last executing test programs:

6m28.262663558s ago: executing program 3 (id=38):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x800)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

6m28.144278414s ago: executing program 3 (id=41):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd090387237ee530000000"], 0xfdef)
recvmmsg(r0, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x162, 0x0)

6m27.945039564s ago: executing program 3 (id=43):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000780)=""/53, 0x0, 0xb000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0))
r2 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x10})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)

6m27.661642499s ago: executing program 3 (id=45):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
syz_mount_image$fuse(0x0, 0x0, 0x10104a8, 0x0, 0x81, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20)

6m27.26024783s ago: executing program 3 (id=46):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
eventfd2(0x0, 0x800)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
writev(r2, &(0x7f0000000300)=[{&(0x7f0000000140)="580000001400ad", 0x7}, {&(0x7f0000000200)="4693516e18120f6d532544f9fb75ae8c55732bd2d79e7b44de619db0bf7aa6d8897d97c4315847c5540129a8f562001230e37dae9d047495eb91d91b703a47ecb73ccff3fa89e049d9df8c30699e0740f54fd9d8f602c0973ba7252b46697d0b449437704729c1050ff561", 0x6b}], 0x2)
r3 = socket$netlink(0x10, 0x3, 0x4)
write$binfmt_misc(r2, &(0x7f0000000100), 0xfef0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

6m21.230865736s ago: executing program 3 (id=69):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

6m21.025535837s ago: executing program 32 (id=69):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

3m49.635143916s ago: executing program 2 (id=713):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0)

3m46.787389675s ago: executing program 2 (id=720):
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
epoll_create(0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0)

3m45.54467903s ago: executing program 2 (id=723):
syz_mount_image$hpfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x3200041, &(0x7f00000000c0)={[{@eas_no}, {@chkdsk_no}, {@case_asis}, {@check_none}]}, 0x1, 0x9e15, &(0x7f000000a040)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg(r2, &(0x7f000000ab40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=[{0x10, 0x88, 0x3}], 0x10}}], 0x1, 0x24000081)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r3)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x9, 0x401, 0x4010})

3m44.963860051s ago: executing program 2 (id=730):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
unshare(0x60400)
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})

3m44.739513572s ago: executing program 2 (id=734):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

3m44.552717392s ago: executing program 2 (id=735):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[], 0x324}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4044010)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[], 0x658}, 0x1, 0x0, 0x0, 0x4801}, 0x4040005)

3m44.477675106s ago: executing program 33 (id=735):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[], 0x324}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4044010)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[], 0x658}, 0x1, 0x0, 0x0, 0x4801}, 0x4040005)

11.248301133s ago: executing program 5 (id=1574):
openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f15}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

9.051870478s ago: executing program 5 (id=1579):
openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x101900, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, 0x0, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000004800)={'veth0_vlan\x00', 0x133})

8.962190403s ago: executing program 5 (id=1581):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004002800018007000100637400001c00028008000240000000150500030000000000080001400000000d0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x35}, 0x15, 0x3, 'fo\x00', 0x6, 0x4, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblc\x00', 0x0, 0x81, 0x39}, {@rand_addr=0x64010500, 0x4e26, 0x3, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44)
r5 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x20, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

8.772359733s ago: executing program 5 (id=1583):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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")
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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")
creat(&(0x7f0000000580)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9)
semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51)
write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b)
unlink(&(0x7f0000000180)='./file1\x00')

7.250807812s ago: executing program 6 (id=1589):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0)
sendmmsg$alg(r0, 0x0, 0x0, 0x40800)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x8001)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getgid()
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r2=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000b40)={r2, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001780), 0x0, 0x10101, 0x0)
recvmsg(r0, 0x0, 0x0)

6.985841406s ago: executing program 5 (id=1591):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)

6.33238215s ago: executing program 4 (id=1593):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000f80)='./file2\x00', 0x0, &(0x7f0000000440)={[{@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x1, 0x7a1, &(0x7f00000007c0)="$eJzs3c9rHGUfAPDvbJKmSfu+yQsvvG89BQQNlG5Mja2Ch4oHESwU9GwbNttQs8mW7KY0IWCLCF4EFQ+CXnr2R7159cdV/wsP0lI1LVY8SGQ2s+222U1322Q3ms8HJvs8M7N5nu8+M888szPsBLBnjaV/chGHIuK9JGIkm59ExEAt1R9xYmO922urhXRKYn391V+S2jq31lYL0fCe1IEs8/+I+PbtiMO5zeVWllfmpkul4mKWn6jOn5+oLK8cOTc/PVucLS4cm5yaOnr8mePHti/W335YOXj9/Zee/OLEH2/97+q73yVxIg5myxrj2C5jMZZ9JgPpR3iPF7e7sB5Lms4d7no96Ey6a/Zt7OVxKEair5ZqYaibNQMAdso6ALAHJZ2OAd40aACAv7f69wC31lYL9am330h0140XImL/Rvz165sbS/qza3b7a9dBh28l91wZSSJidBvKH4uIT756/bN0iqwdml9LA9hely5HxJnRsc39f7LpnoVOPbXVwvXB2svYfbP32vEHeunrdPzzbLPxX+7O+CeajH8Gm+y7D+PB+3/uWpbo24biNknHf8833Nt2uyH+zGhflvtXbcw3kJw9Vyqmfdu/I2I8BgbT/GRt1eYjt/Gbf95sVX7j+O/XD974NC0/fb27Ru5a/+C975mZrk4/atx1Ny5HPNbfLP7kTvsnLca/p9os4+Xn3vm41bI0/jTe+rQ5/p21fiXiiabtf7ctky3vT5yobQ4T9Y3iPul28+WPH7W8Ea6x/dMpLb9+LtANafsPbx3/aNJ4v2al8zK+vzLyTatlD46/+fa/L3mtlt6Xzbs4Xa0uTkbsS17ZPP/o3ffW8/X10/jHH2++/28U23z7T88Jz7QZf//1nz9/+Ph3Vhr/TEft33ni6u25ln13e+0/VUuNZ3Pa6f/areCjfHYAAAAAAAAAAAAAAAAAAAAAAAAA0K5cRByMJJe/k87l8vmNZ3j/N4ZzpXKlevhseWlhJmrPyh6NgVz9py5HGn4PdTL7Pfx6/uh9+acj4j8R8eHgUC2fL5RLM70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB1o8/z/102CvawcA7Jj9va4AANB1jv8AsPd0dvwf2rF6AADd4/wfAPaeto//Z3a2HgBA93R6/t+3Q/UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgH+vUyZPptP772mohzc9cWF6aK184MlOszOXnlwr5QnnxfH62XJ4tFfOF8nzLf3Rp46VULp+fioWlixPVYqU6UVleOT1fXlqonj43Pz1bPF0c6FpkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANC+yvLK3HSpVFyU2DIxtDuqsWsS/fHAdSIuxW6oqsRDJRp7iaHedVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9xfAQAA//9Tfytg")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES16], 0x1, 0x152d, &(0x7f0000001980)="$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")
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x40844, &(0x7f0000000500)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@noauto_da_alloc}, {}], [{@obj_role={'obj_role', 0x3d, '}-#-)/!:)'}}, {@smackfsroot={'smackfsroot', 0x3d, 'jqfmt=vfsv1'}}, {@uid_eq}, {@flag='nomand'}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}, 0x1, 0x781, &(0x7f0000000800)="$eJzs2M1rXOUeB/DfOZnkpm1uJ733Lm7vphcrtCCdvLWhqSCtC0EQLBRcqRjsJA2ZNCWToskqxaUuXAgqImg3LkSahdCN1IjgH6Ab+y8IoqILF8LImUxeSCcv1qQPTT8feGaelzn5/p4kc5hnAnhk/b94yCJ6IqI/Isqt+Twiupq97oiF5dfdGlq8UrQsGo1LP2XFZXFzaPHKys/KWs+HonlJnIyIp5/J4t9v3Jtbn5ufHK3VqjOtcd/s1LW++tz8qYmp0fHqePXq4ODZMyOnB4aHR3ZtrwN98fLXn59/YeHC9c/6X5yeLOrtaa2t38duytrMlSLipb0IS6CjtZ+OdXNZKWFBAABsqfic/6+IeKz5Ga4cHbH24a0cd79MWhwAAACwKxrHGgAAAMA+l/r7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg6NRhYNAAAAYF9L/f0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl5tDi1dW2oPM/fFCRPQu599qteWVUiw0n7ujMyIO/ppFad11WUT070L+wo2I+G+7/WfN/N7obo425ucRcTFx/iu7kA+PsqXi/nO+3fsvX73/RJv3X2n5sr9t5f53657731p+xyb3v2s7zPjku+ff2jT/RsT/Su3ys9X8bH1+51r+wg7z7zx39P3N1hofR5yI9vkril7f7NS1vvrc/KmJqdHx6nj16uDg2TMjpweGh0f6xiZq1f7lx7YZH3765jdb7f/gZvlZbPn7f3uH+z9+5MkvPtoi/+Txrf/+WZv8oqbFotPYPv+Xbw//sdlakX95k/1vlV/MLW0f3fTs7Yu3d/hSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2iTwieiLLK6v9PK9UIg5FxH/iYF6brs8+MTZ9/erlYi2iNzrzsYlatT8iysvjrBgPNPtr48EN46GIOBIR75QPNMeVV6drl1NvHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFWHIqInsrwSEXlE/FbO80oldVUAAADArutNXQAAAACw55z/AQAAYP/b9vx/56kHUwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD71ZFjS3eziFg4d6DZCl2ttc6klQF7LU9dAJBMR+oCgGRKqQsAknHGB7Jt1rvvYwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/efE0aW7WUQsnDvQbIWu1lpn0sqAvZanLgBIpiN1AUAypdQFAMk44wPZNuvd97ECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP7T02xZXomIvNnP80ol4p8R0Rud2dhErdofEYcj4vty5z+K8UDqogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANh19bn5ydFarTqjo/NwdL7yT/sgOqnvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApFCfm58crdWqM/XUlQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJBW/kMWEUU7UX68Z+NqV/Z7ufkcEa99cOnd10dnZ2cGivmfV+dn32vND6aoHwAAANho5Zy+co4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYqfrc/ORorVad2cNO6j0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/NnwEAAP//hsSitA==")
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80)
write$bt_hci(r2, &(0x7f0000000bc0)=ANY=[], 0xa)
sendfile(r2, r1, 0x0, 0x40001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x400)

6.062274184s ago: executing program 6 (id=1595):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
socket$kcm(0x29, 0x2, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r1], 0x30}}, 0x94)

6.061601934s ago: executing program 5 (id=1596):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x1, 0x4000000000000}}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0)

5.987086818s ago: executing program 0 (id=1597):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_open_procfs(0x0, 0x0)
r2 = open(0x0, 0x141a42, 0x8)
copy_file_range(r1, 0x0, r2, 0xffffffffffffffff, 0xe0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x277de8b27bd5f421, 0x0)
bind$bt_hci(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83)
fcntl$setstatus(r3, 0x4, 0x24400)
fsync(r3)

5.115408144s ago: executing program 34 (id=1596):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x1, 0x4000000000000}}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0)

5.097458894s ago: executing program 0 (id=1599):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6   \x00'}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r4}, 0x38)

5.095464464s ago: executing program 6 (id=1601):
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0xa0000c, &(0x7f0000000980)=ANY=[], 0x0, 0x82c, &(0x7f0000000a00)="$eJzs3UFoHNfdAPD/yLItK99nQr4P1xjHmTgp2OAoK9lREIEmm9VInkTaVXdXwaaUxNSyMZaTYDdQ+9DEl5aWlFB66DHJoZf2VHppKbS0hbZQKLTX3gKBHpKWlpbSElCZmZUtWVrJdhQ7JL+fsObNvDfz/vN2Pf8dLTMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAkjclabTSJmbw5fyLt5xdpY7Ldmu1bn6bL2/v5qskG/UYkxb8YGoq91aK9/3+9ek/x62Dsr+b2x1AxGYor9+y594n/GxxYXn+DgLba4HoLL12+cv7U4uLCxTsYyEfgmz9dNfu94dh4ZLctF6azZt5p5bP16SzNO610Yny89ujxqU46lc9knZOdbjabNtpZvdtqp4cah9PRiYmjaTZysjXfnJ6sz2TpYLXw8UfGarXx9JmRuaze7rSajz4z0mkcz2dm8uZ0uWJRXbR5vHgjPpt3025Wn03TM+cWF46ujm3XmmiLRqOrlnywtHJu/8P3vvvKO38/tzC22TiN1cbGRkfHxkbHk4io1QavL3hs4rHHa7XB2g1iTYs7+qblY2iLj+Bw+wZ6+T9mIo9mzMeJSNf9acRktKMVs3H9Dbyyvmc5/3/20b/8fqN+36jy/9UVkezfe31mX5T5/0A1d6Bf/q/63rGzT8wf1c/1/b8Ul+NKnI9TsRiLsRAXV7bbuVX9JVsX+8CttR/epH46smhGHp1oRR6zUS+XpL0laUzEeIxHLZ6P4zEVnUhjKvKYiSw6cTI60Y2sfEc1oh1Z1KMbrWhHGoeiEYcjjdGYiIk4GmlkMRInoxXz0YzpmIx6uZUzca4c96M3xLXnqy/85Owf3n2zfLWWG41uNMSvRZSN/rZBozXJ/Fbz/7aQ/z/1IuJXW3Dkhg9vaTn/AwAAAJ9YSfkde3H+vz3uL0tT+Uz2hU3WGix+vXZnIgQAAAA+rPKb//3FZHtRuj+S4vy/trrRD7bfneAAAACALZGU19glETEcD1Sl5culanc7NgAAAGBrlN//Hygmw0sr7gLg/B8AAAA+QZ77Ua9w4z3233mmmE2SGJjbmfzsr9Fub0+OvXXi4eRCvaioX9hWrdebPHdti92pfUn0/pRQbmt88Mo9xfxgI9ufLN8894Od1fT98ve+wWurr47jqV3V0iRJigCuzvUNIFYFsLu3F9cCKOfi9XiwavPg6Wp6ermmuqPw8FQ+k400WjNPjEa9vnugm53ovvLiua9EufvfaM7uTuLMucWFkS+9tHi6jKW8gfHVC739XXMfxQ1iWeqNQNy/9u7Gxaa2lxdi9Podrvqtrdz/gUu7i8LALfT5tTj4P2Wbg8NV2+HV+z9U9Dk60m/vh6v9G12z54Nr31hVFCd7czdE8VC19KFDD1WTdaIY2yiKYizGVkbRG4RbG4t1o4h7I+LNB1898c9ft5Ls6GZRHF0vin8tVW4iCoC75Ux5158iC1XpqMpC/1k+gCVJcbzbEavyTrXCzR5rk7KX3pN8zr6+/p38bz67/3up6GVp/SP6oarNoerzxOC+dfJKbZ0j+svnXv5N74h+7PvffeuLB377w9vO60PLTXYtF+775T0DUUaxqxfFlV5Ne3vyrWuZpMqqbxfL3+7bb2dmLCk+Lmz78oWXY8+ly1ceOXfh1NmFswsvjo0dHa8dq9UeS5Lei7dUfmKQewBYx8E4UCXyvs/Y6fMUnvIDQJW7j210Vr0tkvuuXVJQ5MSXYjFOx5HyaoOIeGD9foerdf5RfCo5Egertp/vBX3DWevwiie8HNnk3HJHRK/t2KZth1c8Xua6z3z7I3w5AOCOOLh8Ht8nD/fN/yvO3Y9sct49vOKSwiNxuGp7eDmC/rk8Ip68s6MBAJ8OWfv9ZLj79aTdzueeH52YGK13j2dpu9V4Nm3nk9NZmje7WTsG683pLJ1rt7qtRmumKDyXT2adtDM/N9dqd9OpVjuda3XyE+WT39Peo9872Wy92c0bnbmZrN7J0kar2a03uulk3mmkc/NPz+Sd41m7XLkzlzXyqbxR7+atZtppzbcb2UiadrJsRcN8Mmt286m8KDbTuXY+W29fjYiZ+dksncw6jXY+121VG1zuK29Otdqz5Wb/vPtujzYAfDxcunzl/KnFxYWLN1X4TkSsWvKnm1mrf+9DbiwMAHfB9Sz93v/eWOeP7wAAAAAAAAAAAAAA8PFwa9f/3URh19ZucKhP1ed2Ly5cXHo1Ym1VsrS0dAtd7IpN2uzoDdUWD9QdKVzdku0MxHrjfBOF7XFH9jTpX/XCk0+e77f606/uPd7nLVG5tmTT/ymDRevqUtfX3tvx4zeqqqdua3cGbn2tP0bEbfS1lKxblf6ueLnv3jEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPr5bwAAAP//b3psMQ==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioperm(0x0, 0x1, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x210, 0x210, 0x138, 0x0, 0x210, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x3f00, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'gretap0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478)

4.900555275s ago: executing program 4 (id=1603):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654", 0x48}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7", 0x56}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

4.099790766s ago: executing program 4 (id=1604):
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)

3.979916393s ago: executing program 1 (id=1605):
sched_setscheduler(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10)
sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

3.972339213s ago: executing program 0 (id=1614):
r0 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'macvlan0\x00'})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
sendmsg$802154_dgram(r0, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28805}, 0x8090)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0x92b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa}}]}}]}, 0x44}}, 0x20000000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)

3.120751197s ago: executing program 6 (id=1606):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x11)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c)

3.015892843s ago: executing program 1 (id=1607):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x6a, 0x1, 0x0, 0xc)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x30, r3, 0x1, 0x70bd25, 0x3, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x2400c046)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, 0x0, 0x8004)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0xfd, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}}, 0x0)
close(0x3)

2.915748898s ago: executing program 4 (id=1608):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78)
sendfile(r0, r1, &(0x7f00000001c0), 0x8)
fcntl$addseals(r1, 0x409, 0x8)
pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000080)="ea", 0x1}], 0x1, 0xb, 0x40, 0x4)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
write(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x11, 0x3, 0x0)
setsockopt(r3, 0x107, 0xf, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0)
setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

2.805009274s ago: executing program 1 (id=1609):
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d31000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)

2.673800221s ago: executing program 0 (id=1610):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0x9ffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private1, 0x4d4, 0x6c}, @in=@loopback, {0xfffffffffffffffc, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x3}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000406010200"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000014000000d809000000000000b93b0000000000000074c50000000000010000000000332244000500fe8000000000000000000000000000bb000000023200"], 0xfc}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

2.499905749s ago: executing program 4 (id=1611):
r0 = inotify_init()
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r3, 0x8497)
accept(r3, 0x0, 0x0)
bind$unix(r1, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.286640511s ago: executing program 1 (id=1612):
r0 = socket$tipc(0x1e, 0x4, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x40000)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ccb000/0x9000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00009e9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x200000000000000)

2.191203646s ago: executing program 0 (id=1613):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.current\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
lseek(r3, 0x7, 0x4)

2.100006551s ago: executing program 1 (id=1615):
openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x101900, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, 0x0, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000004800)={'veth0_vlan\x00', 0x133})

1.585477277s ago: executing program 6 (id=1616):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000", 0x7, 0xfffffffffffffffe)
setfsgid(0xee00)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

978.723099ms ago: executing program 0 (id=1617):
mkdirat(0xffffffffffffff9c, 0x0, 0x100)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1, 0x7}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)

931.896382ms ago: executing program 4 (id=1618):
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

8.42726ms ago: executing program 6 (id=1619):
sched_setscheduler(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10)
sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

0s ago: executing program 1 (id=1620):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c)
pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000003ec0)={0x2020}, 0x2020)
sendfile(r3, r3, &(0x7f00000000c0)=0x7, 0x6fecb1)

kernel console output (not intermixed with test programs):

   71.992763][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[   72.317071][ T4368] ODEBUG: Out of memory. ODEBUG disabled
[   74.175984][ T4475] loop4: detected capacity change from 0 to 512
[   74.686541][ T4364] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.768846][ T4475] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   74.836305][ T4475] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.920482][ T4364] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.025417][ T4487] sch_fq: defrate 53322 ignored.
[   75.064648][ T4364] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.238038][ T4364] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.317314][ T4502] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   77.007185][ T1326] cfg80211: failed to load regulatory.db
[   78.069105][ T4549] loop2: detected capacity change from 0 to 40427
[   78.093137][ T4546] netlink: 'syz.0.83': attribute type 4 has an invalid length.
[   78.165689][ T4549] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   78.174163][ T4549] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   78.216745][ T4549] F2FS-fs (loop2): invalid crc value
[   78.288943][ T4549] F2FS-fs (loop2): Found nat_bits in checkpoint
[   78.429742][ T4549] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   78.437654][ T4549] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   78.648421][ T1326] Bluetooth: hci0: command 0x0409 tx timeout
[   79.958688][ T4518] chnl_net:caif_netlink_parms(): no params data found
[   80.072353][ T4586] xt_hashlimit: overflow, try lower: 3/0
[   80.759250][ T1326] Bluetooth: hci0: command 0x041b tx timeout
[   80.893811][ T4589] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   80.941236][ T4594] binder: 4591:4594 ioctl c0306201 200000000180 returned -14
[   83.241690][ T4239] Bluetooth: hci0: command 0x040f tx timeout
[   83.345876][ T4518] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.361703][ T4518] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.369820][ T4518] device bridge_slave_0 entered promiscuous mode
[   83.384089][ T4518] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.394141][ T4518] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.407878][ T4518] device bridge_slave_1 entered promiscuous mode
[   83.455674][ T4518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.469235][ T4518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.579181][ T4518] team0: Port device team_slave_0 added
[   83.610363][ T4518] team0: Port device team_slave_1 added
[   83.701217][ T4518] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.718374][ T4518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.776321][ T4518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.808149][ T4518] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.851097][ T4518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.889147][ T4518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.933822][ T4364] device hsr_slave_0 left promiscuous mode
[   83.955137][ T4364] device hsr_slave_1 left promiscuous mode
[   84.004940][ T4364] device veth1_macvtap left promiscuous mode
[   84.017495][ T4364] device veth0_macvtap left promiscuous mode
[   84.025477][ T4364] device veth1_vlan left promiscuous mode
[   84.032347][ T4364] device veth0_vlan left promiscuous mode
[   84.628767][ T4364] bond0 (unregistering): Released all slaves
[   84.733366][ T4659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.107'.
[   84.756411][ T4665] Zero length message leads to an empty skb
[   84.822994][ T4518] device hsr_slave_0 entered promiscuous mode
[   84.842873][ T4203] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   84.867523][ T4518] device hsr_slave_1 entered promiscuous mode
[   84.878905][ T4518] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.889103][ T4518] Cannot create hsr debugfs directory
[   85.275791][ T4518] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   85.296210][ T4203] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[   85.313865][ T1109] Bluetooth: hci0: command 0x0419 tx timeout
[   85.346055][ T4203] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   85.346147][ T4518] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   85.422265][ T4203] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   85.439942][ T4518] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   85.448190][ T4684] x_tables: duplicate entry at hook 1
[   85.452062][ T4203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.472301][ T4518] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   85.501815][ T4203] usb 5-1: config 0 descriptor??
[   85.603808][ T4203] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[   85.640363][ T4684] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[   86.790265][ T4692] device veth0_vlan left promiscuous mode
[   86.834406][ T4698] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[   87.003815][ T4518] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.061088][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   87.078809][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   87.103059][ T4518] 8021q: adding VLAN 0 to HW filter on device team0
[   87.163028][ T4518] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   87.180309][ T4518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   87.196731][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   87.235471][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   87.253145][ T4711] process 'syz.0.117' launched './file0' with NULL argv: empty string added
[   87.600207][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.608003][ T4369] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.843810][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   87.861237][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   87.902957][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.910132][ T4369] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.961632][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   87.970770][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   87.980680][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   88.005795][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   88.006988][ T4237] usb 5-1: USB disconnect, device number 3
[   88.027515][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   88.054164][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   88.067627][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   88.087641][ T4718] loop4: detected capacity change from 0 to 128
[   88.100508][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   88.151318][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   88.179071][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   88.213649][ T4723] kvm: emulating exchange as write
[   88.231946][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   88.250888][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   88.449981][ T4726] netlink: 104 bytes leftover after parsing attributes in process `syz.0.121'.
[   88.494522][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   90.599217][ T4738] netlink: 'syz.1.124': attribute type 1 has an invalid length.
[   90.880296][ T4750] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   90.976489][ T4741] bond1: (slave gretap1): making interface the new active one
[   91.021528][ T4741] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   91.096858][ T4741] syz.1.124 (4741) used greatest stack depth: 19536 bytes left
[   91.333476][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   91.345687][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   91.514222][ T4518] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.688136][ T4779] ptrace attach of "./syz-executor exec"[4780] was attempted by "./syz-executor exec"[4779]
[   92.557029][ T4796] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   93.227277][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   93.272027][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   93.344036][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   93.412529][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   93.447037][ T4518] device veth0_vlan entered promiscuous mode
[   93.467520][ T4518] device veth1_vlan entered promiscuous mode
[   93.538310][ T4518] device veth0_macvtap entered promiscuous mode
[   93.615630][ T4518] device veth1_macvtap entered promiscuous mode
[   93.710293][ T4837] netlink: 216 bytes leftover after parsing attributes in process `syz.4.142'.
[   93.720492][ T4837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'.
[   94.399266][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   94.428212][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   94.440593][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   94.468277][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   94.494910][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   94.523053][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   94.548651][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   94.578262][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   94.650205][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.692798][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.704248][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.715454][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.750441][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.778644][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.790630][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.803434][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.824295][ T4518] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.837911][ T4831] device syzkaller0 entered promiscuous mode
[   94.983370][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   95.000935][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   95.024081][ T4853] loop0: detected capacity change from 0 to 512
[   95.045596][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.102933][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.114432][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.115132][ T4850] Set syz1 is full, maxelem 6117 reached
[   95.128456][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.149868][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.164891][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.174965][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.185783][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.187858][ T4853] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000006,,errors=continue. Quota mode: writeback.
[   95.197174][ T4518] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.227189][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   95.236608][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   95.243116][ T4853] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.282826][ T4518] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.296943][ T4518] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.307165][ T4518] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.316249][ T4518] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.966314][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.002736][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.171892][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   96.651231][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.661382][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.681422][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   97.190987][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   97.210987][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   97.220994][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   97.624690][ T4883] loop4: detected capacity change from 0 to 256
[   97.777427][ T4883] FAT-fs (loop4): Directory bread(block 64) failed
[   97.821249][ T4883] FAT-fs (loop4): Directory bread(block 65) failed
[   97.837208][ T4883] FAT-fs (loop4): Directory bread(block 66) failed
[   97.866096][ T4883] FAT-fs (loop4): Directory bread(block 67) failed
[   97.900481][ T4883] FAT-fs (loop4): Directory bread(block 68) failed
[   97.926380][ T4883] FAT-fs (loop4): Directory bread(block 69) failed
[   98.243696][ T4883] FAT-fs (loop4): Directory bread(block 70) failed
[   98.418299][ T4883] FAT-fs (loop4): Directory bread(block 71) failed
[   98.570177][ T4883] FAT-fs (loop4): Directory bread(block 72) failed
[   98.578987][ T4883] FAT-fs (loop4): Directory bread(block 73) failed
[   98.762220][ T4913] netlink: 24 bytes leftover after parsing attributes in process `syz.5.157'.
[   98.968363][ T4918] netlink: 'syz.0.158': attribute type 10 has an invalid length.
[   99.751857][   T26] kauditd_printk_skb: 63 callbacks suppressed
[   99.751871][   T26] audit: type=1800 audit(1777090447.976:75): pid=4920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.152" name="bus" dev="loop4" ino=1048595 res=0 errno=0
[   99.865091][ T4918] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  100.761085][ T4960] ptrace attach of "./syz-executor exec"[4195] was attempted by "./syz-executor exec"[4960]
[  101.578736][ T4974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'.
[  101.589999][ T4974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'.
[  101.599299][ T4974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'.
[  101.609172][ T4974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'.
[  101.618417][ T4974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'.
[  101.781126][ T1109] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  101.826333][ T4969] loop0: detected capacity change from 0 to 4096
[  102.031309][ T1109] usb 5-1: Using ep0 maxpacket: 8
[  102.043706][ T4969] NILFS (loop0): invalid segment: Checksum error in segment payload
[  102.109852][ T4969] NILFS (loop0): trying rollback from an earlier position
[  102.161281][ T1109] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.183725][ T4969] NILFS (loop0): recovery complete
[  102.209328][ T4981] sock: sock_set_timeout: `syz.5.174' (pid 4981) tries to set negative timeout
[  102.226492][ T1109] usb 5-1: config 0 has no interfaces?
[  102.261615][ T4983] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  102.271373][ T1109] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  102.320794][ T1109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.357538][ T1109] usb 5-1: config 0 descriptor??
[  102.393022][ T4986] Set syz1 is full, maxelem 6117 reached
[  102.827613][ T4996] 9pnet_virtio: no channels available for device 127.0.0.1
[  103.821730][ T4968] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  103.850297][   T26] audit: type=1800 audit(1777090452.716:76): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.171" name="file1" dev="loop0" ino=14 res=0 errno=0
[  104.629887][ T4244] usb 5-1: USB disconnect, device number 4
[  105.915683][ T5032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'.
[  106.658954][ T5054] tmpfs: Bad value for 'mpol'
[  107.773358][ T5084] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  109.572335][ T4368] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  110.408628][ T5120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.211'.
[  110.423420][ T4368] usb 5-1: Using ep0 maxpacket: 8
[  110.435510][ T5121] netlink: 'syz.1.210': attribute type 39 has an invalid length.
[  110.581141][ T4368] usb 5-1: unable to get BOS descriptor or descriptor too short
[  110.589574][ T4368] usb 5-1: too many configurations: 141, using maximum allowed: 8
[  110.671218][ T4368] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.709239][ T4368] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  110.791117][    T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  110.811156][ T4368] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.825194][ T4368] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  110.921221][ T4368] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.933880][ T5141] netlink: 232 bytes leftover after parsing attributes in process `syz.0.219'.
[  110.954918][ T4368] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  110.983506][ T5136] 8021q: adding VLAN 0 to HW filter on device bond1
[  111.068365][    T7] usb 3-1: Using ep0 maxpacket: 16
[  111.074037][ T4368] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  111.097943][ T4368] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  111.194661][ T4368] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  111.211244][    T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  111.226707][ T4368] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  111.247811][    T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  111.351307][ T4368] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  111.385799][ T4368] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  111.441444][    T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  111.461605][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.489318][    T7] usb 3-1: Product: syz
[  111.501130][ T4368] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  111.512275][    T7] usb 3-1: Manufacturer: syz
[  111.545760][ T4368] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  111.560791][    T7] usb 3-1: SerialNumber: syz
[  111.691115][ T4368] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  111.724071][ T4368] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  111.913048][    T7] usb 3-1: 0:2 : does not exist
[  111.991358][ T4368] usb 5-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40
[  112.028273][ T4368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.053418][    T7] usb 3-1: USB disconnect, device number 3
[  112.081920][ T4368] usb 5-1: Product: syz
[  112.110492][ T4368] usb 5-1: Manufacturer: syz
[  112.131328][ T4368] usb 5-1: SerialNumber: syz
[  112.167397][ T4273] udevd[4273]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  112.221188][ T4368] usb 5-1: can't set config #1, error -71
[  112.246358][ T4368] usb 5-1: USB disconnect, device number 5
[  113.840982][    C1] sched: RT throttling activated
[  114.177085][ T5195] ptrace attach of "./syz-executor exec"[4195] was attempted by "àvƒ{y ìSCV»?î\x09—ÖÏ,ówÏ\x5cúÇfŸu—£Ei±wO|`iÞÜ8êm§-³ý½��Ž*fª^“¶¹UBVBX§²#º•îÜ4M¤‚ç¢èáB\x1b¯œIÿ'ü í?ñÌÌÓ\x1b›£ÇÒ®â�µ0<˜\x0adOh½-¼DW�u'r_;ç͇ï|‘R±FZMá¨oֈϘÒC*mí—¥ƒ«u®™&ð)ã7Ê\x0c\x0c¯J¤CüNçú—îöPË[/Õ6ÝÊÌ«â$!�ÞÇ+PÈAÄ‹`9¹à²šÙƒ\x22¾G8ò¾\x09+à­vRßàx¿ÐŽ)ƒR8ÑaZî>ý³G–/vÝIOØÆ6ü¶9Ð{E$DúXü�PpÒ€�ì”[]r¸ª8ê'R<„ç.%¤T¢�ÅMû3·ê\x0a,zð¼7\x0bÙ�‹55MéƺxÕÌXGÎ݆嵋”Õ·±„)—f“\x0c–Iˆ‹Y^Àƒv!¸ßÃ=ƒÐ0à4�7á„—ŒyPÿe¨.ôùúãq˜;Zªî¦8-i™»ÓG±AN}·­R\x07²Pz\x22t1òÓV–2ÿUÌzoQÊ'[‡æ¢ƒ’®¥Ÿµ°ïºn«÷M�…vÝJàAnÔ� ¥€°†¶F:„ݘf-îù¾RZuÃÎÎõ\x0a ;ÆS$ͳ®úµš(›Ó°«½Á\x0bÍQ);kÄuÌ›´h{{™—™Ž’J(;•‰/;—Ò?ðÂcJøluñH£*6lN7åSëïX°QcxN<\x0c\x0bªÃ”aW-kê4ÚÝL?ª›¹‰š£Ë‹q—d!Ïþ‚^쓃æѪuæŠSÖ÷qWax1˜¨ßîKï$ú#ýÉg ‹5�Ýe¨ìPptYÇÿ¡ðfœ ‚7ß¡~‘ÐnµpÈ?½¨úç:üʽ¤'ùsGŒAuZç­\x5c/À{¡§ímÂ\x5c*éÎßfØjâb©
QJÌ_B«¯ÈU)Ú‰L¼Âš¢€y“·bÑË€¶9Ò„iN·Á2çaé×R¶¾Å‰ÅŒi¦7ƒkÛøm¤È’{\x07moßÎm6êaBr•LÓ³5,Ïÿ‘†ÿé@’G\x0d¯s¢žc ØX/.Æ4\x07”龋à#6þa-“–Ä
[  114.559513][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  114.673507][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  114.688362][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  114.726890][ T5213] netlink: 182 bytes leftover after parsing attributes in process `syz.1.240'.
[  114.741124][ T4240] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  114.745853][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.764045][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.776558][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.787567][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.797781][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.808905][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.820564][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.834805][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.849311][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.860913][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.871999][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.882856][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.895008][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.906351][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.917940][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.928906][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.121268][ T4240] usb 3-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024
[  115.156341][ T4240] usb 3-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0
[  115.179132][ T5219] loop0: detected capacity change from 0 to 512
[  115.200583][ T4240] usb 3-1: config 16 interface 0 has no altsetting 0
[  115.294870][ T4240] usb 3-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a
[  115.295573][ T5219] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  115.316156][ T4240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.401018][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[  115.461434][ T5205] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  115.483497][ T5219] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.242: corrupted in-inode xattr
[  115.584449][ T5219] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.242: couldn't read orphan inode 15 (err -117)
[  115.628453][ T5219] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,nodiscard,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,lazytime,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  116.501130][ T4240] usb 3-1: string descriptor 0 read error: -71
[  116.509518][ T4240] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  116.514198][ T5230] netlink: 16 bytes leftover after parsing attributes in process `syz.5.244'.
[  116.573603][ T4240] imon 3-1:16.0: unable to initialize intf0, err -19
[  116.580537][ T4240] imon:imon_probe: failed to initialize context!
[  116.614842][ T4240] imon 3-1:16.0: unable to register, err -19
[  116.671775][ T4240] usb 3-1: USB disconnect, device number 4
[  116.846511][ T5242] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.249'.
[  116.851054][ T1326] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  117.141103][ T1326] usb 5-1: Using ep0 maxpacket: 32
[  117.281279][ T1326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.327306][ T1326] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  117.566555][ T1326] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  117.640997][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[  117.667413][ T1326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.681586][ T1326] usb 5-1: Product: syz
[  117.685989][ T1326] usb 5-1: Manufacturer: syz
[  117.690635][ T1326] usb 5-1: SerialNumber: syz
[  117.697305][ T1326] usb 5-1: config 0 descriptor??
[  118.999443][ T5296] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0
[  119.009987][ T5294] netlink: 40 bytes leftover after parsing attributes in process `syz.2.261'.
[  119.368436][ T5305] kvm: pic: non byte write
[  119.780439][ T4244] usb 5-1: USB disconnect, device number 6
[  120.203614][ T5335] fuse: Unknown parameter '4'
[  121.404800][   T26] audit: type=1326 audit(3924574118.275:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5348 comm="syz.1.272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28128a5dd9 code=0x0
[  122.076786][ T5357] Illegal XDP return value 4291330048, expect packet loss!
[  124.084580][ T5352] loop4: detected capacity change from 0 to 40427
[  124.237637][ T5352] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x1ffff
[  124.271225][ T5352] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xe4
[  124.323870][ T5352] F2FS-fs (loop4): invalid crc value
[  124.346439][ T5352] F2FS-fs (loop4): Found nat_bits in checkpoint
[  124.458867][ T5352] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0
[  124.641092][ T4368] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  124.852688][ T5423] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.860812][ T5423] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.021145][ T4368] usb 6-1: Using ep0 maxpacket: 8
[  125.881357][ T4368] usb 6-1: unable to get BOS descriptor or descriptor too short
[  125.971360][ T4368] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 17, changing to 7
[  126.161432][ T4368] usb 6-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40
[  126.188863][ T4368] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.203788][ T4368] usb 6-1: Product: syz
[  126.208107][ T4368] usb 6-1: Manufacturer: syz
[  126.218363][ T4368] usb 6-1: SerialNumber: syz
[  126.407733][ T4274] libceph: connect (1)[c::]:6789 error -101
[  126.419453][ T4274] libceph: mon0 (1)[c::]:6789 connect error
[  126.436497][ T5423] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.479132][ T5423] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.493992][ T5459] ceph: No mds server is up or the cluster is laggy
[  126.557468][ T4368] usb 6-1: interface 3 not found
[  126.622927][ T4368] usb 6-1: USB disconnect, device number 2
[  126.752139][ T4203] libceph: connect (1)[c::]:6789 error -101
[  126.772170][ T4203] libceph: mon0 (1)[c::]:6789 connect error
[  127.396091][ T5476] loop4: detected capacity change from 0 to 256
[  128.216411][ T5423] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.226472][ T5423] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.236926][ T5423] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.266498][ T5423] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.370178][ T5467] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  128.399349][ T5468] bridge0: port 3(syz_tun) entered blocking state
[  128.408835][ T5468] bridge0: port 3(syz_tun) entered disabled state
[  128.416992][ T5468] device syz_tun entered promiscuous mode
[  128.427964][ T5468] bridge0: port 3(syz_tun) entered blocking state
[  128.435047][ T5468] bridge0: port 3(syz_tun) entered forwarding state
[  128.450418][ T5474] netlink: 'syz.5.300': attribute type 8 has an invalid length.
[  128.689733][ T5499] loop2: detected capacity change from 0 to 256
[  128.848167][ T5499] vfat filesystem being mounted at /68/file0 supports timestamps until 2107-12-31 (0x10391447e)
[  129.469068][ T5513] sctp: failed to load transform for md5: -2
[  130.975143][ T5536] tipc: Started in network mode
[  131.045878][ T5536] tipc: Node identity ac1414aa, cluster identity 4711
[  131.101724][ T5536] tipc: Enabled bearer <udp:s>, priority 10
[  131.532616][ T5546] netlink: 32 bytes leftover after parsing attributes in process `syz.2.319'.
[  131.680950][ T5556] loop2: detected capacity change from 0 to 256
[  131.794331][ T5556] vfat filesystem being mounted at /72/file1 supports timestamps until 2107-12-31 (0x10390cdaa)
[  131.886824][ T5565] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[  132.131856][ T5578] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  132.175996][ T4240] tipc: Node number set to 2886997162
[  132.229434][ T5578] netlink: 12 bytes leftover after parsing attributes in process `syz.5.327'.
[  133.325131][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  133.331695][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  135.054281][ T5611] loop5: detected capacity change from 0 to 256
[  135.117162][ T5611] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  135.248969][ T5611] vfat filesystem being mounted at /43/file0 supports timestamps until 2107-12-31 (0x10391447e)
[  135.287249][ T5616] xt_NFQUEUE: number of queues (8) out of range (got 65537)
[  135.677846][ T5625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.337'.
[  136.264372][   T26] audit: type=1326 audit(3924574133.135:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.5.338" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3827f0dd9 code=0x0
[  136.357435][   T26] audit: type=1326 audit(3924574133.225:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3827f0dd9 code=0x7ffc0000
[  136.476325][   T26] audit: type=1326 audit(3924574133.225:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3827f0dd9 code=0x7ffc0000
[  136.631888][   T26] audit: type=1326 audit(3924574133.225:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3827f0dd9 code=0x7ffc0000
[  136.984755][ T5666] autofs4:pid:5666:autofs_fill_super: called with bogus options
[  137.692967][   T26] audit: type=1326 audit(3924574133.225:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb3827f0dd9 code=0x7ffc0000
[  137.806187][   T26] audit: type=1326 audit(3924574133.225:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3827f0dd9 code=0x7ffc0000
[  137.881034][   T26] audit: type=1326 audit(3924574133.225:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3827f0dd9 code=0x7ffc0000
[  137.937904][   T26] audit: type=1326 audit(3924574133.225:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3827f0dd9 code=0x7ffc0000
[  137.960691][   T26] audit: type=1326 audit(3924574133.225:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3827f0dd9 code=0x7ffc0000
[  137.985426][   T26] audit: type=1326 audit(3924574133.225:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb3827f0dd9 code=0x7ffc0000
[  138.289230][ T5697] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  139.521220][ T5003] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  139.552301][ T5717] ipt_CLUSTERIP: Please specify destination IP
[  139.821782][ T5003] usb 1-1: Using ep0 maxpacket: 32
[  140.811125][ T5003] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.831054][ T5003] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  140.840133][ T5003] usb 1-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64
[  140.861036][ T5003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.901623][ T5003] usb 1-1: config 0 descriptor??
[  141.558046][ T5735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.365'.
[  141.891783][ T5735] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.901208][ T5735] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.910011][ T5735] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.919111][ T5735] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.992817][ T5735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.365'.
[  142.026785][ T4368] usb 1-1: USB disconnect, device number 2
[  142.087289][ T5740] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  142.126625][ T5740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'.
[  142.218683][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'.
[  142.237768][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'.
[  142.248090][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'.
[  142.258342][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'.
[  142.267884][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'.
[  144.272041][ T5766] loop0: detected capacity change from 0 to 256
[  148.581197][   T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  148.861140][   T23] usb 5-1: Using ep0 maxpacket: 32
[  148.981911][   T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  149.121196][   T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  149.144233][   T23] usb 5-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64
[  149.161137][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.187395][   T23] usb 5-1: config 0 descriptor??
[  151.329531][ T5818] xt_NFQUEUE: number of queues (8) out of range (got 65537)
[  151.351337][   T23] usb 5-1: can't set config #0, error -71
[  151.366119][   T23] usb 5-1: USB disconnect, device number 7
[  151.575264][ T5828] loop5: detected capacity change from 0 to 512
[  152.637230][ T5828] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  152.701260][ T5828] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.471223][   T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  156.741168][   T23] usb 3-1: Using ep0 maxpacket: 8
[  156.877884][ T5858] loop5: detected capacity change from 0 to 32768
[  156.938786][ T5858] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.399 (5858)
[  157.019537][ T5858] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  157.023192][ T5877] loop4: detected capacity change from 0 to 512
[  157.040867][ T5858] BTRFS info (device loop5): setting nodatasum
[  157.061279][ T5858] BTRFS info (device loop5): force zlib compression, level 3
[  157.121226][   T23] usb 3-1: unable to get BOS descriptor or descriptor too short
[  157.129380][ T5858] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  157.146201][ T5858] BTRFS info (device loop5): use lzo compression, level 0
[  157.184174][ T5858] BTRFS info (device loop5): turning on flush-on-commit
[  157.204052][ T5877] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  157.211172][   T23] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 17, changing to 7
[  157.237973][ T5858] BTRFS info (device loop5): enabling auto defrag
[  157.271254][ T5877] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.289601][ T5858] BTRFS info (device loop5): max_inline at 4096
[  157.304102][ T5858] BTRFS info (device loop5): using free space tree
[  157.366666][ T5858] BTRFS info (device loop5): has skinny extents
[  157.525558][   T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40
[  157.541964][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.550120][   T23] usb 3-1: Product: syz
[  157.554493][   T23] usb 3-1: Manufacturer: syz
[  157.559095][   T23] usb 3-1: SerialNumber: syz
[  158.540688][   T23] usb 3-1: interface 3 not found
[  158.587288][   T23] usb 3-1: USB disconnect, device number 5
[  159.249827][ T5858] BTRFS error (device loop5): open_ctree failed: -12
[  159.784091][ T5924] x_tables: duplicate entry at hook 1
[  159.858889][ T5925] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  160.576629][ T5927] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  160.635134][ T5933] overlayfs: failed to clone upperpath
[  160.678462][ T5921] Set syz1 is full, maxelem 6117 reached
[  161.230985][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  162.131845][ T5949] loop2: detected capacity change from 0 to 512
[  162.265713][ T5949] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  162.373064][ T5949] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.418: corrupted in-inode xattr
[  162.543119][ T5964] ptrace attach of "./syz-executor exec"[5965] was attempted by "./syz-executor exec"[5964]
[  163.010239][ T5949] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.418: couldn't read orphan inode 15 (err -117)
[  163.158530][ T5949] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,nodiscard,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,lazytime,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  163.745409][ T5968] loop4: detected capacity change from 0 to 32768
[  163.769013][ T5968] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.424 (5968)
[  163.836318][ T5968] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  163.855141][ T5968] BTRFS info (device loop4): setting nodatasum
[  163.891153][ T5968] BTRFS info (device loop4): force zlib compression, level 3
[  163.898599][ T5968] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  163.935055][ T5968] BTRFS info (device loop4): use lzo compression, level 0
[  163.952015][ T5968] BTRFS info (device loop4): turning on flush-on-commit
[  163.959376][ T5968] BTRFS info (device loop4): enabling auto defrag
[  164.001142][ T5968] BTRFS info (device loop4): max_inline at 4096
[  164.007454][ T5968] BTRFS info (device loop4): using free space tree
[  164.032565][ T5968] BTRFS info (device loop4): has skinny extents
[  164.313393][ T6020] loop2: detected capacity change from 0 to 4096
[  164.404007][ T6020] NILFS (loop2): invalid segment: Checksum error in segment payload
[  164.441902][ T6020] NILFS (loop2): trying rollback from an earlier position
[  164.492666][ T5968] BTRFS info (device loop4): enabling ssd optimizations
[  164.558061][ T6031] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  165.153061][ T6020] NILFS (loop2): recovery complete
[  165.245236][ T6037] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  165.382236][   T26] kauditd_printk_skb: 60 callbacks suppressed
[  165.382252][   T26] audit: type=1800 audit(3924574162.255:148): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.429" name="file1" dev="loop2" ino=14 res=0 errno=0
[  166.949249][ T6058] device veth0_vlan left promiscuous mode
[  167.902700][ T6095] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  169.328388][ T6099] netlink: 'syz.4.446': attribute type 4 has an invalid length.
[  169.471774][ T6102] netlink: 'syz.4.446': attribute type 4 has an invalid length.
[  169.533561][ T6089] loop2: detected capacity change from 0 to 32768
[  169.570945][ T6089] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.444 (6089)
[  169.608377][ T6089] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  169.630292][ T6089] BTRFS info (device loop2): setting nodatasum
[  169.651007][ T6089] BTRFS info (device loop2): force zlib compression, level 3
[  169.658870][ T6089] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  169.705797][ T6089] BTRFS info (device loop2): use lzo compression, level 0
[  169.747687][ T6089] BTRFS info (device loop2): turning on flush-on-commit
[  169.776374][ T6089] BTRFS info (device loop2): enabling auto defrag
[  169.793213][ T6089] BTRFS info (device loop2): max_inline at 4096
[  169.826613][ T6089] BTRFS info (device loop2): using free space tree
[  169.838695][ T6089] BTRFS info (device loop2): has skinny extents
[  169.864467][ T6106] loop4: detected capacity change from 0 to 4096
[  169.921658][ T6106] NILFS (loop4): invalid segment: Checksum error in segment payload
[  169.931601][ T6119] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  169.971293][ T6106] NILFS (loop4): trying rollback from an earlier position
[  170.036950][ T6106] NILFS (loop4): recovery complete
[  170.080657][ T6130] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.157095][ T6089] BTRFS info (device loop2): enabling ssd optimizations
[  170.239247][   T26] audit: type=1800 audit(3924574167.105:149): pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.449" name="file1" dev="loop4" ino=14 res=0 errno=0
[  170.381123][ T6077] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  170.653336][ T6077] usb 6-1: Using ep0 maxpacket: 32
[  170.790864][ T6077] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  170.809420][ T6077] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  171.011403][ T6077] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  171.035536][ T6077] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.069589][ T6077] usb 6-1: Product: syz
[  171.084418][ T6077] usb 6-1: Manufacturer: syz
[  171.100156][ T6077] usb 6-1: SerialNumber: syz
[  171.126739][ T6077] usb 6-1: config 0 descriptor??
[  171.865801][ T6156] netlink: 'syz.4.460': attribute type 10 has an invalid length.
[  171.890675][ T6156] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  172.181592][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  172.193707][ T6156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.449649][ T6076] usb 6-1: USB disconnect, device number 3
[  175.604648][ T6194] loop2: detected capacity change from 0 to 16
[  175.670160][ T6192] loop5: detected capacity change from 0 to 4096
[  175.699542][ T6194] erofs: (device loop2): mounted with root inode @ nid 36.
[  175.753742][ T6194] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  175.765319][ T6192] NILFS (loop5): invalid segment: Checksum error in segment payload
[  175.799747][ T6192] NILFS (loop5): trying rollback from an earlier position
[  175.871770][ T6192] NILFS (loop5): recovery complete
[  175.906456][ T6199] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  176.023912][   T26] audit: type=1800 audit(3924574172.895:150): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.469" name="file1" dev="loop5" ino=14 res=0 errno=0
[  179.891030][ T6077] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  180.591730][ T6251] 9p filesystem being mounted at /114/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  180.761231][ T6077] usb 5-1: Using ep0 maxpacket: 32
[  181.021018][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!!
[  181.030559][ T6268] loop2: detected capacity change from 0 to 32768
[  181.040199][ T6077] usb 5-1: config 129 has an invalid interface number: 120 but max is 0
[  181.048802][ T6077] usb 5-1: config 129 has an invalid descriptor of length 123, skipping remainder of the config
[  181.059473][ T6077] usb 5-1: config 129 has no interface number 0
[  181.065951][ T6077] usb 5-1: config 129 interface 120 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  181.087815][ T6268] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.494 (6268)
[  181.112211][ T6077] usb 5-1: config 129 interface 120 has no altsetting 0
[  181.185730][ T6268] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  181.195361][ T6268] BTRFS info (device loop2): enabling disk space caching
[  181.203389][ T6268] BTRFS info (device loop2): force clearing of disk cache
[  181.210654][ T6268] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  181.220535][ T6268] BTRFS info (device loop2): use zstd compression, level 3
[  181.228069][ T6268] BTRFS info (device loop2): disk space caching is enabled
[  181.235405][ T6268] BTRFS info (device loop2): has skinny extents
[  181.351239][ T6077] usb 5-1: New USB device found, idVendor=0499, idProduct=c455, bcdDevice=81.ab
[  181.383270][ T6077] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.419511][ T6077] usb 5-1: Product: syz
[  181.436235][ T6077] usb 5-1: Manufacturer: syz
[  181.465303][ T6077] usb 5-1: SerialNumber: syz
[  181.471716][ T4241] Bluetooth: hci3: command 0x0406 tx timeout
[  181.478129][ T4241] Bluetooth: hci1: command 0x0406 tx timeout
[  181.484874][ T4241] Bluetooth: hci4: command 0x0406 tx timeout
[  181.491344][ T4241] Bluetooth: hci2: command 0x0406 tx timeout
[  181.521897][ T6268] BTRFS info (device loop2): enabling ssd optimizations
[  181.538120][ T6268] BTRFS info (device loop2): clearing free space tree
[  181.545702][ T6268] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  181.556220][ T6268] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  182.449609][ T6077] usb 5-1: USB disconnect, device number 8
[  182.570917][ T4273] udevd[4273]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:129.120/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  184.135807][ T6322] netlink: 44 bytes leftover after parsing attributes in process `syz.0.516'.
[  185.688788][ T6342] netlink: 10 bytes leftover after parsing attributes in process `syz.0.512'.
[  186.836748][   T26] audit: type=1326 audit(3924574183.705:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6349 comm="syz.0.513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f361d896dd9 code=0x0
[  191.131031][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #9a!!!
[  191.236187][ T6422] loop5: detected capacity change from 0 to 1024
[  191.377636][ T6427] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.417095][ T6422] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,max_dir_size_kb=0x000000000000ffff,jqfmt=vfsv1,journal_ioprio=0x0000000000000004,bsddf,nogrpid,noauto_da_alloc,nouid32,,errors=continue. Quota mode: none.
[  191.613646][ T6427] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.812313][ T6420] netlink: set zone limit has 8 unknown bytes
[  192.269128][ T6442] overlayfs: failed to clone upperpath
[  192.378220][ T6444] netlink: 798 bytes leftover after parsing attributes in process `syz.5.544'.
[  193.232260][ T6462] fuse: Bad value for 'fd'
[  194.760623][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  194.769802][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  195.687843][ T6486] netlink: 63 bytes leftover after parsing attributes in process `syz.5.557'.
[  195.979290][ T6497] 9p filesystem being mounted at /117/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  196.836823][ T6500] sctp: failed to load transform for md5: -2
[  196.998996][ T5911] hid (null): unknown global tag 0xd
[  197.030872][ T4201] Bluetooth: hci0: link tx timeout
[  197.036574][ T4201] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  197.047644][ T5911] hid (null): unknown global tag 0xda
[  197.062126][ T5911] hid-generic 0005:0001:0002.0001: collection stack underflow
[  197.071633][ T5911] hid-generic 0005:0001:0002.0001: item 0 1 0 12 parsing failed
[  197.081610][ T5911] hid-generic: probe of 0005:0001:0002.0001 failed with error -22
[  198.385088][ T6546] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa
[  198.439224][   T26] audit: type=1107 audit(3924574196.307:152): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  198.518519][   T26] audit: type=1326 audit(3924574196.387:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.1.577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28128a5dd9 code=0x0
[  198.553352][ T6552] <š
[  198.606525][    C1] vkms_vblank_simulate: vblank timer overrun
[  199.071128][ T4203] Bluetooth: hci0: command 0x0406 tx timeout
[  200.334540][ T6576] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.165173][ T6556] loop2: detected capacity change from 0 to 40427
[  201.194786][ T6561] loop4: detected capacity change from 0 to 32768
[  201.212171][ T6581] overlayfs: failed to clone upperpath
[  201.241530][ T6561] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.579 (6561)
[  201.352953][ T6576] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.386643][ T6561] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  201.412802][ T6561] BTRFS info (device loop4): enabling disk space caching
[  201.438125][ T6561] BTRFS info (device loop4): force clearing of disk cache
[  201.463390][ T6561] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  201.471216][ T5911] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  201.491020][ T6561] BTRFS info (device loop4): use zstd compression, level 3
[  201.498363][ T6561] BTRFS info (device loop4): disk space caching is enabled
[  201.535924][ T6561] BTRFS info (device loop4): has skinny extents
[  201.750071][ T6576] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.853243][ T5911] usb 6-1: config 0 has no interfaces?
[  202.111477][ T5911] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  202.163869][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  202.275070][ T5911] usb 6-1: Product: syz
[  202.333789][ T5911] usb 6-1: Manufacturer: syz
[  202.439783][ T5911] usb 6-1: SerialNumber: syz
[  202.482943][ T5911] usb 6-1: config 0 descriptor??
[  202.715215][ T6561] BTRFS error (device loop4): open_ctree failed: -12
[  203.285588][ T6576] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.507237][ T6576] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.524726][ T6576] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.539479][ T6576] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.554855][ T6576] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.614455][ T6069] usb 6-1: USB disconnect, device number 4
[  203.757816][ T6631] device dummy0 entered promiscuous mode
[  203.765423][ T6631] device macvlan2 entered promiscuous mode
[  204.145355][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  204.160623][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:3 Not tainted syzkaller #0
[  204.168328][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  204.178481][ T4201] Workqueue: hci2 hci_rx_work
[  204.183286][ T4201] Call Trace:
[  204.186603][ T4201]  <TASK>
[  204.189535][ T4201]  dump_stack_lvl+0x188/0x250
[  204.194396][ T4201]  ? show_regs_print_info+0x20/0x20
[  204.199689][ T4201]  ? load_image+0x400/0x400
[  204.204217][ T4201]  sysfs_create_dir_ns+0x26a/0x290
[  204.209353][ T4201]  ? sysfs_warn_dup+0xa0/0xa0
[  204.214151][ T4201]  ? process_one_work+0x85f/0x1010
[  204.219280][ T4201]  ? do_raw_spin_unlock+0x11d/0x230
[  204.224669][ T4201]  kobject_add_internal+0x6e0/0xd90
[  204.229899][ T4201]  kobject_add+0x160/0x230
[  204.234385][ T4201]  ? kobject_init+0x1d0/0x1d0
[  204.239351][ T4201]  ? klist_children_get+0x50/0x50
[  204.244397][ T4201]  ? get_device_parent+0x121/0x3f0
[  204.249705][ T4201]  device_add+0x483/0xfb0
[  204.254054][ T4201]  hci_conn_add_sysfs+0xd1/0x1e0
[  204.259178][ T4201]  le_conn_complete_evt+0xc48/0x15c0
[  204.264698][ T4201]  ? cs_le_create_conn+0x5e0/0x5e0
[  204.269822][ T4201]  ? __mutex_trylock_common+0x155/0x260
[  204.275374][ T4201]  hci_le_meta_evt+0x285/0x3c90
[  204.280219][ T4201]  ? hci_event_packet+0x37b/0x1370
[  204.285424][ T4201]  ? __lock_acquire+0x7d10/0x7d10
[  204.290466][ T4201]  ? hci_remote_host_features_evt+0x280/0x280
[  204.296537][ T4201]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  204.302166][ T4201]  ? mark_lock+0x94/0x320
[  204.306516][ T4201]  ? mutex_unlock+0x10/0x10
[  204.311212][ T4201]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  204.317290][ T4201]  ? lock_chain_count+0x20/0x20
[  204.322306][ T4201]  ? __rwlock_init+0x140/0x140
[  204.327220][ T4201]  hci_event_packet+0xe48/0x1370
[  204.332326][ T4201]  ? lockdep_hardirqs_on+0x94/0x140
[  204.337704][ T4201]  ? rcu_lock_release+0x20/0x20
[  204.342746][ T4201]  ? hci_send_to_monitor+0x9c/0x4a0
[  204.348056][ T4201]  hci_rx_work+0x255/0xa10
[  204.352774][ T4201]  process_one_work+0x85f/0x1010
[  204.357910][ T4201]  ? worker_detach_from_pool+0x240/0x240
[  204.363646][ T4201]  ? lockdep_hardirqs_off+0x70/0x100
[  204.368929][ T4201]  ? _raw_spin_lock_irq+0xb7/0xf0
[  204.374141][ T4201]  ? _raw_spin_lock_irqsave+0x100/0x100
[  204.379781][ T4201]  ? wq_worker_running+0x97/0x170
[  204.384808][ T4201]  worker_thread+0xaa6/0x1290
[  204.389581][ T4201]  kthread+0x436/0x520
[  204.393636][ T4201]  ? rcu_lock_release+0x20/0x20
[  204.398667][ T4201]  ? kthread_blkcg+0xd0/0xd0
[  204.403692][ T4201]  ret_from_fork+0x1f/0x30
[  204.408128][ T4201]  </TASK>
[  204.420098][ T4201] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  204.433786][ T4201] Bluetooth: hci2: failed to register connection device
[  204.444593][   T26] audit: type=1326 audit(3924574202.317:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.2.595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f496b605dd9 code=0x0
[  204.620385][ T6653] device ipip0 entered promiscuous mode
[  204.740815][ T6657] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  204.805715][ T6657] overlayfs: failed to look up (tracing) for ino (-66)
[  204.828631][ T6662] device batadv_slave_1 entered promiscuous mode
[  204.860234][ T6661] device batadv_slave_1 left promiscuous mode
[  206.291276][ T6688] vxcan1 speed is unknown, defaulting to 1000
[  206.313814][ T6688] vxcan1 speed is unknown, defaulting to 1000
[  206.332770][ T6688] vxcan1 speed is unknown, defaulting to 1000
[  206.740462][ T6688] infiniband syz2: set active
[  206.745681][ T6688] infiniband syz2: added vxcan1
[  206.796648][ T6069] vxcan1 speed is unknown, defaulting to 1000
[  206.851912][ T6688] infiniband syz2: Couldn't open port 1
[  206.886138][ T6688] RDS/IB: syz2: added
[  206.891224][ T6688] smc: adding ib device syz2 with port count 1
[  206.897855][ T6688] smc:    ib device syz2 port 1 has pnetid 
[  206.913030][ T6688] vxcan1 speed is unknown, defaulting to 1000
[  207.008538][ T6688] vxcan1 speed is unknown, defaulting to 1000
[  207.076644][ T6620] vxcan1 speed is unknown, defaulting to 1000
[  207.356811][ T6688] vxcan1 speed is unknown, defaulting to 1000
[  207.796464][ T6688] vxcan1 speed is unknown, defaulting to 1000
[  207.886567][ T6688] vxcan1 speed is unknown, defaulting to 1000
[  208.176837][ T6696] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.268824][ T6696] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.435224][ T6702] overlayfs: failed to clone upperpath
[  208.570627][ T6696] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.725172][ T6696] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.874400][ T6708] netlink: 44 bytes leftover after parsing attributes in process `syz.1.619'.
[  209.028391][ T6696] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  209.111875][ T6696] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.625595][ T6711] sctp: failed to load transform for md5: -4
[  209.901001][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  209.921001][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  210.065718][ T6696] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.098071][ T6737] xt_hashlimit: size too large, truncated to 1048576
[  210.111133][ T6696] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.133174][ T6737] xt_hashlimit: invalid rate
[  210.170454][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.625'.
[  210.185047][ T6735] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  210.259783][ T6735] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821)
[  210.346909][ T6742] device syzkaller0 entered promiscuous mode
[  210.403448][ T6742] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  210.469100][ T6696] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  210.483229][ T6696] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.509150][ T6696] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  210.545613][ T6696] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.562852][ T6696] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  210.571597][ T6696] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.600281][ T6696] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  210.615965][ T6696] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.885224][ T6770] device syzkaller0 entered promiscuous mode
[  213.055519][ T6792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.646'.
[  214.566057][ T6814] No such timeout policy "syz1"
[  214.851947][ T6810] device syzkaller0 entered promiscuous mode
[  216.270963][    C0] hrtimer: interrupt took 35544 ns
[  218.788372][ T6889] loop2: detected capacity change from 0 to 1024
[  218.947135][ T6898] netlink: 32 bytes leftover after parsing attributes in process `syz.5.671'.
[  219.561415][ T6889] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  219.611226][ T6889] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  219.632935][ T6889] EXT4-fs error (device loop2): ext4_get_journal_inode:5187: inode #5: comm syz.2.673: unexpected bad inode w/o EXT4_IGET_BAD
[  219.657718][ T6889] EXT4-fs (loop2): no journal found
[  219.673508][ T6889] EXT4-fs (loop2): can't get journal size
[  219.701326][ T6889] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback.
[  219.857211][ T6902] #! 
[  221.344907][ T6930] syz.0.684 sent an empty control message without MSG_MORE.
[  221.365049][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.686'.
[  221.388869][ T6930] rdma_rxe: rxe_register_device failed with error -23
[  221.391191][ T6932] bond0: option arp_all_targets: invalid value (18446744072210219584)
[  221.418113][ T6930] rdma_rxe: failed to add bond_slave_1
[  223.221315][ T6961] device syzkaller0 entered promiscuous mode
[  223.237956][ T6961] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  225.809081][ T6981] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[  226.411631][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.708'.
[  226.627017][   T26] audit: type=1804 audit(3924574224.497:155): pid=7007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.711" name="file0" dev="hugetlbfs" ino=42309 res=1 errno=0
[  226.691051][   T26] audit: type=1804 audit(3924574224.497:156): pid=7007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.711" name="file0" dev="hugetlbfs" ino=42309 res=1 errno=0
[  226.937216][ T7017] loop5: detected capacity change from 0 to 4096
[  229.178088][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.5.714'.
[  229.736940][ T7044] loop5: detected capacity change from 0 to 164
[  230.888864][ T7053] loop2: detected capacity change from 0 to 128
[  231.043821][ T7053] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  231.068531][ T7053] hpfs: filesystem error: improperly stopped
[  231.096968][ T7053] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  231.127461][ T7053] hpfs: You really don't want any checks? You are crazy...
[  231.149560][ T7053] hpfs: hpfs_map_sector(): read error
[  231.161288][ T7053] hpfs: code page support is disabled
[  231.174803][ T7053] hpfs: hpfs_map_4sectors(): unaligned read
[  231.189516][ T7053] hpfs: hpfs_map_4sectors(): unaligned read
[  231.202795][ T7053] hpfs: filesystem error: unable to find root dir
[  231.210247][ T7058] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  231.226802][ T7053] hpfs filesystem being remounted at /147/file1 supports timestamps until 2106-02-07 (0xffffffff)
[  231.263173][ T7053] hpfs: hpfs_map_4sectors(): unaligned read
[  231.273490][ T7053] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[  231.293973][ T7053] hpfs: hpfs_map_4sectors(): unaligned read
[  231.302482][ T7053] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[  231.314423][ T7053] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim
[  231.522606][ T7073] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  231.585569][ T7076] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  231.897800][ T7083] 9p filesystem being mounted at /114/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  232.823882][ T7111] No such timeout policy "syz1"
[  232.917882][ T7104] vxcan1 speed is unknown, defaulting to 1000
[  234.218722][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'.
[  234.255242][ T7133] bond0: option arp_validate: invalid value (18446744072210219584)
[  234.466445][ T7104] chnl_net:caif_netlink_parms(): no params data found
[  234.542757][ T7104] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.549954][ T7104] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.558298][ T7104] device bridge_slave_0 entered promiscuous mode
[  234.703603][ T7104] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.849478][ T7104] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.119852][ T7104] device bridge_slave_1 entered promiscuous mode
[  235.138846][ T6069] Bluetooth: hci1: command 0x0409 tx timeout
[  235.205538][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'.
[  235.228238][ T7104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.246939][ T7104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.346456][ T7104] team0: Port device team_slave_0 added
[  235.373668][ T7104] team0: Port device team_slave_1 added
[  235.406432][ T7104] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.456096][ T7104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.503472][ T7104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.516467][ T7104] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.523489][ T7104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.550211][ T7104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.933757][ T7162] No such timeout policy "syz1"
[  236.005013][ T7104] device hsr_slave_0 entered promiscuous mode
[  236.012795][ T7104] device hsr_slave_1 entered promiscuous mode
[  236.020081][ T7104] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.029433][ T7104] Cannot create hsr debugfs directory
[  236.224725][ T7104] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  236.316562][ T7104] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  236.331828][ T7104] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  236.367040][ T7104] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  236.528845][ T7104] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.667059][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  236.684283][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  236.693420][ T7104] 8021q: adding VLAN 0 to HW filter on device team0
[  236.876228][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  236.879403][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  236.880901][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.881049][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.930454][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  236.955328][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  236.965040][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.965082][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.990317][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  237.083576][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  237.089667][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  237.298348][ T6620] Bluetooth: hci1: command 0x041b tx timeout
[  237.436965][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  237.439715][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  237.440568][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  237.451980][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.765'.
[  237.576047][ T7182] loop5: detected capacity change from 0 to 1024
[  237.644964][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  237.646642][ T7182] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  237.673635][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  237.688248][ T7182] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  237.701153][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  237.709498][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  237.736259][ T7182] EXT4-fs error (device loop5): ext4_get_journal_inode:5187: inode #5: comm syz.5.768: unexpected bad inode w/o EXT4_IGET_BAD
[  237.746259][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  237.958735][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  237.961293][ T7182] EXT4-fs (loop5): no journal found
[  237.974229][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  237.987125][ T7182] EXT4-fs (loop5): can't get journal size
[  237.998930][ T7182] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback.
[  239.311059][ T4203] Bluetooth: hci1: command 0x040f tx timeout
[  239.456649][ T7225] device syzkaller0 entered promiscuous mode
[  239.683024][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  239.691745][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  240.532727][ T7104] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.305056][ T4203] Bluetooth: hci1: command 0x0419 tx timeout
[  246.232007][ T7104] device veth0_vlan entered promiscuous mode
[  246.240200][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  246.261839][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  246.282690][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  247.574032][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  247.640446][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.800'.
[  247.678938][ T7104] device veth1_vlan entered promiscuous mode
[  247.688233][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  247.697921][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  247.866388][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  247.888608][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  247.946976][ T7104] device veth0_macvtap entered promiscuous mode
[  248.083363][ T7104] device veth1_macvtap entered promiscuous mode
[  248.433574][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.618632][ T7316] overlayfs: failed to clone upperpath
[  248.634562][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.653329][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.664423][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.674998][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.691460][ T7321] overlayfs: failed to clone upperpath
[  248.709216][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.735448][ T7104] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.769838][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  248.834849][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  248.875099][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  248.906673][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  248.933041][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.970780][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.981314][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.998443][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.009910][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.080860][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.091861][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.102997][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.196487][ T7332] ufs: You didn't specify the type of your ufs filesystem
[  249.196487][ T7332] 
[  249.196487][ T7332] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  249.196487][ T7332] 
[  249.196487][ T7332] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  249.228737][ T7332] ufs: ufstype=old is supported read-only
[  249.242407][ T7332] blk_update_request: I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  249.776289][ T7104] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.799378][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  249.883879][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  249.896337][ T7104] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.907294][ T7104] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.916692][ T7104] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.927456][ T7104] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.164489][ T6863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.176605][ T6863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.186622][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  250.216525][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.024891][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.032802][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  253.783546][ T7381] capability: warning: `syz.0.827' uses 32-bit capabilities (legacy support in use)
[  255.279188][ T7409] netlink: 28 bytes leftover after parsing attributes in process `syz.6.839'.
[  256.192923][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  256.199460][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  257.197821][ T7440] device syzkaller0 entered promiscuous mode
[  258.184943][ T4366] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.029620][ T7490] loop6: detected capacity change from 0 to 2048
[  262.046703][ T7490] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,inode_readahead_blks=0x0000000000000400,. Quota mode: writeback.
[  262.195529][ T7490] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.424903][ T7514] ufs: You didn't specify the type of your ufs filesystem
[  262.424903][ T7514] 
[  262.424903][ T7514] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  262.424903][ T7514] 
[  262.424903][ T7514] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  262.456526][ T7514] ufs: ufstype=old is supported read-only
[  262.462724][ T7514] blk_update_request: I/O error, dev loop9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  263.586060][  T145] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 345: padding at end of block bitmap is not set
[  263.636982][  T145] EXT4-fs (loop6): Remounting filesystem read-only
[  263.895898][ T7529] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  263.917211][ T7530] netlink: 'syz.0.876': attribute type 1 has an invalid length.
[  263.938465][ T7530] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.876'.
[  265.313430][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'.
[  266.764981][ T7573] cgroup2: Unexpected value for 'memory_localevents'
[  266.803803][ T7569] device bridge0 entered promiscuous mode
[  266.813099][ T7569] bridge0: port 3(macvlan2) entered blocking state
[  266.819791][ T7569] bridge0: port 3(macvlan2) entered disabled state
[  266.979795][ T7577] loop5: detected capacity change from 0 to 256
[  267.484124][ T7577] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d)
[  267.509820][ T7569] device bridge0 left promiscuous mode
[  267.557576][ T7577] exfat filesystem being mounted at /136/file0 supports timestamps until 2107-12-31 (0x10391447f)
[  267.685167][ T7583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.893'.
[  267.837296][   T26] audit: type=1804 audit(3924574265.707:157): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.891" name="/newroot/136/file0/bus" dev="loop5" ino=1048646 res=1 errno=0
[  268.003184][ T7594] netlink: 'syz.0.894': attribute type 8 has an invalid length.
[  268.724786][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.899'.
[  269.929268][ T7607] loop5: detected capacity change from 0 to 32768
[  273.084010][ T7306] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by udevd (7306)
[  274.635657][ T7646] rdma_rxe: rxe_register_device failed with error -23
[  274.642810][ T7646] rdma_rxe: failed to add vxcan1
[  275.531100][ T7653] overlayfs: failed to clone upperpath
[  277.473587][ T7686] cgroup2: Unexpected value for 'memory_localevents'
[  278.826420][ T7690] overlayfs: failed to clone upperpath
[  280.688755][ T7725] loop5: detected capacity change from 0 to 4096
[  280.794705][ T7725] EXT4-fs (loop5): inline encryption not supported
[  281.140789][ T7725] EXT4-fs (loop5): Test dummy encryption mode enabled
[  281.156145][ T7725] EXT4-fs (loop5): Ignoring removed oldalloc option
[  281.188072][ T7725] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  281.206022][ T7725] System zones: 0-5
[  281.240058][ T7725] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,i_version,oldalloc,delalloc,barrier,,errors=continue. Quota mode: writeback.
[  285.703220][ T7800] device syzkaller0 entered promiscuous mode
[  285.972575][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.964'.
[  288.715673][ T7839] batman_adv: batadv0: Adding interface: dummy0
[  288.898616][ T7839] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.971199][ T4236] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  288.977163][ T7839] batman_adv: batadv0: Interface activated: dummy0
[  289.000400][ T7850] macvlan2: mtu less than device minimum
[  289.049074][ T7850] batadv0: mtu less than device minimum
[  289.060059][ T7850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  289.073478][ T7850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  289.086185][ T7850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  289.098582][ T7850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  289.110776][ T7850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  289.123536][ T7850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  289.136473][ T7850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  289.149043][ T7850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  289.263417][ T7863] loop6: detected capacity change from 0 to 512
[  289.367988][ T7863] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  289.565299][ T7863] EXT4-fs error (device loop6): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  289.582544][ T7863] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #11: comm syz.6.978: corrupted inode contents
[  289.608149][ T7863] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #11: comm syz.6.978: mark_inode_dirty error
[  289.623148][ T7863] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.978: invalid indirect mapped block 1 (level 1)
[  289.642782][ T7863] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #11: comm syz.6.978: corrupted inode contents
[  289.664517][ T7863] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  289.675772][ T7863] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #11: comm syz.6.978: corrupted inode contents
[  289.693147][ T7863] EXT4-fs error (device loop6): ext4_truncate:4286: inode #11: comm syz.6.978: mark_inode_dirty error
[  289.707062][ T7863] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  289.724147][ T7863] EXT4-fs (loop6): 1 truncate cleaned up
[  289.730048][ T7863] EXT4-fs (loop6): mounted filesystem without journal. Opts: nomblk_io_submit,noquota,,errors=continue. Quota mode: none.
[  290.334073][ T7873] tipc: Failed to remove unknown binding: 66,0,0/0:501819714/501819716
[  290.343320][ T7873] tipc: Failed to remove unknown binding: 66,0,0/0:501819714/501819715
[  290.363138][ T7873] tipc: Failed to remove unknown binding: 66,0,0/0:501819714/501819716
[  290.372464][ T7873] tipc: Failed to remove unknown binding: 66,0,0/0:501819714/501819715
[  291.530170][ T7884] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  291.610611][ T7884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.988'.
[  291.782291][ T4236] usb 6-1: unable to read config index 0 descriptor/start: -71
[  291.808600][ T4236] usb 6-1: can't read configurations, error -71
[  293.142302][ T7903] pit: kvm: requested 19276 ns i8254 timer period limited to 200000 ns
[  293.185567][ T7903] pit: kvm: requested 16761 ns i8254 timer period limited to 200000 ns
[  293.239180][ T7903] pit: kvm: requested 17600 ns i8254 timer period limited to 200000 ns
[  293.391300][ T7903] pit: kvm: requested 122361 ns i8254 timer period limited to 200000 ns
[  293.447265][ T7903] pit: kvm: requested 113142 ns i8254 timer period limited to 200000 ns
[  293.469443][ T7903] pit: kvm: requested 110628 ns i8254 timer period limited to 200000 ns
[  294.212979][ T7903] pit: kvm: requested 17600 ns i8254 timer period limited to 200000 ns
[  294.535641][ T7866] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  297.161126][ T4236] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  297.666305][ T7975] netlink: 'syz.4.1015': attribute type 8 has an invalid length.
[  298.441055][ T4236] usb 7-1: Using ep0 maxpacket: 16
[  298.561378][ T4236] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[  298.611020][ T4236] usb 7-1: config 0 has no interface number 0
[  298.625864][ T4236] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  298.774299][ T4236] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  299.061483][ T4236] usb 7-1: string descriptor 0 read error: -71
[  299.154399][ T4236] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  299.286513][ T4236] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.349267][ T4236] usb 7-1: config 0 descriptor??
[  299.401249][ T4236] usb 7-1: can't set config #0, error -71
[  299.421481][ T4236] usb 7-1: USB disconnect, device number 2
[  303.627581][ T8024] fuse: Bad value for 'fd'
[  307.526871][   T26] audit: type=1326 audit(3924574305.316:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.0.1042" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f361d896dd9 code=0x0
[  309.152822][ T8064] kvm: pic: non byte write
[  310.424757][ T8107] bridge0: port 3(vlan2) entered blocking state
[  310.508025][ T8107] bridge0: port 3(vlan2) entered disabled state
[  310.562772][ T8107] device vlan2 entered promiscuous mode
[  310.682248][ T8115] mmap: syz.1.1060 (8115): VmData 175874048 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data.
[  311.484918][ T8130] net_ratelimit: 11 callbacks suppressed
[  311.484933][ T8130] netlink: zone id is out of range
[  311.524380][ T8130] netlink: zone id is out of range
[  311.529559][ T8130] netlink: zone id is out of range
[  311.542990][   T26] audit: type=1326 audit(3924574309.143:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a59893dd9 code=0x7ffc0000
[  311.565357][ T8135] vcan0: tx drop: invalid da for name 0x00000000000000c7
[  311.577405][ T8130] netlink: zone id is out of range
[  311.582635][ T8130] netlink: zone id is out of range
[  311.594638][ T8130] netlink: zone id is out of range
[  311.623639][ T8130] netlink: zone id is out of range
[  311.637790][ T8130] netlink: zone id is out of range
[  311.637860][ T8139] kvm: pic: non byte write
[  311.648546][ T8130] netlink: zone id is out of range
[  311.651567][   T26] audit: type=1326 audit(3924574309.143:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a59893dd9 code=0x7ffc0000
[  311.665136][ T8130] netlink: zone id is out of range
[  311.724912][   T26] audit: type=1326 audit(3924574309.143:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7a59893dd9 code=0x7ffc0000
[  311.772319][   T26] audit: type=1326 audit(3924574309.143:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a59893dd9 code=0x7ffc0000
[  311.864306][   T26] audit: type=1326 audit(3924574309.143:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a59893dd9 code=0x7ffc0000
[  311.995959][   T26] audit: type=1326 audit(3924574309.143:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7a59893dd9 code=0x7ffc0000
[  312.047810][   T26] audit: type=1326 audit(3924574309.171:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a59893dd9 code=0x7ffc0000
[  312.099451][   T26] audit: type=1326 audit(3924574309.171:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a59893dd9 code=0x7ffc0000
[  312.168571][   T26] audit: type=1326 audit(3924574309.171:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7a5985460e code=0x7ffc0000
[  314.516063][ T8225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1095'.
[  314.702997][ T8239] device syzkaller0 entered promiscuous mode
[  317.981551][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'.
[  318.055352][ T8279] 8021q: adding VLAN 0 to HW filter on device bond1
[  318.063117][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'.
[  318.073825][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1114'.
[  318.095304][ T8283] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.136939][ T8283] bond1: (slave bond0): making interface the new active one
[  318.158337][ T8283] bond1: (slave bond0): Enslaving as an active interface with an up link
[  318.167623][ T6863] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  318.191324][ T8279] netlink: 'syz.0.1114': attribute type 10 has an invalid length.
[  318.251608][ T8279] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  318.266282][ T8289] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1117'.
[  318.269420][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1117'.
[  318.416878][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  318.423366][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  320.100121][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  320.100135][   T26] audit: type=1326 audit(3924574317.154:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8316 comm="syz.6.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  320.131217][ T8317] vcan0: tx drop: invalid da for name 0x00000000000000c7
[  320.238827][   T26] audit: type=1326 audit(3924574317.154:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8316 comm="syz.6.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  320.277732][ T8326] loop5: detected capacity change from 0 to 512
[  320.284516][   T26] audit: type=1326 audit(3924574317.163:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8316 comm="syz.6.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  320.363331][   T26] audit: type=1326 audit(3924574317.182:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8316 comm="syz.6.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  320.612610][   T26] audit: type=1326 audit(3924574317.210:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.6.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3afd59460e code=0x7ffc0000
[  320.639694][ T8326] EXT4-fs (loop5): 1 truncate cleaned up
[  320.641851][   T26] audit: type=1326 audit(3924574317.210:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8316 comm="syz.6.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  320.646230][ T8326] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,errors=remount-ro,usrjquota=,. Quota mode: none.
[  322.580628][   T26] audit: type=1326 audit(3924574317.360:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.6.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  324.036533][ T8365] device syzkaller0 entered promiscuous mode
[  325.062861][ T8379] netlink: 'syz.4.1141': attribute type 39 has an invalid length.
[  325.697101][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1147'.
[  330.830740][ T6076] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  331.969699][ T6076] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  331.985286][ T8455] device syzkaller0 entered promiscuous mode
[  331.995675][ T6076] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4
[  332.009884][ T6076] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  332.019233][ T6076] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.039908][ T6076] usb 6-1: config 0 descriptor??
[  332.060269][ T8455] tipc: Started in network mode
[  332.065501][ T8455] tipc: Node identity cab5ff5e230b, cluster identity 4711
[  332.074044][ T8455] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  332.082148][ T8453] tipc: Resetting bearer <eth:syzkaller0>
[  332.111736][ T8453] tipc: Disabling bearer <eth:syzkaller0>
[  332.329882][ T6076] ath6kl: Failed to submit usb control message: -71
[  332.336708][ T6076] ath6kl: unable to send the bmi data to the device: -71
[  332.344705][ T6076] ath6kl: Unable to send get target info: -71
[  332.353879][ T6076] ath6kl: Failed to init ath6kl core: -71
[  332.373171][ T6076] ath6kl_usb: probe of 6-1:0.0 failed with error -71
[  332.388572][ T6076] usb 6-1: USB disconnect, device number 7
[  333.580723][ T8486] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  333.580723][ T8486] The task syz.1.1181 (8486) triggered the difference, watch for misbehavior.
[  334.815404][ T8523] net_ratelimit: 23 callbacks suppressed
[  334.815445][ T8523] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  335.659302][ T4236] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  336.764655][ T4236] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 245, changing to 11
[  336.807650][ T4236] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1929, setting to 1024
[  336.843978][ T4236] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  336.862446][ T4236] usb 7-1: New USB device found, idVendor=0467, idProduct=ffff, bcdDevice= 0.00
[  336.872796][ T4236] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.898770][ T4236] usb 7-1: config 0 descriptor??
[  336.925305][ T8510] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  337.117036][ T6074] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  337.330828][ T6074] usb 6-1: device descriptor read/64, error -71
[  337.584098][ T4236] hid-generic 0003:0467:FFFF.0002: hidraw0: USB HID v0.40 Device [HID 0467:ffff] on usb-dummy_hcd.6-1/input0
[  337.982265][ T6074] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  338.631215][ T6074] usb 6-1: device descriptor read/64, error -71
[  338.712152][ T4236] usb 7-1: USB disconnect, device number 3
[  338.778998][ T6074] usb usb6-port1: attempt power cycle
[  340.049350][ T8568] fido_id[8568]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  341.381441][ T8615] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1221'.
[  341.402182][ T8615] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1221'.
[  341.415846][ T8615] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1221'.
[  341.428839][ T8615] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1221'.
[  341.440468][ T8615] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1221'.
[  341.452206][ T8615] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1221'.
[  341.463454][ T8615] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1221'.
[  341.474922][ T8615] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1221'.
[  341.486526][ T8615] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1221'.
[  341.498000][ T8615] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1221'.
[  342.385415][ T6074] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  342.886610][ T6074] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.970458][ T6074] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.981031][ T6074] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  342.997563][ T6074] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  343.007363][ T6074] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.028439][ T6074] usb 6-1: config 0 descriptor??
[  344.043681][ T6074] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  344.091891][ T6074] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  344.333846][ T8661] device ip6gre1 entered promiscuous mode
[  347.322462][ T6621] usb 6-1: reset high-speed USB device number 11 using dummy_hcd
[  347.658975][ T8686] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  347.677567][   T26] audit: type=1326 audit(3924574342.963:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.6.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  347.718669][    T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.777475][   T26] audit: type=1326 audit(3924574342.963:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.6.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  347.808435][   T26] audit: type=1326 audit(3924574342.963:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.6.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  347.852133][   T26] audit: type=1326 audit(3924574342.963:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.6.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  349.217751][   T26] audit: type=1326 audit(3924574342.963:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.6.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  349.241190][ T6621] usb 6-1: device descriptor read/64, error -71
[  349.482491][    T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.968531][    T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.036496][ T6621] usb 6-1: reset high-speed USB device number 11 using dummy_hcd
[  350.050915][    T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.645647][ T6621] usb 6-1: device firmware changed
[  350.669025][ T6620] usb 6-1: USB disconnect, device number 11
[  350.835060][    T9] tipc: Disabling bearer <udp:s>
[  350.856070][    T9] tipc: Left network mode
[  352.669839][ T8743] device syzkaller0 entered promiscuous mode
[  352.760919][ T8753] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1268'.
[  352.877068][   T26] audit: type=1326 audit(3924574347.820:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28128a5dd9 code=0x7ffc0000
[  352.985971][   T26] audit: type=1326 audit(3924574347.848:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28128a5dd9 code=0x7ffc0000
[  353.099058][   T26] audit: type=1326 audit(3924574347.848:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28128a5dd9 code=0x7ffc0000
[  353.190816][   T26] audit: type=1326 audit(3924574347.848:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f28128a5dd9 code=0x7ffc0000
[  353.251129][   T26] audit: type=1326 audit(3924574347.848:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28128a5dd9 code=0x7ffc0000
[  354.044558][   T26] audit: type=1326 audit(3924574347.848:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28128a5dd9 code=0x7ffc0000
[  354.088228][   T26] audit: type=1326 audit(3924574347.857:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28128a5dd9 code=0x7ffc0000
[  354.992921][   T26] audit: type=1326 audit(3924574347.857:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28128a5dd9 code=0x7ffc0000
[  355.044081][   T26] audit: type=1326 audit(3924574347.857:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f28128a5dd9 code=0x7ffc0000
[  355.118921][   T26] audit: type=1326 audit(3924574347.857:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28128a5dd9 code=0x7ffc0000
[  355.216872][   T26] audit: type=1326 audit(3924574347.857:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28128a5dd9 code=0x7ffc0000
[  355.248811][   T26] audit: type=1326 audit(3924574347.857:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28128a5dd9 code=0x7ffc0000
[  356.241775][ T8767] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.249457][ T8767] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.387575][ T8767] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  358.421674][ T8767] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.662466][ T8767] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.671866][ T8767] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.680850][ T8767] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.690277][ T8767] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.779843][ T8813] netlink: 'syz.1.1281': attribute type 10 has an invalid length.
[  358.995102][ T6063] Bluetooth: hci1: command 0x0406 tx timeout
[  359.023678][ T8813] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  360.047899][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1297'.
[  361.034639][ T8866] PKCS7: Unknown OID: [4] 0.0
[  361.041170][ T8866] PKCS7: Only support pkcs7_signedData type
[  361.232530][   T26] kauditd_printk_skb: 92 callbacks suppressed
[  361.232547][   T26] audit: type=1800 audit(3924574355.643:285): pid=8875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1292" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  362.577988][ T8898] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000
[  363.303425][    T9] IPVS: stopping master sync thread 5296 ...
[  365.875483][ T8924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  366.092932][ T8918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  366.215678][ T8918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  366.390214][    T9] device hsr_slave_0 left promiscuous mode
[  366.427990][    T9] device hsr_slave_1 left promiscuous mode
[  366.435058][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.450405][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  366.459035][    T9] device bridge_slave_1 left promiscuous mode
[  366.476829][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.498607][    T9] device bridge_slave_0 left promiscuous mode
[  366.513086][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.548129][    T9] device veth1_macvtap left promiscuous mode
[  366.563303][    T9] device veth0_macvtap left promiscuous mode
[  366.569628][    T9] device veth1_vlan left promiscuous mode
[  368.117610][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  368.134147][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  368.201274][    T9] bond0 (unregistering): Released all slaves
[  368.407073][ T8942] device bridge3 entered promiscuous mode
[  368.462162][ T8942] team0: Port device bridge3 added
[  368.489123][ T8947] bridge0: port 3(team0) entered blocking state
[  368.499876][ T8947] bridge0: port 3(team0) entered disabled state
[  368.511335][ T8947] device team0 entered promiscuous mode
[  368.517660][ T8947] device team_slave_0 entered promiscuous mode
[  368.529999][ T8947] device team_slave_1 entered promiscuous mode
[  368.549878][ T8956] device syzkaller0 entered promiscuous mode
[  369.929554][ T8999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.098889][ T8999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.119280][ T9008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.134127][ T8999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  372.024304][ T9017] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  372.418986][ T9035] device syzkaller0 entered promiscuous mode
[  372.621354][ T9044] comedi comedi0: Minor 2 could not be opened
[  374.517970][ T9051] loop6: detected capacity change from 0 to 262144
[  374.568865][ T9051] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop6 scanned by syz.6.1341 (9051)
[  374.793058][ T9051] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  374.803913][ T9051] BTRFS info (device loop6): using free space tree
[  374.811192][ T9051] BTRFS info (device loop6): has skinny extents
[  374.817881][ T9051] BTRFS info (device loop6): flagging fs with big metadata feature
[  376.838035][ T9112] device bridge2 entered promiscuous mode
[  376.882192][ T9112] team0: Port device bridge2 added
[  378.066669][ T9051] BTRFS error (device loop6): open_ctree failed: -12
[  378.100007][ T9116] bridge0: port 4(team0) entered blocking state
[  378.106355][ T9116] bridge0: port 4(team0) entered disabled state
[  378.116578][ T8821] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop6 scanned by udevd (8821)
[  378.122876][ T9116] device team0 entered promiscuous mode
[  378.166123][ T9116] device team_slave_0 entered promiscuous mode
[  378.184695][ T9116] device team_slave_1 entered promiscuous mode
[  378.201390][ T9116] bridge0: port 4(team0) entered blocking state
[  378.207797][ T9116] bridge0: port 4(team0) entered forwarding state
[  378.268283][ T9131] netem: change failed
[  378.293108][ T9130] device ip6gre1 entered promiscuous mode
[  379.086565][ T6074] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  379.099649][ T6074] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  379.144239][ T6063] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  379.259322][ T6074] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  379.327966][ T6074] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  379.917074][ T9165] SET target dimension over the limit!
[  380.478096][ T9178] device syzkaller0 entered promiscuous mode
[  380.562416][ T9183] tipc: Started in network mode
[  380.571372][ T9183] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711
[  380.605963][ T9183] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  381.753625][ T9196] tipc: Failed to remove unknown binding: 66,0,0/0:3139881882/3139881883
[  383.323764][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  384.007634][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  384.014644][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  384.026463][ T9196] tipc: Failed to remove unknown binding: 66,0,0/0:3139881882/3139881883
[  384.432359][ T9214] loop5: detected capacity change from 0 to 1024
[  384.536239][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1382'.
[  384.553227][ T9214] EXT4-fs (loop5): Ignoring removed orlov option
[  384.617410][ T9214] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,usrquota,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback.
[  387.217208][ T9269] bond1: (slave ip6gretap1): making interface the new active one
[  387.373048][ T9269] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  389.984411][ T9308] set match dimension is over the limit!
[  390.697310][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'.
[  390.724899][ T9310] device syzkaller0 entered promiscuous mode
[  391.519830][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  391.787207][ T9316] netlink: 'syz.4.1403': attribute type 33 has an invalid length.
[  391.795274][ T9316] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1403'.
[  399.809434][ T9401] hub 8-0:1.0: USB hub found
[  400.052848][ T9401] hub 8-0:1.0: 1 port detected
[  400.316670][ T6620] Bluetooth: hci1: command 0x0405 tx timeout
[  400.406976][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1429'.
[  402.062202][ T9424] device syzkaller0 entered promiscuous mode
[  402.108274][ T9428] loop6: detected capacity change from 0 to 512
[  403.085417][ T9428] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  403.160036][ T9428] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  403.179232][ T9428] EXT4-fs (loop6): orphan cleanup on readonly fs
[  403.185796][ T9428] EXT4-fs error (device loop6): ext4_orphan_get:1432: comm syz.6.1433: bad orphan inode 267
[  403.199428][ T9450] __sock_release: fasync list not empty!
[  403.362678][ T9428] EXT4-fs (loop6): Remounting filesystem read-only
[  403.370688][ T9428] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none.
[  403.432357][ T9428] ip6t_srh: unknown srh invflags 4000
[  403.545554][ T9460] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.1433: dx entry: limit 0 != root limit 125
[  403.591744][ T9460] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1433: Corrupt directory, running e2fsck is recommended
[  407.260300][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  407.375014][   T26] audit: type=1326 audit(3924574398.821:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  407.462899][   T26] audit: type=1326 audit(3924574398.821:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  407.553059][   T26] audit: type=1326 audit(3924574398.821:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  407.645231][   T26] audit: type=1326 audit(3924574398.821:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  407.710635][   T26] audit: type=1326 audit(3924574398.821:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  407.767931][   T26] audit: type=1326 audit(3924574398.821:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  407.796118][   T26] audit: type=1326 audit(3924574398.821:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  408.639768][   T26] audit: type=1326 audit(3924574398.821:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  408.662712][   T26] audit: type=1326 audit(3924574398.821:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  409.366637][   T26] audit: type=1326 audit(3924574398.821:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f3afd5d3dd9 code=0x7ffc0000
[  410.367723][ T9560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1465'.
[  412.589549][ T9599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1474'.
[  414.361099][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'.
[  415.691717][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1483'.
[  415.706177][ T9639] batman_adv: batadv0: Removing interface: batadv_slave_1
[  415.747797][ T9637] IPVS: stopping master sync thread 9642 ...
[  415.752370][ T9642] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0
[  415.844365][ T9647] loop5: detected capacity change from 0 to 512
[  415.897358][ T9649] ip6t_srh: unknown srh invflags 4000
[  415.900591][ T9647] EXT4-fs (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  415.940755][ T9647] EXT4-fs (loop5): DAX unsupported by block device.
[  416.276258][ T9667] netlink: 'syz.0.1490': attribute type 1 has an invalid length.
[  416.309489][ T9667] 8021q: adding VLAN 0 to HW filter on device bond2
[  416.911316][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1491'.
[  416.931564][ T9676] chnl_net:caif_netlink_parms(): no params data found
[  417.871829][ T9696] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1496'.
[  419.045082][ T9708] IPVS: stopping master sync thread 9710 ...
[  419.055552][ T9710] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0
[  420.900552][ T9722] netlink: 'syz.0.1501': attribute type 10 has an invalid length.
[  421.876371][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'.
[  431.293619][ T1106] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  431.603481][ T1106] usb 6-1: Using ep0 maxpacket: 16
[  431.732695][ T1106] usb 6-1: config 0 has an invalid interface number: 133 but max is 0
[  431.783028][ T1106] usb 6-1: config 0 has no interface number 0
[  431.813539][ T1106] usb 6-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  432.201750][ T1106] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  433.638059][ T1106] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.647027][ T1106] usb 6-1: Product: syz
[  433.651227][ T1106] usb 6-1: Manufacturer: syz
[  433.659766][ T1106] usb 6-1: SerialNumber: syz
[  433.670022][ T1106] usb 6-1: config 0 descriptor??
[  433.687170][ T9793] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  433.914506][ T9854] netlink: 16166 bytes leftover after parsing attributes in process `syz.6.1532'.
[  435.028173][ T9793] loop5: detected capacity change from 0 to 512
[  435.131680][ T1106] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected
[  435.149213][ T9864] loop6: detected capacity change from 0 to 512
[  435.159438][ T1106] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81
[  435.199999][ T9864] EXT4-fs (loop6): Ignoring removed oldalloc option
[  435.207354][ T1106] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1
[  435.222059][ T1106] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2
[  435.241313][ T1106] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  435.272660][ T1106] usb 6-1: USB disconnect, device number 13
[  435.293501][ T1106] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  435.306361][ T1106] keyspan 6-1:0.133: device disconnected
[  435.341553][ T9864] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.1535: iget: bad i_size value: 38620345925642
[  435.355430][ T9864] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1535: couldn't read orphan inode 15 (err -117)
[  435.375514][ T9864] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,delalloc,data_err=ignore,oldalloc,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback.
[  435.589161][ T9871] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  436.499187][ T9902] device vlan0 entered promiscuous mode
[  436.505295][ T9902] device geneve1 entered promiscuous mode
[  436.555087][ T9903] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1539'.
[  436.698944][ T9904] ipt_CLUSTERIP: Please specify destination IP
[  437.628380][ T9919] netlink: 'syz.5.1539': attribute type 12 has an invalid length.
[  437.628814][ T9916] Unknown status report in ack skb
[  438.025514][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  440.301272][   T26] kauditd_printk_skb: 20 callbacks suppressed
[  440.301289][   T26] audit: type=1800 audit(3924574429.627:316): pid=9946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1552" name="bus" dev="ramfs" ino=49800 res=0 errno=0
[  443.192472][T10009] vxcan1 speed is unknown, defaulting to 1000
[  444.802839][T10006] ipt_CLUSTERIP: Please specify destination IP
[  447.588962][T10062] device syzkaller0 entered promiscuous mode
[  447.714645][T10065] loop5: detected capacity change from 0 to 2048
[  447.798268][T10065] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  447.891162][T10065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  448.037128][T10074] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.1585'.
[  449.422651][ T4518] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh
[  449.460555][ T4518] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh
[  449.654306][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  449.660721][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  449.874164][ T5642] bridge0: port 3(syz_tun) entered disabled state
[  449.923410][ T5642] device syz_tun left promiscuous mode
[  449.932354][ T5642] bridge0: port 3(syz_tun) entered disabled state
[  451.062274][T10128] overlayfs: failed to clone upperpath
[  451.334257][T10138] loop6: detected capacity change from 0 to 764
[  451.460212][T10138] rock: directory entry would overflow storage
[  451.636463][T10138] rock: sig=0x4654, size=5, remaining=4
[  452.583306][T10159] ipt_CLUSTERIP: Please specify destination IP
[  453.386153][T10157] vxcan1 speed is unknown, defaulting to 1000
[  453.800217][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1610'.
[  453.924641][T10157] chnl_net:caif_netlink_parms(): no params data found
[  455.500838][T10157] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.509439][T10157] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.552571][ T6620] Bluetooth: hci0: command 0x0409 tx timeout
[  455.553685][T10157] device bridge_slave_0 entered promiscuous mode
[  455.587260][T10157] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.598046][T10157] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.637501][T10157] device bridge_slave_1 entered promiscuous mode
[  456.369639][T10157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  456.383245][T10157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  456.411868][T10157] team0: Port device team_slave_0 added
[  456.434014][T10157] team0: Port device team_slave_1 added
[  456.566612][T10157] batman_adv: batadv0: Adding interface: batadv_slave_0
[  456.635401][    C1] ------------[ cut here ]------------
[  456.640964][    C1] WARNING: CPU: 1 PID: 10222 at net/mac80211/tx.c:4859 __ieee80211_beacon_get+0x179f/0x2000
[  456.651236][    C1] Modules linked in:
[  456.655243][    C1] CPU: 1 PID: 10222 Comm: syz.6.1619 Not tainted syzkaller #0
[  456.662746][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  456.673088][    C1] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000
[  456.679567][    C1] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 6d 09 2a f8 0f 0b e9 03 ef ff ff e8 61 09 2a f8 <0f> 0b e9 76 f2 ff ff e8 65 ae 6d 00 89 d9 80 e1 07 80 c1 03 38 c1
[  456.699318][    C1] RSP: 0018:ffffc90000dd08e0 EFLAGS: 00010246
[  456.705464][    C1] RAX: ffffffff894f2b2f RBX: ffff88807c23a268 RCX: ffff88804015d940
[  456.710623][T10157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  456.713515][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  456.747655][    C1] RBP: ffffc90000dd0b08 R08: ffff88804015d940 R09: 0000000000000003
[  456.755670][    C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805a6fc800
[  456.763809][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001ba12c
[  456.771833][    C1] FS:  00007f3afb80c6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  456.780929][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  456.787625][    C1] CR2: 00007f7fdeb4b6b0 CR3: 0000000050cf3000 CR4: 00000000003506e0
[  456.795662][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  456.803700][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  456.811806][    C1] Call Trace:
[  456.815107][    C1]  <IRQ>
[  456.817971][    C1]  ? ieee80211_beacon_get_template+0x30/0x30
[  456.824018][    C1]  ? verify_lock_unused+0x140/0x140
[  456.829248][    C1]  ? __lock_acquire+0x13bc/0x7d10
[  456.834342][    C1]  ? verify_lock_unused+0x140/0x140
[  456.839691][    C1]  ieee80211_beacon_get_tim+0x48/0x840
[  456.845215][    C1]  mac80211_hwsim_beacon_tx+0xf4/0x920
[  456.850707][    C1]  __iterate_interfaces+0x243/0x500
[  456.856122][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  456.862377][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  456.868771][    C1]  ieee80211_iterate_active_interfaces_atomic+0xb3/0x140
[  456.875945][    C1]  mac80211_hwsim_beacon+0x9b/0x180
[  456.881164][    C1]  ? hw_scan_work+0xed0/0xed0
[  456.885861][    C1]  __hrtimer_run_queues+0x4f2/0xb70
[  456.891137][    C1]  ? hrtimer_interrupt+0x8d0/0x8d0
[  456.896311][    C1]  hrtimer_run_softirq+0x176/0x240
[  456.901501][    C1]  handle_softirqs+0x339/0x830
[  456.906297][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  456.911206][    C1]  ? do_softirq+0x210/0x210
[  456.915730][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  456.921072][    C1]  __irq_exit_rcu+0x13b/0x230
[  456.926145][    C1]  ? irq_exit_rcu+0x20/0x20
[  456.930837][    C1]  irq_exit_rcu+0x5/0x20
[  456.935352][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  456.941063][    C1]  </IRQ>
[  456.944100][    C1]  <TASK>
[  456.947043][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  456.953192][    C1] RIP: 0010:preempt_count_sub+0x48/0x160
[  456.958841][    C1] Code: 85 bd 00 00 00 83 3d 26 4d db 14 00 75 25 65 8b 05 65 fd af 7e 89 c1 81 e1 ff ff ff 7f 39 cf 7f 25 81 ff ff 00 00 00 0f 93 c1 <84> c0 0f 95 c0 08 c8 74 53 65 8b 05 40 fd af 7e f7 df 65 01 3d 37
[  456.978698][    C1] RSP: 0018:ffffc900048f75c8 EFLAGS: 00000293
[  456.984827][    C1] RAX: 0000000080000001 RBX: dffffc0000000000 RCX: 0000000000000000
[  456.992818][    C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2800 RDI: 0000000000000001
[  457.000848][    C1] RBP: ffffc900048f7678 R08: ffffffff901d5177 R09: 1ffffffff203aa2e
[  457.008861][    C1] R10: dffffc0000000000 R11: fffffbfff203aa2f R12: dffffc0000000000
[  457.016876][    C1] R13: 1ffff1100f056e44 R14: ffff8880782b71c8 R15: 1ffff9200091eebc
[  457.025063][    C1]  _raw_spin_unlock_irqrestore+0xc1/0x120
[  457.031157][    C1]  ? _raw_spin_unlock+0x40/0x40
[  457.036157][    C1]  __skb_try_recv_datagram+0x179/0x4d0
[  457.041638][    C1]  ? sock_load_diag_module+0x130/0x130
[  457.047158][    C1]  __unix_dgram_recvmsg+0x301/0xd90
[  457.052393][    C1]  ? unix_unhash+0x10/0x10
[  457.056839][    C1]  ? mark_lock+0x94/0x320
[  457.061224][    C1]  ? unix_dgram_recvmsg+0xb2/0xd0
[  457.066264][    C1]  ? unix_dgram_sendmsg+0x18a0/0x18a0
[  457.071686][    C1]  ____sys_recvmsg+0x2cd/0x5e0
[  457.076480][    C1]  ? __sys_recvmsg_sock+0x40/0x40
[  457.081664][    C1]  ? import_iovec+0x6f/0xa0
[  457.086194][    C1]  ___sys_recvmsg+0x21a/0x5c0
[  457.090937][    C1]  ? __sys_recvmsg+0x280/0x280
[  457.095736][    C1]  ? __lock_acquire+0x7d10/0x7d10
[  457.100892][    C1]  ? __might_fault+0xb3/0x110
[  457.105578][    C1]  do_recvmmsg+0x382/0x850
[  457.110022][    C1]  ? __sys_recvmmsg+0x290/0x290
[  457.114932][    C1]  ? __lock_acquire+0x7d10/0x7d10
[  457.120206][    C1]  __x64_sys_recvmmsg+0x195/0x250
[  457.125280][    C1]  ? do_recvmmsg+0x850/0x850
[  457.129898][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  457.135182][    C1]  do_syscall_64+0x4c/0xa0
[  457.139601][    C1]  ? clear_bhb_loop+0x30/0x80
[  457.144322][    C1]  ? clear_bhb_loop+0x30/0x80
[  457.149005][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  457.155027][    C1] RIP: 0033:0x7f3afd5d3dd9
[  457.159458][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  457.179384][    C1] RSP: 002b:00007f3afb80c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  457.188033][    C1] RAX: ffffffffffffffda RBX: 00007f3afd84d090 RCX: 00007f3afd5d3dd9
[  457.196032][    C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  457.204058][    C1] RBP: 00007f3afd669d69 R08: 0000000000000000 R09: 0000000000000000
[  457.212163][    C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  457.220181][    C1] R13: 00007f3afd84d128 R14: 00007f3afd84d090 R15: 00007ffc79859d28
[  457.228295][    C1]  </TASK>
[  457.231335][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  457.238611][    C1] CPU: 1 PID: 10222 Comm: syz.6.1619 Not tainted syzkaller #0
[  457.246255][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  457.256354][    C1] Call Trace:
[  457.259652][    C1]  <IRQ>
[  457.262499][    C1]  dump_stack_lvl+0x188/0x250
[  457.267192][    C1]  ? show_regs_print_info+0x20/0x20
[  457.272397][    C1]  ? load_image+0x400/0x400
[  457.277121][    C1]  panic+0x2e5/0x810
[  457.281041][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  457.285564][    C1]  ? __ieee80211_beacon_get+0x179f/0x2000
[  457.291380][    C1]  __warn+0x248/0x2b0
[  457.295372][    C1]  ? __ieee80211_beacon_get+0x179f/0x2000
[  457.301109][    C1]  report_bug+0x1b7/0x2e0
[  457.305450][    C1]  handle_bug+0x3a/0x70
[  457.309610][    C1]  exc_invalid_op+0x16/0x40
[  457.314136][    C1]  asm_exc_invalid_op+0x16/0x20
[  457.319109][    C1] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000
[  457.325543][    C1] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 6d 09 2a f8 0f 0b e9 03 ef ff ff e8 61 09 2a f8 <0f> 0b e9 76 f2 ff ff e8 65 ae 6d 00 89 d9 80 e1 07 80 c1 03 38 c1
[  457.345534][    C1] RSP: 0018:ffffc90000dd08e0 EFLAGS: 00010246
[  457.351656][    C1] RAX: ffffffff894f2b2f RBX: ffff88807c23a268 RCX: ffff88804015d940
[  457.359732][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  457.367813][    C1] RBP: ffffc90000dd0b08 R08: ffff88804015d940 R09: 0000000000000003
[  457.375876][    C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805a6fc800
[  457.383878][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001ba12c
[  457.391952][    C1]  ? __ieee80211_beacon_get+0x179f/0x2000
[  457.397831][    C1]  ? ieee80211_beacon_get_template+0x30/0x30
[  457.403826][    C1]  ? verify_lock_unused+0x140/0x140
[  457.409314][    C1]  ? __lock_acquire+0x13bc/0x7d10
[  457.414385][    C1]  ? verify_lock_unused+0x140/0x140
[  457.419711][    C1]  ieee80211_beacon_get_tim+0x48/0x840
[  457.425281][    C1]  mac80211_hwsim_beacon_tx+0xf4/0x920
[  457.430764][    C1]  __iterate_interfaces+0x243/0x500
[  457.435974][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  457.442521][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  457.448773][    C1]  ieee80211_iterate_active_interfaces_atomic+0xb3/0x140
[  457.455806][    C1]  mac80211_hwsim_beacon+0x9b/0x180
[  457.461023][    C1]  ? hw_scan_work+0xed0/0xed0
[  457.465715][    C1]  __hrtimer_run_queues+0x4f2/0xb70
[  457.470943][    C1]  ? hrtimer_interrupt+0x8d0/0x8d0
[  457.476254][    C1]  hrtimer_run_softirq+0x176/0x240
[  457.481384][    C1]  handle_softirqs+0x339/0x830
[  457.486178][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  457.491046][    C1]  ? do_softirq+0x210/0x210
[  457.495557][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  457.500858][    C1]  __irq_exit_rcu+0x13b/0x230
[  457.505650][    C1]  ? irq_exit_rcu+0x20/0x20
[  457.510269][    C1]  irq_exit_rcu+0x5/0x20
[  457.514608][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  457.520298][    C1]  </IRQ>
[  457.523234][    C1]  <TASK>
[  457.526225][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  457.532269][    C1] RIP: 0010:preempt_count_sub+0x48/0x160
[  457.538006][    C1] Code: 85 bd 00 00 00 83 3d 26 4d db 14 00 75 25 65 8b 05 65 fd af 7e 89 c1 81 e1 ff ff ff 7f 39 cf 7f 25 81 ff ff 00 00 00 0f 93 c1 <84> c0 0f 95 c0 08 c8 74 53 65 8b 05 40 fd af 7e f7 df 65 01 3d 37
[  457.558036][    C1] RSP: 0018:ffffc900048f75c8 EFLAGS: 00000293
[  457.564208][    C1] RAX: 0000000080000001 RBX: dffffc0000000000 RCX: 0000000000000000
[  457.572189][    C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2800 RDI: 0000000000000001
[  457.580171][    C1] RBP: ffffc900048f7678 R08: ffffffff901d5177 R09: 1ffffffff203aa2e
[  457.588145][    C1] R10: dffffc0000000000 R11: fffffbfff203aa2f R12: dffffc0000000000
[  457.596121][    C1] R13: 1ffff1100f056e44 R14: ffff8880782b71c8 R15: 1ffff9200091eebc
[  457.604121][    C1]  _raw_spin_unlock_irqrestore+0xc1/0x120
[  457.609857][    C1]  ? _raw_spin_unlock+0x40/0x40
[  457.614715][    C1]  __skb_try_recv_datagram+0x179/0x4d0
[  457.620190][    C1]  ? sock_load_diag_module+0x130/0x130
[  457.625838][    C1]  __unix_dgram_recvmsg+0x301/0xd90
[  457.631149][    C1]  ? unix_unhash+0x10/0x10
[  457.635578][    C1]  ? mark_lock+0x94/0x320
[  457.639909][    C1]  ? unix_dgram_recvmsg+0xb2/0xd0
[  457.644936][    C1]  ? unix_dgram_sendmsg+0x18a0/0x18a0
[  457.650352][    C1]  ____sys_recvmsg+0x2cd/0x5e0
[  457.655660][    C1]  ? __sys_recvmsg_sock+0x40/0x40
[  457.660717][    C1]  ? import_iovec+0x6f/0xa0
[  457.665235][    C1]  ___sys_recvmsg+0x21a/0x5c0
[  457.669936][    C1]  ? __sys_recvmsg+0x280/0x280
[  457.674725][    C1]  ? __lock_acquire+0x7d10/0x7d10
[  457.679889][    C1]  ? __might_fault+0xb3/0x110
[  457.684599][    C1]  do_recvmmsg+0x382/0x850
[  457.689124][    C1]  ? __sys_recvmmsg+0x290/0x290
[  457.694023][    C1]  ? __lock_acquire+0x7d10/0x7d10
[  457.699081][    C1]  __x64_sys_recvmmsg+0x195/0x250
[  457.704140][    C1]  ? do_recvmmsg+0x850/0x850
[  457.708774][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  457.714017][    C1]  do_syscall_64+0x4c/0xa0
[  457.718464][    C1]  ? clear_bhb_loop+0x30/0x80
[  457.723221][    C1]  ? clear_bhb_loop+0x30/0x80
[  457.727926][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  457.733839][    C1] RIP: 0033:0x7f3afd5d3dd9
[  457.738363][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  457.758837][    C1] RSP: 002b:00007f3afb80c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  457.767254][    C1] RAX: ffffffffffffffda RBX: 00007f3afd84d090 RCX: 00007f3afd5d3dd9
[  457.775248][    C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  457.783244][    C1] RBP: 00007f3afd669d69 R08: 0000000000000000 R09: 0000000000000000
[  457.791465][    C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  457.799447][    C1] R13: 00007f3afd84d128 R14: 00007f3afd84d090 R15: 00007ffc79859d28
[  457.807428][    C1]  </TASK>
[  457.810954][    C1] Kernel Offset: disabled
[  457.815677][    C1] Rebooting in 86400 seconds..