuous mode
[ 1901.028317][ T8312] veth1_macvtap: left promiscuous mode
[ 1901.039040][ T8312] veth0_macvtap: left promiscuous mode
[ 1901.044914][ T8312] veth1_vlan: left promiscuous mode
[ 1901.050167][ T8312] veth0_vlan: left promiscuous mode
[ 1901.617665][ T8312] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1901.671832][ T8312] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1901.736337][ T8312] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1901.797125][ T8312] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1902.168597][ T8312] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1902.209334][ T8312] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1902.269867][ T8312] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1902.300525][ T8312] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1902.424682][ T8312] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1902.481940][ T8312] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1902.548362][ T8312] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1902.612559][ T8312] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1902.696679][ T8312] bridge_slave_1: left allmulticast mode
[ 1902.702498][ T8312] bridge_slave_1: left promiscuous mode
[ 1902.709214][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1902.718363][ T8312] bridge_slave_0: left allmulticast mode
[ 1902.724059][ T8312] bridge_slave_0: left promiscuous mode
[ 1902.729733][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1902.740405][ T8312] bridge_slave_1: left allmulticast mode
[ 1902.746254][ T8312] bridge_slave_1: left promiscuous mode
[ 1902.751951][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1902.761422][ T8312] bridge_slave_0: left allmulticast mode
[ 1902.768312][ T8312] bridge_slave_0: left promiscuous mode
[ 1902.774702][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1902.783942][ T8312] bridge_slave_1: left allmulticast mode
[ 1902.789576][ T8312] bridge_slave_1: left promiscuous mode
[ 1902.795386][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1902.804361][ T8312] bridge_slave_0: left allmulticast mode
[ 1902.810026][ T8312] bridge_slave_0: left promiscuous mode
[ 1902.816120][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1902.825641][ T8312] bridge_slave_1: left allmulticast mode
[ 1902.831275][ T8312] bridge_slave_1: left promiscuous mode
[ 1902.837460][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1902.847308][ T8312] bridge_slave_0: left allmulticast mode
[ 1902.852946][ T8312] bridge_slave_0: left promiscuous mode
[ 1902.860167][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1902.991438][ T8312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1903.001670][ T8312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1903.014428][ T8312] bond0 (unregistering): Released all slaves
[ 1903.023150][ T8312] bond1 (unregistering): Released all slaves
[ 1903.119263][ T8312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1903.129427][ T8312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1903.139184][ T8312] bond0 (unregistering): Released all slaves
[ 1903.201833][ T8312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1903.212022][ T8312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1903.222122][ T8312] bond0 (unregistering): Released all slaves
[ 1903.256303][ T8312] bond1 (unregistering): (slave gretap1): Releasing active interface
[ 1903.319677][ T8312] bond1 (unregistering): (slave bridge1): Releasing active interface
[ 1903.377431][ T8312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1903.387842][ T8312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1903.397612][ T8312] bond0 (unregistering): Released all slaves
[ 1903.406983][ T8312] bond1 (unregistering): Released all slaves
[ 1903.975488][ T8312] hsr_slave_0: left promiscuous mode
[ 1903.981353][ T8312] hsr_slave_1: left promiscuous mode
[ 1903.987874][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1903.995565][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1904.006314][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1904.013819][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1904.024976][ T8312] hsr_slave_0: left promiscuous mode
[ 1904.030817][ T8312] hsr_slave_1: left promiscuous mode
[ 1904.036928][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1904.045229][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1904.061131][ T8312] hsr_slave_0: left promiscuous mode
[ 1904.069286][ T8312] hsr_slave_1: left promiscuous mode
[ 1904.077905][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1904.085600][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1904.094693][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1904.102132][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1904.113122][ T8312] hsr_slave_0: left promiscuous mode
[ 1904.119093][ T8312] hsr_slave_1: left promiscuous mode
[ 1904.124999][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1904.132392][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1904.140295][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1904.149031][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1904.171862][ T8312] veth1_macvtap: left promiscuous mode
[ 1904.177476][ T8312] veth0_macvtap: left promiscuous mode
[ 1904.183030][ T8312] veth1_vlan: left promiscuous mode
[ 1904.191328][ T8312] veth0_vlan: left promiscuous mode
[ 1904.203231][ T8312] veth1_macvtap: left promiscuous mode
[ 1904.215742][ T8312] veth0_macvtap: left promiscuous mode
[ 1904.221325][ T8312] veth1_vlan: left promiscuous mode
[ 1904.228598][ T8312] veth0_vlan: left promiscuous mode
[ 1904.235393][ T8312] veth1_macvtap: left promiscuous mode
[ 1904.240902][ T8312] veth0_macvtap: left promiscuous mode
[ 1904.246522][ T8312] veth1_vlan: left promiscuous mode
[ 1904.251978][ T8312] veth0_vlan: left promiscuous mode
[ 1904.485837][ T8312] pim6reg99999999 (unregistering): left allmulticast mode
[ 1904.601900][ T8312] team0 (unregistering): Port device team_slave_1 removed
[ 1904.616470][ T8312] team0 (unregistering): Port device team_slave_0 removed
[ 1904.775674][ T8312] team0 (unregistering): Port device team_slave_1 removed
[ 1904.789251][ T8312] team0 (unregistering): Port device team_slave_0 removed
[ 1904.919043][ T8312] team0 (unregistering): Port device team_slave_1 removed
[ 1904.931332][ T8312] team0 (unregistering): Port device team_slave_0 removed
[ 1905.077917][ T8312] team0 (unregistering): Port device team_slave_1 removed
[ 1905.090720][ T8312] team0 (unregistering): Port device team_slave_0 removed