last executing test programs:

1m9.821123657s ago: executing program 0 (id=65):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = inotify_init()
socket$unix(0x1, 0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1m9.614295496s ago: executing program 0 (id=68):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)

1m7.636661622s ago: executing program 0 (id=77):
listen(0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r1 = getpid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)

1m7.315822356s ago: executing program 4 (id=79):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000)

1m7.062239738s ago: executing program 4 (id=84):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38)
write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
close_range(r2, r3, 0x0)

1m6.499960032s ago: executing program 0 (id=86):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840)={[{@cruft}, {@check_relaxed, 0x0}, {}, {@check_strict}, {@map_off}, {@nocompress, 0x41}, {@session={'session', 0x3d, 0x2b}}, {}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@unhide}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@check_relaxed}]}, 0x2, 0x699, &(0x7f0000000140)="$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")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd27, 0x25dfdbfc, {0xa, 0x10, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x7, 0x10}}, 0x1c}, 0x1, 0x0, 0x0, 0x6c000805}, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @remote, 0x7}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r1, &(0x7f00000076c0)={0x2020}, 0x2020)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r5, 0x0)

1m6.142627798s ago: executing program 0 (id=89):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x34000001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r3, 0x400, 0x1)
fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38)
write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
close_range(r0, r1, 0x0)
pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{}], 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18)
r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_register(r9, &(0x7f0000000280)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46, 0x50, 0x46, 0x43, 0x4f]}, 0x2e)

1m6.142264897s ago: executing program 4 (id=90):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x22020600)
mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0)

1m5.753688535s ago: executing program 4 (id=92):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
mount$tmpfs(0x0, 0x0, 0x0, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@lazytime}]}, 0x3, 0x572, &(0x7f0000000c40)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

1m5.199299019s ago: executing program 4 (id=100):
r0 = syz_open_dev$loop(&(0x7f0000001300), 0x2, 0x101400)
ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f0000001340)=0x800)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000380)=ANY=[@ANYBLOB="a0fe00000b0000008f0c8d85008a8a01824b6b181a5c0db1579f395f5f53710008d0a3802664aaa58f0c798cbbb1741ae49c1ffa7ef8cde6a4f48db5101011a314b44da5f6916a3661c44c2f7bb777b1f540833c4d32e8cfc3b10c84042c4cc95d5572561c09ccffe142376fd636679353800f69baae4b9d9d4052f59409f74071017f273c685f746d0dde3546b775b4ff5572d84afe238e7c08b0db2a6dea3f603d47e2e2d709dd547e3a131b"])
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)}, 0x400c0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000480)={@local, @empty, @dev={0xfe, 0x80, '\x00', 0x10}, 0xaea5, 0x4, 0x5, 0x400, 0x200, 0x1400002})
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x800000, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
fdatasync(r4)

1m4.877940643s ago: executing program 32 (id=100):
r0 = syz_open_dev$loop(&(0x7f0000001300), 0x2, 0x101400)
ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f0000001340)=0x800)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000380)=ANY=[@ANYBLOB="a0fe00000b0000008f0c8d85008a8a01824b6b181a5c0db1579f395f5f53710008d0a3802664aaa58f0c798cbbb1741ae49c1ffa7ef8cde6a4f48db5101011a314b44da5f6916a3661c44c2f7bb777b1f540833c4d32e8cfc3b10c84042c4cc95d5572561c09ccffe142376fd636679353800f69baae4b9d9d4052f59409f74071017f273c685f746d0dde3546b775b4ff5572d84afe238e7c08b0db2a6dea3f603d47e2e2d709dd547e3a131b"])
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)}, 0x400c0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000480)={@local, @empty, @dev={0xfe, 0x80, '\x00', 0x10}, 0xaea5, 0x4, 0x5, 0x400, 0x200, 0x1400002})
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x800000, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
fdatasync(r4)

1m0.607794241s ago: executing program 2 (id=130):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r0=>0x0})
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x3, '\x00', r0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x18, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x2000000000000183, &(0x7f00000002c0)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x11, 0x0, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0)

1m0.555036423s ago: executing program 3 (id=131):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200030f0000002cbd7040fedbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e20ac1414bb00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x8000)

1m0.298609164s ago: executing program 2 (id=132):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000055007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x0)
symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r4, &(0x7f0000000080)='./file0\x00')

1m0.055927494s ago: executing program 2 (id=134):
socket$inet6(0xa, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00')
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1, 0x800, 0xfff)

58.858161867s ago: executing program 2 (id=135):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840)={[{@cruft}, {@check_relaxed, 0x0}, {}, {@check_strict}, {@map_off}, {@nocompress, 0x41}, {@session={'session', 0x3d, 0x2b}}, {}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@unhide}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@check_relaxed}]}, 0x2, 0x699, &(0x7f0000000140)="$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")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd27, 0x25dfdbfc, {0xa, 0x10, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x7, 0x10}}, 0x1c}, 0x1, 0x0, 0x0, 0x6c000805}, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @remote, 0x7}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
sendto$inet6(r1, 0x0, 0x0, 0x44044840, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r5, 0x0)

58.78955278s ago: executing program 3 (id=136):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14)
unshare(0x62040200)
close(r0)

57.801697304s ago: executing program 2 (id=139):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x1ff, 0x3)

56.308703969s ago: executing program 2 (id=145):
socket$inet6(0xa, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00')
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1, 0x800, 0xfff)

55.741405194s ago: executing program 33 (id=145):
socket$inet6(0xa, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00')
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1, 0x800, 0xfff)

55.699531166s ago: executing program 0 (id=147):
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r0, 0x0, 0xd0, 0x0, &(0x7f0000000d80))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
unshare(0xa000200)
semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x40, 0x1800}], 0x1, 0x0)
unshare(0x20060400)

55.589171771s ago: executing program 34 (id=147):
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r0, 0x0, 0xd0, 0x0, &(0x7f0000000d80))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
unshare(0xa000200)
semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x40, 0x1800}], 0x1, 0x0)
unshare(0x20060400)

55.565699322s ago: executing program 3 (id=148):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x8c, 0x0, 0x1, [@generic="1a04268f"]}]}]}, 0x20}}, 0x0)

55.303016063s ago: executing program 3 (id=149):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840)={[{@cruft}, {@check_relaxed, 0x0}, {}, {@check_strict}, {@map_off}, {@nocompress, 0x41}, {@session={'session', 0x3d, 0x2b}}, {}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@unhide}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@check_relaxed}]}, 0x2, 0x699, &(0x7f0000000140)="$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")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd27, 0x25dfdbfc, {0xa, 0x10, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x7, 0x10}}, 0x1c}, 0x1, 0x0, 0x0, 0x6c000805}, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @remote, 0x7}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
sendto$inet6(r1, 0x0, 0x0, 0x44044840, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r5, 0x0)

54.863882522s ago: executing program 3 (id=151):
mknod(0x0, 0x8001420, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = socket(0x1d, 0x2, 0x6)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

54.328086426s ago: executing program 3 (id=152):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f00000086c0)=[{{&(0x7f0000000b80)={0xa, 0x4e22, 0x9, @remote, 0x8}, 0x1c, 0x0}}], 0x1, 0x20048810)

54.077858637s ago: executing program 35 (id=152):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f00000086c0)=[{{&(0x7f0000000b80)={0xa, 0x4e22, 0x9, @remote, 0x8}, 0x1c, 0x0}}], 0x1, 0x20048810)

46.319177707s ago: executing program 1 (id=174):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4800)

46.216120972s ago: executing program 1 (id=175):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r3, &(0x7f0000000b80)="be", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x2313, @loopback, 0x100000a}, 0x1c)

46.118088466s ago: executing program 1 (id=176):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x42, 0x40, 0x42}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r4, r3}, 0xc)

46.059481299s ago: executing program 1 (id=177):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840)={[{@cruft}, {@check_relaxed, 0x0}, {}, {@check_strict}, {@map_off}, {@nocompress, 0x41}, {@session={'session', 0x3d, 0x2b}}, {}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@unhide}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@check_relaxed}]}, 0x2, 0x699, &(0x7f0000000140)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd27, 0x25dfdbfc, {0xa, 0x10, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x7, 0x10}}, 0x1c}, 0x1, 0x0, 0x0, 0x6c000805}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000076c0)={0x2020}, 0x2020)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44044840, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r3, 0x0)

45.849782608s ago: executing program 1 (id=178):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

44.685642029s ago: executing program 5 (id=101):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR")
fallocate(0xffffffffffffffff, 0x2c, 0x8, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000088b00085"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
getpid()
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x4, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11)
r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0))
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004fcd2467f73a0909ada99ef59a24e4b51c57c9c511101fe18f14771b92f0809d6a48d7f1fff92e7a56d629c64429b17b971a283a32cd1ebcd0c65a73f5a0cef0ad5ad6487bba49c31b262167bffa124a8d422bc445d00c30ce44da"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x78}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))
mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x'])

44.461140499s ago: executing program 1 (id=179):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGRAB(r4, 0x40044590, 0x0)
close(r4)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0)
r5 = io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0)
r6 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r5})
io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r5], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000440), 0x0)
unlink(&(0x7f0000000380)='./file0\x00')
syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff)

44.039372337s ago: executing program 36 (id=179):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGRAB(r4, 0x40044590, 0x0)
close(r4)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0)
r5 = io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0)
r6 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r5})
io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r5], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000440), 0x0)
unlink(&(0x7f0000000380)='./file0\x00')
syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff)

44.024661368s ago: executing program 5 (id=181):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x6c, 0x0)

43.936230792s ago: executing program 5 (id=182):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000004c0)={[{@nodiscard}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

43.29165879s ago: executing program 5 (id=183):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r2 = openat$cgroup_ro(r0, &(0x7f0000000500)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './bus', [{0x20, '$^:@'}, {0x20, '\x00'}, {0x20, 'tbf\x00'}, {0x20, '#}'}, {0x20, 'memory.current\x00'}]}, 0x28)
ftruncate(r2, 0xb35)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x12, 0x0}, &(0x7f0000000600)=0x10)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r5 = io_uring_setup(0x30df, &(0x7f0000000000)={0x0, 0x55d0, 0x800, 0x0, 0x1d})
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2e190000270001007000fbdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'hsr0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x2, 0x0, 0x9, 0x6}, {0x12, 0x2, 0xffff, 0x401, 0x8001}, 0x8, 0x5, 0x157}}, @TCA_TBF_RATE64={0xc, 0x4, 0x18445d33ed3a2610}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
setsockopt$inet6_tcp_int(r4, 0x6, 0xc, &(0x7f0000000000)=0x6, 0x4)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)

28.135313265s ago: executing program 37 (id=183):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r2 = openat$cgroup_ro(r0, &(0x7f0000000500)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './bus', [{0x20, '$^:@'}, {0x20, '\x00'}, {0x20, 'tbf\x00'}, {0x20, '#}'}, {0x20, 'memory.current\x00'}]}, 0x28)
ftruncate(r2, 0xb35)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x12, 0x0}, &(0x7f0000000600)=0x10)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r5 = io_uring_setup(0x30df, &(0x7f0000000000)={0x0, 0x55d0, 0x800, 0x0, 0x1d})
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2e190000270001007000fbdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'hsr0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x2, 0x0, 0x9, 0x6}, {0x12, 0x2, 0xffff, 0x401, 0x8001}, 0x8, 0x5, 0x157}}, @TCA_TBF_RATE64={0xc, 0x4, 0x18445d33ed3a2610}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
setsockopt$inet6_tcp_int(r4, 0x6, 0xc, &(0x7f0000000000)=0x6, 0x4)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)

9.600878429s ago: executing program 8 (id=282):
r0 = socket$inet6(0xa, 0x3, 0x8)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x4})
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000540)=0x2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0)

9.377429089s ago: executing program 8 (id=284):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4)

9.192710617s ago: executing program 8 (id=285):
r0 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xffdffffd, @dev={0xfe, 0x80, '\x00', 0x2}, 0x4}, 0x1000, {[0x9, 0x2, 0xfffffffe, 0xfffffcf9, 0x0, 0x40001, 0x2, 0x5]}}, 0x5c)

9.008821295s ago: executing program 8 (id=287):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840)={[{@cruft}, {@check_relaxed, 0x0}, {}, {@check_strict}, {@map_off}, {@nocompress, 0x41}, {@session={'session', 0x3d, 0x2b}}, {}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@unhide}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@check_relaxed}]}, 0x2, 0x699, &(0x7f0000000140)="$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")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000076c0)={0x2020}, 0x2020)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44044840, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r4, 0x0)

8.65041542s ago: executing program 8 (id=290):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0)
write$P9_RLERRORu(r1, &(0x7f00000014c0)=ANY=[], 0xe)

8.189675431s ago: executing program 8 (id=293):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x1}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)

7.604369426s ago: executing program 38 (id=293):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x1}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)

4.356372789s ago: executing program 9 (id=315):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400)=<r1=>0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])

3.745915856s ago: executing program 9 (id=317):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

3.634205001s ago: executing program 7 (id=318):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
setuid(0xee01)

3.42377753s ago: executing program 7 (id=320):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0)

3.076851885s ago: executing program 7 (id=321):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000d40000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290)

2.894089763s ago: executing program 9 (id=322):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0xffff, 0x2}}}, 0x24}}, 0x20004084)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.425701513s ago: executing program 6 (id=325):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r1 = dup(r0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb)

2.227957582s ago: executing program 6 (id=326):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x54b}, 0x18)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$nci(r2, 0x0, 0xfffffeea)

2.033062751s ago: executing program 6 (id=327):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x6, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB, @ANYRES64=r3], 0x20)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0)
preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000840)=""/122, 0x7a}, {&(0x7f00000006c0)=""/253, 0xfd}, {&(0x7f00000007c0)=""/109, 0x6d}], 0x3, 0xffff, 0x3)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, 0x0, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10)
r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10)
setresuid(0x0, 0xee00, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, 0x0)
io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)

1.014279186s ago: executing program 9 (id=328):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840)={[{@cruft}, {@check_relaxed, 0x0}, {}, {@check_strict}, {@map_off}, {@nocompress, 0x41}, {@session={'session', 0x3d, 0x2b}}, {}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@unhide}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@check_relaxed}]}, 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @remote, 0x7}, 0x1c)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44044840, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r4, 0x0)

967.857248ms ago: executing program 6 (id=329):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYBLOB="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", @ANYBLOB="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", @ANYRESOCT=0x0], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fdatasync(0xffffffffffffffff)

892.203741ms ago: executing program 7 (id=330):
r0 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x5121, 0x0, 0x3, 0x258}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

837.081544ms ago: executing program 6 (id=331):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000001c0), 0x4)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10)

557.646535ms ago: executing program 9 (id=332):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)

367.936834ms ago: executing program 7 (id=333):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10)
r2 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

234.83851ms ago: executing program 6 (id=334):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000400], 0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000001000041000000feffffb10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000"]}, 0x108)

142.674254ms ago: executing program 7 (id=335):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000840)={@ipv4={'\x00', '\xff\xff', @remote}, 0x6, 0x1, 0x3, 0x9, 0x0, 0x1ff}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0xd, 0x7fff0000}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$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")
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

64.953537ms ago: executing program 4 (id=194):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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")

0s ago: executing program 9 (id=336):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
fdatasync(0xffffffffffffffff)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r2, 0x40095505, 0x0)

kernel console output (not intermixed with test programs):

ss (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.794679][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.808570][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.830495][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.840978][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.850920][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.860915][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.876629][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.884971][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.893947][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.905850][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.916047][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.926613][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.936790][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.975229][ T4354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.988436][ T4354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.093254][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.221713][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.292784][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.300860][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.401012][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.515112][ T4281] Bluetooth: hci1: command 0x0419 tx timeout
[   66.564712][ T4281] Bluetooth: hci0: command 0x0419 tx timeout
[   66.564981][ T4283] Bluetooth: hci3: command 0x0419 tx timeout
[   66.992939][ T4280] Bluetooth: hci4: command 0x0419 tx timeout
[   66.999133][ T4280] Bluetooth: hci2: command 0x0419 tx timeout
[   67.125211][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.153524][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.173277][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.177886][ T4354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.190814][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.198903][ T4354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.207243][ T4412] Zero length message leads to an empty skb
[   67.230420][ T4409] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.231147][ T4414] ip6t_rpfilter: unknown options
[   67.282041][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.291070][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.400312][ T4409] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.423836][ T4416] netlink: 'syz.2.13': attribute type 3 has an invalid length.
[   67.555727][ T4409] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.653388][ T4420] Illegal XDP return value 4292269104 on prog  (id 10) dev syz_tun, expect packet loss!
[   67.699705][ T4424] 9pnet_fd: Insufficient options for proto=fd
[   67.747912][ T4409] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.808118][ T4428] loop1: detected capacity change from 0 to 512
[   67.810008][ T4426] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[   67.826156][ T4428] EXT4-fs: Ignoring removed bh option
[   67.835436][ T4428] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   67.962911][ T4426] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[   67.983435][ T4426] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[   67.986267][ T4409] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.992111][ T4428] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.17: inode #1: comm syz.1.17: iget: illegal inode #
[   68.010254][ T4409] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.029626][ T4409] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.057051][ T4409] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.057733][ T4428] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.17: error while reading EA inode 1 err=-117
[   68.116036][ T4428] EXT4-fs (loop1): 1 orphan inode deleted
[   68.135165][ T4428] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   68.228324][ T4437] loop2: detected capacity change from 0 to 164
[   68.369247][ T4275] EXT4-fs (loop1): unmounting filesystem.
[   69.062807][ T4443] syz.3.21 (4443) used greatest stack depth: 20848 bytes left
[   69.222103][ T4460] 9pnet_fd: Insufficient options for proto=fd
[   69.434055][ T4466] netlink: 172 bytes leftover after parsing attributes in process `syz.2.32'.
[   69.481907][ T4468] loop1: detected capacity change from 0 to 1024
[   69.519622][ T4468] EXT4-fs: Ignoring removed oldalloc option
[   69.552830][ T4468] EXT4-fs: Ignoring removed nomblk_io_submit option
[   69.654457][ T4468] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   69.859435][ T4480] loop3: detected capacity change from 0 to 512
[   69.943709][ T4485] device syzkaller0 entered promiscuous mode
[   69.963300][ T4480] =======================================================
[   69.963300][ T4480] WARNING: The mand mount option has been deprecated and
[   69.963300][ T4480]          and is ignored by this kernel. Remove the mand
[   69.963300][ T4480]          option from the mount to silence this warning.
[   69.963300][ T4480] =======================================================
[   70.023007][ T4468] syz.1.31 (4468) used greatest stack depth: 20560 bytes left
[   70.093968][ T4275] EXT4-fs (loop1): unmounting filesystem.
[   70.335857][ T4480] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2769: inode #11: comm syz.3.35: corrupted xattr block 95
[   70.374207][ T4480] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2819: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   70.418646][ T4497] 9pnet_fd: Insufficient options for proto=fd
[   70.462268][ T4500] loop2: detected capacity change from 0 to 128
[   70.470807][ T4480] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.35: bg 0: block 7: invalid block bitmap
[   70.490931][ T4498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.44'.
[   70.522826][ T4311] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   70.540411][ T4480] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem
[   70.552526][ T4500] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   70.566514][ T4500] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   70.626229][ T4480] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2935: inode #11: comm syz.3.35: corrupted xattr block 95
[   70.713134][ T4311] usb 2-1: device descriptor read/64, error -71
[   70.764241][ T4480] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117)
[   70.792557][ T4504] loop4: detected capacity change from 0 to 1024
[   70.815177][ T4480] EXT4-fs (loop3): 1 orphan inode deleted
[   70.840757][ T4480] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   70.843841][ T4504] EXT4-fs: Ignoring removed nomblk_io_submit option
[   70.875823][ T4480] EXT4-fs (loop3): unmounting filesystem.
[   70.951908][ T4504] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   70.982962][ T4311] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   71.055303][ T4274] EXT4-fs (loop4): unmounting filesystem.
[   71.142840][ T4311] usb 2-1: device descriptor read/64, error -71
[   71.226678][ T4518] loop4: detected capacity change from 0 to 256
[   71.488785][ T4311] usb usb2-port1: attempt power cycle
[   71.490634][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[   71.512763][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[   71.524506][ T4518] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   71.649035][ T4266] EXT4-fs (loop2): unmounting filesystem.
[   71.804020][ T4523] IPv6: Can't replace route, no match found
[   71.912824][ T4311] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   71.944133][ T4311] usb 2-1: device descriptor read/8, error -71
[   72.088632][ T4533] 9pnet_fd: Insufficient options for proto=fd
[   72.222781][ T4311] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   72.253470][ T4311] usb 2-1: device descriptor read/8, error -71
[   72.301393][ T4537] loop0: detected capacity change from 0 to 128
[   72.384377][ T4311] usb usb2-port1: unable to enumerate USB device
[   72.736162][    T9] kworker/u4:0: attempt to access beyond end of device
[   72.736162][    T9] loop0: rw=1, sector=145, nr_sectors = 896 limit=128
[   72.995730][ T4547] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   72.995730][ T4547]    program syz.2.64 not setting count and/or reply_len properly
[   73.020560][   T27] audit: type=1326 audit(1764636529.477:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.3.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2038f749 code=0x7ffc0000
[   73.062997][   T27] audit: type=1326 audit(1764636529.477:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.3.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f2038f749 code=0x7ffc0000
[   73.145292][   T27] audit: type=1326 audit(1764636529.477:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.3.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2038f749 code=0x7ffc0000
[   73.246135][   T27] audit: type=1326 audit(1764636529.477:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.3.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f2038f749 code=0x7ffc0000
[   73.348941][ T4559] 9pnet_fd: Insufficient options for proto=fd
[   73.385593][   T27] audit: type=1326 audit(1764636529.477:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.3.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2038f749 code=0x7ffc0000
[   73.463185][   T27] audit: type=1326 audit(1764636529.477:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.3.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f2038f749 code=0x7ffc0000
[   73.502639][ T4567] netlink: 116 bytes leftover after parsing attributes in process `syz.1.71'.
[   73.550990][   T27] audit: type=1326 audit(1764636529.477:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.3.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2038f749 code=0x7ffc0000
[   73.622986][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   73.631402][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   73.639715][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   73.648086][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   73.656595][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   73.664899][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   73.673294][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   73.682736][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   73.692726][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   73.702732][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   75.091580][   T27] audit: type=1326 audit(1764636529.477:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.3.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f2038f749 code=0x7ffc0000
[   75.248485][   T27] audit: type=1326 audit(1764636529.477:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.3.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2038f749 code=0x7ffc0000
[   75.374088][   T27] audit: type=1326 audit(1764636529.477:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.3.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2038f749 code=0x7ffc0000
[   75.422139][ T4594] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.499532][ T4594] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.609840][ T4594] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.731136][ T4594] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.834963][ T4606] loop3: detected capacity change from 0 to 128
[   75.865714][ T4608] loop1: detected capacity change from 0 to 512
[   75.933349][ T4594] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.934349][ T4608] EXT4-fs (loop1): too many log groups per flexible block group
[   75.956549][ T4608] EXT4-fs (loop1): failed to initialize mballoc (-12)
[   75.964770][ T4608] EXT4-fs (loop1): mount failed
[   75.981104][ T4606] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   76.019325][ T4606] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   76.026833][ T4594] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.142467][ T4594] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.208852][ T4594] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.394539][ T4624] loop0: detected capacity change from 0 to 164
[   76.413943][    T7] cfg80211: failed to load regulatory.db
[   76.673827][ T4629] iso9660: Corrupted directory entry in block 4 of inode 1792
[   76.724684][ T4265] iso9660: Corrupted directory entry in block 4 of inode 1792
[   76.750588][ T4265] ISOFS: unable to read i-node block
[   76.773637][ T4265] ISOFS: unable to read i-node block
[   76.828380][ T4631] loop1: detected capacity change from 0 to 512
[   76.977807][ T4631] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   77.015003][ T4631] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   77.117662][ T4278] EXT4-fs (loop3): unmounting filesystem.
[   77.191828][ T4631] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 18: comm syz.1.88: lblock 23 mapped to illegal pblock 18 (length 1)
[   77.237078][ T4631] EXT4-fs (loop1): Remounting filesystem read-only
[   77.404545][ T4275] EXT4-fs (loop1): unmounting filesystem.
[   77.897435][ T4653] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.988934][ T4354] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.101724][ T4653] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.207338][ T4354] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.341891][ T4653] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.430701][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.436915][ T4354] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.440195][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.459530][ T4672] netlink: 188 bytes leftover after parsing attributes in process `syz.3.107'.
[   78.462210][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.480647][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.491219][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   78.502375][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.576970][ T4653] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.618720][ T4354] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.785566][ T4653] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.849747][ T4679] loop3: detected capacity change from 0 to 512
[   78.871690][ T4679] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   78.921460][ T4679] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended
[   78.943955][ T4679] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.110: inode #15: comm syz.3.110: iget: illegal inode #
[   79.003441][ T4653] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.032982][ T4679] EXT4-fs (loop3): Remounting filesystem read-only
[   79.061216][ T4679] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.110: couldn't read orphan inode 15 (err -117)
[   79.090715][ T4653] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.136130][ T4679] EXT4-fs (loop3): Remounting filesystem read-only
[   79.155320][ T4679] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   79.162508][ T4653] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.218341][ T4679] EXT4-fs error (device loop3): ext4_lookup:1858: comm syz.3.110: inode #15: comm syz.3.110: iget: illegal inode #
[   79.325867][ T4679] EXT4-fs (loop3): Remounting filesystem read-only
[   79.382304][   T27] kauditd_printk_skb: 32 callbacks suppressed
[   79.382317][   T27] audit: type=1326 audit(1764636535.837:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92738f749 code=0x7ffc0000
[   79.418112][ T4669] chnl_net:caif_netlink_parms(): no params data found
[   79.427907][ T4278] EXT4-fs (loop3): unmounting filesystem.
[   79.453589][   T27] audit: type=1326 audit(1764636535.897:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92738f749 code=0x7ffc0000
[   79.511968][   T27] audit: type=1326 audit(1764636535.897:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92738f749 code=0x7ffc0000
[   79.651288][   T27] audit: type=1326 audit(1764636535.897:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92738f749 code=0x7ffc0000
[   79.721760][   T27] audit: type=1326 audit(1764636535.897:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fb92738f749 code=0x7ffc0000
[   79.747860][   T27] audit: type=1326 audit(1764636535.897:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92738f749 code=0x7ffc0000
[   79.771129][   T27] audit: type=1326 audit(1764636535.897:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92738f749 code=0x7ffc0000
[   79.983051][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.990292][ T4669] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.041167][ T4669] device bridge_slave_0 entered promiscuous mode
[   80.187644][ T4669] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.202086][ T4669] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.224202][ T4669] device bridge_slave_1 entered promiscuous mode
[   80.421192][ T4669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.429569][ T4725] loop1: detected capacity change from 0 to 512
[   80.456843][ T4669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.519325][ T4725] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   80.535819][ T4725] EXT4-fs (loop1): orphan cleanup on readonly fs
[   80.563548][ T4281] Bluetooth: hci0: command 0x0409 tx timeout
[   80.601545][ T4725] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[   80.614247][ T4725] EXT4-fs warning (device loop1): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   80.629713][ T4725] EXT4-fs (loop1): Cannot turn on quotas: error -117
[   80.641476][ T4725] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.120: bg 0: block 40: padding at end of block bitmap is not set
[   80.711038][ T4725] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem
[   80.718631][ T4669] team0: Port device team_slave_0 added
[   80.747668][ T4725] EXT4-fs (loop1): 1 truncate cleaned up
[   80.754917][ T4669] team0: Port device team_slave_1 added
[   80.759666][ T4725] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   80.852381][ T4725] EXT4-fs error (device loop1): ext4_get_link:104: inode #16: comm syz.1.120: bad symlink.
[   80.935052][ T4669] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.935114][ T4275] EXT4-fs (loop1): unmounting filesystem.
[   80.942044][ T4669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.942070][ T4669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.956468][ T4669] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.052100][ T4669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.119026][ T4669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.170028][ T4743] loop1: detected capacity change from 0 to 164
[   81.606805][ T4749] iso9660: Corrupted directory entry in block 4 of inode 1792
[   82.039510][ T4754] loop1: detected capacity change from 0 to 128
[   82.081654][ T4754] FAT-fs (loop1): Directory bread(block 162) failed
[   82.113962][ T4754] FAT-fs (loop1): Directory bread(block 163) failed
[   82.152814][ T4754] FAT-fs (loop1): Directory bread(block 164) failed
[   82.159504][ T4754] FAT-fs (loop1): Directory bread(block 165) failed
[   82.201309][ T4754] FAT-fs (loop1): Directory bread(block 166) failed
[   82.233225][ T4754] FAT-fs (loop1): Directory bread(block 167) failed
[   82.250536][ T4754] FAT-fs (loop1): Directory bread(block 168) failed
[   82.274041][ T4754] FAT-fs (loop1): Directory bread(block 169) failed
[   82.284199][ T4669] device hsr_slave_0 entered promiscuous mode
[   82.349490][ T4669] device hsr_slave_1 entered promiscuous mode
[   82.363929][ T4754] FAT-fs (loop1): Directory bread(block 162) failed
[   82.372094][ T4669] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.380937][ T4669] Cannot create hsr debugfs directory
[   82.394800][ T4754] FAT-fs (loop1): Directory bread(block 163) failed
[   82.411878][ T4754] syz.1.126: attempt to access beyond end of device
[   82.411878][ T4754] loop1: rw=3, sector=226, nr_sectors = 6 limit=128
[   82.459312][ T4754] syz.1.126: attempt to access beyond end of device
[   82.459312][ T4754] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128
[   82.643173][ T4281] Bluetooth: hci0: command 0x041b tx timeout
[   82.735982][ T4354] device hsr_slave_0 left promiscuous mode
[   82.756479][ T4354] device hsr_slave_1 left promiscuous mode
[   83.973228][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.006230][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.065576][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.112815][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.149826][ T4354] device bridge_slave_1 left promiscuous mode
[   84.171516][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.223577][ T4354] device bridge_slave_0 left promiscuous mode
[   84.242246][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.346449][ T4354] device veth1_macvtap left promiscuous mode
[   84.366152][ T4354] device veth0_macvtap left promiscuous mode
[   84.372312][ T4354] device veth1_vlan left promiscuous mode
[   84.381659][ T4354] device veth0_vlan left promiscuous mode
[   84.394270][ T4797] loop1: detected capacity change from 0 to 512
[   84.451213][ T4797] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   84.513946][ T4797] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   84.544617][ T4797] EXT4-fs (loop1): orphan cleanup on readonly fs
[   84.567095][ T4797] EXT4-fs error (device loop1): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[   84.585941][ T4797] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #11: comm syz.1.138: corrupted inode contents
[   84.600977][ T4797] EXT4-fs error (device loop1): ext4_dirty_inode:6133: inode #11: comm syz.1.138: mark_inode_dirty error
[   84.643651][ T4797] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.138: invalid indirect mapped block 327680 (level 0)
[   84.688704][ T4797] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #11: comm syz.1.138: corrupted inode contents
[   84.723238][ T4281] Bluetooth: hci0: command 0x040f tx timeout
[   84.750297][ T4797] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[   84.765738][ T4801] loop2: detected capacity change from 0 to 164
[   84.781055][ T4797] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #11: comm syz.1.138: corrupted inode contents
[   84.796805][ T4797] EXT4-fs error (device loop1): ext4_truncate:4318: inode #11: comm syz.1.138: mark_inode_dirty error
[   84.810637][ T4797] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[   84.992224][ T4797] EXT4-fs (loop1): 1 truncate cleaned up
[   84.999560][ T4797] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   85.009209][ T4803] iso9660: Corrupted directory entry in block 4 of inode 1792
[   85.054568][ T4266] iso9660: Corrupted directory entry in block 4 of inode 1792
[   85.064287][ T4266] ISOFS: unable to read i-node block
[   85.070005][ T4266] ISOFS: unable to read i-node block
[   85.186799][ T4275] EXT4-fs (loop1): unmounting filesystem.
[   85.594594][ T4354] team0 (unregistering): Port device team_slave_1 removed
[   85.633568][ T4354] team0 (unregistering): Port device team_slave_0 removed
[   85.674737][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   85.720062][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.126028][ T4354] bond0 (unregistering): Released all slaves
[   86.563023][ T4814] loop1: detected capacity change from 0 to 1024
[   86.571902][ T4669] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   86.629382][ T4814] EXT4-fs: Ignoring removed orlov option
[   86.655266][ T4669] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   86.678921][ T4669] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   86.695228][ T4669] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   86.762964][ T4814] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   86.803571][ T4281] Bluetooth: hci0: command 0x0419 tx timeout
[   86.906848][   T27] audit: type=1800 audit(1764636543.367:51): pid=4814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.144" name="bus" dev="loop1" ino=18 res=0 errno=0
[   86.990746][   T27] audit: type=1804 audit(1764636543.447:52): pid=4814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.144" name="/newroot/29/bus/bus" dev="loop1" ino=18 res=1 errno=0
[   87.061301][ T4669] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.091659][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   87.100814][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   87.157246][ T4669] 8021q: adding VLAN 0 to HW filter on device team0
[   87.222000][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   87.254976][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   87.289094][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.291232][ T4834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'.
[   87.296356][ T4358] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.387626][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   87.415263][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   87.453582][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   87.482725][ T4358] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.489904][ T4358] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.554056][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   87.586313][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   87.633586][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   87.654619][ T4840] loop3: detected capacity change from 0 to 164
[   87.688579][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   87.725706][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   87.752249][ T4275] EXT4-fs (loop1): unmounting filesystem.
[   87.953635][ T4843] iso9660: Corrupted directory entry in block 4 of inode 1792
[   87.997483][ T4278] iso9660: Corrupted directory entry in block 4 of inode 1792
[   88.014546][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   88.015345][ T4278] ISOFS: unable to read i-node block
[   88.030066][ T4278] ISOFS: unable to read i-node block
[   88.075638][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   88.120485][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   88.181005][ T4845] capability: warning: `syz.1.150' uses deprecated v2 capabilities in a way that may be insecure
[   88.234065][ T4669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.260199][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   88.269748][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   88.290512][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   88.303173][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.311768][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.317546][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.327783][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   88.349339][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.357660][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.363996][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.375598][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.378869][ T4354] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.393970][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   88.395463][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.409140][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.436653][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   88.444962][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.512344][ T4354] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.658534][ T4354] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.745970][ T4354] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.115449][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   89.125339][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   89.135122][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   89.143588][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   89.151081][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   89.158597][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   89.361751][ T4354] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.412993][ T4847] chnl_net:caif_netlink_parms(): no params data found
[   89.437523][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   89.457058][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   89.475220][ T4669] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.499450][ T4874] device bridge0 entered promiscuous mode
[   89.513838][ T4874] device macvlan2 entered promiscuous mode
[   89.538316][ T4874] bridge0: port 3(macvlan2) entered blocking state
[   89.554037][ T4874] bridge0: port 3(macvlan2) entered disabled state
[   89.578050][ T4874] device bridge0 left promiscuous mode
[   89.686688][ T4354] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.836881][ T4354] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.967727][ T4848] chnl_net:caif_netlink_parms(): no params data found
[   90.021817][ T4354] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.035937][ T4847] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.047646][ T4847] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.059329][ T4847] device bridge_slave_0 entered promiscuous mode
[   90.125054][ T4847] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.132551][ T4847] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.167746][ T4847] device bridge_slave_1 entered promiscuous mode
[   90.312357][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   90.321476][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   90.342441][ T4847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.371322][ T4898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'.
[   90.415238][ T4847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.484582][ T4280] Bluetooth: hci2: command 0x0409 tx timeout
[   90.491275][ T4280] Bluetooth: hci1: command 0x0409 tx timeout
[   90.510766][ T4847] team0: Port device team_slave_0 added
[   90.532040][ T4848] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.541432][ T4848] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.550191][ T4848] device bridge_slave_0 entered promiscuous mode
[   90.562025][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   90.571036][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   90.579830][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   90.588250][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   90.597258][ T4669] device veth0_vlan entered promiscuous mode
[   90.605942][ T4847] team0: Port device team_slave_1 added
[   90.629042][ T4848] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.637591][ T4848] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.645632][ T4848] device bridge_slave_1 entered promiscuous mode
[   90.675540][ T4847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.682504][ T4847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.709463][ T4847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.731040][ T4669] device veth1_vlan entered promiscuous mode
[   90.760648][ T4861] chnl_net:caif_netlink_parms(): no params data found
[   90.778947][ T4847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.786191][ T4847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.814433][ T4847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.864974][ T4848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.893069][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   90.901705][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   90.912936][ T4848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.048373][ T4669] device veth0_macvtap entered promiscuous mode
[   91.136648][ T4669] device veth1_macvtap entered promiscuous mode
[   91.197850][ T4848] team0: Port device team_slave_0 added
[   91.212856][ T4280] Bluetooth: hci4: command 0x0409 tx timeout
[   91.237352][ T4847] device hsr_slave_0 entered promiscuous mode
[   91.246074][ T4847] device hsr_slave_1 entered promiscuous mode
[   91.261845][ T4847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.282002][ T4847] Cannot create hsr debugfs directory
[   91.375455][ T4848] team0: Port device team_slave_1 added
[   91.389246][ T4918] 9pnet_fd: Insufficient options for proto=fd
[   91.486160][ T4861] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.503107][ T4861] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.511249][ T4861] device bridge_slave_0 entered promiscuous mode
[   91.538815][ T4861] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.552969][ T4861] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.561279][ T4861] device bridge_slave_1 entered promiscuous mode
[   91.661236][ T4924] process 'syz.1.162' launched '/dev/fd/7' with NULL argv: empty string added
[   91.716473][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   91.730310][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   91.781153][ T4861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.850183][ T4848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.864372][ T4848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.891694][ T4848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.936533][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.949951][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.952820][ T4930] loop1: detected capacity change from 0 to 764
[   91.961034][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.991243][   T27] audit: type=1800 audit(1764636548.447:53): pid=4930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.164" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[   92.020705][ T4930] Symlink component flag not implemented
[   92.026580][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.037020][ T4930] Symlink component flag not implemented (129)
[   92.043380][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.056379][ T4930] rock: directory entry would overflow storage
[   92.062562][ T4930] rock: sig=0x4f50, size=4, remaining=3
[   92.068293][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.087991][ T4930] iso9660: Corrupted directory entry in block 6 of inode 1792
[   92.099731][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.111748][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.125354][ T4669] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.140657][ T4861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.241013][ T4848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.253595][ T4848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.288347][ T4848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.315017][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   92.335297][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   92.347461][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.361665][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.372315][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.383726][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.394726][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.408584][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.418506][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.429661][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.440888][ T4669] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.563057][ T4282] Bluetooth: hci1: command 0x041b tx timeout
[   92.563099][ T4280] Bluetooth: hci2: command 0x041b tx timeout
[   92.580115][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   92.589155][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   92.697561][ T4669] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.711769][ T4669] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.721310][ T4669] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.731077][ T4669] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.746715][ T4861] team0: Port device team_slave_0 added
[   92.790646][ T4861] team0: Port device team_slave_1 added
[   92.828217][ T4939] 9pnet_fd: Insufficient options for proto=fd
[   92.864763][ T4848] device hsr_slave_0 entered promiscuous mode
[   92.871930][ T4848] device hsr_slave_1 entered promiscuous mode
[   92.913627][ T4848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.921683][ T4848] Cannot create hsr debugfs directory
[   92.969134][ T4942] loop1: detected capacity change from 0 to 128
[   93.269345][ T4861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.279551][ T4861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.283812][ T4280] Bluetooth: hci4: command 0x041b tx timeout
[   93.356985][ T4861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.480861][ T4861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.492934][ T4861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.521931][ T4861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.682117][ T4445] kworker/u4:8: attempt to access beyond end of device
[   93.682117][ T4445] loop1: rw=1, sector=145, nr_sectors = 760 limit=128
[   93.772065][ T4956] loop1: detected capacity change from 0 to 512
[   93.812846][ T4861] device hsr_slave_0 entered promiscuous mode
[   93.822729][ T4956] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   93.824075][ T4861] device hsr_slave_1 entered promiscuous mode
[   93.838432][ T4861] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.846286][ T4861] Cannot create hsr debugfs directory
[   93.883383][ T4956] EXT4-fs error (device loop1): __ext4_iget:5091: inode #11: block 524312: comm syz.1.170: invalid block
[   93.937039][ T4956] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.170: couldn't read orphan inode 11 (err -117)
[   93.963147][ T4956] EXT4-fs (loop1): 1 truncate cleaned up
[   93.968942][ T4956] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   93.996598][ T4956] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.170: bg 0: block 5: invalid block bitmap
[   94.033747][ T4956] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   94.047552][ T4956] EXT4-fs (loop1): This should not happen!! Data will be lost
[   94.047552][ T4956] 
[   94.059413][ T4956] EXT4-fs (loop1): Total free blocks count 0
[   94.065857][ T4956] EXT4-fs (loop1): Free/Dirty block details
[   94.071969][ T4956] EXT4-fs (loop1): free_blocks=0
[   94.077076][ T4956] EXT4-fs (loop1): dirty_blocks=66
[   94.083287][ T4956] EXT4-fs (loop1): Block reservation details
[   94.089309][ T4956] EXT4-fs (loop1): i_reserved_data_blocks=66
[   94.090806][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.112427][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.157774][   T46] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[   94.177903][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   94.315515][ T4445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.367571][   T27] audit: type=1326 audit(1764636550.827:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.1.172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb92738f749 code=0x0
[   94.367920][ T4445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.409372][ T4847] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   94.465535][ T4354] device hsr_slave_0 left promiscuous mode
[   94.472019][ T4354] device hsr_slave_1 left promiscuous mode
[   94.480014][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.488049][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.503975][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.511673][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.519976][ T4354] device bridge_slave_1 left promiscuous mode
[   94.526521][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.536053][ T4354] device bridge_slave_0 left promiscuous mode
[   94.542386][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.556723][ T4354] device hsr_slave_0 left promiscuous mode
[   94.564044][ T4354] device hsr_slave_1 left promiscuous mode
[   94.570522][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.578185][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.586005][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.594204][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.602055][ T4354] device bridge_slave_1 left promiscuous mode
[   94.608579][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.618885][ T4354] device bridge_slave_0 left promiscuous mode
[   94.625358][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.642932][ T4280] Bluetooth: hci2: command 0x040f tx timeout
[   94.653038][ T4280] Bluetooth: hci1: command 0x040f tx timeout
[   94.672388][ T4354] device veth1_macvtap left promiscuous mode
[   94.678602][ T4354] device veth0_macvtap left promiscuous mode
[   94.685291][ T4354] device veth1_vlan left promiscuous mode
[   94.691381][ T4354] device veth0_vlan left promiscuous mode
[   94.699417][ T4354] device veth1_macvtap left promiscuous mode
[   94.705873][ T4354] device veth0_macvtap left promiscuous mode
[   94.712036][ T4354] device veth1_vlan left promiscuous mode
[   94.718125][ T4354] device veth0_vlan left promiscuous mode
[   95.339790][ T4354] team0 (unregistering): Port device team_slave_1 removed
[   95.411660][ T4354] team0 (unregistering): Port device team_slave_0 removed
[   95.450353][ T4280] Bluetooth: hci4: command 0x040f tx timeout
[   95.488175][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   95.535684][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.618716][ T4970] loop9: detected capacity change from 0 to 7
[   95.638221][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.647828][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[   95.667904][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.677222][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[   95.693075][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.703228][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[   95.719037][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.728368][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[   95.757023][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.766385][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[   95.775182][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.785278][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[   95.795199][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.805325][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[   95.814836][ T4970] ldm_validate_partition_table(): Disk read failed.
[   95.846090][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.855337][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[   95.882851][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.892490][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[   95.901055][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.911115][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[   95.919775][ T4970] Dev loop9: unable to read RDB block 0
[   95.963997][ T4970]  loop9: unable to read partition table
[   95.969978][ T4970] loop9: partition table beyond EOD, truncated
[   96.002173][ T4970] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[   96.002173][ T4970] 
) failed (rc=-5)
[   96.536731][ T4354] bond0 (unregistering): Released all slaves
[   96.538386][ T4972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'.
[   96.723152][ T4280] Bluetooth: hci1: command 0x0419 tx timeout
[   96.729335][ T4280] Bluetooth: hci2: command 0x0419 tx timeout
[   96.765044][ T4978] loop1: detected capacity change from 0 to 164
[   96.958028][ T4980] iso9660: Corrupted directory entry in block 4 of inode 1792
[   97.002390][ T4275] iso9660: Corrupted directory entry in block 4 of inode 1792
[   97.016040][ T4275] ISOFS: unable to read i-node block
[   97.021660][ T4275] ISOFS: unable to read i-node block
[   97.298122][ T4354] team0 (unregistering): Port device team_slave_1 removed
[   97.337866][ T4354] team0 (unregistering): Port device team_slave_0 removed
[   97.379834][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.421591][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.532800][ T4280] Bluetooth: hci4: command 0x0419 tx timeout
[   97.875096][ T4354] bond0 (unregistering): Released all slaves
[   97.946623][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   98.029533][ T4847] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   98.052388][ T4847] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   98.145227][ T4847] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   98.211081][ T4988] loop5: detected capacity change from 0 to 2048
[   98.266760][ T4848] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   98.302299][ T4988] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   98.329533][ T4988] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.423220][ T4848] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   98.478401][ T4669] EXT4-fs (loop5): unmounting filesystem.
[   98.512292][ T4848] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   98.576129][ T4848] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   98.665662][ T4861] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   98.705415][ T4861] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   98.822929][   T27] audit: type=1326 audit(1764636555.277:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3038f749 code=0x7ffc0000
[   98.875757][   T27] audit: type=1326 audit(1764636555.277:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c3038f749 code=0x7ffc0000
[   98.883720][ T4847] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.948319][ T4861] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   98.955390][   T27] audit: type=1326 audit(1764636555.277:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3038f749 code=0x7ffc0000
[   98.970051][ T5012] loop5: detected capacity change from 0 to 512
[   99.022162][ T4847] 8021q: adding VLAN 0 to HW filter on device team0
[   99.023027][   T27] audit: type=1326 audit(1764636555.277:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c3038f749 code=0x7ffc0000
[   99.073472][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   99.102415][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   99.110596][ T5012] EXT4-fs (loop5): external journal device major/minor numbers have changed
[   99.130792][ T4861] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   99.153269][   T27] audit: type=1326 audit(1764636555.277:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3038f749 code=0x7ffc0000
[   99.160471][ T5012] EXT4-fs (loop5): failed to open journal device unknown-block(8,0) -16
[   99.194194][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   99.219659][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   99.234315][ T4750] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.241657][ T4750] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.248960][   T27] audit: type=1326 audit(1764636555.277:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f7c3038f749 code=0x7ffc0000
[   99.248993][   T27] audit: type=1326 audit(1764636555.277:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3038f749 code=0x7ffc0000
[   99.296444][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   99.418118][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   99.431015][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   99.466004][ T4750] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.473190][ T4750] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.494641][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   99.511311][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   99.580960][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   99.594264][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   99.604533][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   99.622288][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   99.625026][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   99.639753][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   99.648394][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   99.656245][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   99.745847][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   99.783791][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   99.798494][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   99.820286][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   99.844506][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   99.915707][ T4848] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.935017][ T4847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   99.947931][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   99.962039][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   99.977796][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  100.003799][ T4848] 8021q: adding VLAN 0 to HW filter on device team0
[  100.032425][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  100.043035][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  100.104939][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  100.123900][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  100.134256][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.141557][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.173184][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  100.301985][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  100.311636][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  100.327770][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.335110][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.346916][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  100.356521][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  100.365850][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  100.379806][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  100.390942][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  100.407802][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  100.419759][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  100.449450][ T4861] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.480957][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  100.508792][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  100.581234][ T4861] 8021q: adding VLAN 0 to HW filter on device team0
[  100.638786][ T4354] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.706804][ T4848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  100.745544][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  100.769200][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  100.783716][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  100.792420][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  100.808785][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  100.868208][ T4354] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.907031][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  100.933606][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  100.953062][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.960211][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.975787][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  100.996344][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  101.016495][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.024040][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.078811][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  101.088381][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  101.113398][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  101.155433][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  101.208423][ T4354] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.269093][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  101.292262][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  101.322897][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  101.384738][ T4847] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.417280][ T4354] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.487175][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  101.510241][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  101.537300][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  101.568470][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  101.595998][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  101.630560][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  101.641445][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  101.683072][ T4280] Bluetooth: hci3: command 0x0409 tx timeout
[  101.707748][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  102.012090][ T5023] chnl_net:caif_netlink_parms(): no params data found
[  102.168755][ T4354] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.295686][ T4354] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.377341][ T4848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.417029][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  102.431386][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  102.498337][ T4354] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.569774][ T5023] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.609649][ T5023] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.631433][ T5023] device bridge_slave_0 entered promiscuous mode
[  102.654947][ T5023] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.662271][ T5023] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.684873][ T5023] device bridge_slave_1 entered promiscuous mode
[  102.785331][ T4354] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.840993][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  102.853333][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  102.866759][ T4861] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.909238][ T5023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.971449][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  102.982176][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  103.019875][ T5023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.064071][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  103.086176][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  103.134422][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  103.153309][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  103.202147][ T4847] device veth0_vlan entered promiscuous mode
[  103.282001][ T5023] team0: Port device team_slave_0 added
[  103.305747][ T4847] device veth1_vlan entered promiscuous mode
[  103.360397][ T5023] team0: Port device team_slave_1 added
[  103.474878][ T5023] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.482038][ T5023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.588131][ T5023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.615398][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  103.643717][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  103.677596][ T4847] device veth0_macvtap entered promiscuous mode
[  103.741081][ T5023] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.756563][ T5023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.783821][ T4280] Bluetooth: hci3: command 0x041b tx timeout
[  103.839979][ T5023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.897021][ T4847] device veth1_macvtap entered promiscuous mode
[  103.951143][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  103.963713][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  103.978695][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  104.000946][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  104.261977][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  104.271618][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  104.334105][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.345242][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.355707][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.366308][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.376452][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.387093][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.398662][ T4847] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.413790][ T4848] device veth0_vlan entered promiscuous mode
[  104.430482][ T5023] device hsr_slave_0 entered promiscuous mode
[  104.439667][ T5023] device hsr_slave_1 entered promiscuous mode
[  104.446998][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  104.456055][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  104.464942][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  104.474252][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  104.487042][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.510254][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.573892][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.590657][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.602908][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.613473][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.624938][ T4847] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.726857][ T4848] device veth1_vlan entered promiscuous mode
[  104.773552][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  104.782464][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  104.824042][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  104.862213][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  104.873971][ T4847] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.900436][ T4847] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.912999][ T4847] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.921820][ T4847] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.027145][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  105.057897][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  105.171539][ T4861] device veth0_vlan entered promiscuous mode
[  105.289879][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  105.313671][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  105.321667][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  105.343545][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.378601][ T4848] device veth0_macvtap entered promiscuous mode
[  105.409380][ T4861] device veth1_vlan entered promiscuous mode
[  105.595513][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  105.604728][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  105.628143][ T4848] device veth1_macvtap entered promiscuous mode
[  105.754989][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  105.775103][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.803024][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.823513][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.834168][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.845561][ T4280] Bluetooth: hci3: command 0x040f tx timeout
[  105.852946][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.863250][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.873793][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.884361][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.894935][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.906633][ T4848] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.983218][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.991280][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.005276][ T4861] device veth0_macvtap entered promiscuous mode
[  106.013307][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  106.035077][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.070518][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.092337][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  106.117918][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.147068][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.160219][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.175860][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.189693][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.203578][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.219866][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.253642][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.273805][ T4848] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.387134][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  106.403888][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  106.435684][ T4861] device veth1_macvtap entered promiscuous mode
[  106.472569][ T4848] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.492474][ T4848] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.502897][ T4848] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.511627][ T4848] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.658282][ T4861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.699901][ T4861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.726664][ T4861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.754891][ T4861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.764903][ T4861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.775584][ T4861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.794065][ T4861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.806198][ T4861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.818111][ T4861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.837085][ T4861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.850648][ T4861] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.868311][ T5023] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  106.916633][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.933710][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  106.953301][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.961811][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.973516][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.994184][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  107.019295][ T4861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.032522][ T4861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.069060][ T4861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.103157][ T4861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.136175][ T4861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.155236][ T4861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.170051][ T4861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.187742][ T4861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.200841][ T4861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.217411][ T4861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.231104][ T4861] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.252848][ T5023] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  107.386837][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  107.404297][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  107.422607][ T4861] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.432868][ T4861] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.441587][ T4861] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.458715][ T4861] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.479984][ T5023] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  107.501069][ T5023] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  107.651075][ T5127] loop7: detected capacity change from 0 to 512
[  107.679577][ T5127] EXT4-fs: Ignoring removed i_version option
[  107.702391][ T5127] EXT4-fs: Ignoring removed bh option
[  107.774958][ T5127] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  107.799438][ T5127] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  107.923150][ T4280] Bluetooth: hci3: command 0x0419 tx timeout
[  107.948536][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.962852][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.979192][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  108.093241][ T4847] EXT4-fs (loop7): unmounting filesystem.
[  108.143977][ T4354] device hsr_slave_0 left promiscuous mode
[  108.178212][ T4354] device hsr_slave_1 left promiscuous mode
[  108.187956][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.202904][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.221017][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.243615][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.302671][ T4354] device bridge_slave_1 left promiscuous mode
[  108.309193][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.363653][ T4354] device bridge_slave_0 left promiscuous mode
[  108.369942][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.436940][ T4354] device hsr_slave_0 left promiscuous mode
[  108.442645][ T5147] loop7: detected capacity change from 0 to 128
[  108.454186][ T4354] device hsr_slave_1 left promiscuous mode
[  108.467056][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.506702][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.516035][   T27] audit: type=1804 audit(1764636564.977:62): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.186" name="/newroot/3/file0/bus" dev="loop7" ino=1048604 res=1 errno=0
[  108.538143][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.571116][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.591442][ T4354] device bridge_slave_1 left promiscuous mode
[  108.611017][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.652513][ T4354] device bridge_slave_0 left promiscuous mode
[  108.660281][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.789295][ T5157] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fff0000)
[  108.829440][ T4354] device veth1_macvtap left promiscuous mode
[  108.843712][ T4354] device veth0_macvtap left promiscuous mode
[  108.849856][ T4354] device veth1_vlan left promiscuous mode
[  108.855746][ T5157] FAT-fs (loop7): Filesystem has been set read-only
[  108.864429][ T4354] device veth0_vlan left promiscuous mode
[  108.875819][ T4354] device veth1_macvtap left promiscuous mode
[  108.881900][ T4354] device veth0_macvtap left promiscuous mode
[  108.903217][ T4354] device veth1_vlan left promiscuous mode
[  108.909152][ T4354] device veth0_vlan left promiscuous mode
[  109.932139][ T4354] team0 (unregistering): Port device team_slave_1 removed
[  110.011948][ T4354] team0 (unregistering): Port device team_slave_0 removed
[  110.075100][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.128009][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.932620][ T4354] bond0 (unregistering): Released all slaves
[  111.767852][ T4354] team0 (unregistering): Port device team_slave_1 removed
[  111.830268][ T4354] team0 (unregistering): Port device team_slave_0 removed
[  111.911085][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.995758][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.743793][ T4354] bond0 (unregistering): Released all slaves
[  112.859190][ T5147] device veth0 entered promiscuous mode
[  112.865410][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.883087][ T5154] netlink: 4 bytes leftover after parsing attributes in process `syz.7.186'.
[  112.923786][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.037783][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  113.144453][ T4445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.177717][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.183096][ T4445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.210853][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.247724][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  113.325765][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  113.362969][ T5023] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.461944][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  113.503911][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  113.529755][ T5023] 8021q: adding VLAN 0 to HW filter on device team0
[  113.564275][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  113.587603][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  113.628445][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.635834][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.705067][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  113.758214][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  113.813172][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  113.842505][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.849700][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.877358][ T5170] loop8: detected capacity change from 0 to 8192
[  113.886363][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  113.983960][   T27] audit: type=1800 audit(1764636570.447:63): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.153" name="file2" dev="loop8" ino=1048612 res=0 errno=0
[  114.031441][ T5170] syz.8.153: attempt to access beyond end of device
[  114.031441][ T5170] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  114.031922][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  114.112171][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  114.154108][ T5170] buffer_io_error: 4 callbacks suppressed
[  114.154124][ T5170] Buffer I/O error on dev loop8, logical block 57847, async page read
[  114.165159][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  114.221503][ T5183] loop7: detected capacity change from 0 to 512
[  114.249545][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  114.267631][ T5170] syz.8.153: attempt to access beyond end of device
[  114.267631][ T5170] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  114.284139][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  114.322465][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  114.327654][ T5183] EXT4-fs: Ignoring removed oldalloc option
[  114.373638][ T5170] Buffer I/O error on dev loop8, logical block 57847, async page read
[  114.375543][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  114.431878][ T5183] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  114.468712][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  114.505561][ T5023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  114.581676][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  114.632955][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  114.655517][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  114.674279][ T4847] EXT4-fs (loop7): unmounting filesystem.
[  115.171010][ T5205] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  115.755297][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  115.789632][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  115.796876][ T5226] loop6: detected capacity change from 0 to 164
[  115.806394][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  115.819933][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  115.828646][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  115.836628][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  116.060250][ T5229] iso9660: Corrupted directory entry in block 4 of inode 1792
[  116.497615][ T4750] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.619409][ T5023] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.658519][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  116.678478][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  116.763771][ T4750] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.910492][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.6.207'.
[  116.940837][ T5245] syz.7.208[5245] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  116.940958][ T5245] syz.7.208[5245] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  116.955474][ T4750] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.165747][ T4750] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.184664][ T5253] loop6: detected capacity change from 0 to 512
[  117.280336][ T5253] EXT4-fs (loop6): 1 truncate cleaned up
[  117.407627][ T5253] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  117.490339][ T5253] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.209: bg 0: block 465: padding at end of block bitmap is not set
[  117.855905][ T4848] EXT4-fs (loop6): unmounting filesystem.
[  117.925493][ T4280] Bluetooth: hci0: command 0x0409 tx timeout
[  117.989037][ T5223] chnl_net:caif_netlink_parms(): no params data found
[  118.021307][ T5277] loop6: detected capacity change from 0 to 164
[  118.324399][ T5279] iso9660: Corrupted directory entry in block 4 of inode 1792
[  118.789159][ T5282] loop6: detected capacity change from 0 to 1024
[  118.816531][ T5284] netlink: 'syz.7.216': attribute type 1 has an invalid length.
[  118.826194][ T5282] EXT4-fs: inline encryption not supported
[  118.833341][ T5282] EXT4-fs: Ignoring removed orlov option
[  118.860273][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  118.895020][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  118.913580][ T5282] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800c018, mo2=0002]
[  118.921788][ T5282] System zones: 0-1, 3-12
[  118.966027][ T5290] xt_connbytes: Forcing CT accounting to be enabled
[  118.976751][ T5290] set match dimension is over the limit!
[  119.075128][ T5282] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  119.164325][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  119.167110][ T5293] loop8: detected capacity change from 0 to 2048
[  119.223167][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  119.239299][ T5293]  loop8: p1 < > p4
[  119.247735][ T5293] loop8: p4 size 8388608 extends beyond EOD, truncated
[  119.265230][ T5299] netlink: 16 bytes leftover after parsing attributes in process `syz.6.215'.
[  119.312931][ T5023] device veth0_vlan entered promiscuous mode
[  119.352215][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  119.352318][ T5302] loop7: detected capacity change from 0 to 256
[  119.388693][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  119.491901][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.517957][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.563851][ T5223] device bridge_slave_0 entered promiscuous mode
[  119.609423][   T27] audit: type=1326 audit(1764636576.057:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.7.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab7b8f749 code=0x7ffc0000
[  119.644572][   T27] audit: type=1326 audit(1764636576.057:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.7.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab7b8f749 code=0x7ffc0000
[  119.678261][   T27] audit: type=1326 audit(1764636576.057:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.7.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab7b8f749 code=0x7ffc0000
[  119.711765][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.719344][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.728618][   T27] audit: type=1326 audit(1764636576.057:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.7.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ab7b8f749 code=0x7ffc0000
[  119.747785][ T5163] udevd[5163]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  119.753838][ T5223] device bridge_slave_1 entered promiscuous mode
[  119.780836][ T5162] udevd[5162]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  119.783245][ T4848] EXT4-fs (loop6): unmounting filesystem.
[  119.807013][ T5310] loop7: detected capacity change from 0 to 164
[  119.815334][   T27] audit: type=1326 audit(1764636576.057:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.7.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab7b8f749 code=0x7ffc0000
[  119.861464][ T5227] udevd[5227]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  119.866075][ T5162] udevd[5162]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  119.875520][ T5023] device veth1_vlan entered promiscuous mode
[  120.097661][ T4280] Bluetooth: hci0: command 0x041b tx timeout
[  120.106366][ T5313] iso9660: Corrupted directory entry in block 4 of inode 1792
[  120.203618][   T27] audit: type=1326 audit(1764636576.057:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.7.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab7b8f749 code=0x7ffc0000
[  120.225892][   T27] audit: type=1326 audit(1764636576.057:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.7.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab7b8f749 code=0x7ffc0000
[  120.252960][   T27] audit: type=1326 audit(1764636576.077:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.7.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ab7b8f749 code=0x7ffc0000
[  120.261680][ T5162] udevd[5162]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  120.276792][   T27] audit: type=1326 audit(1764636576.077:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.7.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab7b8f749 code=0x7ffc0000
[  120.288907][ T5163] udevd[5163]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  120.371411][ T5319] loop8: detected capacity change from 0 to 128
[  120.378880][   T27] audit: type=1326 audit(1764636576.077:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.7.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab7b8f749 code=0x7ffc0000
[  120.402670][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  120.434863][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.474766][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.592378][ T5325] loop6: detected capacity change from 0 to 128
[  120.637751][ T5325] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  120.650251][ T5325] FAT-fs (loop6): Filesystem has been set read-only
[  120.661058][ T5325] syz.6.229: attempt to access beyond end of device
[  120.661058][ T5325] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  120.708186][ T5325] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  120.719604][ T5325] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  120.753561][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  120.761075][ T5325] syz.6.229: attempt to access beyond end of device
[  120.761075][ T5325] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128
[  120.780132][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  120.813569][ T5023] device veth0_macvtap entered promiscuous mode
[  120.965062][ T5223] team0: Port device team_slave_0 added
[  120.989896][ T5327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.229'.
[  121.120027][ T5023] device veth1_macvtap entered promiscuous mode
[  121.148075][ T5223] team0: Port device team_slave_1 added
[  121.208822][ T5325] syz.6.229 (5325) used greatest stack depth: 19720 bytes left
[  121.449892][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.481631][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.585382][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.619843][ T5352] loop6: detected capacity change from 0 to 164
[  121.629427][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  121.646920][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  122.082539][ T5354] iso9660: Corrupted directory entry in block 4 of inode 1792
[  122.163227][ T4280] Bluetooth: hci0: command 0x040f tx timeout
[  122.174704][ T5023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.213017][ T5023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.247319][ T5023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.304014][ T5023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.337811][ T5023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.350445][ T5023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.361324][ T5023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.380846][ T5023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.419316][ T5023] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.445211][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.462864][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.533212][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.561557][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  122.574255][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  122.618827][ T4750] device hsr_slave_0 left promiscuous mode
[  122.648973][ T4750] device hsr_slave_1 left promiscuous mode
[  122.678541][ T4750] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.710291][ T4750] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.722073][ T4750] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.731823][ T4750] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.746190][ T4750] device bridge_slave_1 left promiscuous mode
[  122.752529][ T4750] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.762028][ T4750] device bridge_slave_0 left promiscuous mode
[  122.768610][ T4750] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.777106][ T5372] loop8: detected capacity change from 0 to 256
[  122.852418][ T4750] device veth1_macvtap left promiscuous mode
[  122.874658][ T4750] device veth0_macvtap left promiscuous mode
[  122.891208][ T4750] device veth1_vlan left promiscuous mode
[  122.907472][ T4750] device veth0_vlan left promiscuous mode
[  123.027313][ T5380] loop8: detected capacity change from 0 to 164
[  123.314458][ T5385] iso9660: Corrupted directory entry in block 4 of inode 1792
[  124.243053][ T4280] Bluetooth: hci0: command 0x0419 tx timeout
[  124.522231][ T4750] team0 (unregistering): Port device team_slave_1 removed
[  124.569954][ T4750] team0 (unregistering): Port device team_slave_0 removed
[  124.613599][ T4750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  124.657073][ T4750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.221240][ T4750] bond0 (unregistering): Released all slaves
[  125.287496][ T5023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.298080][ T5023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.308975][ T5023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.320481][ T5023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.330506][ T5023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.341283][ T5023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.354107][ T5023] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.375790][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  125.385846][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  125.431424][ T5023] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.469427][ T5023] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.517171][ T5023] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.528453][ T5023] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.554282][   T27] kauditd_printk_skb: 32 callbacks suppressed
[  125.554297][   T27] audit: type=1326 audit(1764636582.007:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5406 comm="syz.6.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30618f749 code=0x7ffc0000
[  125.583076][   T27] audit: type=1326 audit(1764636582.007:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5406 comm="syz.6.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30618f749 code=0x7ffc0000
[  126.803180][   T27] audit: type=1326 audit(1764636582.047:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5406 comm="syz.6.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb30618f749 code=0x7ffc0000
[  126.864193][   T27] audit: type=1326 audit(1764636582.047:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5406 comm="syz.6.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30618f749 code=0x7ffc0000
[  126.899253][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.6.253'.
[  126.927111][   T27] audit: type=1326 audit(1764636582.047:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5406 comm="syz.6.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30618f749 code=0x7ffc0000
[  126.979782][ T5223] device hsr_slave_0 entered promiscuous mode
[  126.993680][   T27] audit: type=1326 audit(1764636582.047:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5406 comm="syz.6.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb30618f749 code=0x7ffc0000
[  127.043324][ T5223] device hsr_slave_1 entered promiscuous mode
[  127.056960][ T5413] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  127.059317][   T27] audit: type=1326 audit(1764636582.047:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5406 comm="syz.6.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30618f749 code=0x7ffc0000
[  127.099998][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.121491][ T5223] Cannot create hsr debugfs directory
[  127.127767][   T27] audit: type=1326 audit(1764636582.047:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5406 comm="syz.6.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30618f749 code=0x7ffc0000
[  127.177437][   T27] audit: type=1326 audit(1764636582.047:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5406 comm="syz.6.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb30618f749 code=0x7ffc0000
[  127.338410][   T27] audit: type=1326 audit(1764636582.047:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5406 comm="syz.6.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30618f749 code=0x7ffc0000
[  127.432635][ T5420] device bridge0 entered promiscuous mode
[  127.440975][ T5420] device macsec1 entered promiscuous mode
[  127.456054][ T5420] bridge0: port 3(macsec1) entered blocking state
[  127.479415][ T5420] bridge0: port 3(macsec1) entered disabled state
[  127.522371][ T5420] device bridge0 left promiscuous mode
[  127.553469][ T5423] syz.7.260[5423] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.553607][ T5423] syz.7.260[5423] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.606605][ T5230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.694822][ T5230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.791023][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.792867][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  127.847564][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.903312][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  128.926130][ T5440] serio: Serial port ptm0
[  129.093737][ T5443] loop7: detected capacity change from 0 to 1024
[  129.135402][ T5445] netlink: '': attribute type 1 has an invalid length.
[  129.239808][ T5443] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  130.302601][ T4847] EXT4-fs (loop7): unmounting filesystem.
[  130.534366][ T5464] loop8: detected capacity change from 0 to 8192
[  130.594893][   T27] kauditd_printk_skb: 55 callbacks suppressed
[  130.594908][   T27] audit: type=1326 audit(1764636587.057:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.8.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991018f749 code=0x7ffc0000
[  130.689242][   T27] audit: type=1326 audit(1764636587.087:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.8.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f991018f749 code=0x7ffc0000
[  130.814671][   T27] audit: type=1326 audit(1764636587.087:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.8.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991018f749 code=0x7ffc0000
[  130.985748][ T5473] loop7: detected capacity change from 0 to 1024
[  131.006831][ T5477] loop6: detected capacity change from 0 to 1024
[  131.023686][ T5473] EXT4-fs: inline encryption not supported
[  131.030691][ T5477] ext2: Unknown parameter 'rootcontext'
[  131.038125][   T27] audit: type=1326 audit(1764636587.497:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.9.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e918f749 code=0x7ffc0000
[  131.063074][ T5473] EXT4-fs: Ignoring removed orlov option
[  131.104938][ T5473] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800c018, mo2=0002]
[  131.134434][ T5223] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  131.145368][ T5223] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  131.158318][ T5473] System zones: 0-1, 3-12
[  131.164154][ T5473] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  131.173780][   T27] audit: type=1326 audit(1764636587.527:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.9.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f67e918f749 code=0x7ffc0000
[  131.199466][ T5223] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  131.210592][ T5223] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  131.245620][ T3638] udevd[3638]: worker [5311] terminated by signal 33 (Unknown signal 33)
[  131.266578][   T27] audit: type=1326 audit(1764636587.527:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e918f749 code=0x7ffc0000
[  131.271134][ T3638] udevd[3638]: worker [5311] failed while handling '/devices/virtual/block/loop7'
[  131.329303][   T27] audit: type=1326 audit(1764636587.537:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67e918f749 code=0x7ffc0000
[  131.335696][ T5486] netlink: 16 bytes leftover after parsing attributes in process `syz.7.272'.
[  131.447590][   T27] audit: type=1326 audit(1764636587.537:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e918f749 code=0x7ffc0000
[  132.718527][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.728431][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  132.728475][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  132.837322][   T27] audit: type=1326 audit(1764636587.537:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f67e918f749 code=0x7ffc0000
[  132.859618][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  132.893694][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  132.945377][ T5223] 8021q: adding VLAN 0 to HW filter on device team0
[  132.954414][ T4847] EXT4-fs (loop7): unmounting filesystem.
[  132.960508][   T27] audit: type=1326 audit(1764636587.687:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e918f749 code=0x7ffc0000
[  133.037090][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  133.054632][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  133.088576][ T4354] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.095782][ T4354] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.151243][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  133.165272][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  133.191853][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  133.229673][ T4354] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.236868][ T4354] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.269086][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  133.289114][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  133.335179][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  133.349551][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  133.369491][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  133.389260][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  133.428396][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  133.440798][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  133.449893][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  133.459418][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  133.474541][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  133.485546][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  133.890539][ T5529] loop8: detected capacity change from 0 to 164
[  133.944418][ T5531] loop9: detected capacity change from 0 to 512
[  134.139089][ T5531] EXT4-fs: Ignoring removed oldalloc option
[  134.147350][ T5534] iso9660: Corrupted directory entry in block 4 of inode 1792
[  134.190333][ T4861] iso9660: Corrupted directory entry in block 4 of inode 1792
[  134.198726][ T5531] EXT4-fs: Ignoring removed mblk_io_submit option
[  134.207706][ T4861] ISOFS: unable to read i-node block
[  134.213535][ T4861] ISOFS: unable to read i-node block
[  134.265105][ T5531] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  134.327871][ T5531] EXT4-fs (loop9): orphan cleanup on readonly fs
[  134.414452][ T5531] EXT4-fs error (device loop9): ext4_acquire_dquot:6809: comm syz.9.277: Failed to acquire dquot type 1
[  134.431844][ T5531] EXT4-fs (loop9): 1 truncate cleaned up
[  134.454208][ T5531] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  134.505529][ T5541] loop7: detected capacity change from 0 to 128
[  134.705937][ T5387] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.734633][ T5023] EXT4-fs (loop9): unmounting filesystem.
[  134.802930][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  134.810448][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  134.877920][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.049143][ T5387] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.135294][ T5387] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.245592][ T5387] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.364330][ T5558] macvtap0: refused to change device tx_queue_len
[  135.515658][ T5562] loop9: detected capacity change from 0 to 164
[  135.800464][ T5569] iso9660: Corrupted directory entry in block 4 of inode 1792
[  136.024204][ T5576] loop9: detected capacity change from 0 to 1024
[  136.052210][ T5576] EXT4-fs: Ignoring removed i_version option
[  136.086144][ T5576] EXT4-fs: Ignoring removed nobh option
[  136.118509][ T5576] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  136.289430][ T5576] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  136.333513][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  136.347369][ T5576] EXT4-fs warning (device loop9): ext4_resize_begin:74: won't resize using backup superblock at 1
[  136.352828][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  136.358856][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  136.379785][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  136.389850][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  136.399339][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  136.407568][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  136.415145][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  136.522556][ T5023] EXT4-fs (loop9): unmounting filesystem.
[  136.537011][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  136.556435][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  136.637207][ T5223] device veth0_vlan entered promiscuous mode
[  136.705520][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  136.735786][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  136.761182][ T5223] device veth1_vlan entered promiscuous mode
[  136.902638][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  136.912590][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  136.956029][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  136.974408][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  136.996387][ T5223] device veth0_macvtap entered promiscuous mode
[  137.062432][ T5223] device veth1_macvtap entered promiscuous mode
[  137.352188][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.382821][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.440762][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.476826][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.503429][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.542977][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.572875][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.623061][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.664382][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.727903][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  137.739357][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  137.772621][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  137.801276][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  137.836547][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.892761][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.963272][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.002468][ T5625] loop6: detected capacity change from 0 to 164
[  138.070112][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.146500][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.210047][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.246064][ T5631] netlink: 'syz.9.313': attribute type 29 has an invalid length.
[  138.263303][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.350458][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.362318][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.483312][ T4280] Bluetooth: hci4: command 0x0409 tx timeout
[  138.506663][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  138.561894][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  138.653809][ T5223] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.662603][ T5223] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.721483][ T5223] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.742804][ T5223] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.934050][ T5649] iso9660: Corrupted directory entry in block 4 of inode 1792
[  139.151666][ T5653] loop9: detected capacity change from 0 to 1024
[  139.253079][   T27] kauditd_printk_skb: 3 callbacks suppressed
[  139.253092][   T27] audit: type=1326 audit(1764636595.717:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.7.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab7b8f749 code=0x7ffc0000
[  139.333891][ T5653] EXT4-fs: Ignoring removed nomblk_io_submit option
[  139.341376][   T27] audit: type=1326 audit(1764636595.747:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.7.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f3ab7b8f749 code=0x7ffc0000
[  139.417630][ T5658] loop7: detected capacity change from 0 to 512
[  139.424214][   T27] audit: type=1326 audit(1764636595.747:184): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.7.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab7b8f749 code=0x7ffc0000
[  139.461790][ T5658] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  139.464137][ T5653] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  139.473897][ T5658] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  139.505201][ T5583] chnl_net:caif_netlink_parms(): no params data found
[  139.512064][   T27] audit: type=1326 audit(1764636595.747:185): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.7.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab7b8f749 code=0x7ffc0000
[  139.567515][ T5658] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.320: invalid indirect mapped block 4294967295 (level 1)
[  139.570311][ T5658] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.320: invalid indirect mapped block 4294967295 (level 1)
[  139.580072][ T5658] EXT4-fs (loop7): 2 truncates cleaned up
[  139.580106][ T5658] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  139.618891][   T27] audit: type=1800 audit(1764636596.077:186): pid=5653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.317" name="file1" dev="loop9" ino=15 res=0 errno=0
[  139.720172][ T5387] device hsr_slave_0 left promiscuous mode
[  139.729963][ T5387] device hsr_slave_1 left promiscuous mode
[  139.730681][ T5387] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.730731][ T5387] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.731852][ T5387] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.731874][ T5387] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.732447][ T5387] device bridge_slave_1 left promiscuous mode
[  139.732572][ T5387] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.758652][ T4847] EXT4-fs (loop7): unmounting filesystem.
[  139.761762][ T5387] device bridge_slave_0 left promiscuous mode
[  139.768986][ T5387] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.919141][ T5387] device veth1_macvtap left promiscuous mode
[  139.919240][ T5387] device veth0_macvtap left promiscuous mode
[  139.919352][ T5387] device veth1_vlan left promiscuous mode
[  139.919440][ T5387] device veth0_vlan left promiscuous mode
[  139.934500][ T5023] EXT4-fs (loop9): unmounting filesystem.
[  140.321697][ T5684] netlink: 'syz.6.324': attribute type 1 has an invalid length.
[  140.579718][ T4280] Bluetooth: hci4: command 0x041b tx timeout
[  140.947077][   T27] audit: type=1326 audit(1764636597.397:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.6.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30618f749 code=0x7ffc0000
[  140.969779][   T27] audit: type=1326 audit(1764636597.417:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.6.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30618f749 code=0x7ffc0000
[  140.993644][ T5387] team0 (unregistering): Port device team_slave_1 removed
[  140.998594][   T27] audit: type=1326 audit(1764636597.417:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.6.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb30618f749 code=0x7ffc0000
[  141.033008][   T27] audit: type=1326 audit(1764636597.417:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.6.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30618f749 code=0x7ffc0000
[  141.066965][   T27] audit: type=1326 audit(1764636597.417:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.6.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb30618f749 code=0x7ffc0000
[  141.110345][ T5387] team0 (unregistering): Port device team_slave_0 removed
[  141.154337][ T5387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.199984][ T5387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.617047][ T5387] bond0 (unregistering): Released all slaves
[  141.745088][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.811897][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.829433][ T5705] loop6: detected capacity change from 0 to 128
[  141.966816][ T5708] loop9: detected capacity change from 0 to 164
[  141.980319][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  142.253653][ T5714] iso9660: Corrupted directory entry in block 4 of inode 1792
[  142.298766][ T5023] iso9660: Corrupted directory entry in block 4 of inode 1792
[  142.310408][ T5023] ISOFS: unable to read i-node block
[  142.323285][ T5023] ISOFS: unable to read i-node block
[  142.331666][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.352835][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.361001][ T5583] device bridge_slave_0 entered promiscuous mode
[  142.411871][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.433655][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.440773][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.476401][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.535004][ T5583] device bridge_slave_1 entered promiscuous mode
[  142.633834][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  142.642794][ T4280] Bluetooth: hci4: command 0x040f tx timeout
[  142.762030][ T5723] loop7: detected capacity change from 0 to 164
[  142.825530][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.879464][ T5729] loop4: detected capacity change from 0 to 512
[  142.894410][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.009974][ T5729] 
[  143.012358][ T5729] ======================================================
[  143.019514][ T5729] WARNING: possible circular locking dependency detected
[  143.026556][ T5729] syzkaller #0 Not tainted
[  143.030981][ T5729] ------------------------------------------------------
[  143.038004][ T5729] syz.4.194/5729 is trying to acquire lock:
[  143.043885][ T5729] ffff888056afcb98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1c0/0x2e50
[  143.053964][ T5729] 
[  143.053964][ T5729] but task is already holding lock:
[  143.061312][ T5729] ffff888055c18ad0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770
[  143.071134][ T5729] 
[  143.071134][ T5729] which lock already depends on the new lock.
[  143.071134][ T5729] 
[  143.081952][ T5729] 
[  143.081952][ T5729] the existing dependency chain (in reverse order) is:
[  143.090999][ T5729] 
[  143.090999][ T5729] -> #1 (&ei->xattr_sem){++++}-{3:3}:
[  143.098642][ T5729]        down_write+0x36/0x60
[  143.103314][ T5729]        ext4_destroy_inline_data+0x24/0xe0
[  143.109202][ T5729]        ext4_writepages+0x5df/0x2e50
[  143.114554][ T5729]        do_writepages+0x3b7/0x610
[  143.119658][ T5729]        filemap_fdatawrite_wbc+0x11e/0x180
[  143.125538][ T5729]        file_write_and_wait_range+0x137/0x200
[  143.131693][ T5729]        ext4_sync_file+0x23b/0xca0
[  143.136899][ T5729]        ext4_buffered_write_iter+0x347/0x3e0
[  143.142961][ T5729]        ext4_file_write_iter+0x1d6/0x16e0
[  143.148760][ T5729]        vfs_write+0x44c/0x960
[  143.153518][ T5729]        __x64_sys_pwrite64+0x191/0x220
[  143.159056][ T5729]        do_syscall_64+0x4c/0xa0
[  143.163980][ T5729]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  143.170381][ T5729] 
[  143.170381][ T5729] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}:
[  143.178792][ T5729]        __lock_acquire+0x2cf8/0x7c50
[  143.184152][ T5729]        lock_acquire+0x1b4/0x490
[  143.189161][ T5729]        percpu_down_read+0x44/0x1a0
[  143.194439][ T5729]        ext4_writepages+0x1c0/0x2e50
[  143.199792][ T5729]        do_writepages+0x3b7/0x610
[  143.204890][ T5729]        __writeback_single_inode+0x156/0x1160
[  143.211035][ T5729]        writeback_single_inode+0x221/0x8b0
[  143.216917][ T5729]        write_inode_now+0x15d/0x1d0
[  143.222186][ T5729]        iput+0x613/0x980
[  143.226533][ T5729]        ext4_xattr_block_set+0x2736/0x32a0
[  143.232414][ T5729]        ext4_expand_extra_isize_ea+0x109b/0x19b0
[  143.238910][ T5729]        __ext4_expand_extra_isize+0x301/0x3e0
[  143.245043][ T5729]        __ext4_mark_inode_dirty+0x47f/0x770
[  143.251010][ T5729]        ext4_evict_inode+0xa73/0x1100
[  143.256469][ T5729]        evict+0x485/0x870
[  143.260870][ T5729]        ext4_orphan_cleanup+0xbd3/0x1400
[  143.266577][ T5729]        ext4_fill_super+0x7bdf/0x8150
[  143.272023][ T5729]        get_tree_bdev+0x3f1/0x610
[  143.277142][ T5729]        vfs_get_tree+0x88/0x270
[  143.282064][ T5729]        do_new_mount+0x24a/0xa40
[  143.287077][ T5729]        __se_sys_mount+0x2d6/0x3c0
[  143.292256][ T5729]        do_syscall_64+0x4c/0xa0
[  143.297178][ T5729]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  143.303593][ T5729] 
[  143.303593][ T5729] other info that might help us debug this:
[  143.303593][ T5729] 
[  143.313802][ T5729]  Possible unsafe locking scenario:
[  143.313802][ T5729] 
[  143.321242][ T5729]        CPU0                    CPU1
[  143.326586][ T5729]        ----                    ----
[  143.331930][ T5729]   lock(&ei->xattr_sem);
[  143.336245][ T5729]                                lock(&sbi->s_writepages_rwsem);
[  143.343944][ T5729]                                lock(&ei->xattr_sem);
[  143.350775][ T5729]   lock(&sbi->s_writepages_rwsem);
[  143.355960][ T5729] 
[  143.355960][ T5729]  *** DEADLOCK ***
[  143.355960][ T5729] 
[  143.364084][ T5729] 3 locks held by syz.4.194/5729:
[  143.369086][ T5729]  #0: ffff88804d96e0e0 (&type->s_umount_key#27/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930
[  143.379221][ T5729]  #1: ffff88804d96e650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x436/0x1100
[  143.388713][ T5729]  #2: ffff888055c18ad0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770
[  143.398968][ T5729] 
[  143.398968][ T5729] stack backtrace:
[  143.404859][ T5729] CPU: 1 PID: 5729 Comm: syz.4.194 Not tainted syzkaller #0
[  143.412127][ T5729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  143.422175][ T5729] Call Trace:
[  143.425441][ T5729]  <TASK>
[  143.428366][ T5729]  dump_stack_lvl+0x168/0x22e
[  143.433036][ T5729]  ? load_image+0x3b0/0x3b0
[  143.437527][ T5729]  ? show_regs_print_info+0x12/0x12
[  143.442717][ T5729]  ? print_circular_bug+0x12b/0x1a0
[  143.447906][ T5729]  check_noncircular+0x274/0x310
[  143.453273][ T5729]  ? add_chain_block+0x940/0x940
[  143.458200][ T5729]  ? lockdep_lock+0xdc/0x1e0
[  143.462775][ T5729]  ? verify_lock_unused+0x140/0x140
[  143.467959][ T5729]  ? _find_first_zero_bit+0xcf/0x100
[  143.473231][ T5729]  __lock_acquire+0x2cf8/0x7c50
[  143.478077][ T5729]  ? verify_lock_unused+0x140/0x140
[  143.483263][ T5729]  ? mark_lock+0x94/0x320
[  143.487586][ T5729]  ? __lock_acquire+0x13c0/0x7c50
[  143.492614][ T5729]  lock_acquire+0x1b4/0x490
[  143.497106][ T5729]  ? ext4_writepages+0x1c0/0x2e50
[  143.502120][ T5729]  ? __might_sleep+0xd0/0xd0
[  143.506700][ T5729]  ? read_lock_is_recursive+0x10/0x10
[  143.512076][ T5729]  ? __lock_acquire+0x12e5/0x7c50
[  143.517113][ T5729]  ? mark_lock+0x94/0x320
[  143.521439][ T5729]  percpu_down_read+0x44/0x1a0
[  143.526281][ T5729]  ? ext4_writepages+0x1c0/0x2e50
[  143.531302][ T5729]  ext4_writepages+0x1c0/0x2e50
[  143.536136][ T5729]  ? __lock_acquire+0x13c0/0x7c50
[  143.541154][ T5729]  ? verify_lock_unused+0x140/0x140
[  143.546343][ T5729]  ? mark_lock+0x94/0x320
[  143.550682][ T5729]  ? ext4_read_folio+0x370/0x370
[  143.555619][ T5729]  ? __lock_acquire+0x13c0/0x7c50
[  143.560654][ T5729]  ? __lock_acquire+0x7c50/0x7c50
[  143.565670][ T5729]  ? do_raw_spin_lock+0x11d/0x280
[  143.570689][ T5729]  ? do_raw_spin_unlock+0x11d/0x230
[  143.575876][ T5729]  ? ext4_read_folio+0x370/0x370
[  143.580890][ T5729]  do_writepages+0x3b7/0x610
[  143.585474][ T5729]  ? __writepage+0x130/0x130
[  143.590050][ T5729]  ? writeback_single_inode+0x216/0x8b0
[  143.595585][ T5729]  ? __lock_acquire+0x7c50/0x7c50
[  143.600687][ T5729]  ? do_raw_spin_lock+0x11d/0x280
[  143.605701][ T5729]  ? __ext4_expand_extra_isize+0x301/0x3e0
[  143.611492][ T5729]  __writeback_single_inode+0x156/0x1160
[  143.617118][ T5729]  writeback_single_inode+0x221/0x8b0
[  143.622496][ T5729]  ? write_inode_now+0x1d0/0x1d0
[  143.627423][ T5729]  write_inode_now+0x15d/0x1d0
[  143.632178][ T5729]  ? bdi_split_work_to_wbs+0x890/0x890
[  143.637728][ T5729]  ? rcu_is_watching+0x11/0xa0
[  143.642486][ T5729]  ? do_raw_spin_unlock+0x11d/0x230
[  143.647671][ T5729]  iput+0x613/0x980
[  143.651465][ T5729]  ext4_xattr_block_set+0x2736/0x32a0
[  143.656825][ T5729]  ? __might_sleep+0xd0/0xd0
[  143.661410][ T5729]  ? xattr_find_entry+0x12b/0x2f0
[  143.666424][ T5729]  ? ext4_xattr_block_find+0x2b0/0x2b0
[  143.671868][ T5729]  ? ext4_xattr_block_find+0x241/0x2b0
[  143.677312][ T5729]  ext4_expand_extra_isize_ea+0x109b/0x19b0
[  143.683208][ T5729]  __ext4_expand_extra_isize+0x301/0x3e0
[  143.688827][ T5729]  __ext4_mark_inode_dirty+0x47f/0x770
[  143.694277][ T5729]  ext4_evict_inode+0xa73/0x1100
[  143.699229][ T5729]  ? _raw_spin_unlock+0x24/0x40
[  143.704111][ T5729]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  143.710010][ T5729]  ? do_raw_spin_unlock+0x11d/0x230
[  143.715206][ T5729]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  143.721090][ T5729]  evict+0x485/0x870
[  143.724974][ T5729]  ? __lock_acquire+0x7c50/0x7c50
[  143.729984][ T5729]  ? proc_nr_inodes+0x2f0/0x2f0
[  143.734821][ T5729]  ? do_raw_spin_unlock+0x11d/0x230
[  143.740008][ T5729]  ? _raw_spin_unlock+0x24/0x40
[  143.744854][ T5729]  ? iput+0x768/0x980
[  143.748823][ T5729]  ext4_orphan_cleanup+0xbd3/0x1400
[  143.754016][ T5729]  ? ext4_orphan_del+0xb90/0xb90
[  143.758940][ T5729]  ? errseq_check_and_advance+0x62/0x120
[  143.764582][ T5729]  ext4_fill_super+0x7bdf/0x8150
[  143.769529][ T5729]  ? bdev_name+0x2c1/0x3f0
[  143.773954][ T5729]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  143.780203][ T5729]  ? snprintf+0xd7/0x120
[  143.784432][ T5729]  ? preempt_count_add+0x8d/0x190
[  143.789441][ T5729]  ? vscnprintf+0x80/0x80
[  143.793754][ T5729]  ? set_blocksize+0x1d3/0x350
[  143.798510][ T5729]  ? sb_set_blocksize+0xa5/0xe0
[  143.803350][ T5729]  get_tree_bdev+0x3f1/0x610
[  143.807927][ T5729]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  143.814157][ T5729]  vfs_get_tree+0x88/0x270
[  143.818560][ T5729]  do_new_mount+0x24a/0xa40
[  143.823049][ T5729]  __se_sys_mount+0x2d6/0x3c0
[  143.827714][ T5729]  ? __x64_sys_mount+0xc0/0xc0
[  143.832463][ T5729]  ? lockdep_hardirqs_on+0x94/0x140
[  143.837648][ T5729]  ? __x64_sys_mount+0x1c/0xc0
[  143.842396][ T5729]  do_syscall_64+0x4c/0xa0
[  143.846807][ T5729]  ? clear_bhb_loop+0x60/0xb0
[  143.851472][ T5729]  ? clear_bhb_loop+0x60/0xb0
[  143.856132][ T5729]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  143.862055][ T5729] RIP: 0033:0x7f9149f90eea
[  143.866487][ T5729] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.886083][ T5729] RSP: 002b:00007f91481f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  143.894503][ T5729] RAX: ffffffffffffffda RBX: 00007f91481f5ef0 RCX: 00007f9149f90eea
[  143.902474][ T5729] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f91481f5eb0
[  143.910438][ T5729] RBP: 0000200000000180 R08: 00007f91481f5ef0 R09: 0000000000800700
[  143.918395][ T5729] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[  143.926355][ T5729] R13: 00007f91481f5eb0 R14: 000000000000046f R15: 000000000000002c
[  143.934316][ T5729]  </TASK>
[  144.013893][ T5583] team0: Port device team_slave_0 added
[  144.021157][ T5583] team0: Port device team_slave_1 added
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  144.084535][ T5729] ------------[ cut here ]------------
[  144.090034][ T5729] EA inode 11 i_nlink=2
[  144.090304][ T5729] WARNING: CPU: 0 PID: 5729 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x4be/0x520
[  144.104752][ T5729] Modules linked in:
[  144.108647][ T5729] CPU: 0 PID: 5729 Comm: syz.4.194 Not tainted syzkaller #0
[  144.115960][ T5729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  144.126061][ T5729] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520
[  144.132717][ T5729] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 63 ef 9c ff 49 8b 37 48 c7 c7 40 91 a0 8a 89 da e8 32 e5 18 ff <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08
[  144.152391][ T5729] RSP: 0018:ffffc90003697200 EFLAGS: 00010246
[  144.158541][ T5729] RAX: 468be63347674000 RBX: 0000000000000002 RCX: 0000000000080000
[  144.166580][ T5729] RDX: ffffc9001780a000 RSI: 000000000007ffff RDI: 0000000000080000
[  144.174607][ T5729] RBP: ffffc900036972e8 R08: dffffc0000000000 R09: fffff520006d2dd1
[  144.182598][ T5729] R10: fffff520006d2dd1 R11: 1ffff920006d2dd0 R12: ffffc90003697260
[  144.190646][ T5729] R13: ffff8880712ba0c8 R14: dffffc0000000000 R15: ffff8880712ba108
[  144.198688][ T5729] FS:  00007f91481f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  144.208230][ T5729] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  144.214956][ T5729] CR2: 00007f49a4d1243c CR3: 000000005250c000 CR4: 00000000003506f0
[  144.222975][ T5729] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  144.230960][ T5729] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  144.238981][ T5729] Call Trace:
[  144.242258][ T5729]  <TASK>
[  144.245229][ T5729]  ? ext4_xattr_block_csum+0x500/0x500
[  144.250706][ T5729]  ? ext4_xattr_inode_iget+0x3f0/0x600
[  144.256221][ T5729]  ext4_xattr_set_entry+0xb33/0x1e90
[  144.261532][ T5729]  ext4_xattr_ibody_set+0x250/0x690
[  144.266788][ T5729]  ext4_expand_extra_isize_ea+0x10e5/0x19b0
[  144.272731][ T5729]  __ext4_expand_extra_isize+0x301/0x3e0
[  144.278371][ T5729]  __ext4_mark_inode_dirty+0x47f/0x770
[  144.283891][ T5729]  ext4_evict_inode+0xa73/0x1100
[  144.288846][ T5729]  ? _raw_spin_unlock+0x24/0x40
[  144.293751][ T5729]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  144.299672][ T5729]  ? do_raw_spin_unlock+0x11d/0x230
[  144.304927][ T5729]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  144.310837][ T5729]  evict+0x485/0x870
[  144.314769][ T5729]  ? __lock_acquire+0x7c50/0x7c50
[  144.319808][ T5729]  ? proc_nr_inodes+0x2f0/0x2f0
[  144.324860][ T5729]  ? do_raw_spin_unlock+0x11d/0x230
[  144.330090][ T5729]  ? _raw_spin_unlock+0x24/0x40
[  144.334995][ T5729]  ? iput+0x768/0x980
[  144.338986][ T5729]  ext4_orphan_cleanup+0xbd3/0x1400
[  144.344230][ T5729]  ? ext4_orphan_del+0xb90/0xb90
[  144.349182][ T5729]  ? errseq_check_and_advance+0x62/0x120
[  144.354864][ T5729]  ext4_fill_super+0x7bdf/0x8150
[  144.359814][ T5729]  ? bdev_name+0x2c1/0x3f0
[  144.364288][ T5729]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  144.370634][ T5729]  ? snprintf+0xd7/0x120
[  144.374925][ T5729]  ? preempt_count_add+0x8d/0x190
[  144.379994][ T5729]  ? vscnprintf+0x80/0x80
[  144.384380][ T5729]  ? set_blocksize+0x1d3/0x350
[  144.389164][ T5729]  ? sb_set_blocksize+0xa5/0xe0
[  144.394064][ T5729]  get_tree_bdev+0x3f1/0x610
[  144.398669][ T5729]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  144.404964][ T5729]  vfs_get_tree+0x88/0x270
[  144.409398][ T5729]  do_new_mount+0x24a/0xa40
[  144.413948][ T5729]  __se_sys_mount+0x2d6/0x3c0
[  144.418632][ T5729]  ? __x64_sys_mount+0xc0/0xc0
[  144.423438][ T5729]  ? lockdep_hardirqs_on+0x94/0x140
[  144.428742][ T5729]  ? __x64_sys_mount+0x1c/0xc0
[  144.433553][ T5729]  do_syscall_64+0x4c/0xa0
[  144.437970][ T5729]  ? clear_bhb_loop+0x60/0xb0
[  144.442659][ T5729]  ? clear_bhb_loop+0x60/0xb0
[  144.447371][ T5729]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  144.453310][ T5729] RIP: 0033:0x7f9149f90eea
[  144.457740][ T5729] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.463358][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  144.477386][ T5729] RSP: 002b:00007f91481f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  144.477413][ T5729] RAX: ffffffffffffffda RBX: 00007f91481f5ef0 RCX: 00007f9149f90eea
[  144.477425][ T5729] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f91481f5eb0
[  144.485485][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  144.492801][ T5729] RBP: 0000200000000180 R08: 00007f91481f5ef0 R09: 0000000000800700
[  144.492819][ T5729] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[  144.501511][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  144.508769][ T5729] R13: 00007f91481f5eb0 R14: 000000000000046f R15: 000000000000002c
[  144.508790][ T5729]  </TASK>
[  144.508810][ T5729] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  144.508819][ T5729] CPU: 0 PID: 5729 Comm: syz.4.194 Not tainted syzkaller #0
[  144.508834][ T5729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  144.508842][ T5729] Call Trace:
[  144.508849][ T5729]  <TASK>
[  144.508855][ T5729]  dump_stack_lvl+0x168/0x22e
[  144.508878][ T5729]  ? memcpy+0x3c/0x60
[  144.508900][ T5729]  ? show_regs_print_info+0x12/0x12
[  144.508916][ T5729]  ? load_image+0x3b0/0x3b0
[  144.508939][ T5729]  panic+0x2c9/0x710
[  144.508959][ T5729]  ? bpf_jit_dump+0xd0/0xd0
[  144.508983][ T5729]  __warn+0x2f8/0x4f0
[  144.509000][ T5729]  ? ext4_xattr_inode_update_ref+0x4be/0x520
[  144.509020][ T5729]  ? ext4_xattr_inode_update_ref+0x4be/0x520
[  144.509038][ T5729]  report_bug+0x2ba/0x4f0
[  144.509062][ T5729]  ? ext4_xattr_inode_update_ref+0x4be/0x520
[  144.509082][ T5729]  handle_bug+0x3a/0x70
[  144.509098][ T5729]  exc_invalid_op+0x16/0x40
[  144.509115][ T5729]  asm_exc_invalid_op+0x16/0x20
[  144.509130][ T5729] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520
[  144.509151][ T5729] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 63 ef 9c ff 49 8b 37 48 c7 c7 40 91 a0 8a 89 da e8 32 e5 18 ff <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08
[  144.509165][ T5729] RSP: 0018:ffffc90003697200 EFLAGS: 00010246
[  144.509180][ T5729] RAX: 468be63347674000 RBX: 0000000000000002 RCX: 0000000000080000
[  144.509191][ T5729] RDX: ffffc9001780a000 RSI: 000000000007ffff RDI: 0000000000080000
[  144.509201][ T5729] RBP: ffffc900036972e8 R08: dffffc0000000000 R09: fffff520006d2dd1
[  144.509212][ T5729] R10: fffff520006d2dd1 R11: 1ffff920006d2dd0 R12: ffffc90003697260
[  144.509224][ T5729] R13: ffff8880712ba0c8 R14: dffffc0000000000 R15: ffff8880712ba108
[  144.509244][ T5729]  ? ext4_xattr_block_csum+0x500/0x500
[  144.509263][ T5729]  ? ext4_xattr_inode_iget+0x3f0/0x600
[  144.509284][ T5729]  ext4_xattr_set_entry+0xb33/0x1e90
[  144.509307][ T5729]  ext4_xattr_ibody_set+0x250/0x690
[  144.509328][ T5729]  ext4_expand_extra_isize_ea+0x10e5/0x19b0
[  144.509357][ T5729]  __ext4_expand_extra_isize+0x301/0x3e0
[  144.509383][ T5729]  __ext4_mark_inode_dirty+0x47f/0x770
[  144.509408][ T5729]  ext4_evict_inode+0xa73/0x1100
[  144.509427][ T5729]  ? _raw_spin_unlock+0x24/0x40
[  144.509450][ T5729]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  144.509471][ T5729]  ? do_raw_spin_unlock+0x11d/0x230
[  144.509493][ T5729]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  144.509511][ T5729]  evict+0x485/0x870
[  144.509527][ T5729]  ? __lock_acquire+0x7c50/0x7c50
[  144.509547][ T5729]  ? proc_nr_inodes+0x2f0/0x2f0
[  144.509563][ T5729]  ? do_raw_spin_unlock+0x11d/0x230
[  144.509584][ T5729]  ? _raw_spin_unlock+0x24/0x40
[  144.509603][ T5729]  ? iput+0x768/0x980
[  144.509620][ T5729]  ext4_orphan_cleanup+0xbd3/0x1400
[  144.509644][ T5729]  ? ext4_orphan_del+0xb90/0xb90
[  144.509664][ T5729]  ? errseq_check_and_advance+0x62/0x120
[  144.509683][ T5729]  ext4_fill_super+0x7bdf/0x8150
[  144.509698][ T5729]  ? bdev_name+0x2c1/0x3f0
[  144.509727][ T5729]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  144.509747][ T5729]  ? snprintf+0xd7/0x120
[  144.509765][ T5729]  ? preempt_count_add+0x8d/0x190
[  144.509782][ T5729]  ? vscnprintf+0x80/0x80
[  144.509800][ T5729]  ? set_blocksize+0x1d3/0x350
[  144.509819][ T5729]  ? sb_set_blocksize+0xa5/0xe0
[  144.509837][ T5729]  get_tree_bdev+0x3f1/0x610
[  144.509853][ T5729]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  144.509869][ T5729]  vfs_get_tree+0x88/0x270
[  144.509886][ T5729]  do_new_mount+0x24a/0xa40
[  144.509903][ T5729]  __se_sys_mount+0x2d6/0x3c0
[  144.509920][ T5729]  ? __x64_sys_mount+0xc0/0xc0
[  144.509936][ T5729]  ? lockdep_hardirqs_on+0x94/0x140
[  144.509955][ T5729]  ? __x64_sys_mount+0x1c/0xc0
[  144.509970][ T5729]  do_syscall_64+0x4c/0xa0
[  144.509985][ T5729]  ? clear_bhb_loop+0x60/0xb0
[  144.510001][ T5729]  ? clear_bhb_loop+0x60/0xb0
[  144.510018][ T5729]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  144.510033][ T5729] RIP: 0033:0x7f9149f90eea
[  144.510047][ T5729] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.510059][ T5729] RSP: 002b:00007f91481f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  144.510075][ T5729] RAX: ffffffffffffffda RBX: 00007f91481f5ef0 RCX: 00007f9149f90eea
[  144.510086][ T5729] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f91481f5eb0
[  144.510097][ T5729] RBP: 0000200000000180 R08: 00007f91481f5ef0 R09: 0000000000800700
[  144.510108][ T5729] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[  144.510118][ T5729] R13: 00007f91481f5eb0 R14: 000000000000046f R15: 000000000000002c
[  144.510133][ T5729]  </TASK>
[  144.515939][ T5729] Kernel Offset: disabled
[  145.003522][ T5729] Rebooting in 86400 seconds..