last executing test programs:

9m19.923737747s ago: executing program 32 (id=189):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
getdents(r0, &(0x7f0000000140)=""/194, 0xc2)

8m55.962802146s ago: executing program 2 (id=293):
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xc0000484)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r2 = fanotify_init(0xf00, 0x1000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540), 0x4, 0x0)

8m55.264287196s ago: executing program 33 (id=293):
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xc0000484)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r2 = fanotify_init(0xf00, 0x1000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540), 0x4, 0x0)

8m0.197926173s ago: executing program 1 (id=557):
socket$kcm(0x10, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x10, 0x80002, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x6a040000)
mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = gettid()
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

7m57.135782071s ago: executing program 1 (id=568):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000240), 0x0}, 0x20)

7m56.896907321s ago: executing program 1 (id=570):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00')
fchdir(r0)
socket$igmp(0x2, 0x3, 0x2)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00')
r2 = fanotify_init(0x0, 0x80000)
r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
fanotify_mark(r2, 0x1, 0x40001019, r3, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
getdents(r1, &(0x7f0000000200)=""/187, 0xbb)

7m56.284147271s ago: executing program 1 (id=573):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x442, 0x2, 0x3}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0)

7m55.958415591s ago: executing program 1 (id=576):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount$afs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x20, 0x0)

7m55.345865321s ago: executing program 6 (id=580):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
read(r1, &(0x7f00000002c0)=""/199, 0xc7)

7m55.29177002s ago: executing program 1 (id=582):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1)
pipe2$watch_queue(&(0x7f00000003c0)={<r3=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x1e)
r4 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x35, 0x0, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x2d}, 0x48, r1)
keyctl$KEYCTL_MOVE(0x1e, r4, r1, r2, 0x0)

7m53.65445685s ago: executing program 6 (id=584):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_clone(0x1003000, &(0x7f0000000040)="ac129e35ef", 0x5, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000})

7m53.09382732s ago: executing program 6 (id=589):
syz_mount_image$f2fs(&(0x7f0000000280), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/712], 0x5, 0x55b1, &(0x7f0000002340)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x100)
io_setup(0xfff, &(0x7f0000000200)=<r1=>0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000000), 0x1, 0x457, &(0x7f0000000700)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2f8, 0x320, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x77000, 0x2000000}])

7m48.332595558s ago: executing program 6 (id=603):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})

7m46.296667007s ago: executing program 6 (id=609):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount$afs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x20, 0x0)

7m45.924712617s ago: executing program 6 (id=612):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000080)={{}, "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"})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)

7m40.158033824s ago: executing program 34 (id=582):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1)
pipe2$watch_queue(&(0x7f00000003c0)={<r3=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x1e)
r4 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x35, 0x0, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x2d}, 0x48, r1)
keyctl$KEYCTL_MOVE(0x1e, r4, r1, r2, 0x0)

7m30.8058783s ago: executing program 35 (id=612):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000080)={{}, "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"})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)

7m24.353741048s ago: executing program 0 (id=691):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x20000000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$eJzs3b9rO2UYAPDn0jQJOiSCkwge6OD05dvv6pIiLRQzKRnUQYttQZogtFDwB8ZOri6Ori6C4OY/4eJ/ILgKbhYsnNzlrklqGpPatP74fJa+fe953nve69uWDvf03eeHxwdpHJ1/8lO0WknUutGNiyQ6UYvKZzGj+0UAAP9mF1kWv2Zjq+QlEdFaX1kAwBqt/Pv/u7WXBACs2RtvvvXadq+383qatmJ3+PlZP//LPv84vr59FO/HIA7jcbTjMiK7Mh7vZlk2qqe5Trw0HJ3188zhOz+U62//ElHkb0U7OsXUbP5eb2crHZvKH+V1PFXev5vnP4l2PDvn/nu9nSdz8qPfiJdfnKr/UbTjx/figxjEQVHEOD9qEZ9upemr2Ze/ffx2Xl6en4zO+s0ibiLbuOcvDQAAAAAAAAAAAAAAAAAAAAAA/2GPyt45zSj69+RTZf+djcv8k81IK53Z/jzj/KRa6Fp/oFEWX1X9eR6naZqVgZP8ejxXj/rD7BoAAAAAAAAAAAAAAAAAAAD+WU4//Oh4fzA4PLmTQdUNoHqt/7brdKdmXojFwc3JvWrlcMHKsVHFJBELy8g3sXTNv5dtD2736J65qeZvvl16na//eu/lYHOJmL85qE7X8X4y/xk2o5ppVYfk++mYRix5r8ZNl7KVjl9j7qX2yntvPF0MRgtiIllU2Cs/j59cOZNc30WjeKpz0zfLwVT6bExr+fOcf6f8SXLVrSO52x9CAAAAAAAAAAAAAAAAAABAYfLS75yL5wtTa1lzbWUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2a/P//FQajMnmJ4EacnD7wFgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+CMAAP//SfdjDw==")
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
fanotify_init(0x0, 0x0)
wait4(0x0, 0x0, 0x2, 0x0)

7m19.513832825s ago: executing program 0 (id=707):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b52, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

7m17.001641084s ago: executing program 0 (id=710):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chdir(&(0x7f0000000100)='./file0\x00')
utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)

7m16.597690814s ago: executing program 0 (id=713):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

7m15.797039894s ago: executing program 0 (id=716):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0)
recvfrom$unix(r2, &(0x7f00000002c0)=""/236, 0xec, 0x10120, 0x0, 0x0)

7m15.304611284s ago: executing program 0 (id=718):
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, [0x7, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x9]}})
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x6a)
write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69)
close(r2)
r3 = inotify_init1(0x80000)
inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0x2000775)
execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)

7m14.735352844s ago: executing program 36 (id=718):
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, [0x7, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x9]}})
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x6a)
write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69)
close(r2)
r3 = inotify_init1(0x80000)
inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0x2000775)
execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)

5m9.821993611s ago: executing program 9 (id=1193):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file0\x00', 0x111)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000001180)='./bus\x00')
open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0)
rmdir(&(0x7f0000000440)='./file0\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000004c0)=""/160, 0xa0)

5m9.528558532s ago: executing program 9 (id=1197):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getdents64(r2, 0x0, 0x0)

5m9.122851581s ago: executing program 9 (id=1200):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c)
listen(r0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

5m8.883622701s ago: executing program 9 (id=1203):
socket(0x400000000010, 0x3, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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")
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x20, &(0x7f0000002480)=ANY=[@ANYRES16, @ANYBLOB="322d6825fe8cf7050cedffff3c57c86c0b18fa14eb85515c2e26da314f1cae655aa13f05abe701b22a5d7801c560ffcaa7a9dd43edce1570072b0ef862679690e41a47e87f451affc318d2e01fa6e062186de79664ac21bb4786923b19c25c8a11b176a7a3ef1425b6d5e0c9ef15bd14e3c9d30fb24d50b512afb6ab04794571f1b53ae1a1d0f87c76239c9f6700ed8f08cbdb137cad2901209b2c77c46608d398435233cdf13d5d7a7f68384cc8956bda78a62e3872bcee78cfeee8c6051bbe2470c9646cfe9343a022b0618ce422f210c275b35df1507d54b51f86f9f329", @ANYRESDEC, @ANYRESOCT=r1, @ANYRES8=r1, @ANYBLOB="4315cc13ac94e9c3f0e2a8fafa5c9e4056273145be0c4331799b7e8df2ae24e73ba617968a52ecc15024f5995d84c2fde4920b700c711be5c87dcf179ee64e91619613a7f80dc5732438031843cf24457cbf5c844745d13eaa9248fba73776f8284069ffa18933269237037b352c1e236db691ab072d0fce5a9c7e6d9bb27ff13028d9d36f68d92a0a313b6d635419baeaebd57a394952846ccda1a950f90995fe13c4e506a4241a4ebb201ab59e3f9c86e074e13cef696364b07e94eaf2912bb4abfe", @ANYRESOCT=r1, @ANYRES32=r1, @ANYRESDEC=r0, @ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB="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"], 0x10, 0x1c4, &(0x7f0000000440)="$eJzsVb/uEkEQ/uZu4UAtqG0lQqPA2fgG8gA+gAROJB7+4S5RCMVpQ2NhfAkSn8LCRHsLY0xssNBECyxJDGZ359YlasDkyO/3S/ZLyHzzzc7sDpedvZM8TAIAP9fzPmpQIFzARyIIAA3S2qas7Q+2W8YXof0O6y/ZfmabTGfvnmk6u9uL42iSTPcQImDfmh1y0KLDydunuwqhqMpFk9TX/+yfoec7SvC3NZyLE++iOOL/s52vRe9VwrHbAYxCB2R9eKE/52n5Fkci3n9lJeDxldx44uG7ct6v531JbvEUk9pA//IrodZI57W15qIAMoB8bE0doaYl0ADQSscPWsl0dmU07g2jYXQvDJG135znKxq1W7dHcdQm6xieJAIG8p5WrXgJwKff8QwWyDqaxDmA7Fw5f/Ph3LxkJVYBz8q1a+i6r0yNgDX5V9zEZVQAPMpkOGS1DllNQLXWBcFnpyOscwIbeKiowNX+/XiwAIHytCWEqdFZoSQdyoAoZEdFrl037S/Y1tl22S7Zrtjmb1f+JglV4Rt7zQwo43EvTSfq8dLMaKHRwprZ2eNd89eQ8pMEcHBwcHBwcHA4I/gVAAD//7B1VIM=")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8890)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)

5m7.66561782s ago: executing program 9 (id=1218):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x1, r3, 0x0, 0x60000007, 0x0)

5m3.693615389s ago: executing program 9 (id=1222):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x1, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x8000000, '\x00', 0x654})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5m3.342118589s ago: executing program 37 (id=1222):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x1, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x8000000, '\x00', 0x654})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m31.469323859s ago: executing program 4 (id=1790):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

1m29.560128359s ago: executing program 4 (id=1794):
close(0xffffffffffffffff)
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000080, &(0x7f0000000300)={[{@inlinecrypt}, {@noblock_validity}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5df7ff64}}, {}, {@errors_continue}, {@jqfmt_vfsold}, {@noacl}]}, 0x2, 0xbd1, &(0x7f0000002380)="$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")
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0)
shutdown(r0, 0x1)

1m29.281667869s ago: executing program 4 (id=1795):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x8, 0x8000000, 0x0, r0, 0x3})
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)=0x7, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000002540)=[{&(0x7f00000021c0)="2a81d3d0710267", 0x7}], 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x7, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x40000)

1m26.774527268s ago: executing program 4 (id=1817):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x309}]}, 0x34}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)

1m25.976491937s ago: executing program 4 (id=1812):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3800, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"})
syz_open_pts(r0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x40184152, 0x0)
unshare(0x400)
socket$packet(0x11, 0x3, 0x300)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9d0000000094bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2", @ANYRES8], 0xf, 0x2a4, &(0x7f00000001c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]})
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1)

1m24.470222827s ago: executing program 4 (id=1827):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x28, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x83}]}, 0x10)
sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840)

1m8.695443358s ago: executing program 38 (id=1827):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x28, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x83}]}, 0x10)
sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840)

25.567582864s ago: executing program 2 (id=1875):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x402)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0)

20.489782207s ago: executing program 2 (id=2020):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)

18.605604934s ago: executing program 2 (id=2024):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c0c4)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
truncate(0x0, 0xf000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x545002, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0xf4240}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x9, 0x12)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r1)
ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0))

15.292039721s ago: executing program 2 (id=2033):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40)
sendmmsg$inet6(r0, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)="95a1114744369f94a72ccd31b9b3bd1daca4665c144f72787437f986336f5bf76c6b635be45db1cf00de9093619c2335ec002d4b65e01e521e55ebd090bd82853660ff259ea845edda4db1716c83e1b4fee819bcec", 0x55}, {&(0x7f0000000380)="7f15fb937389d52c4163b545023d92700955acc15cf66b1d81989d052cc82abe11131561d239f12db421f774d3e34482f21bce5c0c263a122d3c5d5b5ba2a0bbcbfddc92f407064f9964262df5af76f5c2226273d512db596ed2c8336e0683d8a2d4025f5e5e9a3a689ec213217a72674fa461ab2caca333cbd0d7a5680210b6aae3e50ccc23c99fb1aded632490cfa6229a89f391c8764c01a5d39abae55d8e5133b4a6a403ca1dd3bace5e1682e17487debc388b18c863dfb73ef89ab7492328be843285c179953b9c5cd25089827369e8902d22e506eeb7a9f3ed73aabdf39bdf3a0fcc52cfcd40", 0xe9}, {&(0x7f0000000480)="75f38d3f183de2aeb30c44490f9e7948be5a285dd5e6b755c48dd13efe4b25d0887cc85cb4f0db44ab8362804e34e7f9de2be9d7349f9c68ed1ccdefd4ff19c5b03001e72d3e66af8a474c15eed20dfa68ff2cd9d4774891ce302eab21636e6221291a0f60da79cc0d65f5cc75e2b29361385ac4214e956410fe3a4536ef005f6b6f129a84ec58d8a918aee6ab56ac97a68ad1a86912dd59f8e02a4a86532de9550816f96b76cecfc9a8e1895407cb4a6b2bd96752c02f8e2385947d8a1b75caa29b07f5c6b4b42454754e764920a3ae763d51785bdb18e1c53675003042c17af6984b5bd9109728af898f3f3959", 0xee}, {&(0x7f00000005c0)="4dfdcb477584", 0x6}, {&(0x7f0000000600)="39e7a18aeb2c9e70de0daa66224aa496e5683bc048dd646b8cbe93e9c308264261d9eb20e6bd7f5deecf8aa318710981aa7de264a83a1ffbf43c93ae770fb3077bcfecb190cc5690fbe9b5c533fe051152b9ef014b7fa5ce831f3c190ef76d0dcd8375eef8aca2adec072685e9b415b0e52c933b1f5acbce1399245c6ded56e29136302b28b5d0f4a9631acd10f15a", 0x8f}], 0x5}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)="376eea8032f25786e4af898bf5c4e2f64809c3d7cff87bed7a34c0fae1219c8ab43404a1fede034f534fe3d12674aac9c8141282eeafb7150b34c428e9a4a01cbc87448d686941d107e72a7c064ff53fbf1d634b782841ec26bc09cbd6f42065d1681650bedc3a8d7525a511fcff30405f0dc74d6fb4b9220a1f5f6045e0139d4f214f21eea5419129188075c981178d0ed59d328217e61a3f37f8c3a26e5e2423dc99f4b9f63279df9f0376148396c8f0d5ff51d5de92873af0c172330e9c5d1ec7c1", 0xc3}, {&(0x7f0000002f40)="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", 0xc7c}], 0x2}}], 0x2, 0x40001)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40)

14.116289198s ago: executing program 2 (id=2038):
creat(0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002cfbe4df1f2d07fe6b9670e93117085d789a4c3b76a7c8b3d273fd5392199ca0f5b52546f6050830f5a3ad42abe1a3b5b20f6e31132b03caec94aad2851bd2e7926212"], 0x1, 0xdab, &(0x7f0000000e80)="$eJzs3ctvXNX9APBzx544L36x8wuNm6ZJSkigj9iQumklNkaii1KE1CVLmgaa1gmP0AUoi5RFV0i1hPgDipDIpuqi6oJNFbGiG1Sp+wqx6iaVkLJAUcCV7XPG429mdGcc2+PxfD7SnTP3fs+955x53LlzXycBI6ux8jg3N12l9N5H7z7zr7O/+NvylJOtHKdWHsfz2HxKqdmaL6XJsLz5idX0qy+uX2xPv85plc6nKlWt6en52615D6SUbqRT6VaaTE+9cOfeh4vPPrc4debm0Xc+vbs1rV9TbXUBAACwA3z58w9e+8djP70+dfcvJ+bTRGt62T6fz+MH83b/fN5QLtvL5X9A1ZZWHban94R843lohHxjHfK1l9MM+ca7lL8nLLfZJd9ETfljbdM6tRuG2dr/+Koxs2680ZiZWf1PvuyzsT3VzNXLCy9dG1BFgU1352TexWcwGEZuWDo06DUQwKp43PA+Nzb3SF1raeO9lX/76Ubn+WETbPfnX/nDVf4Hv7fGYfPs1k9TaVf5Hh3M4/E4wniYr9/vf1lePB7R7LGe3Y4jDMvxhW71HNvmemxUt/rHz8Vu9e2cltfhRIi3f3/iezos7zHQ2Zf2/xsMIzssDXoFBOxY8by5pazE43l9MT5RE99bE99XE99fEz9QE4dR9tc3/pgWq7X/+fE/fb/7w8p+tody+n991ifuj+y3/Hjeb78etPx4PjHsZL8898mf7/zu1j/j+f9fh/P/T+ff0sm8gij7C+N+9da5/+HC4EaXfIdDfR7qkH/l+ZH1+aoja8tJbeuZ++oxvX6+Q93yHV+fbzLk25+3RfaG+sbtk/1hvrL9Udar5fUaD+1thnbsCfUo78xUTveG9kx1a1fYkb0n5Gvm4f9Du46Edj0c5vtGaFc1vb5dcf95qc/RMD0eJyn5wtt23+9SfC/idRmP5PTtnL6f049z+nmHckdR+Tx2O/+/fD6nU7N66fLCpSfyePmcfjLWnFie/uQ21xt4cL1e/zOd1l//c7A1vdloXy8cWpteta8XJsP0812m/zCPl9+zX4/tW5k+c/GVhV9tduNhxF17863fvriwcOl1TzzxxJPWk0GvmYCtNvvGlVdnr7351rnLV158+dLLl65e+MmPzj8x9+MLF2ZXNutn2zfugV1l7Ud/0DUBAAAAAAAAAAAAelbt6zw5p3X3ty3Xk5fr0+P18QyH8r6VT0O5j0G5/rPbfV3K9ZtT21BHNt92XE406DYCnf3X/X8NhpEdlpbcxR/YGQbd/1+572FJr/79Z3uXh5Lt9tPr15fx/oXwIHZ6/3PK3139/7X6v+p5/Rd6zJrcWLlX7j16s63YdKzX8mP7y31gj/RX/tVcfmnN2dRb+Ut/CuXHG5X26JVQ/v4ey7+v/cc3Vv6rufzysj1+utfyV2tcNdbXI+43LvcBjPuNi9dC+8u9/fpu/wY7ans9lw+jbFj6mezXsPT/2U1ZblkP5tVz6zhduf927O+g3/qX+36X34GHw/Krmt83/X8Ot7r+P8vnb1b/n7DrfOb4n8EwssPS0tJAuz4Z1X5XdopBv/6D3oYcdPmDfv3rxP4/4/+l2P9njMf+P2M89v8Z47F/rRiP/X/G1zP2/xnjR8NyY/+g0zXxb9bEj9XEv1UTP14Tj//fYvxUTfxETfxkTfxwTfyRmvjpmvijNfEzNfHHauKP18R3u+/kdFTbD6Ms9hvp+w+joxz/6fb9P1ITB4ZX7Nc5fr/P1sSB4VXO8/D9hhFUdb5jR9zfXvbjvp3T93P6cU4/37IKsh2+m9Pv5fT7Of1BTs/ldCansznVNeRw+8N/jp1YrNbO8zsU4r2eTxqvB4j3iXmyx/rE43P9ns96tMdytqr8DV4OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0GiuPc3PTVUrvffTuM/8+95vDy1NOtnKcWnkcz2PzKaVmSqnK4+NheTcmVtOvvrh+sVNapfMrj2U8PX+7Ne+B5fnTqXQrTaanXrhz78PFZ59bnDpz8+g7n97dmtavqba6AAAAABig/wUAAP//vrPsgA==")
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
link(&(0x7f0000000200)='./file1\x00', 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
prlimit64(0x0, 0xb, &(0x7f0000000240)={0x2, 0x8001}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
mount$afs(&(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000140)='./file0\x00', &(0x7f00000003c0), 0x8, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000002c0)=@get={0x1, &(0x7f0000001800)=""/4096, 0x9})

13.580405865s ago: executing program 39 (id=2038):
creat(0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002cfbe4df1f2d07fe6b9670e93117085d789a4c3b76a7c8b3d273fd5392199ca0f5b52546f6050830f5a3ad42abe1a3b5b20f6e31132b03caec94aad2851bd2e7926212"], 0x1, 0xdab, &(0x7f0000000e80)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
link(&(0x7f0000000200)='./file1\x00', 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
prlimit64(0x0, 0xb, &(0x7f0000000240)={0x2, 0x8001}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
mount$afs(&(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000140)='./file0\x00', &(0x7f00000003c0), 0x8, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000002c0)=@get={0x1, &(0x7f0000001800)=""/4096, 0x9})

10.093678386s ago: executing program 3 (id=2051):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
pipe2(&(0x7f0000000000)={0x0, <r2=>0x0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0x8000f28, 0x8)
splice(r4, 0x0, r3, 0x0, 0x33fe0, 0x1)
write$cgroup_devices(r5, &(0x7f00000001c0)=ANY=[], 0x8)
close_range(r2, 0xffffffffffffffff, 0x0)

9.725716181s ago: executing program 3 (id=2053):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2)

9.044912091s ago: executing program 7 (id=2058):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

7.854522367s ago: executing program 7 (id=2062):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x810410, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x2, 0x1d6, &(0x7f0000000200)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fadvise64(r3, 0xaa1f, 0x1a958, 0x3)

7.473643683s ago: executing program 3 (id=2064):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

6.830044663s ago: executing program 7 (id=2068):
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
getpid()
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20082, 0x0)
close(0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0xe8)

5.815456977s ago: executing program 7 (id=2069):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800)

5.041655028s ago: executing program 3 (id=2073):
socket$nl_xfrm(0x10, 0x3, 0x6)
inotify_init1(0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000), 0x4)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

4.982333729s ago: executing program 5 (id=2074):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
symlink(0x0, &(0x7f0000000040)='./file0\x00')
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
syz_mount_image$udf(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r0, @ANYBLOB="2c73686f727461642c757466382c756e64456c219df3960000000000"], 0xff, 0xc06, &(0x7f0000001080)="$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")
r1 = inotify_init1(0x800)
inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021)

4.774070002s ago: executing program 3 (id=2075):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000003c0)={0x64, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x10044084)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e3000000000000000000000000800", @ANYRES32], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)

4.629578384s ago: executing program 8 (id=2076):
syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001100)={0x4, 0x0, [{0x1000, 0x5f, &(0x7f0000000700)=""/95}, {0xca203c07ff8caa88, 0x78, &(0x7f0000000cc0)=""/120}, {0x3000, 0xb5, &(0x7f0000000d40)=""/181}, {0x4, 0x6e, &(0x7f0000000e80)=""/110}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe94, 0x0, 0x0, 0x10, 0xb, @void, @value}, 0x94)

4.093261831s ago: executing program 5 (id=2077):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

4.045245462s ago: executing program 8 (id=2078):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

3.877707264s ago: executing program 5 (id=2079):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)

2.916137868s ago: executing program 8 (id=2080):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
getresgid(0x0, 0x0, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac)

2.898067309s ago: executing program 5 (id=2081):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x20008804)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.74575944s ago: executing program 8 (id=2082):
socket(0x28, 0x5, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
r0 = epoll_create1(0x0)
socket$unix(0x1, 0x1, 0x0)
dup(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, <r2=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x20)
r3 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0xd127, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f00000002c0)=<r5=>0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0)

2.745370531s ago: executing program 5 (id=2083):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10681, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0)

2.610459553s ago: executing program 8 (id=2084):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)

1.538252748s ago: executing program 7 (id=2085):
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc)

500.383423ms ago: executing program 7 (id=2086):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)

25.71664ms ago: executing program 8 (id=2087):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r0, 0x4)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
read$FUSE(r2, &(0x7f00000006c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_CREATE_OPEN(r3, &(0x7f0000002700)={0xa0, 0xffffffffffffffda, r4, {{0x4, 0x6, 0x7, 0x8d0, 0xa8d, 0x40, {0x2, 0x6, 0xf, 0xeb, 0x1, 0x800, 0x2, 0x200, 0x7, 0x8000, 0x8, 0xee00, 0x0, 0x3, 0x80000001}}, {0x0, 0x1}}}, 0xa0)

25.35868ms ago: executing program 5 (id=2088):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000140)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48)

0s ago: executing program 3 (id=2089):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r5=>0x0})
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000004c0)=[{0x3, 0x2, {0x1, 0xf0, 0x4}, {0x2, 0xff, 0x4}, 0xfd, 0x1}], 0x20)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840)

kernel console output (not intermixed with test programs):

67295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb638e969 code=0x7ffc0000
[  305.215320][ T8228] overlayfs: failed to clone upperpath
[  305.325932][ T8232] loop9: detected capacity change from 0 to 256
[  305.497083][ T8232] loop9: detected capacity change from 0 to 512
[  307.445125][ T8261] loop9: detected capacity change from 0 to 2048
[  307.500273][ T8261] UDF-fs: bad mount option "shonoreC�hortad" or missing value
[  307.683121][ T8270] device syz_tun entered promiscuous mode
[  307.717321][ T8270] device batadv_slave_0 entered promiscuous mode
[  307.766859][ T5744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  308.119236][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.8.933'.
[  310.651763][ T8306] lo speed is unknown, defaulting to 1000
[  310.835110][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.5.944'.
[  310.890495][ T8319] 8021q: VLANs not supported on ip6tnl0
[  311.260004][ T8332] loop9: detected capacity change from 0 to 512
[  311.287634][ T8332] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  311.456658][ T8332] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  311.478990][ T8332] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  312.035618][ T7422] EXT4-fs (loop9): unmounting filesystem.
[  312.335795][ T8358] loop9: detected capacity change from 0 to 256
[  313.118526][   T27] kauditd_printk_skb: 66 callbacks suppressed
[  313.118543][   T27] audit: type=1800 audit(2000000135.930:115): pid=8393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.952" name="file1" dev="loop9" ino=1048614 res=0 errno=0
[  314.268316][ T8423] loop8: detected capacity change from 0 to 1024
[  315.749160][   T27] audit: type=1326 audit(2000000138.560:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.3.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930d98e969 code=0x7ffc0000
[  315.878366][   T27] audit: type=1326 audit(2000000138.560:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.3.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930d98e969 code=0x7ffc0000
[  316.135212][ T8444] binder: 8443:8444 unknown command 1
[  316.146750][   T27] audit: type=1326 audit(2000000138.610:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.3.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f930d98e969 code=0x7ffc0000
[  316.155320][ T8444] binder: 8443:8444 ioctl c0306201 200000000c40 returned -22
[  316.249514][   T27] audit: type=1326 audit(2000000138.610:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.3.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930d98e969 code=0x7ffc0000
[  316.366860][   T27] audit: type=1326 audit(2000000138.610:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.3.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930d98e969 code=0x7ffc0000
[  316.470966][   T27] audit: type=1326 audit(2000000138.610:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.3.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f930d98e969 code=0x7ffc0000
[  316.589880][   T27] audit: type=1326 audit(2000000138.610:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.3.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930d98e969 code=0x7ffc0000
[  316.688322][   T27] audit: type=1326 audit(2000000138.610:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.3.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930d98e969 code=0x7ffc0000
[  316.793573][   T27] audit: type=1326 audit(2000000138.610:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.3.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f930d98e969 code=0x7ffc0000
[  317.182311][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  317.638521][ T8464] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns
[  317.677609][ T8464] kvm: pic: level sensitive irq not supported
[  317.764163][ T8468] binder: BINDER_SET_CONTEXT_MGR already set
[  317.786278][ T8468] binder: 8467:8468 ioctl 4018620d 200000000040 returned -16
[  318.341582][   T27] kauditd_printk_skb: 20 callbacks suppressed
[  318.341599][   T27] audit: type=1800 audit(2000000141.160:145): pid=8459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.970" name="bus" dev="ramfs" ino=51642 res=0 errno=0
[  318.386110][ T8482] overlayfs: invalid redirect ((null))
[  318.576165][ T8487] bridge: RTM_NEWNEIGH with invalid ether address
[  321.631927][ T8521] loop8: detected capacity change from 0 to 256
[  321.725841][ T8521] exfat: Deprecated parameter 'utf8'
[  321.782500][ T8521] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  322.577285][ T8553] siw: device registration error -23
[  323.487905][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.8.999'.
[  323.512898][ T8554] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  323.522369][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.8.999'.
[  324.370190][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1004'.
[  324.778133][ T8589] device syzkaller0 entered promiscuous mode
[  332.683444][ T8623] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  332.742924][ T8667] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1032'.
[  332.982404][ T8674] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1034'.
[  333.017602][ T8674] unsupported nlmsg_type 40
[  333.465357][ T8685] loop3: detected capacity change from 0 to 4096
[  333.516580][ T8685] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  333.703440][ T8685] ntfs3: loop3: no free space to extend mft
[  333.743157][ T8701] ntfs3: loop3: no free space to extend mft
[  333.835083][ T8685] ntfs3: loop3: no free space to extend mft
[  333.869902][ T8685] ntfs3: loop3: no free space to extend mft
[  333.954470][ T8701] ntfs3: loop3: no free space to extend mft
[  333.970740][ T8685] ntfs3: loop3: no free space to extend mft
[  334.019986][ T8685] ntfs3: loop3: no free space to extend mft
[  334.040313][ T8701] ntfs3: loop3: no free space to extend mft
[  334.067375][ T8685] ntfs3: loop3: no free space to extend mft
[  334.085082][ T8706] loop9: detected capacity change from 0 to 1024
[  334.146873][ T8706] EXT4-fs: Ignoring removed orlov option
[  334.178846][ T8706] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  334.585282][ T4264] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  334.792383][ T4264] usb 10-1: Using ep0 maxpacket: 16
[  334.799984][ T4264] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.829308][ T4264] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.843963][ T4264] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  334.871796][ T4264] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  334.891893][ T4264] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.918147][ T4264] usb 10-1: config 0 descriptor??
[  334.985462][ T8722] team0: Port device team_slave_1 removed
[  335.701874][ T4264] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  335.709175][ T4264] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max
[  335.786454][ T4264] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  335.807277][ T4264] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  335.827530][ T4264] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  335.859907][ T4264] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  335.894802][ T4264] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  335.936206][ T4264] microsoft 0003:045E:07DA.0004: No inputs registered, leaving
[  336.036542][ T4264] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0
[  336.078317][ T4264] microsoft 0003:045E:07DA.0004: no inputs found
[  336.090911][ T4264] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway
[  336.155085][ T4264] usb 10-1: USB disconnect, device number 2
[  336.453392][ T8741] fido_id[8741]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  336.477514][ T8749] netlink: 'syz.5.1056': attribute type 39 has an invalid length.
[  336.615797][ T7422] EXT4-fs (loop9): unmounting filesystem.
[  336.825822][ T8754] loop3: detected capacity change from 0 to 1024
[  336.920158][ T8758] tipc: Started in network mode
[  336.925230][ T8758] tipc: Node identity 4, cluster identity 4711
[  336.971820][ T8758] tipc: Node number set to 4
[  337.156890][ T8768] loop3: detected capacity change from 0 to 256
[  337.208303][ T8768] FAT-fs (loop3): Directory bread(block 1285) failed
[  337.292851][ T8768] FAT-fs (loop3): Directory bread(block 1285) failed
[  337.403418][ T8765] FAT-fs (loop3): Directory bread(block 1285) failed
[  337.420615][ T8765] FAT-fs (loop3): Directory bread(block 1285) failed
[  337.428777][ T8765] FAT-fs (loop3): Directory bread(block 1285) failed
[  337.490185][ T8768] FAT-fs (loop3): Directory bread(block 1285) failed
[  337.520132][ T8768] FAT-fs (loop3): Directory bread(block 1285) failed
[  337.566548][ T8768] FAT-fs (loop3): Directory bread(block 1285) failed
[  337.654643][ T8765] FAT-fs (loop3): FAT read failed (blocknr 1281)
[  337.684331][ T8782] FAT-fs (loop3): Directory bread(block 1285) failed
[  339.074716][ T8797] netlink: 'syz.5.1069': attribute type 1 has an invalid length.
[  339.210457][ T8801] 8021q: adding VLAN 0 to HW filter on device bond3
[  339.253257][ T8801] bond2: (slave bond3): making interface the new active one
[  339.295683][ T8801] bond2: (slave bond3): Enslaving as an active interface with an up link
[  339.348234][ T8797] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1069'.
[  339.361329][ T8797] 8021q: adding VLAN 0 to HW filter on device bond2
[  339.759922][ T8810] binder: 8808:8810 ioctl c018620c 200000000100 returned -22
[  340.140850][ T8821] loop9: detected capacity change from 0 to 256
[  341.135737][ T8844] loop3: detected capacity change from 0 to 512
[  341.188276][ T8844] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4551: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  341.220568][ T8844] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  341.224127][ T4245] udevd[4245]: incorrect ext4 checksum on /dev/loop3
[  341.703600][   T27] audit: type=1326 audit(2000000164.520:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.9.1083" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1eb638e969 code=0x0
[  342.149819][ T8862] xt_CT: You must specify a L4 protocol and not use inversions on it
[  342.589993][ T8866] lo speed is unknown, defaulting to 1000
[  344.638541][ T8890] loop3: detected capacity change from 0 to 2048
[  344.763032][ T8890]  loop3: p1 < > p3
[  344.771588][ T4264] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  344.780554][ T8890] loop3: p3 size 134217728 extends beyond EOD, truncated
[  344.848678][ T8895] loop8: detected capacity change from 0 to 512
[  344.979383][ T4264] usb 10-1: Using ep0 maxpacket: 16
[  344.987619][ T4264] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  345.014657][ T8895] EXT4-fs (loop8): too many log groups per flexible block group
[  345.028872][ T4264] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  345.038884][ T8895] EXT4-fs (loop8): failed to initialize mballoc (-12)
[  345.079547][ T4264] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.089048][ T8895] EXT4-fs (loop8): mount failed
[  345.115817][ T4264] usb 10-1: Product: syz
[  345.169567][ T4264] usb 10-1: Manufacturer: syz
[  345.174455][ T4264] usb 10-1: SerialNumber: syz
[  345.211781][ T5752] udevd[5752]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  345.223069][ T4264] usb 10-1: config 0 descriptor??
[  345.235728][ T4245] udevd[4245]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  345.275603][ T4264] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  345.340169][ T4264] em28xx 10-1:0.0: DVB interface 0 found: bulk
[  345.799382][ T4301] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  345.843623][ T4264] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[  345.857728][ T8920] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.990978][ T4301] usb 9-1: Using ep0 maxpacket: 16
[  345.999180][ T4301] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  346.025067][ T4301] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  346.056690][ T4301] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  346.086483][ T4301] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.139388][ T4301] usb 9-1: Product: syz
[  346.143784][ T4301] usb 9-1: Manufacturer: syz
[  346.148412][ T4301] usb 9-1: SerialNumber: syz
[  346.281925][ T4264] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  346.315325][ T4264] em28xx 10-1:0.0: board has no eeprom
[  346.321137][ T8929] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  346.387824][ T8929] device batadv_slave_0 entered promiscuous mode
[  346.523664][ T8908] lo speed is unknown, defaulting to 1000
[  347.288072][ T4301] usb 9-1: USB disconnect, device number 5
[  347.362523][ T8886] em28xx 10-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[  347.470907][ T4264] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  347.478906][ T4264] em28xx 10-1:0.0: dvb set to bulk mode.
[  347.522480][ T4626] em28xx 10-1:0.0: Binding DVB extension
[  347.542464][ T4264] usb 10-1: USB disconnect, device number 3
[  347.605646][ T4264] em28xx 10-1:0.0: Disconnecting em28xx
[  347.766793][ T8966] loop8: detected capacity change from 0 to 2048
[  347.881056][ T8966]  loop8: p1 < > p3
[  347.967102][ T8966] loop8: p3 size 134217728 extends beyond EOD, truncated
[  347.994341][ T4626] em28xx 10-1:0.0: Registering input extension
[  348.736920][ T4264] em28xx 10-1:0.0: Closing input extension
[  348.785090][ T4264] em28xx 10-1:0.0: Freeing device
[  348.900218][   T27] audit: type=1326 audit(2000000171.711:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5479b8e969 code=0x7ffc0000
[  348.999533][   T27] audit: type=1326 audit(2000000171.741:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5479b8e969 code=0x7ffc0000
[  349.118330][   T27] audit: type=1326 audit(2000000171.751:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5479b8e969 code=0x7ffc0000
[  349.275150][   T27] audit: type=1326 audit(2000000171.751:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5479b8e969 code=0x7ffc0000
[  349.340824][ T4491] udevd[4491]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[  349.364152][ T4245] udevd[4245]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  349.396172][   T27] audit: type=1326 audit(2000000171.751:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5479b8e969 code=0x7ffc0000
[  349.499346][   T27] audit: type=1326 audit(2000000171.761:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5479b8e969 code=0x7ffc0000
[  349.589936][   T27] audit: type=1326 audit(2000000171.761:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5479b8e969 code=0x7ffc0000
[  349.718112][   T27] audit: type=1326 audit(2000000171.761:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5479b8e969 code=0x7ffc0000
[  349.769367][   T27] audit: type=1326 audit(2000000171.761:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5479b8e969 code=0x7ffc0000
[  349.821089][   T27] audit: type=1326 audit(2000000171.761:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5479b8e969 code=0x7ffc0000
[  351.570341][ T9030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1128'.
[  351.635045][ T9034] loop8: detected capacity change from 0 to 128
[  352.206499][ T9049] loop9: detected capacity change from 0 to 2048
[  352.256201][ T9049]  loop9: p1 < > p2 p3 < p5 > p4
[  352.261870][ T9049] loop9: partition table partially beyond EOD, truncated
[  352.913210][ T9049] loop9: p1 start 4278190080 is beyond EOD, truncated
[  352.985714][ T9049] loop9: p2 start 16908800 is beyond EOD, truncated
[  353.071164][ T9049] loop9: p4 start 11326 is beyond EOD, truncated
[  353.119449][ T9049] loop9: p5 start 16908800 is beyond EOD, truncated
[  356.159950][ T9108] netlink: 'syz.7.1150': attribute type 1 has an invalid length.
[  356.484438][ T9122] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  356.736362][ T9122] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  357.683969][ T9122] bond1: (slave vcan1): making interface the new active one
[  357.723904][ T9140] loop9: detected capacity change from 0 to 1024
[  357.767315][ T9140] EXT4-fs: Ignoring removed nobh option
[  357.781559][ T9122] bond1: (slave vcan1): Enslaving as an active interface with an up link
[  357.869502][ T9140] EXT4-fs: Ignoring removed oldalloc option
[  357.876799][ T9133] 8021q: adding VLAN 0 to HW filter on device bond1
[  357.923828][ T9140] EXT4-fs: Ignoring removed bh option
[  358.104764][ T9140] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c119, mo2=0102]
[  358.149630][ T9140] System zones: 0-1, 3-12
[  358.184954][ T9140] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  358.464126][ T7422] EXT4-fs (loop9): unmounting filesystem.
[  358.545549][   T27] kauditd_printk_skb: 16 callbacks suppressed
[  358.545565][   T27] audit: type=1326 audit(2000000181.351:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.7.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d778e969 code=0x7ffc0000
[  358.634772][ T9156] overlayfs: failed to clone upperpath
[  358.640721][   T27] audit: type=1326 audit(2000000181.391:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.7.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d778e969 code=0x7ffc0000
[  358.724677][   T27] audit: type=1326 audit(2000000181.391:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.7.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19d778e969 code=0x7ffc0000
[  358.814982][ T9159] loop9: detected capacity change from 0 to 2048
[  358.819768][   T27] audit: type=1326 audit(2000000181.391:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.7.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d778e969 code=0x7ffc0000
[  358.890625][ T9165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  358.911985][ T9159]  loop9: p1 < > p3
[  358.938205][ T9159] loop9: p3 size 134217728 extends beyond EOD, truncated
[  358.967207][   T27] audit: type=1326 audit(2000000181.391:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.7.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d778e969 code=0x7ffc0000
[  359.072581][   T27] audit: type=1326 audit(2000000181.391:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.7.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19d778e969 code=0x7ffc0000
[  359.095842][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1157'.
[  359.188549][   T27] audit: type=1326 audit(2000000181.401:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.7.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d778e969 code=0x7ffc0000
[  359.301037][   T27] audit: type=1326 audit(2000000181.411:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.7.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d778e969 code=0x7ffc0000
[  359.454419][   T27] audit: type=1326 audit(2000000181.411:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.7.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19d778e969 code=0x7ffc0000
[  359.564136][ T4491] udevd[4491]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[  359.586987][ T4245] udevd[4245]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  359.604217][   T27] audit: type=1326 audit(2000000181.411:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.7.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d778e969 code=0x7ffc0000
[  361.856999][ T9224] overlayfs: failed to clone upperpath
[  361.946104][ T9228] loop8: detected capacity change from 0 to 512
[  362.080547][ T9228] EXT4-fs (loop8): Test dummy encryption mode enabled
[  362.502046][ T9228] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.1175: inode #1: comm syz.8.1175: iget: illegal inode #
[  362.779280][ T9228] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.1175: error while reading EA inode 1 err=-117
[  362.999193][ T9228] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.1175: inode #1: comm syz.8.1175: iget: illegal inode #
[  363.054827][ T9228] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.1175: error while reading EA inode 1 err=-117
[  363.078296][ T9228] EXT4-fs (loop8): 1 orphan inode deleted
[  363.191665][ T9228] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  364.231946][ T9264] netlink: 'syz.5.1183': attribute type 4 has an invalid length.
[  364.363457][ T9271] netlink: 'syz.5.1183': attribute type 4 has an invalid length.
[  364.511105][ T9256] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  364.560999][ T9277] netlink: 'syz.3.1185': attribute type 1 has an invalid length.
[  367.322478][ T7167] EXT4-fs (loop8): unmounting filesystem.
[  367.708081][ T9315] lo speed is unknown, defaulting to 1000
[  367.909418][ T9327] netlink: 'syz.8.1195': attribute type 1 has an invalid length.
[  368.025077][ T9327] device bond1 entered promiscuous mode
[  368.176396][ T9330] bond1: (slave ip6gretap1): making interface the new active one
[  368.200423][ T9330] device ip6gretap1 entered promiscuous mode
[  368.208769][ T9330] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  368.223843][ T9327] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1195'.
[  368.258290][ T9327] device bond1 left promiscuous mode
[  368.300131][ T9327] device ip6gretap1 left promiscuous mode
[  368.316446][ T9327] 8021q: adding VLAN 0 to HW filter on device bond1
[  368.557697][ T9348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1201'.
[  368.591055][ T9352] loop9: detected capacity change from 0 to 128
[  368.651507][ T9352] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  368.670588][ T9352] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  368.861806][ T9355] EXT4-fs error (device loop9): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum
[  369.007953][ T9352] EXT4-fs warning (device loop9): ext4_dirblock_csum_set:427: inode #2: comm syz.9.1203: No space for directory leaf checksum. Please run e2fsck -D.
[  369.232566][ T4245] udevd[4245]: incorrect jbd checksum on /dev/loop9
[  369.691405][ T7422] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /73/file0/lost+found: directory fails checksum at offset 0
[  369.730856][ T7422] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /73/file0/lost+found: directory fails checksum at offset 1024
[  369.805503][ T7422] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /73/file0/lost+found: directory fails checksum at offset 2048
[  369.904913][ T7422] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /73/file0/lost+found: directory fails checksum at offset 3072
[  369.974536][ T7422] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  370.002520][ T7422] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /73/file0/lost+found: directory fails checksum at offset 4096
[  370.042957][ T7422] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /73/file0/lost+found: directory fails checksum at offset 5120
[  370.063915][ T7422] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /73/file0/lost+found: directory fails checksum at offset 6144
[  370.092015][ T7422] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /73/file0/lost+found: directory fails checksum at offset 7168
[  370.118062][ T7422] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /73/file0/lost+found: directory fails checksum at offset 8192
[  370.178892][ T7422] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  370.228862][ T7422] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  370.264510][ T7422] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  370.296441][ T7422] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  370.335386][ T7422] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  370.376297][ T7422] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  370.407021][ T7422] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  370.434973][ T7422] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  373.259550][ T7422] EXT4-fs (loop9): unmounting filesystem.
[  373.924727][ T5740] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.066718][   T27] kauditd_printk_skb: 16 callbacks suppressed
[  374.066735][   T27] audit: type=1326 audit(2000000196.871:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.5.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5479b8e969 code=0x7fc00000
[  374.097957][ T5740] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.152568][   T27] audit: type=1326 audit(2000000196.931:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.5.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5479b8e969 code=0x7fc00000
[  375.129593][   T27] audit: type=1326 audit(2000000197.531:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.5.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5479b8e969 code=0x7fc00000
[  375.255461][ T9454] loop3: detected capacity change from 0 to 256
[  375.288141][ T5740] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.337934][ T9454] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  375.489624][   T27] audit: type=1800 audit(2000000198.291:202): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1229" name="file1" dev="loop3" ino=1048622 res=0 errno=0
[  376.028421][ T9453] syz.3.1229: attempt to access beyond end of device
[  376.028421][ T9453] loop3: rw=524288, sector=256, nr_sectors = 184 limit=256
[  376.327066][ T9453] syz.3.1229: attempt to access beyond end of device
[  376.327066][ T9453] loop3: rw=0, sector=312, nr_sectors = 8 limit=256
[  376.385011][ T9453] syz.3.1229: attempt to access beyond end of device
[  376.385011][ T9453] loop3: rw=0, sector=312, nr_sectors = 8 limit=256
[  376.471911][ T5740] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.489312][ T9454] syz.3.1229: attempt to access beyond end of device
[  376.489312][ T9454] loop3: rw=0, sector=256, nr_sectors = 8 limit=256
[  376.490864][ T9453] syz.3.1229: attempt to access beyond end of device
[  376.490864][ T9453] loop3: rw=0, sector=312, nr_sectors = 8 limit=256
[  376.516000][ T9454] syz.3.1229: attempt to access beyond end of device
[  376.516000][ T9454] loop3: rw=0, sector=256, nr_sectors = 8 limit=256
[  376.537617][ T9454] syz.3.1229: attempt to access beyond end of device
[  376.537617][ T9454] loop3: rw=0, sector=256, nr_sectors = 8 limit=256
[  376.655716][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  376.676414][ T4270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  376.687524][ T4270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  376.705529][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  376.719671][ T9454] syz.3.1229: attempt to access beyond end of device
[  376.719671][ T9454] loop3: rw=0, sector=256, nr_sectors = 8 limit=256
[  376.733474][ T9454] syz.3.1229: attempt to access beyond end of device
[  376.733474][ T9454] loop3: rw=0, sector=256, nr_sectors = 8 limit=256
[  376.749368][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  376.756681][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  376.765949][ T9453] syz.3.1229: attempt to access beyond end of device
[  376.765949][ T9453] loop3: rw=0, sector=312, nr_sectors = 8 limit=256
[  377.007846][ T9482] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1236'.
[  377.044121][ T9486] netlink: 'syz.7.1237': attribute type 1 has an invalid length.
[  377.100405][ T9479] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1236'.
[  377.191703][ T9491] bond2: (slave gretap1): making interface the new active one
[  377.215585][ T9491] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  377.318440][ T9486] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  377.422720][ T9473] lo speed is unknown, defaulting to 1000
[  377.516163][ T9490] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  377.795561][ T5740] tipc: Left network mode
[  378.006449][ T9502] loop3: detected capacity change from 0 to 8192
[  378.213682][ T9502] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  378.239521][ T9502] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  378.472113][ T9502] REISERFS (device loop3): using ordered data mode
[  378.481344][ T9502] reiserfs: using flush barriers
[  378.632388][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.733602][ T9516] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  378.877653][ T9502] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  378.920350][ T4268] Bluetooth: hci3: command 0x0409 tx timeout
[  378.979384][ T9502] REISERFS (device loop3): checking transaction log (loop3)
[  379.024984][ T9502] REISERFS (device loop3): Using r5 hash to sort names
[  379.159700][ T9502] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  379.203326][ T9473] chnl_net:caif_netlink_parms(): no params data found
[  379.721606][ T9526] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1244'.
[  380.111425][ T9526] device bond0 entered promiscuous mode
[  380.117048][ T9526] device bond_slave_0 entered promiscuous mode
[  380.169531][ T9526] device bond_slave_1 entered promiscuous mode
[  380.219771][ T9526] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  380.267844][ T9526] device bond0 left promiscuous mode
[  380.315838][ T9526] device bond_slave_0 left promiscuous mode
[  380.337846][ T9526] device bond_slave_1 left promiscuous mode
[  380.909370][ T9550] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  380.939449][ T4270] Bluetooth: hci3: command 0x041b tx timeout
[  381.567700][ T9473] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.575274][ T9473] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.584084][ T9473] device bridge_slave_0 entered promiscuous mode
[  381.596570][ T9473] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.604912][ T9473] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.613636][ T9473] device bridge_slave_1 entered promiscuous mode
[  381.657494][ T9561] overlayfs: failed to clone upperpath
[  381.871974][ T9473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.899962][ T9473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.948322][ T9473] team0: Port device team_slave_0 added
[  381.959778][ T9473] team0: Port device team_slave_1 added
[  382.960958][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.967968][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.019763][ T4270] Bluetooth: hci3: command 0x040f tx timeout
[  383.029434][ T9473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  383.109382][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_1
[  383.283952][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  384.385252][ T9473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  385.110506][ T4270] Bluetooth: hci3: command 0x0419 tx timeout
[  386.234772][ T9593] loop8: detected capacity change from 0 to 256
[  386.714425][ T9593] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  387.262184][ T9473] device hsr_slave_0 entered promiscuous mode
[  387.275326][ T9473] device hsr_slave_1 entered promiscuous mode
[  387.284089][ T9473] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  387.304426][ T9473] Cannot create hsr debugfs directory
[  387.384961][ T5740] device hsr_slave_0 left promiscuous mode
[  387.436967][ T5740] device hsr_slave_1 left promiscuous mode
[  387.529144][ T5740] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  387.554818][ T5740] batman_adv: batadv0: Removing interface: batadv_slave_0
[  387.585374][ T5740] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  387.597355][ T5740] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.613317][ T5740] device bridge_slave_1 left promiscuous mode
[  387.626872][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.653908][ T5740] device bridge_slave_0 left promiscuous mode
[  387.686742][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.055931][ T5740] device veth1_macvtap left promiscuous mode
[  388.079463][ T5740] device veth0_macvtap left promiscuous mode
[  388.100924][ T5740] device veth1_vlan left promiscuous mode
[  388.964972][ T5740] device veth0_vlan left promiscuous mode
[  389.016203][ T4620] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  389.206575][ T4620] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  389.296820][ T4620] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  389.420771][ T4620] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.535248][ T4620] usb 9-1: Product: syz
[  389.592008][ T4620] usb 9-1: Manufacturer: syz
[  389.651830][ T4620] usb 9-1: SerialNumber: syz
[  389.771285][ T4620] usb 9-1: config 0 descriptor??
[  390.014090][ T9614] netlink: 452 bytes leftover after parsing attributes in process `syz.8.1267'.
[  390.299786][ T4620] usb 9-1: USB disconnect, device number 6
[  390.514999][ T4243] udevd[4243]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  392.028412][   T27] audit: type=1326 audit(2000000214.841:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d778e969 code=0x7fc00000
[  392.119655][ T9659] autofs4:pid:9659:autofs_fill_super: called with bogus options
[  392.667913][   T27] audit: type=1326 audit(2000000214.861:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d778e969 code=0x7fc00000
[  392.708790][   T27] audit: type=1326 audit(2000000214.861:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d778e969 code=0x7fc00000
[  392.748629][   T27] audit: type=1326 audit(2000000214.861:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d778e969 code=0x7fc00000
[  392.807105][   T27] audit: type=1326 audit(2000000214.861:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d778e969 code=0x7fc00000
[  392.845139][   T27] audit: type=1326 audit(2000000214.861:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d778e969 code=0x7fc00000
[  392.929341][   T27] audit: type=1326 audit(2000000214.861:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d778e969 code=0x7fc00000
[  392.975525][   T27] audit: type=1326 audit(2000000214.861:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d778e969 code=0x7fc00000
[  393.057408][   T27] audit: type=1326 audit(2000000214.861:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d778e969 code=0x7fc00000
[  393.080075][   T27] audit: type=1326 audit(2000000214.861:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d778e969 code=0x7fc00000
[  394.216810][ T5740] team0 (unregistering): Port device team_slave_1 removed
[  394.456420][ T5740] team0 (unregistering): Port device team_slave_0 removed
[  394.690845][ T5740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  394.811464][ T5740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  395.563553][ T5740] bond0 (unregistering): Released all slaves
[  395.664288][ T9658] netlink: 'syz.5.1276': attribute type 4 has an invalid length.
[  395.685360][ T9660] netlink: 'syz.5.1276': attribute type 4 has an invalid length.
[  395.799702][ T7167] device syz_tun left promiscuous mode
[  397.054343][ T9473] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  397.065110][ T9473] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  397.075560][ T9473] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  397.090610][ T9473] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  397.167680][ T9473] 8021q: adding VLAN 0 to HW filter on device bond0
[  397.182747][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  397.200294][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  397.212895][ T9473] 8021q: adding VLAN 0 to HW filter on device team0
[  397.225675][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  397.236113][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  397.252399][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.259646][ T5060] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.274666][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  397.288196][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  397.303733][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  397.316455][ T4731] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.323674][ T4731] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.356055][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  397.366681][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  397.376247][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  397.391570][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  397.405156][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  397.414532][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  397.424276][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  397.436751][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  397.446575][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  397.457621][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  397.467457][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  397.483817][ T9473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  397.764237][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  397.772156][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  397.787923][ T9473] 8021q: adding VLAN 0 to HW filter on device batadv0
[  398.262391][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  398.278812][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  398.313717][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  398.331355][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  398.348273][ T9473] device veth0_vlan entered promiscuous mode
[  398.357331][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  398.372095][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  398.393737][ T9473] device veth1_vlan entered promiscuous mode
[  398.418898][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  398.430630][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  398.439058][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  398.455237][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  398.468980][ T9473] device veth0_macvtap entered promiscuous mode
[  398.485539][ T9473] device veth1_macvtap entered promiscuous mode
[  398.516046][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.534410][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.544983][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.562007][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.572279][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.583672][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.595644][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_0
[  398.607701][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  398.622205][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  398.635512][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  398.647181][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  398.667244][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  398.678121][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.688784][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  398.700818][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.717459][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  398.729163][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.746867][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  398.757658][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.775582][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_1
[  398.788333][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  398.804361][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  398.818302][ T9473] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.827809][ T9473] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.844478][ T9473] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.856718][ T9473] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.975236][ T4732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.996911][ T4732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.047557][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  399.059857][ T4447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.070178][ T4447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.086478][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  400.246657][ T4268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  400.258704][ T4268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  400.267885][ T4268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  400.279081][ T4268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  400.292042][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  400.304267][ T4268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  400.361866][ T9740] lo speed is unknown, defaulting to 1000
[  400.553039][ T9740] chnl_net:caif_netlink_parms(): no params data found
[  400.654693][ T9740] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.668340][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.679200][ T9740] device bridge_slave_0 entered promiscuous mode
[  400.697343][ T9740] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.711619][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.721229][ T9740] device bridge_slave_1 entered promiscuous mode
[  400.781688][ T9740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  400.804862][ T9740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  400.865068][ T9740] team0: Port device team_slave_0 added
[  400.885676][ T9740] team0: Port device team_slave_1 added
[  400.935697][ T9740] batman_adv: batadv0: Adding interface: batadv_slave_0
[  400.950676][ T9740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.003524][ T9740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.046462][ T9740] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.063548][ T9740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.130418][ T9740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  401.385281][ T9740] device hsr_slave_0 entered promiscuous mode
[  401.396288][ T9740] device hsr_slave_1 entered promiscuous mode
[  401.407054][ T9740] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  401.423858][ T9774] overlayfs: failed to clone upperpath
[  401.429774][ T9740] Cannot create hsr debugfs directory
[  402.263294][ T4622] libceph: connect (1)[c::]:6789 error -101
[  402.284175][ T4622] libceph: mon0 (1)[c::]:6789 connect error
[  402.355851][ T9792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1286'.
[  402.379481][ T4270] Bluetooth: hci0: command 0x0409 tx timeout
[  402.391787][ T9782] ceph: No mds server is up or the cluster is laggy
[  402.745061][ T9740] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.001464][ T9740] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.237092][ T9740] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.421659][ T9740] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.576494][ T4270] Bluetooth: hci0: command 0x041b tx timeout
[  405.494788][ T9740] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  405.543600][ T9740] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  405.583945][ T9740] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  405.591229][ T4619] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  405.628243][ T9740] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  405.772124][ T9864] loop4: detected capacity change from 0 to 512
[  405.782648][ T4619] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  405.807793][ T4619] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  405.849729][ T4619] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  405.892279][ T4619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.919735][ T4619] usb 4-1: Product: syz
[  405.934462][ T4619] usb 4-1: Manufacturer: syz
[  405.951006][ T4619] usb 4-1: SerialNumber: syz
[  405.971009][ T9740] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.065625][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  406.097000][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  406.268949][ T9740] 8021q: adding VLAN 0 to HW filter on device team0
[  406.974154][ T4268] Bluetooth: hci0: command 0x040f tx timeout
[  407.258725][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  407.260179][ T4619] usb 4-1: 0:2 : does not exist
[  407.360789][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  407.529984][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.537218][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  407.569960][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  407.590906][ T9886] netlink: 'syz.5.1312': attribute type 10 has an invalid length.
[  407.607413][ T4620] usb 4-1: USB disconnect, device number 10
[  407.680086][ T9886] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  407.774409][ T5744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  407.794108][ T5744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  407.850146][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.857335][ T5744] bridge0: port 2(bridge_slave_1) entered forwarding state
[  407.860180][ T9902] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  408.006780][ T5744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  408.058499][ T5744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  408.087939][ T5744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  408.275689][ T5744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  408.640709][ T5744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  408.654330][ T5744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  408.670701][ T5744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  408.690543][ T5744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  408.709831][ T5744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  408.761131][ T5744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  408.781182][ T5744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  408.809792][ T9740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  409.041831][ T9913] loop4: detected capacity change from 0 to 2048
[  409.168006][ T9913] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  409.259414][ T4270] Bluetooth: hci0: command 0x0419 tx timeout
[  410.049285][ T4478] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  410.121005][ T4478] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28
[  410.160226][ T4478] EXT4-fs (loop4): This should not happen!! Data will be lost
[  410.160226][ T4478] 
[  410.194688][ T4478] EXT4-fs (loop4): Total free blocks count 0
[  410.215531][ T4478] EXT4-fs (loop4): Free/Dirty block details
[  410.235130][ T4478] EXT4-fs (loop4): free_blocks=4096
[  410.255012][ T4478] EXT4-fs (loop4): dirty_blocks=512
[  410.272997][ T4478] EXT4-fs (loop4): Block reservation details
[  410.292511][ T4478] EXT4-fs (loop4): i_reserved_data_blocks=32
[  410.362205][ T9473] EXT4-fs (loop4): unmounting filesystem.
[  410.830095][ T5744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  410.882278][ T5744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  411.124363][ T9740] 8021q: adding VLAN 0 to HW filter on device batadv0
[  412.963959][ T9956] loop3: detected capacity change from 0 to 128
[  413.005941][ T9956] FAT-fs (loop3): Unrecognized mount option "utf0" or missing value
[  413.614556][ T9972] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1328'.
[  416.181939][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  416.211211][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  416.259753][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  416.278044][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  416.334346][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  416.370570][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  416.400619][ T9740] device veth0_vlan entered promiscuous mode
[  416.438695][ T9740] device veth1_vlan entered promiscuous mode
[  416.513438][ T5729] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  416.543373][ T5729] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  416.575832][ T5729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  416.610280][ T5729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  416.620327][T10001] random: crng reseeded on system resumption
[  416.652337][ T9740] device veth0_macvtap entered promiscuous mode
[  416.683970][ T9740] device veth1_macvtap entered promiscuous mode
[  416.759720][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.809274][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.819161][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.889388][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.929981][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.984600][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.008747][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.065750][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.077933][ T9740] batman_adv: batadv0: Interface activated: batadv_slave_0
[  417.103937][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  417.148622][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  417.165886][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  417.177655][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  417.196938][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.212949][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.232912][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.252713][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.456879][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.467574][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.498318][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.542527][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.602319][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.654671][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.724411][ T9740] batman_adv: batadv0: Interface activated: batadv_slave_1
[  417.805062][ T9740] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.854965][ T9740] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.909634][ T9740] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.964163][ T9740] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  419.232126][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  419.286708][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  419.577849][ T5746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.630315][ T5746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.780106][ T5746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  419.883719][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.926400][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.026548][ T5718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  420.888218][T10061] kAFS: unable to lookup cell '
[  420.888218][T10061] >.��?](<�'
[  420.888218][T10061] ء��P!�0�^O��[��Z��vMT�l�A���/H=9.��b>9�F9��*��m�TS��'
[  421.281338][T10064] loop4: detected capacity change from 0 to 2048
[  421.525408][T10064] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  422.797129][T10085] netlink: 'syz.5.1352': attribute type 4 has an invalid length.
[  422.886286][T10087] netlink: 'syz.5.1352': attribute type 4 has an invalid length.
[  422.899566][T10089] overlayfs: failed to clone upperpath
[  422.915958][ T9473] EXT4-fs (loop4): unmounting filesystem.
[  423.210290][T10094] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  423.527384][T10071] loop8: detected capacity change from 0 to 40427
[  423.574858][T10105] netlink: 'syz.7.1358': attribute type 10 has an invalid length.
[  423.614036][T10071] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x3ffff
[  423.653097][T10105] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  423.675704][T10071] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x4
[  423.748407][T10071] F2FS-fs (loop8): invalid crc value
[  423.797371][T10071] F2FS-fs (loop8): Found nat_bits in checkpoint
[  423.839777][T10114] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1360'.
[  424.116594][T10071] F2FS-fs (loop8): Start checkpoint disabled!
[  424.208979][T10071] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  426.296215][T10151] loop8: detected capacity change from 0 to 8
[  426.303545][T10151] MTD: Attempt to mount non-MTD device "/dev/loop8"
[  426.360201][T10151] cramfs: Error -5 while decompressing!
[  426.366366][T10151] cramfs: ffffffff96b4c568(26)->ffff8880713be000(4096)
[  426.373474][T10151] cramfs: Error -3 while decompressing!
[  426.379127][T10151] cramfs: ffffffff96b4c582(26)->ffff8880713bf000(4096)
[  426.386246][T10151] cramfs: Error -3 while decompressing!
[  426.391937][T10151] cramfs: ffffffff96b4c59c(16)->ffff88804cd5e000(4096)
[  426.400127][T10151] cramfs: Error -5 while decompressing!
[  426.405727][T10151] cramfs: ffffffff96b4c568(26)->ffff8880713be000(4096)
[  427.857106][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1367'.
[  427.894556][T10160] loop3: detected capacity change from 0 to 1024
[  427.904461][T10158] device dummy0 entered promiscuous mode
[  427.931080][T10158] device gretap0 entered promiscuous mode
[  427.940654][T10158] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  427.948300][T10158] Cannot create hsr debugfs directory
[  429.443423][T10160] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  429.907334][T10174] loop4: detected capacity change from 0 to 1024
[  429.938255][ T4252] EXT4-fs (loop3): unmounting filesystem.
[  430.316274][T10186] Bluetooth: MGMT ver 1.22
[  430.344490][T10184] tipc: Started in network mode
[  430.387575][T10184] tipc: Node identity ac1414aa, cluster identity 4711
[  430.398585][T10184] tipc: Enabled bearer <udp:syz2>, priority 10
[  430.731934][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1375'.
[  431.367512][T10212] binder: 10211:10212 ioctl c0306201 200000001d40 returned -14
[  431.519611][ T4619] tipc: Node number set to 2886997162
[  433.208251][   T27] kauditd_printk_skb: 15 callbacks suppressed
[  433.208294][   T27] audit: type=1400 audit(2000000256.011:228): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name="/dev/fuse" pid=10225 comm="syz.4.1385"
[  433.851589][T10234] fuse: Bad value for 'fd'
[  434.289458][T10238] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1388'.
[  434.689353][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1389'.
[  437.319632][T10269] batman_adv: batadv0: Adding interface: dummy0
[  437.339386][T10269] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  437.955254][T10269] batman_adv: batadv0: Interface activated: dummy0
[  438.160616][T10269] batadv0: mtu less than device minimum
[  438.168458][T10269] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  438.180977][T10269] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  438.192808][T10269] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  438.205310][T10269] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  438.216930][T10269] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  438.228549][T10269] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  438.240462][T10269] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  438.252071][T10269] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  438.263737][T10269] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  440.279490][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  442.169415][   T27] audit: type=1800 audit(2000000264.951:229): pid=10300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1403" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  443.554721][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1404'.
[  444.591884][T10322] loop8: detected capacity change from 0 to 4096
[  444.646918][T10322] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  445.851102][T10322] EXT4-fs (loop8): unmounting filesystem.
[  445.961702][T10347] netlink: 'syz.4.1413': attribute type 2 has an invalid length.
[  448.418525][T10384] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1426'.
[  448.737169][T10384] device gretap0 entered promiscuous mode
[  449.249181][T10390] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1426'.
[  449.409603][T10390] 0��{X��: renamed from gretap0
[  449.427391][T10390] device 
30��{X�� left promiscuous mode
[  449.457250][T10390] net_ratelimit: 10 callbacks suppressed
[  449.457269][T10390] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  449.480612][T10392] bridge0: port 3(batadv0) entered blocking state
[  449.487209][T10392] bridge0: port 3(batadv0) entered disabled state
[  449.497689][T10392] device batadv0 entered promiscuous mode
[  449.525821][T10392] bridge0: port 3(batadv0) entered blocking state
[  449.532561][T10392] bridge0: port 3(batadv0) entered forwarding state
[  449.563003][T10402] device batadv0 left promiscuous mode
[  449.609646][T10402] bridge0: port 3(batadv0) entered disabled state
[  450.873391][T10409] binder_alloc: 10408: pid 10408 spamming oneway? 2 buffers allocated for a total size of 5120
[  450.948329][T10412] binder_alloc: 10408: pid 10408 spamming oneway? 3 buffers allocated for a total size of 5128
[  451.083572][T10418] 9pnet_fd: Insufficient options for proto=fd
[  451.165448][   T27] audit: type=1326 audit(2000000273.971:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.5.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5479b8e969 code=0x7fc00000
[  455.238531][T10453] overlayfs: failed to clone upperpath
[  457.944350][T10475] netlink: 9 bytes leftover after parsing attributes in process `syz.8.1443'.
[  458.969484][T10479] netlink: 5 bytes leftover after parsing attributes in process `syz.8.1443'.
[  459.020936][T10483] ALSA: mixer_oss: invalid OSS volume '/dev/capi20'
[  459.029735][T10479] 0��{X��: renamed from gretap0
[  459.101157][T10479] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  460.652314][ T4743] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  461.517899][T10508] overlayfs: failed to clone upperpath
[  461.570206][ T4743] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  461.597294][ T4743] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  461.611722][ T4743] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  462.426594][ T4743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.504102][T10502] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  462.532508][T10516] No such timeout policy "syz1"
[  463.049855][T10526] binder_alloc: 10525: binder_alloc_buf, no vma
[  463.121950][ T4622] usb 4-1: USB disconnect, device number 11
[  465.459498][   T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  466.971290][   T26] usb 5-1: config 0 has no interfaces?
[  466.979524][   T26] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  466.988627][   T26] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  466.998198][   T26] usb 5-1: Product: syz
[  467.012761][   T26] usb 5-1: Manufacturer: syz
[  467.046211][   T26] usb 5-1: config 0 descriptor??
[  467.125103][T10573] No such timeout policy "syz1"
[  467.316921][   T26] usb 5-1: USB disconnect, device number 2
��0=Ҡk"0c�C�;�.��E�@��w��ԅH
i�=�Rv��[s;ݧ�8[���UxR��@���]u+�'���,]u������g����(�����0�w��eͅz�$aṒ�u�b9�y���YE)&O�)���6��b;����yg�U�4>�rɓ��t�_Ə��ʘ�G���0��0H����VpẑE�=N�
Oeݢ�2��"y��J�I�����z�F�<@MS0�Q��up��Q��ʃ����l��~���7��M���ؤZG�k����φ��w�W���_F���c�1׍`L���챈*�]���kjF�U�)B�6�=x�}��<��i�&v�5@��3��w]+������$�6�_�)�s�\�( 
�H��co�bxz$!/	�*ǽ�	�M3��G���v[Ȁ¥mތ˖VP�CH�\��i�>�[4O���<r�m=���ڈ��x���j搆�1��Ӎ�3`��%�{d��t��yz���M�a�A�l������q�Tb�8����[k��mp/>w�O_��;�����Õ��a,��a�x�02a0�s�1��=�*�*�$��S8 ��+�W1E$�ƏmCK-��X_�^y�b1��9��Qs����'�C�9���wB�x(��ћ����"��u�ϛB��I.X��O�W��Z�tp�0��\Pւ��Xΐl�fw;hB�?��e��#`!�dܱ
�o7�Zlǂ��`�
:����[�!vHD�V����.M�g���`	hZ
q���C��>Ԗ�E8ĵ�q��%S�S��*v�i�#yIWg��Ιr�#��-�
���>6�l�c~c����נ.k
�7��a#�J#�'�N�N��&G]B�V�3�^�"��7��I+|�Ɛ������n��������^F/�8���'U���"�h7&�1x}O�Չ܌sQ"�:o�L�f��z}�on���<sG?R34x�]�lF���:wJ��fS%p�	�*�9͂��ePQ�eUo��ĝq������g�Q8'?�3�`�TH�!o;˨���N���뭶<��	�;�a�og���@�>�=L�Fl>������=O��I��������Ѕ9g�6v�8��D�QHwYǺԒ_f������|q
͙�'0Y^�}�W_����{S�q*��{��WU�J���+-TZ7c.���%�,l6P�X�6�?|��9eJ5�<��)���\�8��V��Y��%v59C%�wYz��2˾�~�����i5�g�R����(\?ņ��;�1!�Jq+t�+��5�ԍ��bN�u���aY=��H���	*9�3Z�\�P����W��'����_n\�I�2�OWE�GR^��Y^��2�n� I�ڤ˭�o�+Ӆ�J����\
�0��{c��T,���gbJM���%���K���{;. �u�iT-��[���+���x:��%y1zsY<$]cp�qo4��@D�\a�)#��Gȭ�@Ӑ	�'걜Œz!'��?C	1���y�Y �(f�1�G������WZ�ϑ��Ks~��e���q���g��O
�ﴂ3�m���m�Ў���zA���X˭e`]��߳��Ax�v
��+F��������0�����?O�}�.�<{���G��NJ�kҿ2���YÌ;Tc�.c&�͐�&j�z�RΉc�ȧ��-	��zj
�z/w$��(>��T
�|�h����3��7�`(*����x�k"޺�GzR����AoO�ź�:m@dc�~້��]�F
#���<���H�K�S�_	}� �&4�ҽ�:�B�@Y�a��H{�I��ȃ�1�/�t�683�-�H�Ӈ՟O�6d��g;��z���G�X�4W�6B�g���\�"\�V[1�C�� c��[H+���Q�K��l�,NJ��Tt0���O3 �~�7�T7�i���BJ*੗M�<O�b�4�2٬�x/��ϭ�:+��މ��3l"0�Z��d�O#��̵G<'�-�P�%�p���mxB?=̞�K��;���m$8������I@�;��͊rmDD"�����eр>w
��j&/oc���i�!i�P_yQ2�3@��S�v��yAe]Q3�L.��p9^�:��l��
�~�X����z��~M��&
H~�h� !�c�N'�оZ8í �a���πLR�%�(ޅ��]��ZG��Ӆ�Ԗ��j����3��D��C9���R8�M�2�xZ
��b��%�#R��|f����䷓�l_I��\G_b�h�Vi��?�NfgV�BpI+��h9�?�� �Mv�s����>�'�p�MX�sQ�.�`��l�q�x��I���z4Rg[�Ҫa_�^�AHz��z/f�2=ah��eRW����5:
&�6�k,c�����#��VIVHF���`�����
�W�Vo&W��l����Iir�������d�c�����2�-����e�d��D�*��.=�8󗴦��;��?�w����1)n�߱[�uy�S W��q���5�'Zb�ʌ��0y�m:��}kk��
 |�V�ג;�%�+�l�
;�H���#��o�F���J�;��
!Yg��e4���<;�ύ����#~����Op�L�}q�(Q��;��gj<���N%��Q�=@�~NHN߄0�4��	����gū���G�,S0l�,��Ðwm";����o����涠`��H�7��v�����I�j϶U�(������c�ޗ�Y�m�O[�A��Yɜ�0π`��;�W�
�d����!�xX~# �����;�����`VH�dU����+��*�us����^[6;מ�9[<�����*I41�=��E0�A��ϝ���Pn��]�-�Y�����͌��@z=�����8���ސɝ[w��+����ؿ�bMUl����e*�4x� ���8�X��p�|&�d_ʚֵ�����->�E�k]�Pת�	_pv��S.��R
��^�fx,^�}m�V�5p/ӯ��YN�ǐ�S�9i`�P�!�(�m[,|"���F ��w]�e�4w�~�
�h���29����b�ڬ@�ׯ�?��T����R���>K���yZ+bt�ڞW��-bQ�Պ	~�f�i�hv�^��|/�x�$,Y���	㣖�A��ɴ�V�G�HLSMK��*Su���L��ݭ�8*�1m&��Q��pϿ5��=�X�����
�:==�B>];�oF����j�+�X��s�m�ogI�OP瀎���p�=w�����姩!z���[ȭ�ׂG$�[�niUJ�\�B԰
ǯJ���z��䐲�G��YE�]Apaxe��&1]�/h�KDRkZ*��E�k7�ܪc�,�k*�u?'��rϓkV}'r�e��SJ�ަkpᄔ�����R�����$�H$��.ā<W�G@�?^�'��!�a�)�鈏}�"�ܩ�X�xɉR�	G�B;����j�a:N���!�&���8���B��r��S��|'V~z04`e�����u*�wB�J�ѻQ͇b���H12��$��saئr����q�{SαE��M
�<� �?��N��1�jҳձ�D�%�K�K��_�рmLؒ�Yͼ_�QM��㇡�;\��*Pt��3�+��|����Sn��l�?�(�CG���v_0��ؔ��٧x��}"�-R�!��O��k/�S����w�
�&��]-z��~��L�/'� A�T�H%���
�;gz&(�M=c�aD�=�i���Y�G�Cӫ�[>`���{������^����DY���� ��ۆIdmy/kQm����ң�9���t����
F�Vܐ|�A\`K�G���J���%�.��RDh)��T"/0�K�h�B�����&�ƈ��J�+a
z9�Y2��z����	���dX�[E�
E�<�r��V9	'Nu�xq��=x���m��Tlz�=���cpz�>�J�i�VAoU�m4T�[�-�>`��g-;��3e-��4$�녋����6#[  470.016017][T10627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1485'.
[  470.114332][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1485'.
[  471.204440][T10649] netlink: 'syz.4.1490': attribute type 10 has an invalid length.
[  471.425106][T10649] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  471.775142][T10661] device bond_slave_0 entered promiscuous mode
[  471.782124][T10661] device bond_slave_1 entered promiscuous mode
[  471.788371][T10661] device wlan1 entered promiscuous mode
[  472.026912][T10661] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  472.103931][T10661] team0: Failed to send port change of device macvlan2 via netlink (err -105)
[  472.154452][T10661] team0: Failed to send options change via netlink (err -105)
[  472.185649][T10661] team0: Port device macvlan2 added
[  472.896014][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1499'.
[  475.051437][T10730] loop8: detected capacity change from 0 to 256
[  476.479773][T10746] loop8: detected capacity change from 0 to 512
[  476.528273][T10746] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  476.904889][T10746] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  477.485452][T10746] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended
[  477.539393][T10746] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  477.602846][T10746] System zones: 0-2, 18-18, 34-34
[  477.659404][T10746] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  477.905195][T10746] EXT4-fs (loop8): 1 truncate cleaned up
[  477.911187][T10746] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  479.856941][ T9740] EXT4-fs (loop8): unmounting filesystem.
[  480.884061][T10801] batman_adv: batadv0: Adding interface: dummy0
[  480.909459][T10801] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  481.129857][T10801] batman_adv: batadv0: Interface activated: dummy0
[  481.180320][   T27] audit: type=1326 audit(2000000303.991:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.8.1531" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f278b18e969 code=0x0
[  481.270188][T10813] overlayfs: failed to clone upperpath
[  482.766197][T10828] loop8: detected capacity change from 0 to 512
[  482.835598][T10828] EXT4-fs: Ignoring removed nobh option
[  482.954136][T10828] EXT4-fs error (device loop8): __ext4_iget:5076: inode #11: block 6: comm syz.8.1536: invalid block
[  483.038885][T10828] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.1536: couldn't read orphan inode 11 (err -117)
[  483.446225][T10828] EXT4-fs (loop8): 1 truncate cleaned up
[  483.459451][T10828] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  484.486302][   T27] audit: type=1800 audit(2000000307.271:232): pid=10828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1536" name="file1" dev="loop8" ino=15 res=0 errno=0
[  484.564933][ T9740] EXT4-fs (loop8): unmounting filesystem.
[  485.385999][T10862] loop8: detected capacity change from 0 to 512
[  485.439790][T10862] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  485.457560][T10862] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  485.996926][T10865] infiniband syz1: set active
[  486.002411][T10865] infiniband syz1: added syz_tun
[  486.080186][T10865] RDS/IB: syz1: added
[  486.086036][T10865] smc: adding ib device syz1 with port count 1
[  486.092705][T10865] smc:    ib device syz1 port 1 has pnetid 
[  486.111427][T10862] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended
[  486.172283][T10862] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  486.235040][T10862] System zones: 0-2, 18-18, 34-34
[  486.321952][T10862] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  486.375984][T10862] EXT4-fs (loop8): 1 truncate cleaned up
[  486.386266][T10870] loop4: detected capacity change from 0 to 1024
[  486.460090][T10862] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  486.907097][T10150] hfsplus: b-tree write err: -5, ino 3
[  487.902579][   T27] audit: type=1800 audit(2000000310.711:233): pid=10856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1540" name="file1" dev="loop8" ino=15 res=0 errno=0
[  487.951128][T10887] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1544'.
[  488.389121][ T9740] EXT4-fs (loop8): unmounting filesystem.
[  488.685661][T10907] loop4: detected capacity change from 0 to 1024
[  490.120281][T10907] capability: warning: `syz.4.1552' uses 32-bit capabilities (legacy support in use)
[  490.282284][T10912] loop8: detected capacity change from 0 to 2048
[  490.353437][T10912] UDF-fs: warning (device loop8): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[  491.690789][T10942] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  491.757539][T10942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  492.887220][T10954] infiniband syz2: set down
[  492.891890][T10954] infiniband syz2: added ipvlan1
[  493.002830][T10954] RDS/IB: syz2: added
[  493.006933][T10954] smc: adding ib device syz2 with port count 1
[  493.013297][T10954] smc:    ib device syz2 port 1 has pnetid 
[  496.150052][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1569'.
[  497.727700][T10970] device bond3 entered promiscuous mode
[  497.844898][T10972] device ip6gretap1 entered promiscuous mode
[  497.949709][T10972] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  498.059397][T10970] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1569'.
[  498.069096][T10970] device bond3 left promiscuous mode
[  499.175580][T10970] device ip6gretap1 left promiscuous mode
[  499.200616][T10970] 8021q: adding VLAN 0 to HW filter on device bond3
[  499.391495][T10984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1567'.
[  499.848384][T10991] loop3: detected capacity change from 0 to 1024
[  500.123715][T10991] EXT4-fs: Mount option(s) incompatible with ext2
[  500.517089][T11006] loop4: detected capacity change from 0 to 1024
[  500.858848][T11011] infiniband syz1: set active
[  501.504028][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  502.188500][T11055] loop3: detected capacity change from 0 to 256
[  503.602118][ T4268] Bluetooth: hci3: command 0x0406 tx timeout
[  505.757265][T11065] netlink: 'syz.8.1594': attribute type 9 has an invalid length.
[  507.237066][T11115] loop4: detected capacity change from 0 to 64
[  515.222019][T11195] loop4: detected capacity change from 0 to 1024
[  515.222017][T11199] loop3: detected capacity change from 0 to 64
[  515.522923][T11195] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  516.372847][   T27] audit: type=1800 audit(2000000339.181:234): pid=11195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1638" name="file1" dev="loop4" ino=15 res=0 errno=0
[  516.700604][ T9473] EXT4-fs (loop4): unmounting filesystem.
[  518.643543][T11230] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1631'.
[  524.206021][ T4270] Bluetooth: hci0: command 0x0406 tx timeout
[  528.891847][T11295] lo speed is unknown, defaulting to 1000
[  529.876959][T11304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1653'.
[  529.909616][T11304] device bond3 entered promiscuous mode
[  529.931539][T11304] device ip6gretap1 entered promiscuous mode
[  530.010050][T11304] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  530.758615][T11308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1653'.
[  530.779034][T11308] device bond3 left promiscuous mode
[  530.809582][T11308] device ip6gretap1 left promiscuous mode
[  530.922402][T11308] 8021q: adding VLAN 0 to HW filter on device bond3
[  530.951290][ T5766] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  531.552386][T11320] loop8: detected capacity change from 0 to 512
[  531.905892][T11320] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  531.938521][T11320] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  532.087569][T11320] EXT4-fs error (device loop8): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.8.1656: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[  532.225265][T11320] EXT4-fs (loop8): Remounting filesystem read-only
[  532.249381][T11320] EXT4-fs error (device loop8): ext4_get_first_dir_block:3594: inode #12: comm syz.8.1656: directory missing '.'
[  532.273394][T11320] EXT4-fs (loop8): Remounting filesystem read-only
[  532.530377][ T9740] EXT4-fs (loop8): unmounting filesystem.
[  534.269219][T11359] xt_CT: You must specify a L4 protocol and not use inversions on it
[  538.240754][T11405] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1674'.
[  540.528437][T11427] netlink: 'syz.3.1681': attribute type 16 has an invalid length.
[  540.595824][T11427] netlink: 'syz.3.1681': attribute type 17 has an invalid length.
[  541.298359][T11427] infiniband syz1: set active
[  541.305675][T11427] infiniband syz1: set active
[  541.312623][T11427] infiniband syz1: set active
[  541.319586][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  541.326958][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  541.335035][T11427] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  541.366366][T11427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  541.595651][T11445] loop8: detected capacity change from 0 to 128
[  541.663429][   T27] audit: type=1800 audit(2000000364.471:235): pid=11445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1684" name="file2" dev="loop8" ino=1048629 res=0 errno=0
[  541.752227][T11445] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  541.785171][T11445] FAT-fs (loop8): Filesystem has been set read-only
[  541.818499][T11445] bio_check_eod: 3331 callbacks suppressed
[  541.818520][T11445] syz.8.1684: attempt to access beyond end of device
[  541.818520][T11445] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  541.902762][T11445] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  542.551527][T11445] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  543.582179][T11465] loop3: detected capacity change from 0 to 32768
[  543.589674][T11465] XFS: ikeep mount option is deprecated.
[  543.642858][T11472] loop8: detected capacity change from 0 to 64
[  543.681248][T11465] XFS (loop3): Mounting V5 Filesystem
[  545.624609][T11465] XFS (loop3): Ending clean mount
[  545.641212][T11465] XFS (loop3): Quotacheck needed: Please wait.
[  545.787640][T11465] XFS (loop3): Quotacheck: Done.
[  546.924712][ T4252] XFS (loop3): Unmounting Filesystem
[  547.013516][T11515] xt_CT: You must specify a L4 protocol and not use inversions on it
[  550.064478][T11526] overlayfs: failed to clone upperpath
[  552.350654][ T4270] Bluetooth: hci0: unexpected event 0x03 length: 17 > 11
[  553.154863][T11539] ptrace attach of ""[11547] was attempted by "./syz-executor exec"[11539]
[  554.379348][ T4270] Bluetooth: hci0: command 0x0409 tx timeout
[  554.624383][T11572] loop4: detected capacity change from 0 to 4096
[  556.282354][T11591] loop8: detected capacity change from 0 to 64
[  556.459277][ T4270] Bluetooth: hci0: command 0x040f tx timeout
[  560.172738][T11633] tipc: Started in network mode
[  560.192864][T11633] tipc: Node identity 080211000001, cluster identity 4711
[  560.956647][T11633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  561.246145][T11646] loop4: detected capacity change from 0 to 164
[  561.460764][T11653] --map-set only usable from mangle table
[  562.112388][ T4620] tipc: Node number set to 134418688
[  563.552026][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  563.572226][T11665] netlink: 'syz.7.1738': attribute type 16 has an invalid length.
[  563.584076][T11665] netlink: 'syz.7.1738': attribute type 17 has an invalid length.
[  563.624110][T11665] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  563.668267][T11665] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  563.710915][T11665] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  563.785517][T11665] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  563.845958][T11665] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  563.860722][T11665] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  563.934069][T11665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  564.790252][T11693] loop8: detected capacity change from 0 to 512
[  564.919953][T11705] netlink: 'syz.4.1750': attribute type 1 has an invalid length.
[  564.967176][T11693] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  565.091029][T11693] EXT4-fs (loop8): 1 truncate cleaned up
[  565.098422][T11693] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  565.208975][T11707] 8021q: adding VLAN 0 to HW filter on device bond2
[  565.282851][T11707] bond1: (slave bond2): making interface the new active one
[  565.345434][T11707] bond1: (slave bond2): Enslaving as an active interface with an up link
[  565.977960][T11710] device macsec1 entered promiscuous mode
[  565.989930][T11710] device bond1 entered promiscuous mode
[  566.078215][ T4620] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  566.102333][T11710] device bond2 entered promiscuous mode
[  566.169119][T11728] syz.7.1754 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  566.181457][T11730] netlink: 'syz.5.1755': attribute type 16 has an invalid length.
[  566.279324][T11730] netlink: 'syz.5.1755': attribute type 17 has an invalid length.
[  566.329842][ T4620] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  566.359392][ T4620] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  566.393194][ T4620] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.445591][T11733] loop3: detected capacity change from 0 to 128
[  566.455095][ T4620] usb 9-1: config 0 descriptor??
[  566.474723][T11735] loop4: detected capacity change from 0 to 64
[  566.495099][T11733] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  566.534600][T11730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  566.570378][T11733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  566.890012][ T4620] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[  567.766427][ T4620] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0005/input/input10
[  568.210749][ T4620] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0
[  568.694778][ T4620] usb 9-1: USB disconnect, device number 7
[  568.960578][T11753] xt_CT: You must specify a L4 protocol and not use inversions on it
[  572.616964][T11761] 9pnet_fd: Insufficient options for proto=fd
[  572.871549][ T9740] EXT4-fs (loop8): unmounting filesystem.
[  573.613168][T11759] fido_id[11759]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  576.041941][T11785] UBIFS error (pid: 11785): cannot open "(null)", error -22
[  578.709272][   T26] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  579.089380][   T26] usb 4-1: Using ep0 maxpacket: 32
[  579.108708][   T26] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  579.140998][   T26] usb 4-1: config 0 has no interface number 0
[  579.155776][   T26] usb 4-1: config 0 interface 184 has no altsetting 0
[  579.185471][   T26] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  579.215214][   T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.239366][   T26] usb 4-1: Product: syz
[  579.248279][   T26] usb 4-1: Manufacturer: syz
[  579.258229][T11810] netlink: 'syz.8.1770': attribute type 16 has an invalid length.
[  579.269092][   T26] usb 4-1: SerialNumber: syz
[  579.291265][   T26] usb 4-1: config 0 descriptor??
[  579.298540][T11810] netlink: 'syz.8.1770': attribute type 17 has an invalid length.
[  579.319446][   T26] smsc75xx v1.0.0
[  579.328175][   T26] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  579.356465][   T26] smsc75xx: probe of 4-1:0.184 failed with error -22
[  580.269594][T11823] sctp: [Deprecated]: syz.5.1774 (pid 11823) Use of struct sctp_assoc_value in delayed_ack socket option.
[  580.269594][T11823] Use struct sctp_sack_info instead
[  581.791136][T11810] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  581.963067][T11810] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  582.038939][   T26] usb 4-1: USB disconnect, device number 12
[  582.076001][T11810] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  582.291816][T11810] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  582.318892][T11810] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  582.388150][T11838] xt_CT: You must specify a L4 protocol and not use inversions on it
[  583.269761][T11810] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  583.489712][   T26] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  583.579432][T11810] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  583.709361][   T26] usb 4-1: Using ep0 maxpacket: 16
[  583.718095][   T26] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  583.758997][   T26] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  583.842772][   T26] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  583.891274][   T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.932354][   T26] usb 4-1: Product: syz
[  583.972556][   T26] usb 4-1: Manufacturer: syz
[  583.987629][   T26] usb 4-1: SerialNumber: syz
[  584.235055][   T26] usb 4-1: 0:2 : does not exist
[  584.257299][   T26] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  584.290804][T11853] fuse: Bad value for 'fd'
[  584.341448][   T26] usb 4-1: USB disconnect, device number 13
[  584.624585][T11856] loop4: detected capacity change from 0 to 512
[  584.696722][T11856] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  584.771706][T11856] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  584.959503][T11856] EXT4-fs (loop4): 1 truncate cleaned up
[  584.965230][T11856] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  585.876086][ T9473] EXT4-fs (loop4): unmounting filesystem.
[  587.900316][T11890] loop4: detected capacity change from 0 to 4096
[  587.918352][T11890] EXT4-fs: inline encryption not supported
[  587.931932][T11890] EXT4-fs: Ignoring removed mblk_io_submit option
[  587.954489][T11890] EXT4-fs: Invalid commit interval 1576533860, must be smaller than 21474836
[  588.054240][T11865] loop8: detected capacity change from 0 to 32768
[  588.165169][T11865] read_mapping_page failed!
[  588.230062][T11865] jfs_mount: Failed to read AGGREGATE_I
[  588.241654][T11865] Mount JFS Failure: -5
[  588.287693][T11897] netlink: 'syz.4.1795': attribute type 16 has an invalid length.
[  588.299859][T11865] jfs_mount failed w/return code = -5
[  588.374794][T11897] netlink: 'syz.4.1795': attribute type 17 has an invalid length.
[  588.473063][T11897] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  588.519652][T11897] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  588.548450][T11897] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  588.570435][T11897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  588.594450][T11910] netlink: 'syz.8.1801': attribute type 5 has an invalid length.
[  588.824345][T11905] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1799'.
[  590.864575][T11936] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  591.391587][T11936] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  591.402024][T11936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  591.411602][T11936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  591.434980][T11936] device bridge_slave_0 left promiscuous mode
[  591.467880][T11936] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.522204][T11936] device bridge_slave_1 left promiscuous mode
[  591.552235][T11936] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.575865][T11936] bond0: (slave bond_slave_0): Releasing backup interface
[  591.592969][T11947] loop4: detected capacity change from 0 to 256
[  591.608579][T11936] device bond_slave_0 left promiscuous mode
[  591.660176][T11936] bond0: (slave bond_slave_1): Releasing backup interface
[  591.689576][T11936] device bond_slave_1 left promiscuous mode
[  591.790313][T11947] loop4: detected capacity change from 256 to 64
[  592.025282][T11952] loop8: detected capacity change from 0 to 32768
[  592.122639][T11936] team0: Port device team_slave_0 removed
[  592.137833][T11952] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  592.175426][T11952] (syz.8.1814,11952,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  592.213060][T11952] ocfs2: Unmounting device (7,8) on (node local)
[  592.352057][T11936] team0: Port device team_slave_1 removed
[  592.407162][T11936] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  592.456657][T11936] batman_adv: batadv0: Removing interface: batadv_slave_0
[  592.488127][T11936] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  592.514297][T11936] batman_adv: batadv0: Removing interface: batadv_slave_1
[  592.551635][T11936] bond0: (slave wlan1): Releasing backup interface
[  592.582537][T11936] bond1: (slave vcan1): Releasing backup interface
[  592.650464][T11936] bond2: (slave gretap1): Releasing active interface
[  592.694995][T11936] team0: Port device macvlan2 removed
[  592.718180][T11936] bond3: (slave ip6gretap1): Releasing backup interface
[  592.744070][T11944] netlink: 'syz.7.1811': attribute type 10 has an invalid length.
[  592.758893][T11944] bond0: (slave wlan1): refused to change device type
[  593.653490][T11972] xt_CT: You must specify a L4 protocol and not use inversions on it
[  594.877276][T11983] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1822'.
[  595.894125][T11999] lo speed is unknown, defaulting to 1000
[  596.518776][T12014] xt_HMARK: proto mask must be zero with L3 mode
[  597.081269][T12025] IPv6: sit1: Disabled Multicast RS
[  598.925716][T12043] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1844'.
[  598.963584][T12043] device vxcan3 entered promiscuous mode
[  599.267258][T12048] loop3: detected capacity change from 0 to 2048
[  599.482099][T12048] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  600.341884][ T4252] EXT4-fs (loop3): unmounting filesystem.
[  601.410638][T12072] syz.3.1848 sent an empty control message without MSG_MORE.
[  601.653255][T12079] 9pnet_fd: Insufficient options for proto=fd
[  601.773340][T12083] overlayfs: failed to clone upperpath
[  603.282467][T12097] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  603.843264][T12097] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  603.961651][T12097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  603.970550][T12097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  604.077151][T12102] Cannot find add_set index 1 as target
[  606.627869][T12132] loop3: detected capacity change from 0 to 512
[  606.683839][T12132] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  607.262457][T12132] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8803e11c, mo2=0102]
[  607.300581][T12132] EXT4-fs (loop3): orphan cleanup on readonly fs
[  607.397528][T12132] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1870: attempt to clear invalid blocks 1024 len 1
[  607.484976][T12132] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1870: bg 0: block 361: padding at end of block bitmap is not set
[  607.596819][T12132] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  607.719869][T12132] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1870: invalid indirect mapped block 1811939328 (level 0)
[  607.773055][T12132] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1870: invalid indirect mapped block 2185560079 (level 1)
[  607.826668][T12132] EXT4-fs (loop3): 1 truncate cleaned up
[  607.833686][T12132] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  608.528590][T12132] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1870: dx entry: limit 0 != root limit 125
[  608.589290][T12132] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1870: Corrupt directory, running e2fsck is recommended
[  608.612420][T12132] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1870: dx entry: limit 0 != root limit 125
[  608.635537][T12132] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1870: Corrupt directory, running e2fsck is recommended
[  608.680731][   T27] audit: type=1800 audit(2000000431.491:236): pid=9473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name=616C6C6572202008 dev="loop4" ino=1048634 res=0 errno=0
[  608.726465][T12158] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1870: dx entry: limit 0 != root limit 125
[  608.790633][T12158] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1870: Corrupt directory, running e2fsck is recommended
[  608.834891][T12132] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1870: dx entry: limit 0 != root limit 125
[  608.861611][T12132] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1870: Corrupt directory, running e2fsck is recommended
[  609.048885][T12158] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1870: dx entry: limit 0 != root limit 125
[  609.131285][T12158] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1870: Corrupt directory, running e2fsck is recommended
[  610.317680][ T4252] EXT4-fs (loop3): unmounting filesystem.
[  610.471366][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1879'.
[  611.442990][T12177] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  612.331875][ T4268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  612.370336][ T4268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  612.382164][ T4268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  612.411678][ T4262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  612.420076][ T4262] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  612.427663][ T4262] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  612.548122][T12184] lo speed is unknown, defaulting to 1000
[  614.444824][T12206] bridge0: port 2(bridge_slave_1) entered disabled state
[  614.577479][ T4270] Bluetooth: hci4: command 0x0409 tx timeout
[  616.563063][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1895'.
[  616.619493][ T4270] Bluetooth: hci4: command 0x041b tx timeout
[  616.857005][T12234] loop3: detected capacity change from 0 to 2048
[  616.970336][T12234] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  617.103082][T12243] MPTCP: kernel_bind error, err=-99
[  617.532409][T12184] chnl_net:caif_netlink_parms(): no params data found
[  617.746851][T12254] netlink: 'syz.8.1904': attribute type 11 has an invalid length.
[  617.852541][T12254] xt_SECMARK: invalid mode: 2
[  618.048765][T12184] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.056298][T12184] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.064803][T12184] device bridge_slave_0 entered promiscuous mode
[  618.739295][ T4262] Bluetooth: hci4: command 0x040f tx timeout
[  618.798511][T12184] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.806975][T12184] bridge0: port 2(bridge_slave_1) entered disabled state
[  618.825247][T12184] device bridge_slave_1 entered promiscuous mode
[  619.088704][ T5759] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.213759][T12184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  619.410748][T12285] loop3: detected capacity change from 0 to 512
[  619.487280][T12285] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  619.506579][ T5759] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.523390][T12285] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  619.571462][T12184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  619.772057][ T5759] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.832343][T12290] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1914'.
[  619.852056][ T4252] EXT4-fs (loop3): unmounting filesystem.
[  620.058295][ T5759] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.722362][T12184] team0: Port device team_slave_0 added
[  620.789346][ T4262] Bluetooth: hci4: command 0x0419 tx timeout
[  620.826484][T12184] team0: Port device team_slave_1 added
[  621.445085][T12184] batman_adv: batadv0: Adding interface: batadv_slave_0
[  621.542567][T12184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  621.647612][T12184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  623.418386][T12304] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  623.479288][T12184] batman_adv: batadv0: Adding interface: batadv_slave_1
[  623.486358][T12184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  623.682729][T12184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  623.865783][T12304] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  623.940923][T12184] device hsr_slave_0 entered promiscuous mode
[  623.965995][T12184] device hsr_slave_1 entered promiscuous mode
[  623.993498][T12184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  624.004716][T12184] Cannot create hsr debugfs directory
[  624.078941][T12304] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.393446][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  624.406246][ T4741] kernel read not supported for file bpf-prog (pid: 4741 comm: kworker/0:14)
[  624.411136][T12304] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.946090][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1931'.
[  625.997403][T12304] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  626.077816][T12304] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  626.455122][T12304] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  626.840339][T12304] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  630.826407][T12393] Cannot find add_set index 0 as target
[  631.740971][ T5759] bond0: (slave wlan1): Releasing backup interface
[  631.832123][T12184] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  632.018318][T12184] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  632.891315][T12184] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  632.906093][T12184] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  633.155486][T12184] 8021q: adding VLAN 0 to HW filter on device bond0
[  633.186327][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  633.197405][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  633.234780][T12184] 8021q: adding VLAN 0 to HW filter on device team0
[  633.270563][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  633.301663][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  633.337477][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.344705][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  633.364548][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  633.380148][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1953'.
[  633.398149][T12409] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1953'.
[  633.591762][ T5751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  633.751170][ T5751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  634.429923][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state
[  634.437137][ T5751] bridge0: port 2(bridge_slave_1) entered forwarding state
[  634.659678][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  635.545461][ T5759] device hsr_slave_0 left promiscuous mode
[  635.699515][ T5759] device hsr_slave_1 left promiscuous mode
[  635.739890][ T5759] batman_adv: batadv0: Interface deactivated: dummy0
[  635.746689][ T5759] batman_adv: batadv0: Removing interface: dummy0
[  635.809003][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  635.829309][ T5759] batman_adv: batadv0: Removing interface: batadv_slave_0
[  636.529978][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  636.537450][ T5759] batman_adv: batadv0: Removing interface: batadv_slave_1
[  636.619434][ T5759] device bridge_slave_1 left promiscuous mode
[  636.625731][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state
[  636.781488][ T5759] device bridge_slave_0 left promiscuous mode
[  636.817879][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state
[  636.844872][T12437] syz.5.1963[12437] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  636.844996][T12437] syz.5.1963[12437] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  636.934415][ T5759] device bond1 left promiscuous mode
[  636.969328][ T5759] device bond2 left promiscuous mode
[  636.976645][ T5759] device veth1_macvtap left promiscuous mode
[  636.992667][ T5759] device veth0_macvtap left promiscuous mode
[  637.004611][ T5759] device veth1_vlan left promiscuous mode
[  637.013189][ T5759] device veth0_vlan left promiscuous mode
[  638.601130][T12456] delete_channel: no stack
[  643.470036][ T5759] bond1 (unregistering): (slave bond2): Releasing backup interface
[  643.511624][ T5759] bond2 (unregistering): Released all slaves
[  643.557198][ T5759] bond1 (unregistering): Released all slaves
[  646.128027][ T5759] team0 (unregistering): Port device team_slave_1 removed
[  646.227645][ T5759] team0 (unregistering): Port device team_slave_0 removed
[  646.308741][ T5759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  646.422210][ T5759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  647.095444][ T5759] bond0 (unregistering): Released all slaves
[  647.226429][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  647.245114][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  647.259918][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  647.300433][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'.
[  647.386703][T12184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  647.410665][T12184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  647.437500][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  647.446934][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  647.486293][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  647.512633][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  647.528629][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  647.544296][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  647.553580][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  647.604324][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  649.325931][T12546] lo speed is unknown, defaulting to 1000
[  649.604448][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  649.617928][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  649.650275][T12184] 8021q: adding VLAN 0 to HW filter on device batadv0
[  649.741741][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  649.779392][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  649.868911][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  649.884441][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  649.925464][T12184] device veth0_vlan entered promiscuous mode
[  649.942788][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  649.977263][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  650.044727][T12184] device veth1_vlan entered promiscuous mode
[  650.181553][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  650.196483][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  650.220985][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  650.325357][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  650.357901][T12184] device veth0_macvtap entered promiscuous mode
[  650.392474][T12184] device veth1_macvtap entered promiscuous mode
[  650.464074][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  650.479274][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  650.499263][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  650.539478][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  650.569222][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  650.599310][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  650.624142][T12184] batman_adv: batadv0: Interface activated: batadv_slave_0
[  650.632941][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  650.651349][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  650.682198][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  650.700878][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  650.735973][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  650.759226][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  650.775946][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  650.786756][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  650.804016][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  650.816815][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  650.832502][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  650.863291][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  650.891576][T12184] batman_adv: batadv0: Interface activated: batadv_slave_1
[  650.952735][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  650.964001][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  650.977512][T12184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  650.986798][T12184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  650.997218][T12184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  651.017425][T12184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  651.038000][T12569] tipc: Failed to remove unknown binding: 66,1,1/134418688:2453143352/2453143354
[  651.065378][T12569] tipc: Failed to remove unknown binding: 66,1,1/134418688:2453143352/2453143354
[  651.088372][T12569] tipc: Failed to remove unknown binding: 66,1,1/134418688:2453143352/2453143354
[  651.217213][T12568] lo speed is unknown, defaulting to 1000
[  651.296023][ T4486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  651.326680][ T4486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  651.392626][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  651.417177][T12559] loop3: detected capacity change from 0 to 32768
[  651.425552][ T4447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  651.443775][ T4447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  651.525059][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  651.550524][T12559] XFS (loop3): Mounting V5 Filesystem
[  651.737774][T12559] XFS (loop3): Ending clean mount
[  651.763833][T12559] XFS (loop3): Quotacheck needed: Please wait.
[  651.879762][T12559] XFS (loop3): Quotacheck: Done.
[  652.121468][ T4252] XFS (loop3): Unmounting Filesystem
[  652.698997][T12593] trusted_key: encrypted_key: insufficient parameters specified
[  656.560099][T12624] device batadv_slave_1 entered promiscuous mode
[  656.590501][T12624] device veth1_virt_wifi entered promiscuous mode
[  656.636713][T12621] device veth1_virt_wifi left promiscuous mode
[  656.669676][T12621] device batadv_slave_1 left promiscuous mode
[  660.476873][T12654] loop2: detected capacity change from 0 to 256
[  660.585819][T12654] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  660.647408][T12655] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2025'.
[  660.678012][T12657] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2025'.
[  660.706437][   T27] audit: type=1326 audit(2000000483.511:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.2.2024" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23d638e969 code=0x0
[  662.017234][T12661] syz.8.2028 (12661) used greatest stack depth: 17088 bytes left
[  662.099604][T12679] netlink: 'syz.3.2032': attribute type 1 has an invalid length.
[  662.180525][T12679] loop3: detected capacity change from 0 to 512
[  662.341346][T12679] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  662.389431][T12679] EXT4-fs (loop3): 1 truncate cleaned up
[  662.398109][T12679] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  662.767463][T12679] ext4: Unknown parameter '�Y��ڄy��Fm�����Z�1�(O[��
[  662.767463][T12679] ^��+E���]0rQ#�
��{
�̎�c�p�6;�:�P�r�f�l���IG>���?υ-H"�&F�)�!I�|.z'
[  663.309257][ T4620] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  663.351360][ T5765] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.477749][T12690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  663.511527][ T4620] usb 4-1: unable to get BOS descriptor or descriptor too short
[  663.539974][ T4620] usb 4-1: not running at top speed; connect to a high speed hub
[  663.562652][ T4620] usb 4-1: config 1 has an invalid descriptor of length 3, skipping remainder of the config
[  663.568004][ T5765] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.603639][ T4620] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  663.641670][ T4620] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  663.661623][ T4620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.679252][ T4620] usb 4-1: Product: syz
[  663.692055][ T4620] usb 4-1: Manufacturer: syz
[  663.697071][ T4620] usb 4-1: SerialNumber: syz
[  663.813741][ T5765] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  664.026363][ T4620] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  664.037628][ T4620] usb 4-1: unit 5 not found!
[  664.068677][ T4620] usb 4-1: USB disconnect, device number 14
[  665.033674][ T5765] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.135678][ T4252] EXT4-fs (loop3): unmounting filesystem.
[  665.268444][ T4262] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  665.279532][ T4262] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  665.290014][ T4262] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  665.301101][ T4262] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  665.310130][ T4262] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  665.317467][ T4262] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  665.448568][T12712] lo speed is unknown, defaulting to 1000
[  665.514249][T12711] lo speed is unknown, defaulting to 1000
[  665.564962][T12722] loop3: detected capacity change from 0 to 512
[  665.584128][T12722] EXT4-fs: Ignoring removed i_version option
[  665.628809][T12722] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  666.050745][T12722] EXT4-fs (loop3): 1 truncate cleaned up
[  666.059351][T12722] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  666.700348][ T4252] EXT4-fs (loop3): unmounting filesystem.
[  667.419369][ T4270] Bluetooth: hci3: command 0x0409 tx timeout
[  667.710706][T12712] chnl_net:caif_netlink_parms(): no params data found
[  668.641637][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2058'.
[  668.841264][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2059'.
[  669.216102][T12712] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.249428][T12712] bridge0: port 1(bridge_slave_0) entered disabled state
[  669.267754][T12712] device bridge_slave_0 entered promiscuous mode
[  669.308864][T12712] bridge0: port 2(bridge_slave_1) entered blocking state
[  669.346903][T12774] overlayfs: failed to clone upperpath
[  669.348851][T12712] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.390425][T12712] device bridge_slave_1 entered promiscuous mode
[  669.499258][ T4270] Bluetooth: hci3: command 0x041b tx timeout
[  669.598538][T12712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  669.739908][ T5765] device hsr_slave_0 left promiscuous mode
[  669.746663][ T5765] device hsr_slave_1 left promiscuous mode
[  669.768563][ T5765] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  669.776700][ T5765] batman_adv: batadv0: Removing interface: batadv_slave_0
[  669.787767][ T5765] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  669.795751][ T5765] batman_adv: batadv0: Removing interface: batadv_slave_1
[  669.831238][ T5765] device bridge_slave_1 left promiscuous mode
[  669.863666][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.889986][ T5765] device bridge_slave_0 left promiscuous mode
[  669.904902][T12783] syz.3.2064[12783] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  669.905007][T12783] syz.3.2064[12783] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  669.917625][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state
[  670.304397][ T5765] device veth1_macvtap left promiscuous mode
[  670.332659][ T5765] device veth0_macvtap left promiscuous mode
[  670.360350][ T5765] device veth1_vlan left promiscuous mode
[  670.366237][ T5765] device veth0_vlan left promiscuous mode
[  671.656628][ T4270] Bluetooth: hci3: command 0x040f tx timeout
[  673.620191][ T5765] team0 (unregistering): Port device team_slave_1 removed
[  674.050743][ T4262] Bluetooth: hci3: command 0x0419 tx timeout
[  674.178594][ T5765] team0 (unregistering): Port device team_slave_0 removed
[  674.286963][ T5765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  674.428785][ T5765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  675.470251][ T5765] bond0 (unregistering): Released all slaves
[  675.574575][T12712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  675.642822][T12797] netlink: 'syz.7.2069': attribute type 1 has an invalid length.
[  675.675453][T12801] device veth3 entered promiscuous mode
[  675.703080][T12813] infiniband syz1: set active
[  675.721845][T12813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  675.737509][T12813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  675.747338][T12813] device bridge_slave_0 left promiscuous mode
[  675.754926][T12813] bridge0: port 1(bridge_slave_0) entered disabled state
[  675.771934][T12813] device bridge_slave_1 left promiscuous mode
[  675.791037][T12813] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.802337][T12813] bond0: (slave bond_slave_0): Releasing backup interface
[  675.847719][T12813] bond0: (slave bond_slave_1): Releasing backup interface
[  675.956598][T12813] team0: Port device team_slave_0 removed
[  675.966722][T12813] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  675.982557][T12813] batman_adv: batadv0: Removing interface: batadv_slave_0
[  675.996487][T12813] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  676.009349][T12813] batman_adv: batadv0: Removing interface: batadv_slave_1
[  676.026585][T12813] bridge2: port 1(veth3) entered disabled state
[  676.036097][T12813] bond3: (slave ip6gretap1): Releasing backup interface
[  676.063108][T12816] team0: Mode changed to "activebackup"
[  676.079472][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2075'.
[  677.260899][T12712] team0: Port device team_slave_0 added
[  677.338194][T12712] team0: Port device team_slave_1 added
[  782.819068][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  782.826119][    C0] 	(detected by 0, t=10502 jiffies, g=77901, q=46 ncpus=2)
[  782.833429][    C0] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4295015397-4295004894), jiffies_till_next_fqs=1, root ->qsmask 0x0
[  782.846818][    C0] rcu: rcu_preempt kthread starved for 10504 jiffies! g77901 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  782.858041][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  782.868060][    C0] rcu: RCU grace-period kthread stack dump:
[  782.874061][    C0] task:rcu_preempt     state:R  running task     stack:26496 pid:16    ppid:2      flags:0x00004000
[  782.885014][    C0] Call Trace:
[  782.888320][    C0]  <TASK>
[  782.891482][    C0]  __schedule+0x10e9/0x40d0
[  782.896055][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  782.901332][    C0]  ? _raw_spin_unlock+0x40/0x40
[  782.906706][    C0]  ? release_firmware_map_entry+0x18a/0x18a
[  782.912719][    C0]  schedule+0xb9/0x180
[  782.916852][    C0]  schedule_timeout+0x15c/0x280
[  782.921754][    C0]  ? console_conditional_schedule+0x40/0x40
[  782.927804][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  782.933840][    C0]  ? update_process_times+0x1b0/0x1b0
[  782.939277][    C0]  ? prepare_to_swait_event+0x335/0x350
[  782.944974][    C0]  rcu_gp_fqs_loop+0x2f2/0x1310
[  782.949864][    C0]  ? rcu_gp_kthread+0x380/0x380
[  782.954747][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  782.960767][    C0]  ? rcu_gp_init+0x14b0/0x14b0
[  782.965751][    C0]  ? rcu_gp_cleanup+0xb4c/0xca0
[  782.970651][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  782.975893][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  782.981239][    C0]  rcu_gp_kthread+0x95/0x380
[  782.985887][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  782.991068][    C0]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  782.997032][    C0]  ? __kthread_parkme+0x162/0x1c0
[  783.002139][    C0]  kthread+0x29d/0x330
[  783.006278][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  783.011431][    C0]  ? kthread_blkcg+0xd0/0xd0
[  783.016076][    C0]  ret_from_fork+0x1f/0x30
[  783.020551][    C0]  </TASK>
[  783.023598][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  783.029954][    C0] Sending NMI from CPU 0 to CPUs 1:
[  783.035179][    C1] NMI backtrace for cpu 1
[  783.035204][    C1] CPU: 1 PID: 12856 Comm: syz.5.2088 Not tainted 6.1.140-syzkaller #0
[  783.035222][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  783.035232][    C1] RIP: 0010:pvclock_clocksource_read+0xe7/0x760
[  783.035254][    C1] Code: df 48 89 54 24 38 4c 89 74 24 28 42 0f b6 04 22 84 c0 0f 85 45 01 00 00 43 0f b6 04 26 84 c0 0f 85 7f 01 00 00 8b 1f 0f 01 f9 <66> 90 48 89 d5 48 8b 8c 24 90 00 00 00 42 0f b6 0c 21 84 c9 0f 85
[  783.035269][    C1] RSP: 0018:ffffc900001e0d60 EFLAGS: 00000046
[  783.035284][    C1] RAX: 00000000296aeb2d RBX: 0000000000000008 RCX: 0000000000000001
[  783.035296][    C1] RDX: 0000000000000193 RSI: ffffffff8f7cd05c RDI: ffffffff8f7cd040
[  783.035308][    C1] RBP: ffffc900001e0ef8 R08: ffffffff8f7cd048 R09: ffffffff8f7cd058
[  783.035321][    C1] R10: ffffffff8f7cd050 R11: ffffffff8f7cd043 R12: dffffc0000000000
[  783.035334][    C1] R13: dffffc0000000000 R14: 1ffffffff1ef9a08 R15: ffffffff8c3d0978
[  783.035348][    C1] FS:  00007f547aa0d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  783.035363][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  783.035375][    C1] CR2: 0000200000ffb020 CR3: 0000000051127000 CR4: 00000000003506e0
[  783.035390][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  783.035400][    C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  783.035410][    C1] Call Trace:
[  783.035417][    C1]  <IRQ>
[  783.035424][    C1]  ? seqcount_lockdep_reader_access+0x15c/0x1c0
[  783.035451][    C1]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  783.035478][    C1]  kvm_sched_clock_read+0x14/0x40
[  783.035504][    C1]  sched_clock_cpu+0x6e/0x250
[  783.035523][    C1]  ? lapic_next_event+0x5b/0x70
[  783.035547][    C1]  ? __sched_clock_gtod_offset+0xe0/0xe0
[  783.035573][    C1]  irqtime_account_irq+0x6a/0x1b0
[  783.035601][    C1]  __irq_exit_rcu+0x8d/0x220
[  783.035627][    C1]  ? irq_exit_rcu+0x20/0x20
[  783.035657][    C1]  irq_exit_rcu+0x5/0x20
[  783.035681][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  783.035709][    C1]  </IRQ>
[  783.035713][    C1]  <TASK>
[  783.035719][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  783.035736][    C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40
[  783.035760][    C1] Code: f5 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ce 2e 4a f7 48 89 df e8 26 f4 4a f7 e8 91 f6 6d f7 fb bf 01 00 00 00 <e8> 36 71 3e f7 65 8b 05 d7 32 e9 75 85 c0 74 02 5b c3 e8 24 44 e7
[  783.035775][    C1] RSP: 0018:ffffc900041e7bb8 EFLAGS: 00000286
[  783.035788][    C1] RAX: d9d4665670175800 RBX: ffff8880575a1280 RCX: d9d4665670175800
[  783.035801][    C1] RDX: dffffc0000000000 RSI: ffffffff8a6c0000 RDI: 0000000000000001
[  783.035813][    C1] RBP: ffff8880575a1718 R08: dffffc0000000000 R09: ffffed100aeb4251
[  783.035825][    C1] R10: ffffed100aeb4251 R11: 1ffff1100aeb4250 R12: 1ffff1100aeb42e3
[  783.035838][    C1] R13: 0000000000000021 R14: dffffc0000000000 R15: 0000000000000000
[  783.035859][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  783.035882][    C1]  get_signal+0x1163/0x1350
[  783.035919][    C1]  arch_do_signal_or_restart+0xb0/0x1230
[  783.035942][    C1]  ? __ia32_sys_rt_sigreturn+0x660/0x790
[  783.035967][    C1]  ? load_gs_index+0x120/0x120
[  783.035987][    C1]  ? get_sigframe_size+0x10/0x10
[  783.036018][    C1]  ? exit_to_user_mode_loop+0x3b/0x110
[  783.036052][    C1]  exit_to_user_mode_loop+0x70/0x110
[  783.036076][    C1]  exit_to_user_mode_prepare+0xb1/0x140
[  783.036100][    C1]  syscall_exit_to_user_mode+0x16/0x40
[  783.036117][    C1]  do_syscall_64+0x58/0xa0
[  783.036138][    C1]  ? clear_bhb_loop+0x60/0xb0
[  783.036153][    C1]  ? clear_bhb_loop+0x60/0xb0
[  783.036171][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  783.036197][    C1] RIP: 0033:0x7f5479b8e967
[  783.036216][    C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  783.036230][    C1] RSP: 002b:00007f547aa0d0e8 EFLAGS: 00000246
[  783.036243][    C1] RAX: 00000000000000ca RBX: 00007f5479db5fa8 RCX: 00007f5479b8e969
[  783.036254][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5479db5fa8
[  783.036265][    C1] RBP: 00007f5479db5fa0 R08: 0000000000000000 R09: 0000000000000000
[  783.036275][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5479db5fac
[  783.036286][    C1] R13: 0000000000000000 R14: 00007ffd925aa110 R15: 00007ffd925aa1f8
[  783.036306][    C1]  </TASK>
[  783.200812][ T3624] udevd[3624]: worker [12857] /devices/virtual/block/loop3 is taking a long time