last executing test programs:

9m58.289223525s ago: executing program 4 (id=5):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00')

9m57.949376945s ago: executing program 4 (id=19):
syz_80211_inject_frame(&(0x7f00000001c0)=@broadcast, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000440)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x3}, @broadcast, @device_b, @from_mac, {0x8, 0x7}}, 0x3, @random, 0x10, @void, @void, @void, @void, @val={0x6, 0x2, 0x6}, @val={0x5, 0x12, {0x9, 0x4b, 0x5, "df7eb7d30ebfa6c3fe2197aaf47396"}}, @val={0x25, 0x3, {0x1, 0xb0, 0x4}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x60}}, @val={0x76, 0x6, {0x50, 0xff, 0x23, 0x100}}, [{0xdd, 0x6, "dcb2749bdc16"}, {0xdd, 0xa5, "0e024c9ab9d83d59142a50ac392626136a9615af91d87478933cf3e3b0a845746eacd3252125abf40231178966ace9c4f8bd163dbc429c42aa3031db8383fcf347974aacd3da86df2f8654e9c208c30a09af7587343bd8845e1da51876b31af0852de37a5033bafd19ac6b81239644a9121537e32d1ec44407e87222cd01adf129a7da822db13988f2f0ffd0e4fb6a00b77dffe09a7b5ab586970f9861f295cb148197c941"}, {0xdd, 0x41, "0aa899ec5849e4661ec00125cd16b044fa2e30f5c997d98cfc32290d067bbb7493955a2ef7f8cff5cf90d90574c32da261a2bc38111a6c01e315866401f202f2c2"}]}, 0x14f)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

9m42.861337597s ago: executing program 32 (id=19):
syz_80211_inject_frame(&(0x7f00000001c0)=@broadcast, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000440)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x3}, @broadcast, @device_b, @from_mac, {0x8, 0x7}}, 0x3, @random, 0x10, @void, @void, @void, @void, @val={0x6, 0x2, 0x6}, @val={0x5, 0x12, {0x9, 0x4b, 0x5, "df7eb7d30ebfa6c3fe2197aaf47396"}}, @val={0x25, 0x3, {0x1, 0xb0, 0x4}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x60}}, @val={0x76, 0x6, {0x50, 0xff, 0x23, 0x100}}, [{0xdd, 0x6, "dcb2749bdc16"}, {0xdd, 0xa5, "0e024c9ab9d83d59142a50ac392626136a9615af91d87478933cf3e3b0a845746eacd3252125abf40231178966ace9c4f8bd163dbc429c42aa3031db8383fcf347974aacd3da86df2f8654e9c208c30a09af7587343bd8845e1da51876b31af0852de37a5033bafd19ac6b81239644a9121537e32d1ec44407e87222cd01adf129a7da822db13988f2f0ffd0e4fb6a00b77dffe09a7b5ab586970f9861f295cb148197c941"}, {0xdd, 0x41, "0aa899ec5849e4661ec00125cd16b044fa2e30f5c997d98cfc32290d067bbb7493955a2ef7f8cff5cf90d90574c32da261a2bc38111a6c01e315866401f202f2c2"}]}, 0x14f)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

8m28.469050345s ago: executing program 5 (id=765):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r1}, 0xc)

8m28.304239295s ago: executing program 5 (id=766):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9})

8m28.074938539s ago: executing program 5 (id=770):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003080)=ANY=[@ANYBLOB="501a0000210a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c000180060001"], 0x1a50}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

8m27.500720186s ago: executing program 5 (id=774):
r0 = fsopen(&(0x7f0000000340)='gadgetfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xd)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
lseek(r2, 0x2, 0x0)
getdents(r2, 0x0, 0x58)
utime(&(0x7f0000000000)='./file0\x00', 0x0)

8m27.183548202s ago: executing program 5 (id=778):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

8m26.977544192s ago: executing program 5 (id=779):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file2\x00', 0x8040, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c02002c00a57a795d40d7413bb327781814b67eb5efdcdf5d8feec1db8ea312504b10ce32add62dbcca612cc963bca6d9cb7a8a52928285bc170746bc324a224422c57b2d4f5f1bb3c13cad25ccf9b871808e33d5ba514828e1928c3b80facfc458e5aa9f65c93226f0c67c8886cd406d78cde293c2bad2c88e9eb12eec82eb8e230f07554157784cb914a11733bcfea8750747e0d4f50be7716a805d289eafe59ca5da6b37beb795bf39cccf9d91f482c5de5dd6b332f956919d0a2667a36a30ac88c58740b563c465c27950ff8cb5728b0a590b46e8a9ad5c5118b21ce9489a00757b99f5d77e89b7f85e465eb75be5156abcd999a069bf8fc3effd02ed63f6c9912c2bc2b63aba137b72546a32eeed2e612070f353eaf00429a120b7df4f86b0d835eb9cd0ad463fa4d21c1e5946919a1963e273f93f6269d1b314d8024c1723d2a80c29405dff61988d4124bdde14f3d221a23ef6b740bfedb7894a5fb4ca5aa64c091903cc7afee0b7168c2e99927140ca874f2372ea415e8e19beda65506d0431be6b24d0614233d4fc7aae10a676a1"], 0x1, 0x2d7, &(0x7f0000000a40)="$eJzs3T9rJGUcB/DfbGb/nBa7hZUIDmhhdVyutdkgdyCm8tjitNDg3YHsLsIFIv7B9Sqxs7H0FQiCL8TGzlKwFew8ITAyszPZ3WTcbCQb8fL5FMmTeZ7vPL95ZpJMkyfvvzQdP8ji0ZPPf41eL4nWsBvxNIlBtKL2ZawYfhMAwP/Z0zyPP/K5hu5fvl6T7W2xLgBge875/V9Jy4/3ixE/Xl1tAMB23Lv/zlt7+/t33s6yXtydfnU0SiKi+Dzv33sUH8YkHsat6MdxRPmi0I7ybaFo3s3zfJZmhUG8Op0djYrk9L2fqvPv/R5R5nejH4Py0MnbRpl/c//Obja3lJ8VdTxXzT8s8rejHy+chFfytxvyMerEa68s1X8z+vHzB/FRTOJBWcQi/8Vulr2Rf/vnZ+8W5RX5ZHY06pbjFvKdevLZFd8jAAAAAAAAAAAAAAAAAAAAAACePTervXO6Ue7fUxyq9t/ZOS6+aEdWG6zuzzPPJ/WJFvsDRSvP81ke39X769zKsiyvBi7yabyYVhsLAgAAAAAAAAAAAAAAAAAAwDV3+Mmn44PJ5OHjS2nUuwGkEfHXvYh/e57h0pGXY/3gbjXnwWTSqpqrY9LlI7FTj0ki1pZRXMQlLct5jRtnaq4a3//QmCqu6DCNpq7e+ZO2m+e6YOPj9nwdl7tuVGs7rp+u8UHSvIbdk+J7xY2L0zeuE82zt+PUkc4/VVg/iptdTqexq3/hZek8XzZma8ZEsu774vXf5mUvXcXKmE65qo3xdtVYip96NjZ6nqM3j5/9WZHYrQMAAAAAAAAAAAAAAAAAALZq8de/DZ1P1kZbeXdrZQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAlVr8//9NGulqeINUJx4f/lfXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPXxdwAAAP//heNSbA==")
unshare(0x6020400)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x88)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cpu.max\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
write$cgroup_int(r2, &(0x7f0000000000)=0x5, 0x12)

8m21.975700184s ago: executing program 0 (id=817):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180), 0xfe, 0x246, &(0x7f0000000ac0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00')
exit(0x3)
getdents(r1, 0x0, 0x0)

8m21.050394318s ago: executing program 0 (id=823):
pipe(&(0x7f0000002680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}]})

8m20.930842628s ago: executing program 0 (id=824):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000140)=[{0x2, 0x2, {0x2}, {0x1, 0xf1, 0x2}, 0xfe, 0xff}, {0x2, 0x2, {0x1, 0x1, 0x1}, {0x0, 0xff, 0x2}, 0xfe, 0xfd}, {0x0, 0x1, {0x0, 0x1, 0x2}, {0x0, 0xf0, 0x4}, 0xfd}], 0x60)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x0, 0xc}, {0xfff1, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050)

8m20.810679396s ago: executing program 0 (id=825):
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x4, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7726736181c208220fffff2ff00000000800000000e002d2559ae66aea76e00"})
rename(&(0x7f0000001040)='./file1\x00', &(0x7f0000000240)='.\x02\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)

8m20.483150988s ago: executing program 0 (id=827):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x30, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

8m20.226353121s ago: executing program 0 (id=830):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000000)="ea", 0x1)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8)
close(r1)

8m19.947403243s ago: executing program 33 (id=830):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000000)="ea", 0x1)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8)
close(r1)

8m11.911686663s ago: executing program 34 (id=779):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file2\x00', 0x8040, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c02002c00a57a795d40d7413bb327781814b67eb5efdcdf5d8feec1db8ea312504b10ce32add62dbcca612cc963bca6d9cb7a8a52928285bc170746bc324a224422c57b2d4f5f1bb3c13cad25ccf9b871808e33d5ba514828e1928c3b80facfc458e5aa9f65c93226f0c67c8886cd406d78cde293c2bad2c88e9eb12eec82eb8e230f07554157784cb914a11733bcfea8750747e0d4f50be7716a805d289eafe59ca5da6b37beb795bf39cccf9d91f482c5de5dd6b332f956919d0a2667a36a30ac88c58740b563c465c27950ff8cb5728b0a590b46e8a9ad5c5118b21ce9489a00757b99f5d77e89b7f85e465eb75be5156abcd999a069bf8fc3effd02ed63f6c9912c2bc2b63aba137b72546a32eeed2e612070f353eaf00429a120b7df4f86b0d835eb9cd0ad463fa4d21c1e5946919a1963e273f93f6269d1b314d8024c1723d2a80c29405dff61988d4124bdde14f3d221a23ef6b740bfedb7894a5fb4ca5aa64c091903cc7afee0b7168c2e99927140ca874f2372ea415e8e19beda65506d0431be6b24d0614233d4fc7aae10a676a1"], 0x1, 0x2d7, &(0x7f0000000a40)="$eJzs3T9rJGUcB/DfbGb/nBa7hZUIDmhhdVyutdkgdyCm8tjitNDg3YHsLsIFIv7B9Sqxs7H0FQiCL8TGzlKwFew8ITAyszPZ3WTcbCQb8fL5FMmTeZ7vPL95ZpJMkyfvvzQdP8ji0ZPPf41eL4nWsBvxNIlBtKL2ZawYfhMAwP/Z0zyPP/K5hu5fvl6T7W2xLgBge875/V9Jy4/3ixE/Xl1tAMB23Lv/zlt7+/t33s6yXtydfnU0SiKi+Dzv33sUH8YkHsat6MdxRPmi0I7ybaFo3s3zfJZmhUG8Op0djYrk9L2fqvPv/R5R5nejH4Py0MnbRpl/c//Obja3lJ8VdTxXzT8s8rejHy+chFfytxvyMerEa68s1X8z+vHzB/FRTOJBWcQi/8Vulr2Rf/vnZ+8W5RX5ZHY06pbjFvKdevLZFd8jAAAAAAAAAAAAAAAAAAAAAACePTervXO6Ue7fUxyq9t/ZOS6+aEdWG6zuzzPPJ/WJFvsDRSvP81ke39X769zKsiyvBi7yabyYVhsLAgAAAAAAAAAAAAAAAAAAwDV3+Mmn44PJ5OHjS2nUuwGkEfHXvYh/e57h0pGXY/3gbjXnwWTSqpqrY9LlI7FTj0ki1pZRXMQlLct5jRtnaq4a3//QmCqu6DCNpq7e+ZO2m+e6YOPj9nwdl7tuVGs7rp+u8UHSvIbdk+J7xY2L0zeuE82zt+PUkc4/VVg/iptdTqexq3/hZek8XzZma8ZEsu774vXf5mUvXcXKmE65qo3xdtVYip96NjZ6nqM3j5/9WZHYrQMAAAAAAAAAAAAAAAAAALZq8de/DZ1P1kZbeXdrZQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAlVr8//9NGulqeINUJx4f/lfXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPXxdwAAAP//heNSbA==")
unshare(0x6020400)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x88)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cpu.max\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
write$cgroup_int(r2, &(0x7f0000000000)=0x5, 0x12)

6m8.072058104s ago: executing program 7 (id=1825):
r0 = socket(0xa, 0x3, 0xff)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x102, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6m7.763766921s ago: executing program 7 (id=1827):
dup(0xffffffffffffffff)
syz_open_dev$sg(0x0, 0x0, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
listen(0xffffffffffffffff, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf250800000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4cca9349ed9d3bc}, 0x848)

6m6.832329091s ago: executing program 7 (id=1832):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c)
r2 = fcntl$dupfd(r1, 0x406, r1)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)

6m6.716286019s ago: executing program 7 (id=1834):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x59}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b80)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYBLOB="07de9ae3004865f36195c93617594bca658e0b966b6d116ecd4910edb0e65f31cb794b50544910eb6456aa609c6861b309b45ef6567d4e820a14ff961ba2f4a3713fdf8adc13aa34115d481dc607cf6ecefc260ef52c3ec19b03986055d54904fe9cd76a923407c252e18073e276f22da9f4d528729fe74609970ff0f1fd20dedc46c4c077d1907c6e56c95506ef8d787b61e0c37b0159a50a5f6be5dfa0afe9eaeed8ffd1a325b8982c80dd9e45d1aea60565aa8c0f427ebeac1f101ad7c598679e1899e7fc2462b3e55ec2b037aeec6af78d058f96bef36411fe2e5db3c4575668515aac63f8ce589f000845efd4e4321cecb196", @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES16, @ANYRES32], 0x5, 0x5505, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4ec42, 0x40)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000140)='H', 0x1, 0x6)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x400a8, 0x0, 0x5, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x1000008, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]})

6m5.66813667s ago: executing program 7 (id=1842):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

6m1.856104025s ago: executing program 7 (id=1867):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
syz_emit_ethernet(0x116, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0xe0, 0x3a, 0x0, @remote, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x13, '\x00', [@ra, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x0, 0x95, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a5"}]}]}}}}}}}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local})
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000100)={0x1, {0xf8000002, 0x8ba, 0x27, 0xb}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

6m1.146278697s ago: executing program 35 (id=1867):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
syz_emit_ethernet(0x116, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0xe0, 0x3a, 0x0, @remote, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x13, '\x00', [@ra, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x0, 0x95, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a5"}]}]}}}}}}}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local})
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000100)={0x1, {0xf8000002, 0x8ba, 0x27, 0xb}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

5m6.508056739s ago: executing program 2 (id=2311):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
membarrier(0x10, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000280)={r2, 0x1, r0, 0x3, 0x80000})

5m3.205697143s ago: executing program 2 (id=2330):
socket(0x10, 0x3, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedreceive(r0, &(0x7f00000001c0)=""/116, 0x74, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)

5m2.926966159s ago: executing program 2 (id=2335):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m1.729490821s ago: executing program 2 (id=2348):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)

5m1.602425797s ago: executing program 2 (id=2350):
socket(0xa, 0x1, 0x0)
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d80)="16", 0x1}], 0x1}}], 0x1, 0x24008094)
close(0x4)
ppoll(&(0x7f0000000140)=[{r1, 0x10101}, {r1, 0x401}], 0x2, 0x0, 0x0, 0x0)

5m0.022510314s ago: executing program 2 (id=2360):
r0 = mq_open(&(0x7f0000000000)='\\_1\x00', 0x8c2, 0x30, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a})
getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0), &(0x7f0000000300)=0xe)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
io_uring_enter(r1, 0x2219, 0x35a5, 0x16, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0)

4m59.376806602s ago: executing program 36 (id=2360):
r0 = mq_open(&(0x7f0000000000)='\\_1\x00', 0x8c2, 0x30, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a})
getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0), &(0x7f0000000300)=0xe)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
io_uring_enter(r1, 0x2219, 0x35a5, 0x16, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0)

1m34.550122519s ago: executing program 1 (id=3397):
mkdirat(0xffffffffffffff9c, 0x0, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4)
ftruncate(r3, 0x7000000)

1m33.422164749s ago: executing program 1 (id=3399):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r1, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4)
recvmmsg(r0, &(0x7f0000014900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000000bc00)=""/97, 0x61}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f000000ffc0)=""/33, 0x21}, 0x3}], 0x2, 0x10162, 0x0)

1m30.525399741s ago: executing program 9 (id=3408):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x54, 0x0, &(0x7f0000000600)="d483fbb8f98b47b37af6aa94981c7bbd31a022a229fe0106a6d880160d75aaaffc0176736698e19edebe4f1fa87d061d6a900fd356a56eb2c0619cd2aef8834df4b849a21b3bce71e67402a896694b5bbb6e3561"})

1m29.775339966s ago: executing program 1 (id=3410):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x801)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
open(&(0x7f0000000380)='./bus\x00', 0x105040, 0x145)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="09030000000000fdff0720"], 0x18}, 0x1, 0xf000000}, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r3)
sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x812)

1m29.738946887s ago: executing program 6 (id=3412):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000000300)={@_ha_fsid={[0xe43, 0x563]}, {0x7, 0x9, 0x7, 0x5}}, 0xffffffff, 0x0, 0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000300), &(0x7f0000000340)=@udp6=r5, 0x2}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[], 0x0)

1m29.523469879s ago: executing program 9 (id=3413):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000240)='./file0\x00')
lstat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

1m29.020872803s ago: executing program 3 (id=3414):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)

1m27.760051637s ago: executing program 6 (id=3416):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904020000ff4f9b000904b000003a3846000904"], 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0)
recvmmsg(r1, &(0x7f000000cf00)=[{{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000008340)=[{&(0x7f0000006d00)=""/4096, 0x1000}, {0x0, 0x46}], 0x2}, 0x1d}], 0x2, 0x2, 0x0)
ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0)
read$FUSE(r1, &(0x7f0000003e00)={0x2020}, 0x2020)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x8)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40081271, 0x0)
read$FUSE(r1, &(0x7f0000001dc0)={0x2020}, 0x2020)
syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0})

1m27.042226784s ago: executing program 3 (id=3417):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe)
syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

1m26.882548947s ago: executing program 9 (id=3418):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x7)
landlock_restrict_self(r0, 0x9)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x5)
landlock_restrict_self(r0, 0xa)
r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0)
landlock_restrict_self(r1, 0x2)
landlock_restrict_self(r1, 0x9)
r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00')

1m26.172744419s ago: executing program 1 (id=3420):
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='pids.max\x00', 0x2, 0x0)
iopl(0x3)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
write$cgroup_int(r0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={0x0}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000300)=0x800207, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103a28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)

1m26.138616901s ago: executing program 8 (id=3421):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
times(0xfffffffffffffffc)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2)

1m26.110644103s ago: executing program 9 (id=3422):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1a}, 0x1c)
mkdir(&(0x7f0000000140)='./file0\x00', 0x18b)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r1 = socket(0x11, 0x2, 0x0)
sendmmsg(r1, &(0x7f0000000480)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0}}, {{&(0x7f00000001c0)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001c40)=ANY=[], 0x10}}], 0x2, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000003a40)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x4e24, @rand_addr=0x64010101}, 'lo\x00'})
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x40040)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500))
syz_usb_connect(0x0, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000030902200001000000000904000000ef0101"], 0x0)

1m26.025426316s ago: executing program 8 (id=3423):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x44)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}], 0x58}, 0x0)

1m25.942416276s ago: executing program 3 (id=3424):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="06040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0)
sendfile(r3, r1, 0x0, 0x100000000)

1m25.862475802s ago: executing program 8 (id=3425):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='1\x00', 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
readv(r1, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x110)

1m25.853113688s ago: executing program 3 (id=3426):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3801009, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103)
syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC")
linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400)
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc00, 0x836d9fb164f927b3)
mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0, 0x0)
removexattr(&(0x7f00000190c0)='./file0\x00', &(0x7f0000019080)=ANY=[@ANYBLOB='u'])
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x8400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa6c81, 0xc0)

1m25.791945527s ago: executing program 8 (id=3427):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
pipe2$watch_queue(0x0, 0x80)
socket$inet_udp(0x2, 0x2, 0x0)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
socket(0x2d, 0x2, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="79a9"], 0x0)
syz_open_dev$usbmon(0x0, 0x8002, 0xa2000)
r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1)
write$P9_RVERSION(r1, &(0x7f0000002200)=ANY=[], 0xfffffcd9)
close_range(r0, 0xffffffffffffffff, 0x0)

1m25.449483926s ago: executing program 3 (id=3428):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x1c, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)

1m25.35639357s ago: executing program 9 (id=3429):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5352, 0x8, 0x2000, 0x99}, &(0x7f0000ffe000), &(0x7f00000004c0), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe)

1m25.21210368s ago: executing program 8 (id=3430):
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r1, 0xa, 0x12)
sched_setscheduler(0x0, 0x2, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4)
poll(&(0x7f0000000180)=[{r2, 0x1402}], 0x1, 0xffffffffffbffff8)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
tkill(r0, 0x13)

1m24.665894361s ago: executing program 1 (id=3431):
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x2, 0x80805, 0x0)
socket$inet(0x2, 0x80001, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = socket$key(0xf, 0x3, 0x2)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0)

1m24.611691489s ago: executing program 6 (id=3432):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/ramdisk_0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/ramdisk_0/rd/control\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)

1m24.510988638s ago: executing program 8 (id=3433):
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
syz_open_dev$I2C(0x0, 0x7, 0xa000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, 0x0})
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000100)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000)

1m24.510767282s ago: executing program 6 (id=3434):
openat$kvm(0xffffffffffffff9c, 0x0, 0x88840, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = getpgid(0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0)
r2 = pidfd_getfd(r1, r1, 0x0)
setns(r2, 0x66020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)

1m24.509528281s ago: executing program 3 (id=3435):
r0 = fanotify_init(0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
syz_open_dev$cec(0x0, 0x0, 0xc0b02)
r1 = socket(0x1d, 0x2, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3, 0x3, {0x0, 0x1}}, 0x18)
sendmmsg$inet(r1, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}], 0x1, 0x0)
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
listen(0xffffffffffffffff, 0x2)
sendto$inet_nvme_of_msg(r1, &(0x7f0000000680)={@cmd={{0x4, 0xd, 0x48, 0xa}, {@auth_common={0x7f, 0x80, 0xbe0, 0x6, "e9cf4b6db6f5510d94b6f59c0a4bd46abd4dc0", @anon_struct={0x3, 0x7e}, 0x7, 0xe, 0x2, 0x3, 0xb, "9ef322afa195add877c93c24d19dcae4"}}}, @void}, 0x80, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m24.314062641s ago: executing program 6 (id=3436):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f00000002c0)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000340)="8f", 0x1}], 0x1}}], 0x1, 0x48010)

1m23.927273669s ago: executing program 1 (id=3437):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xaf9ba000)
r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x8000002, 0x0)
readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/54, 0x36}], 0x1)
pread64(r2, &(0x7f00000002c0)=""/197, 0xc5, 0x10000365)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)

1m23.919587454s ago: executing program 9 (id=3438):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740))

1m22.692401596s ago: executing program 6 (id=3439):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="90", 0x1}], 0x1}, 0x48043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r3, 0x0, r0, 0x0, 0x400000000000ffff, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)

0s ago: executing program 37 (id=3439):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="90", 0x1}], 0x1}, 0x48043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r3, 0x0, r0, 0x0, 0x400000000000ffff, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)

kernel console output (not intermixed with test programs):

uprobe: syz.2.1753:11189 failed to unregister, leaking uprobe
[  314.140846][ T5698] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  314.191039][ T5619] Bluetooth: hci1: command 0x0406 tx timeout
[  314.380866][ T5698] usb 7-1: Using ep0 maxpacket: 16
[  314.386950][ T5698] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  314.397463][ T5698] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  314.410512][ T5698] usb 7-1: config 0 interface 0 has no altsetting 0
[  314.420346][ T5698] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.428752][ T5698] usb 7-1: Product: syz
[  314.433336][ T5698] usb 7-1: Manufacturer: syz
[  314.438045][ T5698] usb 7-1: SerialNumber: syz
[  314.446037][ T5698] usb 7-1: config 0 descriptor??
[  314.672928][T11209] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1759'.
[  314.687303][ T5698] usb 7-1: Can not set alternate setting to 1, error: -71
[  314.687381][ T5698] synaptics_usb 7-1:0.0: probe with driver synaptics_usb failed with error -71
[  314.707991][ T5698] usb 7-1: USB disconnect, device number 11
[  314.762217][  T988] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  314.929273][T11232] lo: Caught tx_queue_len zero misconfig
[  314.937227][  T988] usb 3-1: Using ep0 maxpacket: 32
[  314.946208][  T988] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  314.962538][  T988] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  314.962592][  T988] usb 3-1: config 0 has no interfaces?
[  314.984203][  T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.984247][  T988] usb 3-1: Product: syz
[  314.984285][  T988] usb 3-1: Manufacturer: syz
[  314.984305][  T988] usb 3-1: SerialNumber: syz
[  315.012986][  T988] usb 3-1: config 0 descriptor??
[  315.190170][T11240] netlink: 'syz.3.1773': attribute type 1 has an invalid length.
[  315.227825][T11240] bond4: entered allmulticast mode
[  315.288910][T11240] bond4: (slave bridge1): making interface the new active one
[  315.297169][T11240] bridge1: entered allmulticast mode
[  315.308851][T11240] bond4: (slave bridge1): Enslaving as an active interface with an up link
[  316.425686][T11255] loop7: detected capacity change from 0 to 32768
[  316.471979][T11255] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  316.814884][ T5752] usb 3-1: USB disconnect, device number 15
[  317.125532][ T8462] ocfs2: Unmounting device (7,7) on (node local)
[  317.233710][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  317.240225][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  318.156395][T11296] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  318.524254][T11306] loop2: detected capacity change from 0 to 512
[  318.571260][T11306] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  318.571306][T11306] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  318.623213][T11306] EXT4-fs (loop2): 1 truncate cleaned up
[  318.631648][T11306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  318.930528][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.281947][T11327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1802'.
[  319.328264][T11327] netlink: 'syz.1.1802': attribute type 1 has an invalid length.
[  319.430982][ T5819] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  319.452502][T11327] 8021q: adding VLAN 0 to HW filter on device bond3
[  319.469606][T11331] bond3: entered allmulticast mode
[  319.580865][ T5819] usb 3-1: Using ep0 maxpacket: 8
[  319.586705][ T5819] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  319.604413][ T5819] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  319.604491][ T5819] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  319.604594][ T5819] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  319.604664][ T5819] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  319.604739][ T5819] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  319.604841][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.675080][ T5752] usb 3-1: USB disconnect, device number 16
[  320.956821][T11355] jffs2: notice: (11355) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  321.165655][T11366] tipc: Started in network mode
[  321.165706][T11366] tipc: Node identity 2ee4af4da183, cluster identity 4711
[  321.165888][T11366] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  321.168331][T11366] syzkaller0: entered promiscuous mode
[  321.168358][T11366] syzkaller0: entered allmulticast mode
[  321.200504][T11366] tipc: Resetting bearer <eth:syzkaller0>
[  321.402721][T11366] tipc: Disabling bearer <eth:syzkaller0>
[  321.661841][T11378] fuse: fd is not a fuse device
[  321.846357][T11382] vlan2: entered promiscuous mode
[  321.856062][T11382] hsr0: entered promiscuous mode
[  321.873243][T11382] vlan2: entered allmulticast mode
[  321.878722][T11382] hsr0: entered allmulticast mode
[  321.884381][T11382] hsr_slave_0: entered allmulticast mode
[  321.890939][T11382] hsr_slave_1: entered allmulticast mode
[  321.940576][T11371] loop6: detected capacity change from 0 to 32768
[  322.600159][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1827'.
[  322.677442][T11387] Bad maxslot:44 in dtpage (expected 128)
[  322.677442][T11387] 
[  322.677514][T11387] ERROR: (device loop6): dtSearch: DT_GETPAGE: dtree page corrupt
[  322.677514][T11387] 
[  322.680541][T11387] ERROR: (device loop6): remounting filesystem as read-only
[  322.684567][T11387] jfs_mkdir: dtSearch returned -5
[  323.803420][T11415] loop7: detected capacity change from 0 to 40427
[  323.810646][T11415] F2FS-fs (loop7): build fault injection rate: 174
[  323.810694][T11415] F2FS-fs (loop7): build fault injection type: 0x3bfe8c
[  323.835206][T11415] F2FS-fs (loop7): invalid crc value
[  323.909485][T11415] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  323.922045][T11415] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  324.004705][   T30] audit: type=1800 audit(1786104393.274:410): pid=11415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1834" name="file1" dev="loop7" ino=10 res=0 errno=0
[  324.041904][T11415] F2FS-fs (loop7): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8bf/0xd90
[  324.041982][T11415] F2FS-fs (loop7): inconsistent node block, node_type:1, nid:22, node_footer[nid:22,ino:22,ofs:0,cpver:0,blkaddr:0]
[  324.049375][T11415] CPU: 0 UID: 0 PID: 11415 Comm: syz.7.1834 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  324.049464][T11415] Tainted: [L]=SOFTLOCKUP
[  324.049487][T11415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  324.049521][T11415] Call Trace:
[  324.049548][T11415]  <TASK>
[  324.049571][T11415]  dump_stack_lvl+0xe8/0x150
[  324.049666][T11415]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  324.049753][T11415]  f2fs_unlink+0x4a6/0xb00
[  324.049837][T11415]  ? __pfx_f2fs_unlink+0x10/0x10
[  324.049919][T11415]  ? down_write+0x16d/0x200
[  324.050033][T11415]  ? try_break_deleg+0x5e/0x190
[  324.050107][T11415]  vfs_unlink+0x27b/0x6d0
[  324.050200][T11415]  ovl_cleanup+0x120/0x230
[  324.050322][T11415]  ovl_fill_super+0x50b4/0x5d40
[  324.050491][T11415]  ? __mutex_trylock_common+0x15f/0x270
[  324.050618][T11415]  ? __pfx_ovl_fill_super+0x10/0x10
[  324.050771][T11415]  ? super_dev_insert+0x2a/0xe10
[  324.050889][T11415]  ? shrinker_register+0x158/0x210
[  324.050978][T11415]  ? sget_fc+0x1944/0x1a40
[  324.051130][T11415]  ? __pfx_ovl_next_opt+0x10/0x10
[  324.051229][T11415]  ? __pfx_ovl_fill_super+0x10/0x10
[  324.051300][T11415]  get_tree_nodev+0xbb/0x150
[  324.051374][T11415]  vfs_get_tree+0x92/0x2a0
[  324.051434][T11415]  do_new_mount+0x319/0xdc0
[  324.051575][T11415]  ? __pfx_do_new_mount+0x10/0x10
[  324.051649][T11415]  ? ns_capable+0x89/0xe0
[  324.051725][T11415]  ? path_mount+0x647/0x1050
[  324.051820][T11415]  ? user_path_at+0xd4/0x160
[  324.051880][T11415]  __se_sys_mount+0x31d/0x420
[  324.052154][T11415]  ? __pfx___se_sys_mount+0x10/0x10
[  324.052263][T11415]  ? __x64_sys_mount+0x20/0xc0
[  324.052356][T11415]  do_syscall_64+0x166/0x510
[  324.052449][T11415]  ? trace_irq_disable+0x3b/0x140
[  324.052504][T11415]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.052560][T11415]  ? clear_bhb_loop+0x40/0x90
[  324.052633][T11415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.052696][T11415] RIP: 0033:0x7f616959e0d9
[  324.052750][T11415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  324.052803][T11415] RSP: 002b:00007f616a406028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  324.052861][T11415] RAX: ffffffffffffffda RBX: 00007f6169825fa0 RCX: 00007f616959e0d9
[  324.052918][T11415] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000
[  324.052959][T11415] RBP: 00007f6169635024 R08: 0000200000000240 R09: 0000000000000000
[  324.052992][T11415] R10: 0000000001000008 R11: 0000000000000246 R12: 0000000000000000
[  324.053027][T11415] R13: 00007f6169826038 R14: 00007f6169825fa0 R15: 00007ffd4e174448
[  324.053119][T11415]  </TASK>
[  324.053967][T11415] F2FS-fs (loop7): Stopped filesystem due to reason: 5
[  324.054051][T11415] overlayfs: failed to set xattr on upper
[  324.054061][T11415] overlayfs: ...falling back to redirect_dir=nofollow.
[  324.054070][T11415] overlayfs: ...falling back to index=off.
[  324.092546][ T5819] F2FS-fs (loop7): f2fs_evict_inode: inconsistent node id, ino:22
[  324.405588][T11433] fuse: Bad value for 'fd'
[  324.441056][ T5619] Bluetooth: hci4: command 0x0406 tx timeout
[  324.468833][ T8462] syz-executor: attempt to access beyond end of device
[  324.468833][ T8462] loop7: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  324.578176][ T8462] syz-executor: attempt to access beyond end of device
[  324.578176][ T8462] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  325.341155][ T5819] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  325.491828][ T5819] usb 3-1: Using ep0 maxpacket: 16
[  325.494145][ T5819] usb 3-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31
[  325.497528][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  325.497590][ T5819] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  325.522004][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.522082][ T5819] usb 3-1: Product: syz
[  325.522132][ T5819] usb 3-1: Manufacturer: syz
[  325.522179][ T5819] usb 3-1: SerialNumber: syz
[  325.632142][ T5941] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.662944][ T5819] usb 3-1: config 0 descriptor??
[  325.939022][  T988] usb 3-1: USB disconnect, device number 17
[  326.043782][ T5941] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.309553][T11464] fuse: fd is not a fuse device
[  326.352571][T11467] overlayfs: failed to clone upperpath
[  326.436104][ T5941] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.714077][ T5941] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.810316][T11474] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1859'.
[  327.759112][ T5941] bridge_slave_1: left allmulticast mode
[  327.759166][ T5941] bridge_slave_1: left promiscuous mode
[  327.764894][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.805378][ T5941] bridge_slave_0: left allmulticast mode
[  327.805439][ T5941] bridge_slave_0: left promiscuous mode
[  327.818570][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.843406][ T5941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  328.887250][ T5941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  328.925389][ T5941] bond0 (unregistering): Released all slaves
[  328.956244][ T5941] bond1 (unregistering): Released all slaves
[  329.232000][ T5941] tipc: Left network mode
[  329.417345][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  329.427373][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  329.441627][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  329.471346][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  329.493468][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  329.591170][T11523] loop2: detected capacity change from 0 to 128
[  329.617986][T11523] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  329.633275][T11523] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  330.169227][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13
[  330.209637][ T5941] hsr_slave_0: left promiscuous mode
[  330.218406][ T5941] hsr_slave_1: left promiscuous mode
[  330.226251][ T5941] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  330.226297][ T5941] batman_adv: batadv0: Removing interface: batadv_slave_0
[  330.263195][ T5941] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  330.263241][ T5941] batman_adv: batadv0: Removing interface: batadv_slave_1
[  330.334699][ T5941] veth1_macvtap: left promiscuous mode
[  330.334761][ T5941] veth0_macvtap: left promiscuous mode
[  330.335262][ T5941] veth1_vlan: left promiscuous mode
[  330.366790][ T5941] veth0_vlan: left promiscuous mode
[  330.421253][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1876'.
[  330.421297][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1876'.
[  331.630841][ T5619] Bluetooth: hci4: command tx timeout
[  331.719742][ T5941] team0 (unregistering): Port device team_slave_1 removed
[  331.784480][ T5941] team0 (unregistering): Port device team_slave_0 removed
[  332.384427][ T5750] lo speed is unknown, defaulting to 1000
[  332.384486][ T5750] syz2: Port: 1 Link DOWN
[  332.811717][ T9015] smbdirect: ib_dev[syz2] removed
[  333.710861][ T5619] Bluetooth: hci4: command tx timeout
[  334.163618][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1902'.
[  334.473018][ T5277] 8021q: adding VLAN 0 to HW filter on device eth14
[  334.581247][T11519] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.581550][T11519] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.583112][T11519] bridge_slave_0: entered allmulticast mode
[  334.594036][T11519] bridge_slave_0: entered promiscuous mode
[  334.609305][T11519] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.610017][T11519] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.612154][T11519] bridge_slave_1: entered allmulticast mode
[  334.631897][T11519] bridge_slave_1: entered promiscuous mode
[  334.768836][T11519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.784351][T11519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.824789][T11519] team0: Port device team_slave_0 added
[  334.833619][T11519] team0: Port device team_slave_1 added
[  334.874263][T11519] batman_adv: batadv0: Adding interface: batadv_slave_0
[  334.881591][T11519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  334.907883][T11519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  334.921498][T11519] batman_adv: batadv0: Adding interface: batadv_slave_1
[  334.921528][T11519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  334.921567][T11519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.017878][T11519] hsr_slave_0: entered promiscuous mode
[  335.025964][T11519] hsr_slave_1: entered promiscuous mode
[  335.032591][T11519] debugfs: 'hsr0' already exists in 'hsr'
[  335.038526][T11519] Cannot create hsr debugfs directory
[  335.572226][T11670] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.577198][T11670] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.629318][T11670] batman_adv: batadv0: Interface deactivated: dummy0
[  335.791549][ T5619] Bluetooth: hci4: command tx timeout
[  335.847050][T11670] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.898365][T11670] tipc: Resetting bearer <eth:vlan0>
[  336.019424][T11670] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  336.108183][T11670] ip6erspan0: left allmulticast mode
[  336.125177][T11670] bond3: left allmulticast mode
[  336.143577][ T9007] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  336.143656][ T9007] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.143723][ T9007] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  336.143753][ T9007] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.143793][ T9007] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  336.143821][ T9007] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.150813][ T9015] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  336.150853][ T9015] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.159898][ T5277] 8021q: adding VLAN 0 to HW filter on device eth15
[  336.713929][T11703] overlayfs: failed to clone upperpath
[  336.923699][T11519] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  336.939018][T11519] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  336.949116][T11519] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  336.966295][T11519] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  336.975957][T11519] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  337.011262][T11519] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  337.022423][T11519] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  337.080517][T11519] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  337.310084][ T5277] 8021q: adding VLAN 0 to HW filter on device eth16
[  337.549180][T11519] 8021q: adding VLAN 0 to HW filter on device bond0
[  337.642675][T11519] 8021q: adding VLAN 0 to HW filter on device team0
[  337.669617][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.669766][ T5942] bridge0: port 1(bridge_slave_0) entered forwarding state
[  337.705999][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.706283][ T5942] bridge0: port 2(bridge_slave_1) entered forwarding state
[  337.871483][ T5619] Bluetooth: hci4: command tx timeout
[  338.012317][T11756] fuse: Bad value for 'fd'
[  338.260813][ T5750] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  338.413136][ T5750] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  338.416464][ T5750] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.416572][ T5750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.426145][ T5750] usb 3-1: config 0 descriptor??
[  338.644171][T11519] 8021q: adding VLAN 0 to HW filter on device batadv0
[  338.678316][ T5750] usbhid 3-1:0.0: can't add hid device: -71
[  338.678594][ T5750] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  338.723446][ T5750] usb 3-1: USB disconnect, device number 18
[  339.031029][T11787] fuse: fd is not a fuse device
[  339.169397][T11791] fuse: fd is not a fuse device
[  339.211022][ T5752] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  339.371586][ T5752] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  339.385220][ T5752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.396374][ T5752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.407846][ T5752] usb 3-1: config 0 descriptor??
[  339.575776][T11519] veth0_vlan: entered promiscuous mode
[  339.605957][T11519] veth1_vlan: entered promiscuous mode
[  339.687268][T11519] veth0_macvtap: entered promiscuous mode
[  339.709711][T11519] veth1_macvtap: entered promiscuous mode
[  339.805274][T11519] batman_adv: batadv0: Interface activated: batadv_slave_0
[  339.842251][T11519] batman_adv: batadv0: Interface activated: batadv_slave_1
[  339.903889][ T9015] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.903971][ T9015] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.904036][ T9015] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.904175][ T9015] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  340.157299][ T9015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.157340][ T9015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.231679][ T5752] aiptek 3-1:0.0: Aiptek using 400 ms programming speed
[  340.241580][T11758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.254198][ T5752] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12
[  340.272657][T11758] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.355136][ T5928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.355184][ T5928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.666203][  T190] usb 3-1: USB disconnect, device number 19
[  340.666264][    C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  341.385888][   T30] audit: type=1326 audit(1786104410.654:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11833 comm="syz.6.1956" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb400f9e0d9 code=0x0
[  342.437696][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1963'.
[  342.456653][T11857] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1964'.
[  343.133644][T11854] veth1_to_bond: entered allmulticast mode
[  343.154842][T11856] veth1_to_bond (unregistering): left allmulticast mode
[  343.224115][T11856] bond0: (slave bond_slave_1): Releasing backup interface
[  344.710917][ T5752] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  344.863294][ T5752] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  344.865224][ T5752] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  344.865315][ T5752] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  344.865355][ T5752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  344.865386][ T5752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  344.865413][ T5752] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  344.878435][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  344.878519][ T5752] usb 3-1: Product: syz
[  344.878554][ T5752] usb 3-1: Manufacturer: syz
[  344.878594][ T5752] usb 3-1: SerialNumber: syz
[  345.005215][ T5752] usb 3-1: config 0 descriptor??
[  345.234410][ T5752] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  345.234488][ T5752] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  345.434823][ T5752] radio-si470x 3-1:0.0: software version 0, hardware version 0
[  345.434871][ T5752] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  345.434891][ T5752] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  345.640461][ T5752] radio-si470x 3-1:0.0: submitting int urb failed (-90)
[  345.682720][T11937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1994'.
[  345.692514][T11937] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1994'.
[  345.704734][T11937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1994'.
[  345.714304][T11937] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1994'.
[  345.912506][T11946] loop8: detected capacity change from 0 to 512
[  346.074763][T11946] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.089746][T11946] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  346.149049][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1998'.
[  346.542220][T11519] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.847203][ T5752] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71
[  346.849536][ T5752] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71
[  347.082536][ T5752] usb 3-1: USB disconnect, device number 20
[  347.440118][T11980] fuse: Bad value for 'fd'
[  347.815624][T11992] fuse: fd is not a fuse device
[  347.883063][  T190] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  348.051869][  T190] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  348.067854][  T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.076387][  T190] usb 3-1: Product: syz
[  348.080656][  T190] usb 3-1: Manufacturer: syz
[  348.085428][  T190] usb 3-1: SerialNumber: syz
[  348.100492][  T190] usb 3-1: config 0 descriptor??
[  348.634266][  T190] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  348.689626][T12012] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2021'.
[  349.134812][T12012] team0: Port device team_slave_0 removed
[  349.254248][T12024] fuse: fd is not a fuse device
[  349.508174][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2029'.
[  350.186627][T12058] 0: reclassify loop, rule prio 0, protocol 03
[  350.338638][  T190] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  350.359135][  T190] usb 3-1: USB disconnect, device number 21
[  350.443787][T12065] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2037'.
[  350.532895][T12068] loop8: detected capacity change from 0 to 2048
[  350.579127][T12068] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  350.761689][T11519] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.177581][T12126] fuse: fd is not a fuse device
[  352.356985][T12129] fuse: Bad value for 'fd'
[  352.650887][  T988] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  352.800885][  T988] usb 3-1: Using ep0 maxpacket: 32
[  352.803581][  T988] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  352.809080][  T988] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  352.809142][  T988] usb 3-1: config 0 has no interface number 0
[  352.809344][  T988] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  352.836002][  T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.836082][  T988] usb 3-1: Product: syz
[  352.836114][  T988] usb 3-1: Manufacturer: syz
[  352.836153][  T988] usb 3-1: SerialNumber: syz
[  352.869119][  T988] usb 3-1: config 0 descriptor??
[  352.874968][T12133] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  353.109273][T12133] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  353.527431][T12159] 8021q: adding VLAN 0 to HW filter on device bond2
[  353.645432][T12159] bond2: (slave veth3): Enslaving as an active interface with an up link
[  354.389630][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2067'.
[  354.500458][T12190] bridge2: port 1(erspan0) entered blocking state
[  354.502628][T12190] bridge2: port 1(erspan0) entered disabled state
[  354.514266][T12190] erspan0: entered allmulticast mode
[  354.531612][T12190] erspan0: entered promiscuous mode
[  354.555257][T12197] syz_tun: entered allmulticast mode
[  354.568793][T12196] syz_tun: left allmulticast mode
[  354.746013][  T988] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  354.746076][  T988] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  354.746380][  T988] asix 3-1:0.188: probe with driver asix failed with error -71
[  354.797144][  T988] usb 3-1: USB disconnect, device number 22
[  354.949414][T12215] mmap: syz.6.2073 (12215) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  355.019615][T12216] netlink: 'syz.8.2075': attribute type 2 has an invalid length.
[  355.242179][T12224] loop8: detected capacity change from 0 to 512
[  355.306975][T12224] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.662346][T12236] No fuse device found
[  355.662463][T12236] No fuse device found
[  355.665464][T12236] No fuse device found
[  355.665578][T12236] No fuse device found
[  355.665661][T12236] No fuse device found
[  355.665746][T12236] No fuse device found
[  355.665828][T12236] No fuse device found
[  355.665911][T12236] No fuse device found
[  355.665989][T12236] No fuse device found
[  355.666059][T12236] No fuse device found
[  355.837886][T11519] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.235036][   T10] libceph: connect (1)[c::]:6789 error -101
[  356.241644][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  356.342135][T12263] ceph: No mds server is up or the cluster is laggy
[  356.659249][T12286] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.109133][T12305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2104'.
[  357.539556][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2109'.
[  357.894119][T12334] fuse: fd is not a fuse device
[  358.312139][T12332] loop8: detected capacity change from 0 to 1024
[  358.326417][T12332] ext3: Unknown parameter 'uid'
[  358.389815][T12348] fuse: fd is not a fuse device
[  358.538689][   T30] audit: type=1326 audit(1786104427.804:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12351 comm="syz.6.2122" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb400f9e0d9 code=0x0
[  359.555931][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2126'.
[  360.845337][T12390] loop8: detected capacity change from 0 to 512
[  360.894690][T12390] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  360.931701][T12390] EXT4-fs (loop8): orphan cleanup on readonly fs
[  360.941097][T12390] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.2135: bad orphan inode 15
[  360.951496][T12390] loop8: lost filesystem error report for type 5 error -117
[  360.956121][T12390] ext4_test_bit(bit=14, block=18) = 1
[  360.963871][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  360.963895][    C0] EXT4-fs (loop8): initial error at time 1786104430: ext4_orphan_get:1425
[  360.963931][    C0] EXT4-fs (loop8): last error at time 1786104430: ext4_orphan_get:1425
[  361.014862][T12390] is_bad_inode(inode)=0
[  361.014903][T12390] NEXT_ORPHAN(inode)=1023
[  361.014919][T12390] max_ino=32
[  361.014931][T12390] i_nlink=0
[  361.105446][T12390] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2916: inode #15: comm syz.8.2135: corrupted xattr block 19: e_value size too large
[  361.105511][T12390] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  361.157310][T12390] EXT4-fs warning (device loop8): ext4_evict_inode:288: xattr delete (err -117)
[  361.245303][T12390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  363.905893][T11519] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.120013][T12445] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  364.198603][T12445] CIFS: Attempting to mount //127.0.0.1/share
[  364.354770][   T30] audit: type=1326 audit(1786104433.624:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.3.2159" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06999e0d9 code=0x7ffc0000
[  364.356174][   T30] audit: type=1326 audit(1786104433.624:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.3.2159" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06999e0d9 code=0x7ffc0000
[  364.356802][   T30] audit: type=1326 audit(1786104433.624:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.3.2159" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff06995e90e code=0x7ffc0000
[  364.369731][   T30] audit: type=1326 audit(1786104433.634:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.3.2159" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff06995e90e code=0x7ffc0000
[  364.374324][   T30] audit: type=1326 audit(1786104433.634:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.3.2159" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06999e0d9 code=0x7ffc0000
[  364.374505][   T30] audit: type=1326 audit(1786104433.644:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.3.2159" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06999e0d9 code=0x7ffc0000
[  364.374614][   T30] audit: type=1326 audit(1786104433.644:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.3.2159" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06999e0d9 code=0x7ffc0000
[  364.396277][   T30] audit: type=1326 audit(1786104433.634:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.3.2159" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06999e0d9 code=0x7ffc0000
[  364.396420][   T30] audit: type=1326 audit(1786104433.664:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.3.2159" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff06999e0d9 code=0x7ffc0000
[  364.608873][   T30] audit: type=1326 audit(1786104433.874:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.3.2159" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06999e0d9 code=0x7ffc0000
[  364.739202][T12460] netlink: 'syz.6.2161': attribute type 4 has an invalid length.
[  364.757303][T12460] netlink: 'syz.6.2161': attribute type 4 has an invalid length.
[  365.034945][T12445] CIFS: VFS: cifs_mount failed w/return code = -112
[  365.245321][T12475] loop8: detected capacity change from 0 to 256
[  365.268730][T12475] vfat: Unknown parameter '0x0000000000000000'
[  366.056973][T12507] loop2: detected capacity change from 0 to 512
[  366.072828][T12507] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  366.088844][T12507] EXT4-fs (loop2): 1 truncate cleaned up
[  366.115511][T12507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  366.325616][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.566639][T12516] 8021q: VLANs not supported on ip6tnl0
[  366.969318][T12537] fuse: fd is not a fuse device
[  367.649635][T12539] loop2: detected capacity change from 0 to 32768
[  367.700870][   T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  367.739417][T12562] tipc: Started in network mode
[  367.739468][T12562] tipc: Node identity 4, cluster identity 4711
[  367.739481][T12562] tipc: Node number set to 4
[  367.802499][T12564] fuse: fd is not a fuse device
[  367.883461][   T10] usb 9-1: Using ep0 maxpacket: 8
[  367.885854][   T10] usb 9-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1
[  367.889493][   T10] usb 9-1: config 53 has an invalid interface number: 101 but max is 0
[  367.889561][   T10] usb 9-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config
[  367.889635][   T10] usb 9-1: config 53 has no interface number 0
[  367.889734][   T10] usb 9-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82
[  367.889806][   T10] usb 9-1: config 53 interface 101 altsetting 0 endpoint 0x82 has invalid maxpacket 49431, setting to 1024
[  367.889884][   T10] usb 9-1: config 53 interface 101 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  367.889948][   T10] usb 9-1: config 53 interface 101 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  367.905050][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.905126][   T10] usb 9-1: Product: syz
[  367.905166][   T10] usb 9-1: Manufacturer: syz
[  367.905197][   T10] usb 9-1: SerialNumber: syz
[  368.014162][T12554] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  368.604184][   T10] kvaser_usb 9-1:53.101: error -ENODEV: Cannot get usb endpoint(s)
[  368.628285][   T10] usb 9-1: USB disconnect, device number 2
[  369.911352][T12613] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  370.165163][T12601] loop2: detected capacity change from 0 to 32768
[  370.308312][T12601] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  370.308358][T12601] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  370.340349][T12601] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  370.366237][   T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  370.366276][   T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  370.510242][T12625] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  370.620376][   T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 254ms
[  370.629765][   T10] gfs2: fsid=syz:syz.0: jid=0: Done
[  370.631539][T12601] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  370.786667][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2221'.
[  370.876449][T12601] gfs2: fsid=syz:syz.0: found 1 quota changes
[  371.110494][   T30] kauditd_printk_skb: 37 callbacks suppressed
[  371.110555][   T30] audit: type=1804 audit(1786104440.374:460): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2211" name="/newroot/391/file0/file0" dev="loop2" ino=2341 res=1 errno=0
[  372.405470][ T5615] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402
[  372.409290][ T5615] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1
[  372.409374][ T5615] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:5615 [syz-executor] gfs2_quota_sync+0x353/0x450
[  372.409470][ T5615] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  372.409565][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  372.409657][ T5615] Tainted: [L]=SOFTLOCKUP
[  372.409675][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  372.409703][ T5615] Call Trace:
[  372.409732][ T5615]  <TASK>
[  372.409752][ T5615]  dump_stack_lvl+0xe8/0x150
[  372.409823][ T5615]  gfs2_withdraw+0xc3/0x1b0
[  372.409888][ T5615]  inode_go_instantiate+0xbc1/0x12b0
[  372.409999][ T5615]  ? __wait_on_bit+0xef/0x300
[  372.410076][ T5615]  ? out_of_line_wait_on_bit+0x13b/0x190
[  372.410142][ T5615]  ? __pfx_inode_go_instantiate+0x10/0x10
[  372.410210][ T5615]  ? do_raw_spin_unlock+0xf5/0x210
[  372.410299][ T5615]  ? __pfx_wake_bit_function+0x10/0x10
[  372.410376][ T5615]  gfs2_instantiate+0x168/0x220
[  372.410444][ T5615]  gfs2_glock_wait+0x1d4/0x2a0
[  372.410516][ T5615]  do_sync+0x49c/0xbb0
[  372.410579][ T5615]  ? gfs2_quota_sync+0x353/0x450
[  372.410672][ T5615]  ? __pfx_do_sync+0x10/0x10
[  372.410776][ T5615]  ? gfs2_quota_sync+0x353/0x450
[  372.410855][ T5615]  ? do_raw_spin_unlock+0xf5/0x210
[  372.410932][ T5615]  gfs2_quota_sync+0x353/0x450
[  372.411035][ T5615]  gfs2_sync_fs+0x4c/0xb0
[  372.411098][ T5615]  sync_filesystem+0xf1/0x240
[  372.411172][ T5615]  generic_shutdown_super+0x77/0x2d0
[  372.411280][ T5615]  kill_block_super+0x44/0xa0
[  372.411358][ T5615]  deactivate_locked_super+0xbc/0x110
[  372.411448][ T5615]  cleanup_mnt+0x3d3/0x460
[  372.411529][ T5615]  task_work_run+0x1d9/0x270
[  372.411586][ T5615]  ? __pfx_task_work_run+0x10/0x10
[  372.411660][ T5615]  exit_to_user_mode_loop+0x1fa/0x730
[  372.411749][ T5615]  ? rcu_is_watching+0x15/0xb0
[  372.411818][ T5615]  do_syscall_64+0x328/0x510
[  372.411883][ T5615]  ? trace_irq_disable+0x3b/0x140
[  372.411941][ T5615]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.411993][ T5615]  ? clear_bhb_loop+0x40/0x90
[  372.412055][ T5615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.412112][ T5615] RIP: 0033:0x7f5f6939f317
[  372.412163][ T5615] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  372.412204][ T5615] RSP: 002b:00007ffe0216d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  372.412265][ T5615] RAX: 0000000000000000 RBX: 00007f5f69434474 RCX: 00007f5f6939f317
[  372.412304][ T5615] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0216d1a0
[  372.412335][ T5615] RBP: 00007ffe0216d1a0 R08: 00007ffe0216e1a0 R09: 00000000ffffffff
[  372.412384][ T5615] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0216e230
[  372.412413][ T5615] R13: 00007f5f69434474 R14: 000000000005a9a5 R15: 00007ffe0216e270
[  372.412486][ T5615]  </TASK>
[  372.489591][ T5615] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  373.127219][ T5931] IPVS: starting estimator thread 0...
[  373.231901][T12675] IPVS: using max 29 ests per chain, 69600 per kthread
[  376.331061][T12730] bond3: entered promiscuous mode
[  376.712968][T12749] netlink: 'syz.3.2254': attribute type 4 has an invalid length.
[  376.912525][T12753] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2256'.
[  376.954565][T12753] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2256'.
[  377.640862][ T5615] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566
[  377.640925][ T5615] CPU: 1 UID: 0 PID: 5615 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  377.640956][ T5615] Tainted: [L]=SOFTLOCKUP
[  377.640965][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  377.640978][ T5615] Call Trace:
[  377.640987][ T5615]  <TASK>
[  377.640996][ T5615]  dump_stack_lvl+0xe8/0x150
[  377.641097][ T5615]  gfs2_assert_warn_i+0x18c/0x2c0
[  377.641201][ T5615]  gfs2_make_fs_ro+0x30d/0x320
[  377.641330][ T5615]  ? __pfx_gfs2_make_fs_ro+0x10/0x10
[  377.641397][ T5615]  ? __pfx_autoremove_wake_function+0x10/0x10
[  377.641499][ T5615]  ? flush_work+0xd/0x30
[  377.641617][ T5615]  gfs2_put_super+0x235/0x870
[  377.641751][ T5615]  ? __pfx_gfs2_put_super+0x10/0x10
[  377.641825][ T5615]  generic_shutdown_super+0x13d/0x2d0
[  377.641913][ T5615]  kill_block_super+0x44/0xa0
[  377.641976][ T5615]  deactivate_locked_super+0xbc/0x110
[  377.642061][ T5615]  cleanup_mnt+0x3d3/0x460
[  377.642126][ T5615]  task_work_run+0x1d9/0x270
[  377.642189][ T5615]  ? __pfx_task_work_run+0x10/0x10
[  377.642278][ T5615]  exit_to_user_mode_loop+0x1fa/0x730
[  377.642354][ T5615]  ? rcu_is_watching+0x15/0xb0
[  377.642420][ T5615]  do_syscall_64+0x328/0x510
[  377.642494][ T5615]  ? trace_irq_disable+0x3b/0x140
[  377.642563][ T5615]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.642632][ T5615]  ? clear_bhb_loop+0x40/0x90
[  377.642716][ T5615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.642771][ T5615] RIP: 0033:0x7f5f6939f317
[  377.642830][ T5615] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  377.642874][ T5615] RSP: 002b:00007ffe0216d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  377.642939][ T5615] RAX: 0000000000000000 RBX: 00007f5f69434474 RCX: 00007f5f6939f317
[  377.642979][ T5615] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0216d1a0
[  377.643012][ T5615] RBP: 00007ffe0216d1a0 R08: 00007ffe0216e1a0 R09: 00000000ffffffff
[  377.643045][ T5615] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0216e230
[  377.643072][ T5615] R13: 00007f5f69434474 R14: 000000000005a9a5 R15: 00007ffe0216e270
[  377.643151][ T5615]  </TASK>
[  378.379431][T12779] bridge0: port 4(syz_tun) entered blocking state
[  378.379574][T12779] bridge0: port 4(syz_tun) entered disabled state
[  378.398436][T12779] syz_tun: entered allmulticast mode
[  378.410611][T12780] netlink: 'syz.2.2224': attribute type 8 has an invalid length.
[  378.425133][T12779] syz_tun: entered promiscuous mode
[  378.434234][T12779] bridge0: port 4(syz_tun) entered blocking state
[  378.434442][T12779] bridge0: port 4(syz_tun) entered forwarding state
[  378.675132][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  378.675215][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  379.070830][T12799] binder: 12797:12799 ioctl c0306201 2000000004c0 returned -14
[  379.318911][   T30] audit: type=1326 audit(1786104448.584:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12803 comm="syz.1.2273" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f1719e0d9 code=0x0
[  379.536246][T12806] loop8: detected capacity change from 0 to 4096
[  379.616050][ T5935] IPVS: starting estimator thread 0...
[  379.634997][T12806] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  379.702033][T12812] IPVS: using max 35 ests per chain, 84000 per kthread
[  379.785129][T12806] ntfs3(loop8): ino=21, The size of extended attributes must not exceed 64KiB
[  379.813233][T12813] ntfs3(loop8): ino=21, The size of extended attributes must not exceed 64KiB
[  379.899932][T12806] ntfs3(loop8): ino=21, The size of extended attributes must not exceed 64KiB
[  379.938598][T12806] ntfs3(loop8): ino=21, The size of extended attributes must not exceed 64KiB
[  379.947961][T12806] ntfs3(loop8): ino=21, The size of extended attributes must not exceed 64KiB
[  380.008571][T12806] ntfs3(loop8): ino=21, The size of extended attributes must not exceed 64KiB
[  380.009231][T12813] ntfs3(loop8): failed to convert "0080" to cp437
[  380.025915][T12813] ntfs3(loop8): failed to convert name for inode 1e.
[  380.027637][T12813] ntfs3(loop8): ino=1f, mi_enum_attr
[  380.296141][T12826] loop2: detected capacity change from 0 to 7
[  380.323419][T12826] Dev loop2: unable to read RDB block 7
[  380.344501][T12826]  loop2: unable to read partition table
[  380.351318][T12826] loop2: partition table beyond EOD, truncated
[  380.362881][T12826] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  382.453073][T12862] loop8: detected capacity change from 0 to 1024
[  382.463081][T12862] EXT4-fs: Ignoring removed mblk_io_submit option
[  382.502662][T12862] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  382.516605][T12862] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869)
[  382.516735][T12862] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  382.538939][T12862] EXT4-fs (loop8): journal inode is deleted
[  383.326917][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2306'.
[  383.353710][T12894] bridge0: port 4(syz_tun) entered disabled state
[  383.449037][T12894] syz_tun (unregistering): left allmulticast mode
[  383.449114][T12894] syz_tun (unregistering): left promiscuous mode
[  383.450476][T12894] bridge0: port 4(syz_tun) entered disabled state
[  383.554151][T12901] loop8: detected capacity change from 0 to 128
[  383.585228][T12901] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  383.598040][T12901] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  383.681928][   T30] audit: type=1800 audit(1786104452.944:462): pid=12901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2309" name="file1" dev="loop8" ino=12 res=0 errno=0
[  383.712648][   T30] audit: type=1800 audit(1786104452.984:463): pid=12901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2309" name="file1" dev="loop8" ino=12 res=0 errno=0
[  383.842151][T11519] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  384.200423][   T30] audit: type=1326 audit(1786104453.454:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.1.2315" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f1719e0d9 code=0x0
[  384.356646][   T30] audit: type=1326 audit(1786104453.624:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.1.2315" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1719e0d9 code=0x7ffc0000
[  384.386342][   T30] audit: type=1326 audit(1786104453.654:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.1.2315" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1719e0d9 code=0x7ffc0000
[  384.427657][   T30] audit: type=1326 audit(1786104453.694:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.1.2315" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1719e0d9 code=0x7ffc0000
[  384.456667][   T30] audit: type=1326 audit(1786104453.694:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.1.2315" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1719e0d9 code=0x7ffc0000
[  384.486542][   T30] audit: type=1326 audit(1786104453.754:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.1.2315" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f1715e90e code=0x7ffc0000
[  384.515554][   T30] audit: type=1326 audit(1786104453.784:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.1.2315" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f1715e90e code=0x7ffc0000
[  384.551943][   T30] audit: type=1326 audit(1786104453.824:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.1.2315" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f1715e90e code=0x7ffc0000
[  384.584007][   T30] audit: type=1326 audit(1786104453.854:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.1.2315" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f1715e90e code=0x7ffc0000
[  384.616133][   T30] audit: type=1326 audit(1786104453.824:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.1.2315" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1719e0d9 code=0x7ffc0000
[  384.643860][   T30] audit: type=1326 audit(1786104453.914:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.1.2315" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0f1719e0d9 code=0x7ffc0000
[  384.975140][T12923] overlayfs: failed to clone upperpath
[  385.936740][T12961] netlink: 'syz.6.2328': attribute type 1 has an invalid length.
[  386.181103][T12961] 8021q: adding VLAN 0 to HW filter on device bond4
[  386.241716][T12965] vlan3: entered allmulticast mode
[  386.241767][T12965] bond4: entered allmulticast mode
[  386.440550][T12961] bond4: (slave geneve2): making interface the new active one
[  386.449027][T12961] geneve2: entered allmulticast mode
[  386.471387][T12961] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  387.124258][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2331'.
[  387.643756][T13002] fuse: fd is not a fuse device
[  389.178367][ T5929] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.178431][ T5929] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.295351][T13035] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2354'.
[  389.755385][ T5929] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.755438][ T5929] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.026259][ T5929] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.048738][ T5929] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.272581][ T5929] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.272636][ T5929] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.333514][T13048] loop8: detected capacity change from 0 to 4096
[  390.346377][T13048] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512).
[  390.552116][T13048] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  390.559504][T13048] ntfs3(loop8): Failed to load $Extend (-22).
[  390.565759][T13048] ntfs3(loop8): Failed to initialize $Extend.
[  390.590116][T13048] ntfs3(loop8): ino=0, attr_set_size_ex
[  390.597963][T13048] ntfs3(loop8): ino=0, attr_set_size_ex
[  390.617685][T13048] ntfs3(loop8): ino=0, attr_set_size_ex
[  390.632187][T13048] ntfs3(loop8): no free space to extend mft
[  390.639782][T13048] ntfs3(loop8): no free space to extend mft
[  390.646844][T13048] ntfs3(loop8): no free space to extend mft
[  391.205608][ T5929] vlan3: left allmulticast mode
[  391.211180][ T5929] geneve0: left allmulticast mode
[  391.216440][ T5929] vlan3: left promiscuous mode
[  391.221612][ T5929] geneve0: left promiscuous mode
[  391.233104][ T5929] bridge0: port 3(vlan3) entered disabled state
[  391.390074][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  391.410331][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  391.420118][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  391.441699][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  391.449742][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  391.859407][ T5929] bridge_slave_1: left allmulticast mode
[  391.878528][ T5929] bridge_slave_1: left promiscuous mode
[  391.885773][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.932958][ T5929] bridge_slave_0: left allmulticast mode
[  391.941425][ T5929] bridge_slave_0: left promiscuous mode
[  391.947351][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.077477][T13087] overlayfs: failed to clone upperpath
[  392.728371][T13111] loop8: detected capacity change from 0 to 64
[  392.807246][ T5929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  392.836825][ T5929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  392.848501][ T5929] bond0 (unregistering): Released all slaves
[  392.874214][T13113] overlayfs: failed to resolve './file2': -2
[  392.881138][ T5929] bond1 (unregistering): Released all slaves
[  393.226866][ T5277] 8021q: adding VLAN 0 to HW filter on device eth18
[  393.310153][ T5929] tipc: Left network mode
[  393.554732][ T5634] Bluetooth: hci3: command tx timeout
[  393.886130][T13137] fuse: fd is not a fuse device
[  394.247440][T13147] fuse: Bad value for 'fd'
[  394.285261][ T5929] hsr_slave_0: left promiscuous mode
[  394.297022][ T5929] hsr_slave_1: left promiscuous mode
[  394.303486][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  394.312311][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_0
[  394.328784][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  394.336789][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_1
[  394.435508][ T5929] veth1_macvtap: left promiscuous mode
[  394.435567][ T5929] veth0_macvtap: left promiscuous mode
[  394.436973][ T5929] veth1_vlan: left promiscuous mode
[  394.437235][ T5929] veth0_vlan: left promiscuous mode
[  394.603927][T13152] fuse: fd is not a fuse device
[  395.409032][ T5929] team0 (unregistering): Port device team_slave_1 removed
[  395.483687][ T5929] team0 (unregistering): Port device team_slave_0 removed
[  395.633477][ T5634] Bluetooth: hci3: command tx timeout
[  395.644448][ T5277] 8021q: adding VLAN 0 to HW filter on device eth17
[  396.303453][T13180] fuse: fd is not a fuse device
[  396.915182][T13205] netlink: 'syz.6.2406': attribute type 1 has an invalid length.
[  397.061741][T13213] netlink: 'syz.6.2406': attribute type 10 has an invalid length.
[  397.072779][T13213] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2406'.
[  397.090071][T13205] 8021q: adding VLAN 0 to HW filter on device bond5
[  397.108672][T13069] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.116936][T13069] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.117120][T13069] bridge_slave_0: entered allmulticast mode
[  397.134688][T13069] bridge_slave_0: entered promiscuous mode
[  397.294623][T13208] bond5: (slave dummy0): Enslaving as a backup interface with an up link
[  397.307565][T13213] dummy0: entered promiscuous mode
[  397.319370][T13213] bond5: (slave dummy0): Releasing backup interface
[  397.338352][T13069] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.345664][T13069] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.353157][T13069] bridge_slave_1: entered allmulticast mode
[  397.363653][T13069] bridge_slave_1: entered promiscuous mode
[  397.391568][ T5277] 8021q: adding VLAN 0 to HW filter on device eth19
[  397.494460][T13069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.507491][T13069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.559936][T13069] team0: Port device team_slave_0 added
[  397.573327][T13069] team0: Port device team_slave_1 added
[  397.675943][T13225] loop8: detected capacity change from 0 to 64
[  397.677137][T13069] batman_adv: batadv0: Adding interface: batadv_slave_0
[  397.677182][T13069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  397.677265][T13069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  397.722078][ T5634] Bluetooth: hci3: command tx timeout
[  397.738157][T13069] batman_adv: batadv0: Adding interface: batadv_slave_1
[  397.738211][T13069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  397.738240][T13069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  398.147701][T13069] hsr_slave_0: entered promiscuous mode
[  398.156983][T13069] hsr_slave_1: entered promiscuous mode
[  398.163619][T13069] debugfs: 'hsr0' already exists in 'hsr'
[  398.173141][T13069] Cannot create hsr debugfs directory
[  398.893462][ T5277] 8021q: adding VLAN 0 to HW filter on device eth20
[  399.129064][T13069] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  399.152327][T13069] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  399.176064][T13069] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  399.200426][T13069] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  399.213031][T13069] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  399.253872][T13069] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  399.264610][T13069] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  399.298171][T13069] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  399.683054][T13069] 8021q: adding VLAN 0 to HW filter on device bond0
[  399.890889][ T5634] Bluetooth: hci3: command tx timeout
[  399.957974][T13069] 8021q: adding VLAN 0 to HW filter on device team0
[  400.008353][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.008663][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.063404][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.063675][ T5931] bridge0: port 2(bridge_slave_1) entered forwarding state
[  400.251735][T13278] overlayfs: failed to clone upperpath
[  400.805177][T13293] bridge0: port 3(veth0_vlan) entered blocking state
[  400.837981][T13293] bridge0: port 3(veth0_vlan) entered disabled state
[  400.862979][T13293] veth0_vlan: entered allmulticast mode
[  400.889211][T13293] veth0_vlan: left allmulticast mode
[  401.337872][T13069] 8021q: adding VLAN 0 to HW filter on device batadv0
[  402.691602][T13069] veth0_vlan: entered promiscuous mode
[  402.710970][T13069] veth1_vlan: entered promiscuous mode
[  402.853571][T13069] veth0_macvtap: entered promiscuous mode
[  402.877955][T13069] veth1_macvtap: entered promiscuous mode
[  402.970380][T13327] fuse: fd is not a fuse device
[  403.019384][T13069] batman_adv: batadv0: Interface activated: batadv_slave_0
[  403.059757][T13069] batman_adv: batadv0: Interface activated: batadv_slave_1
[  403.100936][ T1024] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  403.101033][ T1024] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  403.101088][ T1024] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  403.101128][ T1024] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  403.449887][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.449936][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.686242][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.686283][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  406.245751][T13408] fuse: fd is not a fuse device
[  406.365171][T13412] loop8: detected capacity change from 0 to 512
[  406.399225][T13412] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  406.683382][  T190] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  406.872850][  T190] usb 9-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02
[  406.884286][  T190] usb 9-1: config index 0 descriptor too short (expected 45330, got 18)
[  406.884330][  T190] usb 9-1: config 121 has too many interfaces: 82, using maximum allowed: 32
[  406.884377][  T190] usb 9-1: config 121 has an invalid descriptor of length 245, skipping remainder of the config
[  406.884402][  T190] usb 9-1: config 121 has 0 interfaces, different from the descriptor's value: 82
[  406.926636][  T190] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  406.926680][  T190] usb 9-1: SerialNumber: syz
[  407.203404][  T190] usb 9-1: USB disconnect, device number 3
[  407.865204][T11519] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.007667][T13446] netlink: 'syz.3.2475': attribute type 4 has an invalid length.
[  408.113499][    C1] vcan0: j1939_tp_rxtimer: 0xffff888031b84000: rx timeout, send abort
[  408.613380][    C1] vcan0: j1939_tp_rxtimer: 0xffff888032269c00: rx timeout, send abort
[  408.617788][    C1] vcan0: j1939_tp_rxtimer: 0xffff888031b84000: abort rx timeout. Force session deactivation
[  409.113456][    C1] vcan0: j1939_tp_rxtimer: 0xffff888032269c00: abort rx timeout. Force session deactivation
[  412.960296][T13520] batman_adv: batadv0: Adding interface: veth0
[  412.960339][T13520] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  412.960374][T13520] batman_adv: batadv0: Interface activated: veth0
[  413.029038][T13520] batman_adv: batadv0: Interface deactivated: veth0
[  413.147890][T13520] batman_adv: batadv0: Removing interface: veth0
[  413.382573][T13521] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  413.382606][T13521] batman_adv: batadv0: Removing interface: batadv_slave_0
[  413.412072][T13521] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  413.412119][T13521] batman_adv: batadv0: Removing interface: batadv_slave_1
[  414.994804][T13564] netlink: 'syz.1.2506': attribute type 10 has an invalid length.
[  415.019290][T13564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2506'.
[  415.019400][T13564] bridge_slave_1: left allmulticast mode
[  415.019448][T13564] bridge_slave_1: left promiscuous mode
[  415.019691][T13564] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.314785][T13564] bridge_slave_0: left allmulticast mode
[  415.314829][T13564] bridge_slave_0: left promiscuous mode
[  415.315079][T13564] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.408676][T13564] bond0: (slave bridge0): Releasing backup interface
[  415.655291][T13577] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2510'.
[  415.981395][T13577] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.984544][T13577] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.315328][T13577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  416.374778][T13577] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  417.003467][ T5942] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  417.003540][ T5942] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  417.003626][ T5942] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  417.003726][ T5942] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  417.013988][T13598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  417.117150][T13598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  417.209898][T13608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  418.705671][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  418.721953][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  418.735507][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  418.765221][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  418.778584][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  419.980647][T13689] fuse: fd is not a fuse device
[  420.279436][T13693] loop8: detected capacity change from 0 to 256
[  420.763146][ T9015] bridge_slave_1: left allmulticast mode
[  420.769145][ T9015] bridge_slave_1: left promiscuous mode
[  420.780047][ T9015] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.795325][ T9015] bridge_slave_0: left allmulticast mode
[  420.802204][ T9015] bridge_slave_0: left promiscuous mode
[  420.808090][ T9015] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.912621][ T5619] Bluetooth: hci3: command tx timeout
[  421.580408][ T9015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  421.627230][ T9015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  421.640380][ T9015] bond0 (unregistering): Released all slaves
[  422.380873][  T988] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  422.661539][ T5752] libceph: connect (1)[c::]:6789 error -101
[  422.661747][ T5752] libceph: mon0 (1)[c::]:6789 connect error
[  422.667863][T13742] ceph: No mds server is up or the cluster is laggy
[  422.702285][ T9015] hsr_slave_0: left promiscuous mode
[  422.708705][ T9015] hsr_slave_1: left promiscuous mode
[  422.716369][ T9015] batman_adv: batadv0: Removing interface: batadv_slave_0
[  422.725440][ T9015] batman_adv: batadv0: Removing interface: batadv_slave_1
[  423.002107][  T988] usb 9-1: unable to get BOS descriptor or descriptor too short
[  423.002190][  T988] usb 9-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  423.002264][ T5619] Bluetooth: hci3: command tx timeout
[  423.005588][  T988] usb 9-1: unable to read config index 0 descriptor/start: -71
[  423.005621][  T988] usb 9-1: can't read configurations, error -71
[  423.194671][T13759] fuse: fd is not a fuse device
[  423.435531][ T9015] team0 (unregistering): Port device team_slave_1 removed
[  423.473117][ T9015] team0 (unregistering): Port device team_slave_0 removed
[  423.714828][T13775] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  423.722914][T13775] overlayfs: failed to set xattr on upper
[  423.728818][T13775] overlayfs: ...falling back to redirect_dir=nofollow.
[  423.736927][T13775] overlayfs: ...falling back to index=off.
[  423.743013][T13775] overlayfs: ...falling back to uuid=null.
[  423.847275][ T5277] 8021q: adding VLAN 0 to HW filter on device eth21
[  423.986219][T13658] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.994161][T13658] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.001627][T13658] bridge_slave_0: entered allmulticast mode
[  424.011478][T13658] bridge_slave_0: entered promiscuous mode
[  424.027678][T13658] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.036125][T13658] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.045948][T13658] bridge_slave_1: entered allmulticast mode
[  424.071149][T13658] bridge_slave_1: entered promiscuous mode
[  424.205849][T13658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  424.218829][T13658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.269139][T13658] team0: Port device team_slave_0 added
[  424.281309][T13658] team0: Port device team_slave_1 added
[  424.316999][T13658] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.324367][T13658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.354951][T13658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.368384][T13658] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.375640][T13658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.402094][T13658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.787134][T13658] hsr_slave_0: entered promiscuous mode
[  424.797761][T13658] hsr_slave_1: entered promiscuous mode
[  424.807586][T13658] debugfs: 'hsr0' already exists in 'hsr'
[  424.816663][T13658] Cannot create hsr debugfs directory
[  425.070854][ T5619] Bluetooth: hci3: command tx timeout
[  425.567683][ T5277] 8021q: adding VLAN 0 to HW filter on device eth22
[  427.013617][   T30] kauditd_printk_skb: 111 callbacks suppressed
[  427.015210][   T30] audit: type=1326 audit(1786104752.279:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.6.2589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb400f9e0d9 code=0x7fc00000
[  427.049396][   T30] audit: type=1326 audit(1786104752.319:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.6.2589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb400f9e0d9 code=0x7fc00000
[  427.111445][   T30] audit: type=1326 audit(1786104752.389:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.6.2589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb400f97e57 code=0x7fc00000
[  427.113495][   T30] audit: type=1326 audit(1786104752.389:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.6.2589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb400f3f459 code=0x7fc00000
[  427.113634][   T30] audit: type=1326 audit(1786104752.389:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.6.2589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb400f3f51d code=0x7fc00000
[  427.165088][ T5619] Bluetooth: hci3: command tx timeout
[  427.203865][   T30] audit: type=1326 audit(1786104752.479:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.6.2589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb400f9e0d9 code=0x7fc00000
[  427.278747][T13852] gfs2: gfs2 mount does not exist
[  428.065313][T13658] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  428.084428][T13658] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  428.092649][T13658] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  428.109973][T13658] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  428.118877][T13658] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  428.143726][T13658] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  428.144699][T13658] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  428.178414][T13658] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  428.276933][T13886] tipc: Failed to remove unknown binding: 66,0,0/4:2853011068/2853011069
[  428.280069][T13886] tipc: Failed to remove unknown binding: 66,0,0/4:2853011068/2853011069
[  428.657409][T13658] 8021q: adding VLAN 0 to HW filter on device bond0
[  428.677710][T13658] 8021q: adding VLAN 0 to HW filter on device team0
[  428.697633][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.697765][ T5931] bridge0: port 1(bridge_slave_0) entered forwarding state
[  428.751039][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.753142][ T5931] bridge0: port 2(bridge_slave_1) entered forwarding state
[  430.379045][T13658] 8021q: adding VLAN 0 to HW filter on device batadv0
[  430.606880][T13973] 9pnet: p9_errstr2errno: server reported unknown error niband/rd
[  431.080597][T13658] veth0_vlan: entered promiscuous mode
[  431.100139][T13658] veth1_vlan: entered promiscuous mode
[  431.169276][T13658] veth0_macvtap: entered promiscuous mode
[  431.191007][T13658] veth1_macvtap: entered promiscuous mode
[  431.225852][T13658] batman_adv: batadv0: Interface activated: batadv_slave_0
[  431.258221][T13999] netlink: 'syz.6.2626': attribute type 4 has an invalid length.
[  431.270281][T13658] batman_adv: batadv0: Interface activated: batadv_slave_1
[  431.286015][T13999] netlink: 'syz.6.2626': attribute type 4 has an invalid length.
[  431.477794][ T5923] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  431.494681][ T9015] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.494783][ T9015] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.494823][ T9015] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  431.708783][ T5925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.708860][ T5925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.900263][ T5943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.900330][ T5943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  433.669227][T14076] tmpfs: Bad value for 'mpol'
[  433.738920][T14063] loop9: detected capacity change from 0 to 32768
[  433.789864][T14063] (syz.9.2641,14063,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0x1051f89c. Applying ECC.
[  433.847281][T14063] (syz.9.2641,14063,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x585adcfc. Applying ECC.
[  433.847378][T14063] (syz.9.2641,14063,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xb3775c19, computed 0x316b7894
[  433.847492][T14063] (syz.9.2641,14063,0):ocfs2_validate_inode_block:1475 ERROR: Checksum failed for dinode 18
[  433.847624][T14063] (syz.9.2641,14063,0):ocfs2_read_locked_inode:633 ERROR: status = -5
[  433.848191][T14063] (syz.9.2641,14063,0):ocfs2_init_global_system_inodes:452 ERROR: status = -5
[  433.848246][T14063] (syz.9.2641,14063,0):ocfs2_init_global_system_inodes:476 ERROR: status = -5
[  433.848313][T14063] (syz.9.2641,14063,0):ocfs2_initialize_super:2194 ERROR: status = -5
[  433.848633][T14063] (syz.9.2641,14063,0):ocfs2_fill_super:1177 ERROR: status = -5
[  434.901508][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  435.902413][   T30] audit: type=1326 audit(1786104761.179:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14102 comm="syz.9.2656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  435.902661][   T30] audit: type=1326 audit(1786104761.179:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14102 comm="syz.9.2656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  435.903172][   T30] audit: type=1326 audit(1786104761.179:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14102 comm="syz.9.2656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  435.903640][   T30] audit: type=1326 audit(1786104761.179:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14102 comm="syz.9.2656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  435.904120][   T30] audit: type=1326 audit(1786104761.179:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14102 comm="syz.9.2656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  435.905711][   T30] audit: type=1326 audit(1786104761.179:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14102 comm="syz.9.2656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  435.906909][   T30] audit: type=1326 audit(1786104761.179:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14102 comm="syz.9.2656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  435.907298][   T30] audit: type=1326 audit(1786104761.179:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14102 comm="syz.9.2656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  435.908365][   T30] audit: type=1326 audit(1786104761.179:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14102 comm="syz.9.2656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  437.470978][  T988] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  438.224809][  T988] usb 10-1: Using ep0 maxpacket: 8
[  438.232448][  T988] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  438.234204][  T988] usb 10-1: config 0 has no interfaces?
[  438.234295][  T988] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.251628][  T988] usb 10-1: config 0 descriptor??
[  438.495739][  T988] usb 10-1: USB disconnect, device number 2
[  439.472975][ T5619] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  439.473057][ T5619] Bluetooth: hci1: Injecting HCI hardware error event
[  439.493941][ T5634] Bluetooth: hci1: hardware error 0x00
[  440.141634][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  440.148432][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  440.706307][T14196] loop9: detected capacity change from 0 to 16
[  440.726942][T14196] erofs (device loop9): cannot find valid erofs superblock
[  441.646592][ T5634] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  442.732138][  T988] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  442.940771][  T988] usb 10-1: Using ep0 maxpacket: 16
[  442.949420][  T988] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  443.000847][  T988] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  443.013375][  T988] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  443.054227][  T988] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.063138][  T988] usb 10-1: Product: syz
[  443.067670][  T988] usb 10-1: Manufacturer: syz
[  443.072728][  T988] usb 10-1: SerialNumber: syz
[  443.244626][  T988] usb 10-1: config 0 descriptor??
[  443.484571][  T988] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  443.507087][  T988] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class)
[  443.981732][  T988] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[  443.992248][  T988] em28xx 10-1:0.0: Config register raw data: 0xfffffffb
[  444.733786][  T988] em28xx 10-1:0.0: Unknown AC97 audio processor detected!
[  445.002862][T14253] netlink: 'syz.8.2706': attribute type 10 has an invalid length.
[  445.005032][T14253] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.005696][T14253] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.035882][T14253] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.036040][T14253] bridge0: port 2(bridge_slave_1) entered forwarding state
[  445.036393][T14253] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.036527][T14253] bridge0: port 1(bridge_slave_0) entered forwarding state
[  445.065651][  T988] em28xx 10-1:0.0: AC97 command still being executed: not handled properly!
[  445.065689][  T988] em28xx 10-1:0.0: couldn't setup AC97 register 2
[  445.087382][T14253] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  445.116478][T14253] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2706'.
[  445.116593][T14253] bridge_slave_1: left allmulticast mode
[  445.116699][T14253] bridge_slave_1: left promiscuous mode
[  445.117283][T14253] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.135237][T14253] bridge_slave_0: left allmulticast mode
[  445.135312][T14253] bridge_slave_0: left promiscuous mode
[  445.143254][T14253] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.824025][T14253] bond0: (slave bridge0): Releasing backup interface
[  445.887944][  T988] em28xx 10-1:0.0: couldn't setup AC97 register 4
[  445.899156][  T988] em28xx 10-1:0.0: couldn't setup AC97 register 6
[  445.911543][  T988] em28xx 10-1:0.0: couldn't setup AC97 register 54
[  445.918690][  T988] em28xx 10-1:0.0: couldn't setup AC97 register 56
[  445.942201][  T988] usb 10-1: USB disconnect, device number 3
[  446.268630][T14263] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2709'.
[  447.225024][T14274] loop9: detected capacity change from 0 to 64
[  447.241444][T14271] netlink: 'syz.1.2714': attribute type 2 has an invalid length.
[  447.502846][T14271] : entered promiscuous mode
[  447.706278][T14274] syz.9.2712: attempt to access beyond end of device
[  447.706278][T14274] loop9: rw=8390657, sector=163, nr_sectors = 1 limit=64
[  447.706353][T14274] Buffer I/O error on dev loop9, logical block 163, lost async page write
[  447.777420][T14274] syz.9.2712: attempt to access beyond end of device
[  447.777420][T14274] loop9: rw=8390657, sector=167, nr_sectors = 1 limit=64
[  447.791815][T14274] Buffer I/O error on dev loop9, logical block 167, lost async page write
[  447.800627][T14274] syz.9.2712: attempt to access beyond end of device
[  447.800627][T14274] loop9: rw=8390657, sector=169, nr_sectors = 1 limit=64
[  447.814895][T14274] Buffer I/O error on dev loop9, logical block 169, lost async page write
[  447.823694][T14274] syz.9.2712: attempt to access beyond end of device
[  447.823694][T14274] loop9: rw=8390657, sector=171, nr_sectors = 1 limit=64
[  447.837569][T14274] Buffer I/O error on dev loop9, logical block 171, lost async page write
[  447.837611][T14274] syz.9.2712: attempt to access beyond end of device
[  447.837611][T14274] loop9: rw=8390657, sector=172, nr_sectors = 1 limit=64
[  447.837636][T14274] Buffer I/O error on dev loop9, logical block 172, lost async page write
[  447.837658][T14274] syz.9.2712: attempt to access beyond end of device
[  447.837658][T14274] loop9: rw=8390657, sector=173, nr_sectors = 1 limit=64
[  447.837679][T14274] Buffer I/O error on dev loop9, logical block 173, lost async page write
[  447.837700][T14274] syz.9.2712: attempt to access beyond end of device
[  447.837700][T14274] loop9: rw=8390657, sector=174, nr_sectors = 1 limit=64
[  447.837722][T14274] Buffer I/O error on dev loop9, logical block 174, lost async page write
[  447.837742][T14274] syz.9.2712: attempt to access beyond end of device
[  447.837742][T14274] loop9: rw=8390657, sector=175, nr_sectors = 1 limit=64
[  447.837764][T14274] Buffer I/O error on dev loop9, logical block 175, lost async page write
[  447.940039][T14274] syz.9.2712: attempt to access beyond end of device
[  447.940039][T14274] loop9: rw=8390657, sector=176, nr_sectors = 1 limit=64
[  447.953999][T14274] Buffer I/O error on dev loop9, logical block 176, lost async page write
[  447.954042][T14274] syz.9.2712: attempt to access beyond end of device
[  447.954042][T14274] loop9: rw=8390657, sector=177, nr_sectors = 1 limit=64
[  447.954068][T14274] Buffer I/O error on dev loop9, logical block 177, lost async page write
[  449.621776][T14305] netlink: 'syz.3.2725': attribute type 10 has an invalid length.
[  449.624862][T14305] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.625348][T14305] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.929518][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2725'.
[  450.214390][T14305] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.214525][T14305] bridge0: port 2(bridge_slave_1) entered forwarding state
[  450.214802][T14305] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.214922][T14305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  450.217980][T14305] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  450.257886][T14307] bridge_slave_1: left allmulticast mode
[  450.258123][T14307] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.470878][T14307] bridge_slave_0: left allmulticast mode
[  450.470933][T14307] bridge_slave_0: left promiscuous mode
[  450.471390][T14307] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.621714][T14311] netlink: 'syz.8.2728': attribute type 1 has an invalid length.
[  450.649488][T14310] loop9: detected capacity change from 0 to 1024
[  450.728123][T14307] bond0: (slave bridge0): Releasing backup interface
[  450.802706][T14310] hfsplus: extend alloc file! (16384,256,150995124)
[  450.905150][T14311] 8021q: adding VLAN 0 to HW filter on device bond1
[  450.964266][T14312] bond1: (slave veth3): Enslaving as an active interface with a down link
[  450.965636][T14313] veth0_virt_wifi: entered promiscuous mode
[  450.997574][T14313] bond1: (slave veth0_virt_wifi): making interface the new active one
[  451.006266][T14313] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link
[  451.018507][T14314] bond1: (slave veth0_virt_wifi): Releasing active interface
[  451.102577][T14320] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[14321] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[14320]
[  451.162731][T14323] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2731'.
[  452.441365][ T5634] Bluetooth: hci4: command 0x0406 tx timeout
[  455.027322][T14365] batadv_slave_0: entered promiscuous mode
[  455.046241][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2745'.
[  455.101742][   T30] audit: type=1326 audit(1786104780.369:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14367 comm="syz.3.2746" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff06999e0d9 code=0x0
[  455.191823][T14363] batadv_slave_0: left promiscuous mode
[  456.377487][T14388] tipc: Failed to remove unknown binding: 66,0,0/0:3164328171/3164328173
[  456.377547][T14388] tipc: Failed to remove unknown binding: 66,0,0/0:3164328171/3164328172
[  456.383309][T14388] tipc: Failed to remove unknown binding: 66,0,0/0:3164328171/3164328173
[  456.383389][T14388] tipc: Failed to remove unknown binding: 66,0,0/0:3164328171/3164328172
[  457.782268][T14410] netlink: 'syz.6.2760': attribute type 1 has an invalid length.
[  457.863994][T14410] 8021q: adding VLAN 0 to HW filter on device bond6
[  457.921391][T14417] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  458.729863][T14427] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  458.909892][   T30] audit: type=1326 audit(1786104784.179:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14435 comm="syz.3.2770" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff06999e0d9 code=0x0
[  459.065327][T14445] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2773'.
[  460.112023][T14478] overlayfs: failed to clone upperpath
[  461.216468][T14474] overlayfs: failed to clone upperpath
[  464.716193][T14558] fuse: fd is not a fuse device
[  464.736417][T14559] overlayfs: failed to clone upperpath
[  464.842919][T14563] fuse: fd is not a fuse device
[  466.356007][T14604] loop9: detected capacity change from 0 to 1024
[  467.231614][T14604] hfsplus: keylen 65060 too large
[  467.231654][T14604] hfsplus: xattr search failed
[  471.267089][T14670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2849'.
[  471.335106][T14663] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2847'.
[  472.554611][   T30] audit: type=1326 audit(1786104797.689:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14659 comm="syz.3.2845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06999e0d9 code=0x7ffc0000
[  472.579202][   T30] audit: type=1326 audit(1786104797.689:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14659 comm="syz.3.2845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06999e0d9 code=0x7ffc0000
[  472.579332][   T30] audit: type=1326 audit(1786104797.689:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14659 comm="syz.3.2845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06999e0d9 code=0x7ffc0000
[  472.579484][   T30] audit: type=1326 audit(1786104797.689:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14659 comm="syz.3.2845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06999e0d9 code=0x7ffc0000
[  472.579595][   T30] audit: type=1326 audit(1786104797.689:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14659 comm="syz.3.2845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06999e0d9 code=0x7ffc0000
[  472.579745][   T30] audit: type=1326 audit(1786104797.689:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14659 comm="syz.3.2845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff06999e0d9 code=0x7ffc0000
[  472.579858][   T30] audit: type=1326 audit(1786104797.739:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14659 comm="syz.3.2845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06999e0d9 code=0x7ffc0000
[  472.579966][   T30] audit: type=1326 audit(1786104797.739:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14659 comm="syz.3.2845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff06995e90e code=0x7ffc0000
[  472.580114][   T30] audit: type=1326 audit(1786104797.749:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14659 comm="syz.3.2845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff06995e90e code=0x7ffc0000
[  472.580220][   T30] audit: type=1326 audit(1786104797.749:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14659 comm="syz.3.2845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff06995e90e code=0x7ffc0000
[  473.322696][ T5824] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  473.601238][ T5824] usb 10-1: Using ep0 maxpacket: 32
[  473.607452][ T5824] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  473.618244][ T5824] usb 10-1: config 0 has an invalid interface number: 12 but max is 0
[  473.627566][ T5824] usb 10-1: config 0 has no interface number 0
[  473.627758][ T5824] usb 10-1: config 0 interface 12 has no altsetting 0
[  473.644439][ T5824] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.654451][ T5824] usb 10-1: Product: syz
[  473.654471][ T5824] usb 10-1: Manufacturer: syz
[  473.654486][ T5824] usb 10-1: SerialNumber: syz
[  473.676356][ T5824] usb 10-1: config 0 descriptor??
[  473.847321][T14691] overlayfs: failed to clone upperpath
[  475.685526][T14726] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2868'.
[  475.967340][ T5824] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  475.967475][ T5824] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71
[  475.967511][ T5824] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  475.967625][ T5824] f81534 10-1:0.12: probe with driver f81534 failed with error -71
[  476.031798][ T5824] usb 10-1: USB disconnect, device number 4
[  476.949519][T14746] tipc: Failed to remove unknown binding: 66,0,0/2886997007:759943718/759943720
[  476.974966][T14746] tipc: Failed to remove unknown binding: 66,0,0/2886997007:759943718/759943719
[  476.985392][T14746] tipc: Failed to remove unknown binding: 66,0,0/2886997007:759943718/759943720
[  476.985454][T14746] tipc: Failed to remove unknown binding: 66,0,0/2886997007:759943718/759943719
[  477.105428][T14748] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[  477.157518][T14748] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[  477.201031][T14748] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[  478.755844][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2893'.
[  478.767731][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2893'.
[  478.905153][T14796] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  483.014024][   T30] kauditd_printk_skb: 59 callbacks suppressed
[  483.020377][   T30] audit: type=1804 audit(1786104808.269:672): pid=14860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2918" name="file0" dev="tmpfs" ino=3667 res=1 errno=0
[  483.431655][T14875] lo: entered allmulticast mode
[  483.437981][T14875] tunl0: entered allmulticast mode
[  483.448857][T14875] gre0: entered allmulticast mode
[  483.455965][T14875] gretap0: entered allmulticast mode
[  483.469839][T14875] erspan0: entered allmulticast mode
[  483.478048][T14875] ip_vti0: entered allmulticast mode
[  483.493937][T14875] ip6_vti0: entered allmulticast mode
[  483.496228][T14875] sit0: entered allmulticast mode
[  483.505931][T14875] ip6tnl0: entered allmulticast mode
[  483.507870][T14875] ip6gre0: entered allmulticast mode
[  483.517373][T14875] syz_tun: entered allmulticast mode
[  483.545779][T14875] ip6gretap0: entered allmulticast mode
[  483.560540][T14875] vcan0: entered allmulticast mode
[  483.569798][T14875] bond0: entered allmulticast mode
[  483.569845][T14875] bond_slave_0: entered allmulticast mode
[  483.569866][T14875] bond_slave_1: entered allmulticast mode
[  483.576050][T14875] team0: entered allmulticast mode
[  483.576085][T14875] team_slave_0: entered allmulticast mode
[  483.576103][T14875] team_slave_1: entered allmulticast mode
[  483.634076][T14875] dummy0: entered allmulticast mode
[  483.646694][T14875] nlmon0: entered allmulticast mode
[  483.657612][T14875] batadv0: entered allmulticast mode
[  483.677504][T14875] vxcan0: entered allmulticast mode
[  483.690231][T14875] vxcan1: entered allmulticast mode
[  483.696065][T14875] veth0: entered allmulticast mode
[  483.773521][T14875] veth1: entered allmulticast mode
[  483.779881][T14875] wg0: entered allmulticast mode
[  483.804678][T14875] wg1: entered allmulticast mode
[  483.812633][T14875] wg2: entered allmulticast mode
[  483.818600][T14875] veth0_to_bridge: entered allmulticast mode
[  483.827854][T14875] bridge_slave_0: entered allmulticast mode
[  483.844936][T14875] veth1_to_bridge: entered allmulticast mode
[  483.855851][T14875] bridge_slave_1: entered allmulticast mode
[  483.863156][T14875] veth0_to_bond: entered allmulticast mode
[  483.893215][T14875] veth1_to_bond: entered allmulticast mode
[  483.913003][T14875] veth0_to_team: entered allmulticast mode
[  483.978167][T14875] veth1_to_team: entered allmulticast mode
[  483.997568][T14875] veth0_to_batadv: entered allmulticast mode
[  484.008541][T14875] batadv_slave_0: entered allmulticast mode
[  484.035333][T14875] veth1_to_batadv: entered allmulticast mode
[  484.045257][T14875] batadv_slave_1: entered allmulticast mode
[  484.054981][T14875] xfrm0: entered allmulticast mode
[  484.064996][T14875] veth0_to_hsr: entered allmulticast mode
[  484.094797][T14875] hsr_slave_0: entered allmulticast mode
[  484.108981][T14875] veth1_to_hsr: entered allmulticast mode
[  484.121798][T14875] hsr_slave_1: entered allmulticast mode
[  484.134915][T14875] hsr0: entered allmulticast mode
[  484.150254][T14875] veth1_virt_wifi: entered allmulticast mode
[  484.165453][T14875] veth0_virt_wifi: left promiscuous mode
[  484.174479][T14875] veth0_virt_wifi: entered allmulticast mode
[  484.196506][T14875] virt_wifi0: entered allmulticast mode
[  484.215382][T14875] veth1_macvtap: entered allmulticast mode
[  484.283240][T14875] veth0_macvtap: entered allmulticast mode
[  484.315262][T14875] macvtap0: entered allmulticast mode
[  484.336385][T14875] macsec0: entered allmulticast mode
[  484.377834][T14875] geneve0: entered allmulticast mode
[  484.396009][T14875] geneve1: entered allmulticast mode
[  484.420443][T14875] netdevsim netdevsim8 netdevsim0: entered allmulticast mode
[  484.493670][T14875] netdevsim netdevsim8 netdevsim1: entered allmulticast mode
[  484.568908][T14875] netdevsim netdevsim8 netdevsim2: entered allmulticast mode
[  484.578095][T14875] netdevsim netdevsim8 netdevsim3: entered allmulticast mode
[  484.588358][T14875] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode
[  484.597014][T14875] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode
[  484.605462][T14875] gre1: entered allmulticast mode
[  484.613905][T14875] bond1: entered allmulticast mode
[  484.620420][T14875] veth2: entered allmulticast mode
[  484.627217][T14875] veth3: entered allmulticast mode
[  484.674239][ T5935] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  484.691721][ T5935] bond1: (slave veth3): making interface the new active one
[  484.754496][ T5935] bond1: active interface up!
[  487.154730][   T30] audit: type=1804 audit(1786104812.419:673): pid=14920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2937" name="/newroot/49/file0" dev="tmpfs" ino=285 res=1 errno=0
[  489.343218][T14973] loop9: detected capacity change from 0 to 512
[  489.380528][T14973] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  489.460509][T14973] EXT4-fs warning (device loop9): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  489.564552][T14973] EXT4-fs (loop9): mount failed
[  491.659337][   T30] audit: type=1326 audit(1786104816.929:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.3.2977" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06999e0d9 code=0x7fc00000
[  492.461179][   T30] audit: type=1326 audit(1786104817.709:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.3.2977" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff06993f459 code=0x7fc00000
[  493.174263][T15060] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  494.231410][   T30] audit: type=1326 audit(1786104819.499:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15065 comm="syz.8.2991" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f5e3dd97e57 code=0x0
[  497.504645][T15107] veth0_to_team: left allmulticast mode
[  498.065220][T15136] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  498.509452][ T5620] libceph: connect (1)[c::]:6789 error -101
[  498.509690][ T5620] libceph: mon0 (1)[c::]:6789 connect error
[  498.522982][T15139] ceph: No mds server is up or the cluster is laggy
[  499.126549][ T5620] libceph: connect (1)[c::]:6789 error -101
[  499.126740][ T5620] libceph: mon0 (1)[c::]:6789 connect error
[  499.537751][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3019'.
[  499.537797][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3019'.
[  501.558922][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  501.566080][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  510.538401][T15322] lo: entered allmulticast mode
[  510.539770][T15322] tunl0: entered allmulticast mode
[  510.544269][T15322] gre0: entered allmulticast mode
[  510.545381][T15322] gretap0: entered allmulticast mode
[  510.546931][T15322] erspan0: entered allmulticast mode
[  510.548325][T15322] ip_vti0: entered allmulticast mode
[  510.549526][T15322] ip6_vti0: entered allmulticast mode
[  510.550449][T15322] sit0: entered allmulticast mode
[  510.551298][T15322] ip6tnl0: entered allmulticast mode
[  510.552180][T15322] ip6gre0: entered allmulticast mode
[  510.553088][T15322] syz_tun: entered allmulticast mode
[  510.554098][T15322] ip6gretap0: entered allmulticast mode
[  510.555243][T15322] bridge0: entered allmulticast mode
[  510.556608][T15322] vcan0: entered allmulticast mode
[  510.557588][T15322] bond0: entered allmulticast mode
[  510.557881][T15322] bond_slave_0: entered allmulticast mode
[  510.558184][T15322] bond_slave_1: entered allmulticast mode
[  510.559776][T15322] team0: entered allmulticast mode
[  510.560011][T15322] team_slave_0: entered allmulticast mode
[  510.560232][T15322] team_slave_1: entered allmulticast mode
[  510.571306][T15322] dummy0: entered allmulticast mode
[  510.572072][T15322] nlmon0: entered allmulticast mode
[  510.577325][T15322] batadv0: entered allmulticast mode
[  510.616228][T15322] vxcan0: entered allmulticast mode
[  510.628949][T15322] vxcan1: entered allmulticast mode
[  510.637777][T15322] veth0: entered allmulticast mode
[  511.300930][T15322] veth1: entered allmulticast mode
[  511.308827][T15322] wg0: entered allmulticast mode
[  511.315002][T15322] wg1: entered allmulticast mode
[  511.323573][T15322] wg2: entered allmulticast mode
[  511.324252][T15322] veth0_to_bridge: entered allmulticast mode
[  511.358031][T15322] veth1_to_bridge: entered allmulticast mode
[  511.367108][T15322] veth0_to_bond: entered allmulticast mode
[  511.380218][T15322] veth1_to_bond: entered allmulticast mode
[  511.415704][T15322] veth0_to_team: entered allmulticast mode
[  511.438609][T15322] veth1_to_team: entered allmulticast mode
[  511.453429][T15322] veth0_to_batadv: entered allmulticast mode
[  511.464516][T15322] batadv_slave_0: entered allmulticast mode
[  511.474698][T15322] veth1_to_batadv: entered allmulticast mode
[  511.484504][T15322] batadv_slave_1: entered allmulticast mode
[  511.492950][T15322] xfrm0: entered allmulticast mode
[  511.549973][T15322] veth0_to_hsr: entered allmulticast mode
[  511.560513][T15322] hsr_slave_0: entered allmulticast mode
[  511.573088][T15322] veth1_to_hsr: entered allmulticast mode
[  511.586350][T15322] hsr_slave_1: entered allmulticast mode
[  511.594069][T15328] fuse: fd is not a fuse device
[  511.595212][T15322] hsr0: entered allmulticast mode
[  511.604342][T15322] veth1_virt_wifi: entered allmulticast mode
[  511.612719][T15322] veth0_virt_wifi: entered allmulticast mode
[  511.625612][T15322] virt_wifi0: entered allmulticast mode
[  511.629556][T15322] veth1_vlan: entered allmulticast mode
[  511.637802][T15322] veth0_vlan: entered allmulticast mode
[  511.645178][T15322] vlan0: entered allmulticast mode
[  511.664617][T15322] vlan1: entered allmulticast mode
[  511.672286][T15322] macvlan0: entered allmulticast mode
[  511.678491][T15322] macvlan1: entered allmulticast mode
[  511.684183][T15322] ipvlan0: entered allmulticast mode
[  511.690411][T15322] ipvlan1: entered allmulticast mode
[  511.696776][T15322] veth1_macvtap: entered allmulticast mode
[  511.703243][T15322] veth0_macvtap: entered allmulticast mode
[  511.709455][T15322] macvtap0: entered allmulticast mode
[  511.717209][T15322] macsec0: entered allmulticast mode
[  511.735413][T15322] geneve0: entered allmulticast mode
[  511.750453][T15322] geneve1: entered allmulticast mode
[  511.756927][T15322] netdevsim netdevsim9 netdevsim0: entered allmulticast mode
[  511.759415][T15322] netdevsim netdevsim9 netdevsim1: entered allmulticast mode
[  511.773108][T15322] netdevsim netdevsim9 netdevsim2: entered allmulticast mode
[  511.781994][T15322] netdevsim netdevsim9 netdevsim3: entered allmulticast mode
[  511.795523][T15322] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode
[  511.804078][T15322] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode
[  512.388393][T15351] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3076'.
[  512.454818][T15351] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3076'.
[  512.455116][T15351] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3076'.
[  513.228424][T15369] tipc: Can't bind to reserved service type 2
[  514.803736][T15377] bridge0: entered promiscuous mode
[  514.823672][T15377] bond4: (slave bridge0): Enslaving as an active interface with an up link
[  516.671241][   T30] audit: type=1326 audit(1786104841.909:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15411 comm="syz.1.3094" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f1719e0d9 code=0x0
[  524.177293][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3132'.
[  528.225848][T15592] overlayfs: failed to clone upperpath
[  530.228934][T15609] 9pnet: p9_errstr2errno: server reported unknown error ./file0/../f
[  532.838959][T15636] Cannot find set identified by id 1 to match
[  533.880506][T15650] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3168'.
[  533.905708][T15650] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3168'.
[  538.018288][T15705] overlayfs: failed to clone upperpath
[  539.262727][T15717] netdevsim netdevsim6: Direct firmware load for  failed with error -2
[  539.262851][T15717] netdevsim netdevsim6: Falling back to sysfs fallback for: 
[  543.585470][T15749] CIFS mount error: No usable UNC path provided in device string!
[  543.585470][T15749] 
[  543.585864][T15749] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  545.210761][ T5619] Bluetooth: hci3: command 0x0406 tx timeout
[  545.653165][   T30] audit: type=1326 audit(1786104870.929:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15771 comm="syz.9.3213" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  545.682932][   T30] audit: type=1326 audit(1786104870.959:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15771 comm="syz.9.3213" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  545.701835][   T30] audit: type=1326 audit(1786104870.979:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15771 comm="syz.9.3213" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  545.708782][   T30] audit: type=1326 audit(1786104870.959:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15771 comm="syz.9.3213" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  545.708837][   T30] audit: type=1326 audit(1786104870.979:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15771 comm="syz.9.3213" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  545.766308][   T30] audit: type=1326 audit(1786104871.039:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15771 comm="syz.9.3213" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a3a35e90e code=0x7ffc0000
[  545.769122][   T30] audit: type=1326 audit(1786104871.039:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15771 comm="syz.9.3213" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a3a35e90e code=0x7ffc0000
[  545.773284][   T30] audit: type=1326 audit(1786104871.049:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15771 comm="syz.9.3213" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a3a35e90e code=0x7ffc0000
[  545.779695][   T30] audit: type=1326 audit(1786104871.049:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15771 comm="syz.9.3213" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a3a35e90e code=0x7ffc0000
[  545.795172][   T30] audit: type=1326 audit(1786104871.059:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15771 comm="syz.9.3213" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a3a35e90e code=0x7ffc0000
[  546.036198][T15787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'.
[  546.045756][T15787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'.
[  547.020942][T15803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3223'.
[  549.198963][T15821] vlan5: entered promiscuous mode
[  549.201056][T15821] vlan4: entered promiscuous mode
[  549.201095][T15821] erspan0: entered promiscuous mode
[  549.238620][T15791] kexec: Could not allocate control_code_buffer
[  549.775375][T15827] VFS: Mount too revealing
[  551.963751][T15855] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.964098][T15855] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.789489][T15855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  553.821417][T15855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  554.391026][T15217] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  554.401767][T15217] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.407145][ T5936] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  554.407233][ T5936] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.407364][ T5936] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  554.407437][ T5936] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.407538][ T5936] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  554.407598][ T5936] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.496427][T15907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3251'.
[  554.707262][T15907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3251'.
[  556.034906][T15928] netlink: 'syz.9.3258': attribute type 1 has an invalid length.
[  556.045260][T15928] netlink: 'syz.9.3258': attribute type 4 has an invalid length.
[  556.045315][T15928] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.3258'.
[  561.111513][T15968] uprobe: syz.3.3272:15968 failed to unregister, leaking uprobe
[  561.336467][T15983] netlink: 'syz.6.3276': attribute type 13 has an invalid length.
[  563.011931][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  563.012038][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  566.759920][T16046] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3291'.
[  568.653515][T16066] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3298'.
[  568.670162][T16066] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3298'.
[  571.128200][T16126] overlayfs: failed to clone upperpath
[  573.426671][T16174] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3323'.
[  574.721114][T16195] o2cb: This node has not been configured.
[  574.728800][T16195] o2cb: Cluster check failed. Fix errors before retrying.
[  574.736171][T16195] (syz.8.3329,16195,1):user_dlm_register:674 ERROR: status = -22
[  574.736199][T16195] (syz.8.3329,16195,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2"
[  575.508614][T16217] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  575.543179][T16216] bridge0: entered promiscuous mode
[  575.552874][T16216] bridge0: entered allmulticast mode
[  576.238603][T16216] team0: Port device bridge0 added
[  576.325973][T16222] bridge0: port 1(team0) entered blocking state
[  576.326080][T16222] bridge0: port 1(team0) entered disabled state
[  576.326256][T16222] team0: entered allmulticast mode
[  576.326278][T16222] team_slave_0: entered allmulticast mode
[  576.326300][T16222] team_slave_1: entered allmulticast mode
[  576.442742][T16222] team0: left allmulticast mode
[  576.450711][T16222] team_slave_0: left allmulticast mode
[  576.457307][T16222] team_slave_1: left allmulticast mode
[  577.074047][   T30] kauditd_printk_skb: 254 callbacks suppressed
[  577.074117][   T30] audit: type=1107 audit(1786104902.059:942): pid=16225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  584.689392][T16307] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  585.163544][   T30] audit: type=1326 audit(1786104910.429:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.9.3365" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  585.165403][   T30] audit: type=1326 audit(1786104910.439:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.9.3365" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  585.226482][   T30] audit: type=1326 audit(1786104910.499:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.9.3365" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  585.226560][   T30] audit: type=1326 audit(1786104910.499:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.9.3365" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  585.230237][   T30] audit: type=1326 audit(1786104910.499:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.9.3365" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  585.230423][   T30] audit: type=1326 audit(1786104910.499:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.9.3365" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  585.230537][   T30] audit: type=1326 audit(1786104910.499:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.9.3365" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  585.258316][   T30] audit: type=1326 audit(1786104910.529:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.9.3365" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  585.264959][   T30] audit: type=1326 audit(1786104910.539:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.9.3365" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  585.275382][   T30] audit: type=1326 audit(1786104910.549:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.9.3365" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a3a39e0d9 code=0x7ffc0000
[  590.900750][   T30] kauditd_printk_skb: 843 callbacks suppressed
[  590.900796][   T30] audit: type=1326 audit(1786104916.159:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16372 comm="syz.8.3379" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e3dd97e57 code=0x7ffc0000
[  590.900849][   T30] audit: type=1326 audit(1786104916.159:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16372 comm="syz.8.3379" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e3dd3f459 code=0x7ffc0000
[  590.900897][   T30] audit: type=1326 audit(1786104916.159:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16372 comm="syz.8.3379" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e3dd97e57 code=0x7ffc0000
[  590.900945][   T30] audit: type=1326 audit(1786104916.159:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16372 comm="syz.8.3379" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e3dd3f459 code=0x7ffc0000
[  590.901006][   T30] audit: type=1326 audit(1786104916.159:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16372 comm="syz.8.3379" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e3dd97e57 code=0x7ffc0000
[  590.901053][   T30] audit: type=1326 audit(1786104916.169:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16372 comm="syz.8.3379" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e3dd3f459 code=0x7ffc0000
[  590.901101][   T30] audit: type=1326 audit(1786104916.169:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16372 comm="syz.8.3379" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e3dd97e57 code=0x7ffc0000
[  590.901149][   T30] audit: type=1326 audit(1786104916.169:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16372 comm="syz.8.3379" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e3dd3f459 code=0x7ffc0000
[  590.901196][   T30] audit: type=1326 audit(1786104916.169:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16372 comm="syz.8.3379" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e3dd97e57 code=0x7ffc0000
[  590.901244][   T30] audit: type=1326 audit(1786104916.169:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16372 comm="syz.8.3379" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e3dd3f459 code=0x7ffc0000
[  595.616988][T16424] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3395'.
[  596.634834][T16439] bond7: entered promiscuous mode
[  596.640029][T16439] bond7: entered allmulticast mode
[  598.752654][T16463] __vm_enough_memory: pid: 16463, comm: syz.3.3405, bytes: 4503599627366400 not enough memory for the allocation
[  599.757606][ T5619] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  599.767508][ T5619] Bluetooth: hci3: Injecting HCI hardware error event
[  599.780476][ T5634] Bluetooth: hci3: hardware error 0x00
[  601.103647][T16486] xt_ecn: cannot match TCP bits for non-tcp packets
[  602.270901][ T5634] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  603.339746][T16511] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3419'.
[  603.339810][T16511] netlink: 'syz.8.3419': attribute type 7 has an invalid length.
[  603.339825][T16511] netlink: 'syz.8.3419': attribute type 8 has an invalid length.
[  603.339867][T16511] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3419'.
[  603.348612][T16511] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3419'.
[  603.348702][T16511] netlink: 'syz.8.3419': attribute type 7 has an invalid length.
[  603.348742][T16511] netlink: 'syz.8.3419': attribute type 8 has an invalid length.
[  603.348776][T16511] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3419'.
[  604.080489][   T30] kauditd_printk_skb: 244 callbacks suppressed
[  604.080535][   T30] audit: type=1326 audit(1786104929.349:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16517 comm="syz.1.3420" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f1719e0d9 code=0x0
[  604.132255][T16520] netlink: 'syz.9.3422': attribute type 4 has an invalid length.
[  604.326511][T16529] overlayfs: failed to clone upperpath
[  611.365779][    C0] sched: DL replenish lagged too much
[  624.710920][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  624.725556][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  686.811408][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  686.827482][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  749.122475][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  749.136507][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  810.687453][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  810.694724][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  866.292660][   T31] INFO: task kworker/1:11:15888 blocked for more than 158 seconds.
[  866.301403][   T31]       Tainted: G             L      syzkaller #0
[  870.860848][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  870.875861][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  872.277612][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  872.286856][   T31] task:kworker/1:11    state:D stack:26368 pid:15888 tgid:15888 ppid:2      task_flags:0x4208060 flags:0x00080000
[  872.305089][   T31] Workqueue: events_power_efficient reg_check_chans_work
[  872.323424][   T31] Call Trace:
[  872.332399][   T31]  <TASK>
[  872.341729][   T31]  __schedule+0x1b2a/0x59a0
[  872.350821][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  872.368678][   T31]  ? __pfx___schedule+0x10/0x10
[  872.377980][   T31]  ? schedule+0x90/0x2b0
[  872.387228][   T31]  schedule+0x164/0x2b0
[  872.396397][   T31]  schedule_preempt_disabled+0x13/0x30
[  872.405973][   T31]  __mutex_lock+0x7bf/0x1550
[  872.415618][   T31]  ? __mutex_lock+0x5d4/0x1550
[  872.424848][   T31]  ? reg_check_chans_work+0x1a1/0x1110
[  872.434076][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  872.443796][   T31]  ? look_up_lock_class+0x57/0x110
[  872.453374][   T31]  ? register_lock_class+0x31/0x2e0
[  872.462910][   T31]  reg_check_chans_work+0x1a1/0x1110
[  872.472223][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  872.481750][   T31]  ? __pfx_reg_check_chans_work+0x10/0x10
[  872.491183][   T31]  ? lock_acquire+0x115/0x350
[  872.500579][   T31]  ? rcu_is_watching+0x15/0xb0
[  872.519813][   T31]  ? process_scheduled_works+0x97e/0x1630
[  872.529111][   T31]  process_scheduled_works+0xc4e/0x1630
[  872.538590][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  872.548009][   T31]  ? assign_work+0x3cf/0x5d0
[  872.557406][   T31]  worker_thread+0xa47/0xfb0
[  872.566543][   T31]  kthread+0x388/0x470
[  872.576079][   T31]  ? __pfx_worker_thread+0x10/0x10
[  872.585306][   T31]  ? __pfx_kthread+0x10/0x10
[  872.594243][   T31]  ret_from_fork+0x514/0xb70
[  872.603191][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  872.613252][   T31]  ? __switch_to+0xc89/0x1420
[  872.622455][   T31]  ? __pfx_kthread+0x10/0x10
[  872.631367][   T31]  ret_from_fork_asm+0x1a/0x30
[  872.649272][   T31]  </TASK>
[  872.658617][   T31] 
[  872.658617][   T31] Showing all locks held in the system:
[  874.400296][   T31] locks held by kworker/u8:0/12: 2, on CPU#1:
[  874.400319][   T31]  #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.400385][   T31]  #1: ffffc90000117c40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.400442][   T31] locks held by kworker/u8:1/13: 4, last CPU#1:
[  874.400462][   T31]  #0: ffff888053957140 ((wq_completion)wg-kex-wg2#13){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.417408][   T31]  #1: ffffc90000127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.417468][   T31]  #2: ffff88802bd81440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  874.417534][   T31]  #3: ffff88807ace34b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  874.417595][   T31] locks held by pr/ttyS0/16: 1, last CPU#1:
[  874.417610][   T31]  #0: ffffffff8ea36278 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  874.417665][   T31] locks held by khungtaskd/31: 1, last CPU#1:
[  874.417680][   T31]  #0: ffffffff8eb5c6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  874.417755][   T31] locks held by kswapd0/86: 2, last CPU#1:
[  874.417770][   T31]  #0: ffffffff8ec88b00 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xa08/0x32c0
[  874.417828][   T31]  #1: ffff88807fdb20e8 (&type->s_umount_key#67){++++}-{4:4}, at: super_cache_scan+0x94/0x500
[  874.417893][   T31] locks held by kworker/u8:7/1014: 4, last CPU#1:
[  874.417908][   T31]  #0: ffff888033477940 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.417970][   T31]  #1: ffffc90005027c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.418027][   T31]  #2: ffff888033025440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  874.418086][   T31]  #3: ffff88801e7a5c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  874.418152][   T31] locks held by kworker/u8:8/1024: 4, last CPU#1:
[  874.418166][   T31]  #0: ffff888066c9a140 ((wq_completion)wg-kex-wg0#13){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.418229][   T31]  #1: ffffc900050a7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.418286][   T31]  #2: ffff888025965440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  874.418345][   T31]  #3: ffff88807ace0330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  874.418405][   T31] locks held by kworker/u8:9/1166: 3, last CPU#1:
[  874.418420][   T31]  #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.418476][   T31]  #1: ffffc90005477c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.418541][   T31]  #2: ffff8880331f3258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  874.418614][   T31] locks held by dhcpcd/5276: 1, last CPU#0:
[  874.418629][   T31]  #0: ffffffff8eca4af0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  874.418684][   T31] locks held by dhcpcd/5277: 2, last CPU#1:
[  874.418699][   T31]  #0: ffffffff8eca4af0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  874.418752][   T31]  #1: ffffffff8eb5c6a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  874.418807][   T31] locks held by getty/5371: 2, on CPU#1:
[  874.418821][   T31]  #0: ffff888031ea50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  874.418879][   T31]  #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  874.418944][   T31] locks held by syz-executor/5616: 4, last CPU#1:
[  874.418959][   T31]  #0: ffff8880538a4460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  874.419016][   T31]  #1: ffff8880355fe910 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_rmdir+0x1cd/0x520
[  874.419101][   T31]  #2: ffffffff8f2e4138 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560
[  874.419161][   T31]  #3: ffffffff8eca4af0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  874.419215][   T31] locks held by syz-executor/5618: 2, last CPU#1:
[  874.419230][   T31]  #0: ffffffff8f2e4138 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560
[  874.419290][   T31]  #1: ffffffff8eca4af0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  874.419345][   T31] locks held by kworker/1:4/5721: 4, last CPU#1:
[  874.419360][   T31]  #0: ffff88801b02f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.419415][   T31]  #1: ffffc90004bafc40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.419473][   T31]  #2: ffffffff903ae420 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0
[  874.419533][   T31]  #3: ffffffff8eca4af0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  874.419589][   T31] locks held by kworker/0:5/5750: 3, on CPU#0:
[  874.419604][   T31]  #0: ffff88801b02f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.419660][   T31]  #1: ffffc90004e4fc40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.419716][   T31]  #2: ffffffff903ae420 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0
[  874.419770][   T31] locks held by kworker/1:7/5752: 2, last CPU#1:
[  874.419786][   T31]  #0: ffff88801b02dd40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.419843][   T31]  #1: ffffc90004e6fc40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.419900][   T31] locks held by kworker/0:7/5824: 3, on CPU#0:
[  874.419915][   T31]  #0: ffff88801b02f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.419971][   T31]  #1: ffffc90005057c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.420028][   T31]  #2: ffffffff903ae420 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0
[  874.420082][   T31] locks held by kworker/u8:12/5924: 4, last CPU#1:
[  874.420098][   T31]  #0: ffff888053951940 ((wq_completion)wg-kex-wg1#15){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.420159][   T31]  #1: ffffc900053c7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.420216][   T31]  #2: ffff888077d0d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  874.420275][   T31]  #3: ffff88807ace20e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  874.420334][   T31] locks held by kworker/u8:13/5925: 2, on CPU#0:
[  874.420349][   T31]  #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  874.420405][   T31]  #1: ffffc90005407c40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630
[  880.517946][   T31] locks held by kworker/u8:14/5927: 3, last CPU#0: