last executing test programs:

7m52.277839451s ago: executing program 4 (id=5):
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffff998, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x1a3)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
pread64(r3, &(0x7f0000001440)=""/126, 0x7e, 0x41)
ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000020c0)={0x20, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}]}, 0x20}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'wlan1\x00', @random="2b0100004ec6"})

7m49.170349939s ago: executing program 4 (id=19):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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")
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x1e)
unshare(0x20040600)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @multicast2}}, 0x1e)
r4 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x3, @remote}}, 0x1e)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$ppp(0xffffffffffffff9c, 0x0, 0x140, 0x0)
bind$bt_l2cap(r5, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000b00)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000a00)={[], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@fowner_lt={'fowner<', r7}}, {@subj_role={'subj_role', 0x3d, 'ext4\x00'}}]}, 0x64, 0x50b, &(0x7f0000000200)="$eJzs3UFvG1kdAPD/OHZp2nSTBQ6wEsvCLkorqJ1s2DbiUIqE4FQJKPcSEieK4sRR7LRNVEEqPgASQoDECS5ckPgASKgSF44IqRKcQYBACFo4cIDOyvY4TVM7cVs3TuPfT5rMmzfz/H/P0YznzTzNBDC03oqIqxHxKE3TCxExnuXnsil2WlNju4cP7sw3piTS9Po/k0iyvPZnJdn8bFbsdER87csR30yejlvb2l6Zq1TKG9lyqb66XqptbV9cXp1bKi+V12Zmpi/NXp59b3aqL+08FxFXvvjXH3z3Z1+68qvP3PrTjb+f/1ajWmPZ+r3teEb5g1a2ml5ofhd7C2w8Z7DjKN9sYWa00xYjT+Xcfcl1AgCgs8Y5/gcj4pMRcSHGY+Tg01kAAADgFZR+fiz+l0SknZ3qkg8AAAC8QnLNMbBJrpiNBRiLXK5YbI3h/XCcyVWqtfqnF6ubawutsbITUcgtLlfKU9lY4YkoJI3l6Wb68fK7+5ZnIuL1iPj++GhzuThfrSwM+uIHAAAADImz+/r//xlv9f8BAACAE2Zi0BUAAAAAXjr9fwAAADj59P8BAADgRPvKtWuNKW2//3rh5tbmSvXmxYVybaW4ujlfnK9urBeXqtWl5jP7Vg/7vEq1uv7ZWNu8XaqXa/VSbWv7xmp1c61+Y/mJV2ADAAAAR+j1j9/7QxIRO58bbU4Np3or2uNmwHGV300l2bzDbv3H11rzvxxRpYAjMTLoCgADkx90BYCBKQy6AsDAJYes7zp457fZ/BP9rQ8AANB/kx/tfv8/d2DJnYNXA8eenRiGl/v/MLya9/97HcnrZAFOlIIzABh6L3z//1Bp+kwVAgAA+m6sOSW5YnZ5byxyuWIx4lzztQCFZHG5Up6KiNci4vfjhQ80lqebJZND+wwAAAAAAAAAAAAAAAAAAAAAAAAAQEuaJpECAAAAJ1pE7m/Jr1vP8p8cf2ds//WBU8l/xyN7ReitH1//4e25en1jupH/r938+o+y/HcHcQUDAAAAhsIzvcC/3U9v9+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJ8ePrgz356OMu4/vhARE53i5+N0c346ChFx5t9J5PeUy0XESB/ijzb+fKRT/KRRrd2Q++Mn7bIvaOfugfFjIvsWOsU/24f4MMzuNY4/Vzvtf7l4qznvvP/lI55Yfl7dj3+xe/wb6bL/n+sxxhv3f1HqGv9uxBv5zsefdvykS/y3e4z/ja9vb3dbl/4kYrLj70/yRKxSfXW9VNvavri8OrdUXiqvzcxMX5q9PPve7FRpcblSzv52jPG9j/3y0UHtP9Ml/sQh7X+nx/b///7tBx9qJQud4p9/u0P83/w02+Lp+O3fvk9l6cb6yXZ6p5Xe682f/+7Ng9q/0KX9h/3/z/fY/gtf/c6fe9wUADgCta3tlblKpbxxYhONXvoxqIbEMUx8u68fmKZp2tinXuBzkjgOX0szMegjEwAA0G+PT/oHXRMAAAAAAAAAAAAAAAAAAAAYXkfxOLH9MXd2U0k/HqENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAX7wcAAP//ZWfZVg==")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40040, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000020540)='mnt', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r8, 0xc0506617, &(0x7f0000020580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})

7m31.781705601s ago: executing program 32 (id=19):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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")
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x1e)
unshare(0x20040600)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @multicast2}}, 0x1e)
r4 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x3, @remote}}, 0x1e)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$ppp(0xffffffffffffff9c, 0x0, 0x140, 0x0)
bind$bt_l2cap(r5, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000b00)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000a00)={[], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@fowner_lt={'fowner<', r7}}, {@subj_role={'subj_role', 0x3d, 'ext4\x00'}}]}, 0x64, 0x50b, &(0x7f0000000200)="$eJzs3UFvG1kdAPD/OHZp2nSTBQ6wEsvCLkorqJ1s2DbiUIqE4FQJKPcSEieK4sRR7LRNVEEqPgASQoDECS5ckPgASKgSF44IqRKcQYBACFo4cIDOyvY4TVM7cVs3TuPfT5rMmzfz/H/P0YznzTzNBDC03oqIqxHxKE3TCxExnuXnsil2WlNju4cP7sw3piTS9Po/k0iyvPZnJdn8bFbsdER87csR30yejlvb2l6Zq1TKG9lyqb66XqptbV9cXp1bKi+V12Zmpi/NXp59b3aqL+08FxFXvvjXH3z3Z1+68qvP3PrTjb+f/1ajWmPZ+r3teEb5g1a2ml5ofhd7C2w8Z7DjKN9sYWa00xYjT+Xcfcl1AgCgs8Y5/gcj4pMRcSHGY+Tg01kAAADgFZR+fiz+l0SknZ3qkg8AAAC8QnLNMbBJrpiNBRiLXK5YbI3h/XCcyVWqtfqnF6ubawutsbITUcgtLlfKU9lY4YkoJI3l6Wb68fK7+5ZnIuL1iPj++GhzuThfrSwM+uIHAAAADImz+/r//xlv9f8BAACAE2Zi0BUAAAAAXjr9fwAAADj59P8BAADgRPvKtWuNKW2//3rh5tbmSvXmxYVybaW4ujlfnK9urBeXqtWl5jP7Vg/7vEq1uv7ZWNu8XaqXa/VSbWv7xmp1c61+Y/mJV2ADAAAAR+j1j9/7QxIRO58bbU4Np3or2uNmwHGV300l2bzDbv3H11rzvxxRpYAjMTLoCgADkx90BYCBKQy6AsDAJYes7zp457fZ/BP9rQ8AANB/kx/tfv8/d2DJnYNXA8eenRiGl/v/MLya9/97HcnrZAFOlIIzABh6L3z//1Bp+kwVAgAA+m6sOSW5YnZ5byxyuWIx4lzztQCFZHG5Up6KiNci4vfjhQ80lqebJZND+wwAAAAAAAAAAAAAAAAAAAAAAAAAQEuaJpECAAAAJ1pE7m/Jr1vP8p8cf2ds//WBU8l/xyN7ReitH1//4e25en1jupH/r938+o+y/HcHcQUDAAAAhsIzvcC/3U9v9+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJ8ePrgz356OMu4/vhARE53i5+N0c346ChFx5t9J5PeUy0XESB/ijzb+fKRT/KRRrd2Q++Mn7bIvaOfugfFjIvsWOsU/24f4MMzuNY4/Vzvtf7l4qznvvP/lI55Yfl7dj3+xe/wb6bL/n+sxxhv3f1HqGv9uxBv5zsefdvykS/y3e4z/ja9vb3dbl/4kYrLj70/yRKxSfXW9VNvavri8OrdUXiqvzcxMX5q9PPve7FRpcblSzv52jPG9j/3y0UHtP9Ml/sQh7X+nx/b///7tBx9qJQud4p9/u0P83/w02+Lp+O3fvk9l6cb6yXZ6p5Xe682f/+7Ng9q/0KX9h/3/z/fY/gtf/c6fe9wUADgCta3tlblKpbxxYhONXvoxqIbEMUx8u68fmKZp2tinXuBzkjgOX0szMegjEwAA0G+PT/oHXRMAAAAAAAAAAAAAAAAAAAAYXkfxOLH9MXd2U0k/HqENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAX7wcAAP//ZWfZVg==")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40040, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000020540)='mnt', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r8, 0xc0506617, &(0x7f0000020580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})

1m43.885605005s ago: executing program 5 (id=822):
r0 = syz_io_uring_setup(0x3c03, &(0x7f00000005c0)={0x0, 0x2283, 0x80, 0x1, 0x160}, &(0x7f0000000780)=<r1=>0x0, &(0x7f0000000540)=<r2=>0x0)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000280))
syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x5, 0x0})
io_uring_enter(r0, 0x1d69, 0x4b5d, 0x0, 0x0, 0x0)

1m43.666448858s ago: executing program 5 (id=824):
syz_open_dev$vim2m(&(0x7f0000000280), 0x3, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setrlimit(0x7, &(0x7f00000000c0)={0x6, 0x72})
ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x2)

1m43.207058155s ago: executing program 5 (id=828):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd2a, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0)

1m42.834364161s ago: executing program 5 (id=829):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})
syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
chdir(&(0x7f0000000140)='./file0\x00')
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')

1m41.699158099s ago: executing program 5 (id=835):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
semget(0x3, 0x1, 0x206)
r3 = socket(0x200000100000011, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x4])
semop(0x0, &(0x7f0000002480)=[{}, {0x3, 0xff}], 0x2)
semop(0x0, &(0x7f00000003c0)=[{}], 0x1)
semctl$IPC_RMID(0x0, 0x0, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$nl_route(r4, 0x0, 0x840)
sendto$inet(r3, &(0x7f0000000240)="a2399ca8b00b1ba1be383f47de493be42d1882d1c0224e9f6d59f46d02595dae9c77db50c86ec790c6ee463f1a4f8e6d7262c62701446e4de1b32906913045b87f5ba362ec3e21b83997df5bd99d44ca2f12d4accfa9a8c21ce1cf806d8aa39e985f8a1270c152b15611735fb9d0d8382fe492ecf459c646b043ad226cf4d5617e8067396bdf365f242acf8890db0438c3c1a50f96af63d726c06f910a8567a6d2f7faf5070ced132d34ee62ec7ca761d81dcba7e355254a4ba65c9f", 0xbc, 0x8080, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

1m39.589919912s ago: executing program 5 (id=845):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x7}]})

1m39.08876768s ago: executing program 33 (id=845):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x7}]})

43.153831995s ago: executing program 3 (id=1108):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

42.645210963s ago: executing program 3 (id=1111):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0xfffffffd)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)

41.840338266s ago: executing program 3 (id=1113):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
r5 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='asymmetric\x00', 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), r0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000140)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8044840}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x48800}, 0x40000)

40.91523391s ago: executing program 3 (id=1117):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x3bdc14, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020)

39.975892975s ago: executing program 3 (id=1120):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
semget(0x3, 0x1, 0x206)
r3 = socket(0x200000100000011, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x4])
semop(0x0, &(0x7f0000002480)=[{}, {0x3, 0xff}], 0x2)
semop(0x0, &(0x7f00000003c0)=[{}], 0x1)
semctl$IPC_RMID(0x0, 0x0, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$nl_route(r4, 0x0, 0x840)
sendto$inet(r3, &(0x7f0000000240)="a2399ca8b00b1ba1be383f47de493be42d1882d1c0224e9f6d59f46d02595dae9c77db50c86ec790c6ee463f1a4f8e6d7262c62701446e4de1b32906913045b87f5ba362ec3e21b83997df5bd99d44ca2f12d4accfa9a8c21ce1cf806d8aa39e985f8a1270c152b15611735fb9d0d8382fe492ecf459c646b043ad226cf4d5617e8067396bdf365f242acf8890db0438c3c1a50f96af63d726c06f910a8567a6d2f7faf5070ced132d34ee62ec7ca761d81dcba7e355254a4ba65c9f", 0xbc, 0x8080, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

39.122634698s ago: executing program 3 (id=1124):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000001040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000140), 0x12)

38.859660812s ago: executing program 34 (id=1124):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000001040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000140), 0x12)

20.893757903s ago: executing program 7 (id=1125):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
semget(0x3, 0x1, 0x206)
r3 = socket(0x200000100000011, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x4])
semop(0x0, &(0x7f0000002480)=[{}, {0x3, 0xff}], 0x2)
semop(0x0, &(0x7f00000003c0)=[{}], 0x1)
semctl$IPC_RMID(0x0, 0x0, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$nl_route(r4, 0x0, 0x840)
sendto$inet(r3, &(0x7f0000000240)="a2399ca8b00b1ba1be383f47de493be42d1882d1c0224e9f6d59f46d02595dae9c77db50c86ec790c6ee463f1a4f8e6d7262c62701446e4de1b32906913045b87f5ba362ec3e21b83997df5bd99d44ca2f12d4accfa9a8c21ce1cf806d8aa39e985f8a1270c152b15611735fb9d0d8382fe492ecf459c646b043ad226cf4d5617e8067396bdf365f242acf8890db0438c3c1a50f96af63d726c06f910a8567a6d2f7faf5070ced132d34ee62ec7ca761d81dcba7e355254a4ba65c9f", 0xbc, 0x8080, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

15.33966735s ago: executing program 7 (id=1210):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x46, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000240)={[{@data_err_ignore}]}, 0x1, 0x4fb, &(0x7f0000000500)="$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")
mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x77f8)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
r1 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000500)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x3}, {0xffffffff}]})

14.126458479s ago: executing program 7 (id=1217):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1, 0x0, 0x0, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000240)={0x4, 0x8000, 0x0, 0x0, 0x1d})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12.737649101s ago: executing program 7 (id=1225):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000015c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d83216", 0xe5}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea827", 0x35}, {&(0x7f00000002c0)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c50", 0xbd}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b", 0x16}, {&(0x7f00000014c0)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aeaf75e9d1b381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678da2bbb2ecbf968e6be4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa4386890334ffff4a9f5f4f3005cd84", 0xd1}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed", 0x9d}], 0x3}}], 0x2, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

12.070687651s ago: executing program 35 (id=1225):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000015c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d83216", 0xe5}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea827", 0x35}, {&(0x7f00000002c0)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c50", 0xbd}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b", 0x16}, {&(0x7f00000014c0)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aeaf75e9d1b381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678da2bbb2ecbf968e6be4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa4386890334ffff4a9f5f4f3005cd84", 0xd1}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed", 0x9d}], 0x3}}], 0x2, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

8.642326545s ago: executing program 0 (id=1241):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0xfffe, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x8)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xa, 0x3a, 'U]', 0x3a, '!&)%.}+!/\xe1', 0x3a, './file0'}, 0x33)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000700)='nv\x00', 0x3)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6)

8.568324687s ago: executing program 0 (id=1242):
semtimedop(0x0, &(0x7f0000000380)=[{0x3, 0xccf0, 0x1000}], 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0)
prctl$PR_GET_IO_FLUSHER(0x4)
close(0xffffffffffffffff)
syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = semget$private(0x0, 0x207, 0x0)
semop(r4, &(0x7f0000000000)=[{0x4, 0x1, 0x1000}], 0x1)
semop(0x0, &(0x7f00000000c0)=[{0x2, 0x200, 0x1800}, {0x3, 0x1418, 0x1800}], 0x2)

7.584385632s ago: executing program 0 (id=1246):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000300)=0xff, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000140)={[0x4000, 0xd000, 0x2, 0xdddd1000], 0x6, 0x40, 0xffffffff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.466400909s ago: executing program 1 (id=1248):
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc880}, 0x24000090)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x4)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf9, 0x3, 0xd5, '\x00', 0x8})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.40489707s ago: executing program 2 (id=1249):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe2}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb3de6f89a6272ddc63ce532e270bc6cba3d229a96e108026bf64d48efc0435d", 0xc3}], 0x1}}], 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

6.107666525s ago: executing program 1 (id=1251):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$usbmon(0x0, 0x0, 0xc0041)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0])

6.018360266s ago: executing program 0 (id=1252):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
semget(0x3, 0x1, 0x206)
r3 = socket(0x200000100000011, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x4])
semop(0x0, &(0x7f0000002480)=[{}, {0x3, 0xff}], 0x2)
semop(0x0, &(0x7f00000003c0)=[{}], 0x1)
semctl$IPC_RMID(0x0, 0x0, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$nl_route(r4, 0x0, 0x840)
sendto$inet(r3, &(0x7f0000000240)="a2399ca8b00b1ba1be383f47de493be42d1882d1c0224e9f6d59f46d02595dae9c77db50c86ec790c6ee463f1a4f8e6d7262c62701446e4de1b32906913045b87f5ba362ec3e21b83997df5bd99d44ca2f12d4accfa9a8c21ce1cf806d8aa39e985f8a1270c152b15611735fb9d0d8382fe492ecf459c646b043ad226cf4d5617e8067396bdf365f242acf8890db0438c3c1a50f96af63d726c06f910a8567a6d2f7faf5070ced132d34ee62ec7ca761d81dcba7e355254a4ba65c9f", 0xbc, 0x8080, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

5.002811242s ago: executing program 1 (id=1254):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, 0x0, 0x20000004)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

4.942567603s ago: executing program 2 (id=1255):
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
setrlimit(0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
read$msr(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x808041, &(0x7f0000000fc0)=ANY=[], 0x1, 0x1e9, &(0x7f0000000980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x11, 0x10012, r0, 0x654b3000)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0xb, 0x8000000000000000, 0x80000001, 0x70f1, 0x3, 0xba0a, 0x7, 0x5}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={[0xe]}, 0x8})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)

4.48871045s ago: executing program 1 (id=1258):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e8895055a586d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r2, r3, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
write$tcp_congestion(r4, 0x0, 0x0)
write$FUSE_WRITE(r4, 0x0, 0x0)

4.284735073s ago: executing program 6 (id=1259):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, 0x0)
ioctl$TIOCPKT(r3, 0x5420, 0x0)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCSETSW(r3, 0x5403, &(0x7f00000000c0)={0x81, 0xd, 0x2c2f, 0x7f, 0x1, "1381146fee396d8d24902b030211e952c832fe"})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000018c0)=0x13)

4.198224435s ago: executing program 1 (id=1260):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000140)={0x3, 0x6, 0x40, 0x0, 0x1})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4040850}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'})
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18)

3.171693461s ago: executing program 2 (id=1261):
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc880}, 0x24000090)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x4)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf9, 0x3, 0xd5, '\x00', 0x8})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.156020161s ago: executing program 6 (id=1262):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
msgctl$IPC_INFO(0x0, 0x3, 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs4\x00', 0x4008, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x163001, 0x0)
openat(r3, 0x0, 0x464802, 0x44)
gettid()
bind$unix(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000013000), 0x0)

2.692492448s ago: executing program 2 (id=1263):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e40)={<r0=>0xffffffffffffffff})
r1 = io_uring_setup(0x391d, &(0x7f0000000140)={0x0, 0xfc3, 0x1, 0x0, 0x7})
dup3(r0, r1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0xfffffffffffffffd, 0x0)
write$binfmt_misc(r4, &(0x7f00000000c0), 0xfdef)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r5 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
pwrite64(r5, 0x0, 0x0, 0x4fed0)

2.415294032s ago: executing program 2 (id=1264):
openat$ppp(0xffffffffffffff9c, 0x0, 0xc0200, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x905, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

2.392433783s ago: executing program 0 (id=1265):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb02, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x3, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x200000000000005d)
sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="002109588136c3d97b84579a160652d911042768d379f18f40", 0x19}], 0x1}, 0x8041)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000200)="14", 0x1, 0x0, 0x0, 0x0)

2.297545524s ago: executing program 0 (id=1266):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESDEC, @ANYRESDEC=r2], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="f6ff000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0002000000000000000000000000000000f8ffffffffffffff00000021889aac1bf39a1bb7f752aebc0d3a284757c8de4ebca1271d4a824d6d733671207b5968133c9ad5c1357fa1a4bf8938c9304387531146f416f106e939582e49141e4c4705a6a92d016275239f7c24d18a6e01ae14ff5cf411dfbe14f0aeffa29d0875303c4f1c9da25f492f861668f6c54c9174b1d43e17a74bbba11c5e4097e4e5ffe6c571632f318755305f114749674c283faeca35d91d300ca148bd18727f992170bd04af317354"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
memfd_create(0x0, 0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x3b0, 0xffffffff, 0x0, 0xe4, 0xe4, 0xfeffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0x80000}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x40c)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x3c, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xff88, 0x1}, 0xe)
r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x800, 0x7, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0xffffffff, 0xbb6, 0x0, 0x4c, {0x8, 0xffffffff}, 0xd0, 0x9}})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)=ANY=[])
close_range(r2, 0xffffffffffffffff, 0x0)

2.083731918s ago: executing program 6 (id=1267):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, 0x0)
r1 = semget$private(0x0, 0x4000000009, 0x0)
semop(r1, &(0x7f0000000100)=[{0x0, 0xd5db}], 0x1)
semctl$IPC_RMID(r1, 0x0, 0x0)

1.353266669s ago: executing program 6 (id=1268):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x2180, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x228, &(0x7f0000000300)="$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")

248.243767ms ago: executing program 6 (id=1269):
r0 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x2c97, 0x1000, 0xfffffffd, 0x17b})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r4}, 0x18)
r5 = gettid()
sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881)
recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000)
close_range(r0, 0xffffffffffffffff, 0x0)

116.316149ms ago: executing program 1 (id=1270):
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8})
clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x6})
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00')
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000301010100000000000000000a0000010c001980080002000c0800001800"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x14c05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8000)

6.32438ms ago: executing program 2 (id=1271):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
copy_file_range(r0, 0x0, r1, &(0x7f0000000240)=0xfffffffffffffffe, 0x20000009, 0x0)

0s ago: executing program 6 (id=1272):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
r5 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='asymmetric\x00', 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), r0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000140)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8044840}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x48800}, 0x40000)

kernel console output (not intermixed with test programs):

d: connection closed
[  291.710420][ T5046] vhci_hcd: stop threads
[  291.889758][ T5046] vhci_hcd: release socket
[  291.923818][ T5046] vhci_hcd: disconnect device
[  291.969119][ T4308] vhci_hcd: vhci_device speed not set
[  292.000047][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  292.007548][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  292.112587][ T5468] 8021q: adding VLAN 0 to HW filter on device batadv0
[  292.818830][ T5779] sd 0:0:1:0: device reset
[  297.281374][ T5806] block nbd3: Device being setup by another task
[  297.462464][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  297.504662][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  297.554915][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  297.578628][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  297.610407][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  297.636946][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  297.732833][ T5468] device veth0_vlan entered promiscuous mode
[  297.826857][ T5468] device veth1_vlan entered promiscuous mode
[  297.989049][ T5817] Bluetooth: hci5: Frame reassembly failed (-84)
[  298.113580][ T4366] Bluetooth: hci5: Frame reassembly failed (-84)
[  298.260531][ T4366] Bluetooth: hci5: Frame reassembly failed (-84)
[  298.413499][   T47] block nbd3: Receive control failed (result -32)
[  298.421602][ T4266] block nbd3: Receive control failed (result -32)
[  298.469067][ T5806] block nbd3: shutting down sockets
[  298.508293][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  298.528889][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  298.542275][ T5468] device veth0_macvtap entered promiscuous mode
[  298.551921][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  298.574086][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  298.610247][ T5468] device veth1_macvtap entered promiscuous mode
[  298.622621][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  298.649799][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  298.682004][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  298.723807][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.750385][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  299.236401][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.344636][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.144922][ T4266] Bluetooth: hci5: command 0xfc11 tx timeout
[  300.145804][ T4273] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  300.218089][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.273003][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.480452][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.523033][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_0
[  300.643600][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  300.748770][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  301.009569][ T5840] netlink: 452 bytes leftover after parsing attributes in process `syz.1.246'.
[  302.067546][ T4266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  302.084702][ T4266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  302.097789][ T4266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  302.109194][ T4266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  302.117857][ T4266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  302.125315][ T4266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  302.890240][ T5860] netlink: 452 bytes leftover after parsing attributes in process `syz.3.248'.
[  303.521894][ T5847] lo speed is unknown, defaulting to 1000
[  303.565611][ T5847] lo speed is unknown, defaulting to 1000
[  304.189823][ T4273] Bluetooth: hci1: command 0x0409 tx timeout
[  306.428873][ T4273] Bluetooth: hci1: command 0x041b tx timeout
[  306.777800][ T5887] device bond0 entered promiscuous mode
[  306.783471][ T5890] loop3: detected capacity change from 0 to 256
[  306.814175][ T5887] device bond_slave_0 entered promiscuous mode
[  306.823298][ T5890] exfat: Bad value for 'fmask'
[  306.870885][ T5894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.254'.
[  307.035003][ T5887] device bond_slave_1 entered promiscuous mode
[  309.022387][ T4273] Bluetooth: hci1: command 0x040f tx timeout
[  309.514814][ T5847] chnl_net:caif_netlink_parms(): no params data found
[  309.865340][ T5914] siw: device registration error -23
[  311.914125][ T4266] Bluetooth: hci1: command 0x0419 tx timeout
[  312.359573][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.366726][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.876093][ T5847] device bridge_slave_0 entered promiscuous mode
[  313.672102][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.705831][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.744755][ T5847] device bridge_slave_1 entered promiscuous mode
[  313.778004][ T5937] lo speed is unknown, defaulting to 1000
[  313.785212][ T5937] lo speed is unknown, defaulting to 1000
[  314.024341][ T5952] siw: device registration error -23
[  314.091415][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  314.117918][ T5946] netlink: 452 bytes leftover after parsing attributes in process `syz.2.265'.
[  314.500616][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.850968][ T5967] raw_sendmsg: syz.0.270 forgot to set AF_INET. Fix it!
[  315.947893][ T5847] team0: Port device team_slave_0 added
[  315.978998][ T5847] team0: Port device team_slave_1 added
[  316.132168][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[  316.155419][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.234711][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  316.342745][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[  316.356577][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.448397][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  316.685581][ T5046] device hsr_slave_0 left promiscuous mode
[  316.727913][ T5046] device hsr_slave_1 left promiscuous mode
[  316.748725][ T5046] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  316.756404][ T5046] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.787274][ T5046] batman_adv: batadv0: Removing interface: batadv_slave_1
[  316.868244][ T5046] device bridge_slave_1 left promiscuous mode
[  317.259702][ T5046] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.275238][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  317.282075][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  317.325294][ T5046] device bridge_slave_0 left promiscuous mode
[  317.338386][ T5046] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.656133][ T5046] device veth1_macvtap left promiscuous mode
[  317.682887][ T5046] device veth0_macvtap left promiscuous mode
[  317.723681][ T5046] device veth1_vlan left promiscuous mode
[  317.762981][ T5046] device veth0_vlan left promiscuous mode
[  318.631433][ T6002] loop3: detected capacity change from 0 to 1024
[  318.724565][ T6002] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  318.925090][ T6009] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  320.109125][ T5046] team0 (unregistering): Port device team_slave_1 removed
[  320.156772][ T5046] team0 (unregistering): Port device team_slave_0 removed
[  320.206564][ T5046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  320.254729][ T5046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  320.732107][ T5046] bond0 (unregistering): Released all slaves
[  320.837328][ T5847] device hsr_slave_0 entered promiscuous mode
[  320.844259][ T5847] device hsr_slave_1 entered promiscuous mode
[  320.850980][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  320.858665][ T5847] Cannot create hsr debugfs directory
[  320.896831][ T4261] EXT4-fs (loop3): unmounting filesystem.
[  321.598048][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.288'.
[  321.614951][ T6021] device bond0 entered promiscuous mode
[  321.666023][ T6021] device bond_slave_0 entered promiscuous mode
[  321.729479][ T6021] device bond_slave_1 entered promiscuous mode
[  324.164447][ T6059] sd 0:0:1:0: device reset
[  326.581896][ T5847] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  326.616706][ T5847] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  326.631353][ T5847] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  326.660317][ T5847] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  326.743121][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.768006][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  326.788869][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  326.833689][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[  326.887864][ T6071] loop3: detected capacity change from 0 to 1024
[  326.892786][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  326.909191][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  326.936520][ T5046] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.943720][ T5046] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.976432][ T6071] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  327.005106][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  327.034201][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  327.069236][ T5046] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.076440][ T5046] bridge0: port 2(bridge_slave_1) entered forwarding state
[  327.135953][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  327.157030][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  327.241986][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  327.430328][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  327.541136][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  327.676758][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  327.720652][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  327.731431][ T6083] loop3: detected capacity change from 0 to 64
[  327.749601][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  327.771390][ T6083] MINIX-fs: bad superblock
[  327.789217][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  327.834457][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  327.867321][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  328.457092][ T5847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  328.506330][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  328.527029][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  328.807187][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  328.807203][   T26] audit: type=1326 audit(1747294049.063:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.0.298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee3bb8e969 code=0x0
[  328.967396][ T6098] device bond0 entered promiscuous mode
[  328.989919][ T6098] device bond_slave_0 entered promiscuous mode
[  329.036860][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.297'.
[  329.067735][ T6098] device bond_slave_1 entered promiscuous mode
[  329.475790][ T4273] Bluetooth: hci2: Malformed Event: 0x02
[  329.547036][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  329.716024][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  329.971728][   T26] audit: type=1326 audit(1747294050.233:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599958e969 code=0x7ffc0000
[  330.348566][ T4304] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  330.376633][   T26] audit: type=1326 audit(1747294050.263:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f599958e969 code=0x7ffc0000
[  330.807070][ T6123] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  331.037517][   T26] audit: type=1326 audit(1747294050.263:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599958e969 code=0x7ffc0000
[  331.061014][ T4304] usb 3-1: Using ep0 maxpacket: 8
[  331.117259][ T4304] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  331.217350][ T4304] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.267595][   T26] audit: type=1326 audit(1747294050.263:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f599958e969 code=0x7ffc0000
[  331.289834][   T26] audit: type=1326 audit(1747294050.263:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599958e969 code=0x7ffc0000
[  331.308317][ T4304] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  331.312147][   T26] audit: type=1326 audit(1747294050.273:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599958e969 code=0x7ffc0000
[  331.346976][    C1] vkms_vblank_simulate: vblank timer overrun
[  331.353222][   T26] audit: type=1326 audit(1747294050.273:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599958e969 code=0x7ffc0000
[  331.375653][   T26] audit: type=1326 audit(1747294050.273:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f599958e969 code=0x7ffc0000
[  331.397673][    C1] vkms_vblank_simulate: vblank timer overrun
[  331.404897][   T26] audit: type=1326 audit(1747294050.283:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599958e969 code=0x7ffc0000
[  331.426425][ T4304] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40
[  331.473197][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.481116][ T6121] mkiss: ax0: crc mode is auto.
[  331.509115][ T4304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  331.537531][ T4304] usb 3-1: SerialNumber: syz
[  331.590203][ T4304] cdc_ether: probe of 3-1:1.0 failed with error -22
[  331.609221][ T4304] usbtest 3-1:1.0: Linux gadget zero
[  331.749624][ T4304] usbtest 3-1:1.0: high-speed {control in/out int-in} tests (+alt)
[  331.795154][ T4304] usb 3-1: USB disconnect, device number 2
[  339.380659][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  339.411060][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  339.649499][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  339.690504][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  339.738389][ T6213] netlink: 452 bytes leftover after parsing attributes in process `syz.3.333'.
[  339.750967][ T5847] device veth0_vlan entered promiscuous mode
[  339.764707][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  339.837172][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  339.884070][ T5847] device veth1_vlan entered promiscuous mode
[  340.112098][ T6217] mkiss: ax0: crc mode is auto.
[  340.120233][   T26] kauditd_printk_skb: 20 callbacks suppressed
[  340.120285][   T26] audit: type=1326 audit(1747294060.383:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95918e969 code=0x7ffc0000
[  340.176690][ T6217] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  340.406679][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  340.525731][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  340.573554][   T26] audit: type=1326 audit(1747294060.443:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95918e969 code=0x7ffc0000
[  341.029394][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  341.052851][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  341.124869][ T5847] device veth0_macvtap entered promiscuous mode
[  341.169233][ T5847] device veth1_macvtap entered promiscuous mode
[  341.368705][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.438151][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.448020][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.764558][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.154670][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.212822][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.308403][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.349269][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.388976][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[  342.397220][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  342.424570][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  342.494096][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  342.522796][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  342.549372][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.592669][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.619319][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.693323][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.800572][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.071832][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.290237][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.523531][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.687896][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[  344.719709][ T5847] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  344.788238][ T5847] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  344.903162][ T5847] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.063567][ T5847] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.142780][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  345.364167][ T6259] Invalid ELF header magic: != ELF
[  345.507433][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  345.739548][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.759291][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.821714][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  345.845502][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.867615][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.992435][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  346.170139][ T6275] loop3: detected capacity change from 0 to 8
[  346.608916][ T6275] SQUASHFS error: zlib decompression failed, data probably corrupt
[  346.616907][ T6275] SQUASHFS error: Failed to read block 0x9b: -5
[  346.817614][ T6275] SQUASHFS error: Unable to read metadata cache entry [99]
[  346.863535][ T6275] SQUASHFS error: Unable to read inode 0x127
[  348.873888][ T6273] Invalid ELF header magic: != ELF
[  353.504491][ T6334] netlink: 452 bytes leftover after parsing attributes in process `syz.3.350'.
[  356.624915][ T6373] Invalid ELF header magic: != ELF
[  359.272155][ T6401] loop5: detected capacity change from 0 to 1024
[  360.954079][ T4273] Bluetooth: hci1: command 0x0406 tx timeout
[  361.966444][ T6419] netlink: 48 bytes leftover after parsing attributes in process `syz.3.372'.
[  362.995413][ T6439] loop3: detected capacity change from 0 to 128
[  363.620900][ T6462] netlink: 48 bytes leftover after parsing attributes in process `syz.3.387'.
[  363.665051][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'.
[  366.869629][ T6499] loop3: detected capacity change from 0 to 736
[  367.077696][ T6499] 9pnet_fd: p9_fd_create_unix (6499): problem connecting socket: ./file0: -30
[  368.814495][ T6510] loop5: detected capacity change from 0 to 32768
[  368.857554][ T6510] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.402 (6510)
[  368.917044][ T6510] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  368.937667][ T6510] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  368.968067][ T6510] BTRFS info (device loop5): using free space tree
[  369.023516][ T4266] Bluetooth: hci4: Ignoring connect complete event for invalid link type
[  369.239556][ T6510] BTRFS info (device loop5): enabling ssd optimizations
[  369.333986][ T5847] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  369.358290][ T4368] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  369.734048][ T4368] usb 4-1: Using ep0 maxpacket: 8
[  369.772351][ T4368] usb 4-1: config 0 has no interfaces?
[  369.790725][ T4368] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  369.806363][ T4368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.814964][ T4368] usb 4-1: Product: syz
[  369.819606][ T4368] usb 4-1: Manufacturer: syz
[  369.824239][ T4368] usb 4-1: SerialNumber: syz
[  369.842814][ T4368] usb 4-1: config 0 descriptor??
[  370.056351][ T4266] Bluetooth: hci3: unexpected subevent 0x01 length: 232 > 18
[  370.057059][ T6579] usb 4-1: USB disconnect, device number 2
[  371.869721][ T6605] loop3: detected capacity change from 0 to 1024
[  372.077514][    T9] hfsplus: b-tree write err: -5, ino 4
[  372.274547][ T4266] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  372.284881][ T4266] CPU: 0 PID: 4266 Comm: kworker/u5:4 Not tainted 6.1.138-syzkaller #0
[  372.293169][ T4266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  372.303262][ T4266] Workqueue: hci2 hci_rx_work
[  372.307990][ T4266] Call Trace:
[  372.311296][ T4266]  <TASK>
[  372.314268][ T4266]  dump_stack_lvl+0x168/0x22e
[  372.319004][ T4266]  ? show_regs_print_info+0x12/0x12
[  372.324249][ T4266]  ? load_image+0x3b0/0x3b0
[  372.328797][ T4266]  sysfs_create_dir_ns+0x252/0x280
[  372.333952][ T4266]  ? hci_rx_work+0x3eb/0xd40
[  372.338583][ T4266]  ? sysfs_warn_dup+0xa0/0xa0
[  372.343295][ T4266]  ? do_raw_spin_unlock+0x11d/0x230
[  372.348520][ T4266]  kobject_add_internal+0x6b8/0xc80
[  372.353753][ T4266]  kobject_add+0x152/0x210
[  372.358199][ T4266]  ? kobject_init+0x1d0/0x1d0
[  372.362899][ T4266]  ? klist_children_get+0x50/0x50
[  372.367939][ T4266]  ? get_device_parent+0x121/0x3f0
[  372.373071][ T4266]  device_add+0x483/0xfb0
[  372.377412][ T4266]  ? kmem_cache_free+0xf7/0x290
[  372.382280][ T4266]  hci_conn_add_sysfs+0xd1/0x1e0
[  372.387235][ T4266]  le_conn_complete_evt+0xd1d/0x1320
[  372.392544][ T4266]  ? hci_le_big_info_adv_report_evt+0x310/0x310
[  372.398805][ T4266]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  372.404452][ T4266]  ? skb_pull_data+0xf7/0x200
[  372.409149][ T4266]  hci_le_enh_conn_complete_evt+0x185/0x460
[  372.415056][ T4266]  ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0
[  372.421482][ T4266]  ? hci_remote_host_features_evt+0x270/0x270
[  372.427574][ T4266]  hci_event_packet+0x791/0x1210
[  372.432543][ T4266]  ? bis_list+0x280/0x280
[  372.436884][ T4266]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  372.442798][ T4266]  ? kcov_remote_start+0x4c7/0x7e0
[  372.447922][ T4266]  ? __show_mem+0x300/0x308
[  372.452446][ T4266]  ? hci_send_to_monitor+0x9c/0x4a0
[  372.457663][ T4266]  hci_rx_work+0x3eb/0xd40
[  372.462097][ T4266]  ? _raw_spin_unlock+0x40/0x40
[  372.466966][ T4266]  ? process_one_work+0x7a1/0x1160
[  372.472085][ T4266]  process_one_work+0x898/0x1160
[  372.477047][ T4266]  ? worker_detach_from_pool+0x240/0x240
[  372.482696][ T4266]  ? _raw_spin_lock_irq+0xab/0xe0
[  372.487745][ T4266]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  372.493137][ T4266]  ? kthread_data+0x4b/0xc0
[  372.497660][ T4266]  worker_thread+0xaa2/0x1250
[  372.502379][ T4266]  kthread+0x29d/0x330
[  372.506465][ T4266]  ? worker_clr_flags+0x1a0/0x1a0
[  372.511496][ T4266]  ? kthread_blkcg+0xd0/0xd0
[  372.516102][ T4266]  ret_from_fork+0x1f/0x30
[  372.520545][ T4266]  </TASK>
[  372.523639][    C0] vkms_vblank_simulate: vblank timer overrun
[  372.534894][ T4266] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  372.548225][ T4266] Bluetooth: hci2: failed to register connection device
[  373.376966][ T6602] loop5: detected capacity change from 0 to 32768
[  373.466136][ T6602] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.428 (6602)
[  373.647333][ T6602] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  373.720422][ T6602] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  373.747442][ T6602] BTRFS info (device loop5): enabling auto defrag
[  373.788805][ T6602] BTRFS info (device loop5): doing ref verification
[  373.796480][ T6602] BTRFS info (device loop5): max_inline at 0
[  374.135698][ T6602] BTRFS info (device loop5): force clearing of disk cache
[  374.272011][ T4266] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  374.287083][ T4266] Bluetooth: hci1: Injecting HCI hardware error event
[  374.302058][ T4273] Bluetooth: hci1: hardware error 0x00
[  374.483046][ T6602] BTRFS info (device loop5): turning on sync discard
[  374.552894][ T6602] BTRFS info (device loop5): disabling free space tree
[  375.094650][ T6602] BTRFS error (device loop5): open_ctree failed: -12
[  375.094816][ T6392] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by udevd (6392)
[  375.450019][ T6639] loop3: detected capacity change from 0 to 32768
[  375.501361][ T6639] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.438 (6639)
[  375.548369][ T6579] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  375.586005][ T6639] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  375.626832][ T6639] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  375.678280][ T6639] BTRFS info (device loop3): force clearing of disk cache
[  375.695741][ T6639] BTRFS info (device loop3): enabling auto defrag
[  375.726198][ T6639] BTRFS info (device loop3): max_inline at 0
[  375.740407][ T6639] BTRFS info (device loop3): enabling disk space caching
[  375.748887][ T6579] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  375.783533][ T6579] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  375.798366][ T6639] BTRFS info (device loop3): disk space caching is enabled
[  376.020799][ T6579] usb 3-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18
[  376.038292][ T6579] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.046345][ T6579] usb 3-1: Product: syz
[  376.068175][ T6579] usb 3-1: Manufacturer: syz
[  376.072833][ T6579] usb 3-1: SerialNumber: syz
[  376.115414][ T6579] usb 3-1: config 0 descriptor??
[  376.428522][ T4273] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  376.880905][ T6639] BTRFS info (device loop3): enabling ssd optimizations
[  376.913260][ T6639] BTRFS info (device loop3): rebuilding free space tree
[  377.037820][ T6639] BTRFS info (device loop3): disabling free space tree
[  377.060664][ T6639] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  377.114750][ T6579] usb 3-1: USB disconnect, device number 3
[  377.120778][ T6639] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  377.486634][ T4261] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  377.499458][ T6712] udevd[6712]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  378.610209][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  378.616934][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  379.242654][ T6715] loop5: detected capacity change from 0 to 32768
[  379.317873][ T6741] loop3: detected capacity change from 0 to 256
[  379.353286][ T6715] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  379.404888][ T6715] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  379.452136][ T6715] BTRFS info (device loop5): using free space tree
[  379.454478][ T6741] FAT-fs (loop3): Directory bread(block 64) failed
[  379.500700][ T6741] FAT-fs (loop3): Directory bread(block 65) failed
[  379.537954][ T6741] FAT-fs (loop3): Directory bread(block 66) failed
[  379.577878][ T6741] FAT-fs (loop3): Directory bread(block 67) failed
[  379.625914][ T6741] FAT-fs (loop3): Directory bread(block 68) failed
[  379.663663][ T6741] FAT-fs (loop3): Directory bread(block 69) failed
[  379.702317][ T6741] FAT-fs (loop3): Directory bread(block 70) failed
[  379.725484][ T6715] BTRFS info (device loop5): enabling ssd optimizations
[  379.751901][ T6741] FAT-fs (loop3): Directory bread(block 71) failed
[  379.820423][ T6741] FAT-fs (loop3): Directory bread(block 72) failed
[  379.836985][ T5847] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  379.868468][ T6741] FAT-fs (loop3): Directory bread(block 73) failed
[  382.301156][ T6806] loop3: detected capacity change from 0 to 64
[  382.442255][ T6806] hfs: request for non-existent node -117440513 in B*Tree
[  382.484840][ T6806] hfs: request for non-existent node -117440513 in B*Tree
[  383.084706][ T6821] netlink: 452 bytes leftover after parsing attributes in process `syz.5.469'.
[  385.287824][ T6852] loop5: detected capacity change from 0 to 40427
[  385.335923][ T6852] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[  385.353440][ T6852] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  385.386617][ T6852] F2FS-fs (loop5): invalid crc value
[  385.417301][ T6852] F2FS-fs (loop5): Found nat_bits in checkpoint
[  385.557197][ T6852] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2
[  385.598692][ T6852] F2FS-fs (loop5): Start checkpoint disabled!
[  385.674161][ T6852] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  385.691667][ T6852] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  385.750604][ T6852] F2FS-fs (loop5): switch discard_unit option is not allowed
[  386.332622][ T6877] netlink: 452 bytes leftover after parsing attributes in process `syz.0.485'.
[  386.537939][ T6883] loop5: detected capacity change from 0 to 164
[  388.013898][ T6903] loop5: detected capacity change from 0 to 32768
[  388.185921][ T6903] XFS (loop5): Mounting V5 Filesystem
[  388.314763][ T6903] XFS (loop5): Ending clean mount
[  388.472035][ T5847] XFS (loop5): Unmounting Filesystem
[  389.150638][ T6929] netlink: 452 bytes leftover after parsing attributes in process `syz.0.504'.
[  389.637984][ T6934] netlink: 452 bytes leftover after parsing attributes in process `syz.1.501'.
[  389.700502][ T6926] loop3: detected capacity change from 0 to 32768
[  389.821650][ T6926] XFS: ikeep mount option is deprecated.
[  389.994727][ T6926] XFS (loop3): Mounting V5 Filesystem
[  390.261729][ T6932] loop5: detected capacity change from 0 to 32768
[  390.531768][ T6932] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.500 (6932)
[  390.986784][ T6932] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  391.068346][ T6932] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  391.077334][ T6926] XFS (loop3): Ending clean mount
[  391.077407][ T6932] BTRFS info (device loop5): enabling disk space caching
[  391.097009][ T6932] BTRFS info (device loop5): force clearing of disk cache
[  391.127508][ T6926] XFS (loop3): Quotacheck needed: Please wait.
[  391.149049][ T6932] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  391.198257][ T6932] BTRFS info (device loop5): use lzo compression, level 0
[  391.205456][ T6932] BTRFS info (device loop5): doing ref verification
[  391.240516][ T6926] XFS (loop3): Quotacheck: Done.
[  391.246536][ T6932] BTRFS info (device loop5): enabling ssd optimizations
[  391.285561][ T6932] BTRFS info (device loop5): using spread ssd allocation scheme
[  391.308448][ T6932] BTRFS info (device loop5): disk space caching is enabled
[  391.511651][ T4261] XFS (loop3): Unmounting Filesystem
[  392.796392][ T6932] BTRFS error (device loop5): open_ctree failed: -12
[  393.402009][ T6981] loop5: detected capacity change from 0 to 4096
[  393.498778][ T6981] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  393.534419][ T6981] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #15: comm syz.5.511: corrupted inode contents
[  393.582998][ T6981] EXT4-fs error (device loop5): ext4_dirty_inode:6118: inode #15: comm syz.5.511: mark_inode_dirty error
[  393.637882][ T6981] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #15: comm syz.5.511: corrupted inode contents
[  393.692470][ T6981] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #15: comm syz.5.511: mark_inode_dirty error
[  393.748998][ T6981] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #15: comm syz.5.511: corrupted inode contents
[  393.789659][ T6981] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #15: comm syz.5.511: mark_inode_dirty error
[  393.903801][ T6981] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #15: comm syz.5.511: corrupted inode contents
[  393.998447][ T6981] EXT4-fs error (device loop5): ext4_truncate:4312: inode #15: comm syz.5.511: mark_inode_dirty error
[  394.025597][ T6981] EXT4-fs error (device loop5) in ext4_setattr:5657: Corrupt filesystem
[  394.049212][ T6996] netlink: 452 bytes leftover after parsing attributes in process `syz.1.515'.
[  394.104147][ T6993] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #15: comm syz.5.511: corrupted inode contents
[  394.191699][ T6979] loop3: detected capacity change from 0 to 32768
[  394.303976][ T5847] EXT4-fs warning (device loop5): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  394.362062][ T5847] EXT4-fs (loop5): unmounting filesystem.
[  394.629257][ T7001] loop5: detected capacity change from 0 to 4096
[  394.791622][ T7005] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  394.868307][ T6729] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  395.169311][ T6729] usb 4-1: config 7 has an invalid interface number: 192 but max is 0
[  395.292368][ T6729] usb 4-1: config 7 has no interface number 0
[  395.518309][ T6729] usb 4-1: config 7 interface 192 has no altsetting 0
[  395.569879][ T6729] usb 4-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d
[  395.618186][ T6729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.626667][ T6729] usb 4-1: Product: syz
[  395.648844][ T6729] usb 4-1: Manufacturer: syz
[  395.653504][ T6729] usb 4-1: SerialNumber: syz
[  396.068416][ T6729] usb 4-1: USB disconnect, device number 3
[  396.134150][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'.
[  396.596096][ T7021] netlink: 452 bytes leftover after parsing attributes in process `syz.5.522'.
[  396.667956][ T7026] Bluetooth: MGMT ver 1.22
[  397.198293][  T127] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  397.397618][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.532'.
[  397.408190][  T127] usb 2-1: Using ep0 maxpacket: 16
[  397.422491][  T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  397.443925][  T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  397.464409][  T127] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  397.485499][  T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.509583][  T127] usb 2-1: config 0 descriptor??
[  397.964109][  T127] lua 0003:1E7D:2C2E.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0
[  398.134264][  T127] usb 2-1: USB disconnect, device number 2
[  398.220928][ T7055] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  398.227507][ T7055] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  398.271028][ T7055] vhci_hcd vhci_hcd.0: Device attached
[  398.316031][ T7045] loop3: detected capacity change from 0 to 32768
[  398.319636][ T7057] vhci_hcd: connection closed
[  398.323418][ T4319] vhci_hcd: stop threads
[  398.341022][ T7052] fido_id[7052]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  398.361031][ T4319] vhci_hcd: release socket
[  398.365519][ T4319] vhci_hcd: disconnect device
[  398.372722][ T7045] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.533 (7045)
[  398.414380][ T7045] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  398.438560][ T7045] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  398.464044][ T7045] BTRFS info (device loop3): turning on flush-on-commit
[  398.498200][ T7045] BTRFS info (device loop3): enabling disk space caching
[  398.505363][ T7045] BTRFS info (device loop3): turning off barriers
[  398.512337][ T7045] BTRFS info (device loop3): doing ref verification
[  398.538173][ T7045] BTRFS info (device loop3): enabling auto defrag
[  398.544676][ T7045] BTRFS info (device loop3): force clearing of disk cache
[  398.568606][ T7045] BTRFS info (device loop3): turning on sync discard
[  398.584769][ T7045] BTRFS info (device loop3): using default commit interval 30s
[  398.603089][ T7045] BTRFS info (device loop3): disk space caching is enabled
[  398.800207][ T7045] BTRFS info (device loop3): enabling ssd optimizations
[  398.828277][ T7045] BTRFS info (device loop3): rebuilding free space tree
[  398.901663][ T7045] BTRFS info (device loop3): disabling free space tree
[  398.918396][ T7045] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  398.958257][ T7045] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  399.129052][ T7060] loop5: detected capacity change from 0 to 32768
[  399.201080][ T7060] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.538 (7060)
[  400.059645][ T7060] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  400.123167][ T7060] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  400.170189][ T7060] BTRFS info (device loop5): using free space tree
[  400.261607][ T4261] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  400.436043][ T7060] BTRFS info (device loop5): enabling ssd optimizations
[  402.260341][ T7129] netlink: 452 bytes leftover after parsing attributes in process `syz.2.548'.
[  402.800143][ T5847] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  403.140920][ T6697] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop5 scanned by udevd (6697)
[  407.146686][ T7181] netlink: 452 bytes leftover after parsing attributes in process `syz.2.561'.
[  408.679089][ T7197] loop5: detected capacity change from 0 to 1024
[  415.395967][ T7257] tipc: Started in network mode
[  415.438934][ T7257] tipc: Node identity , cluster identity 4711
[  415.445070][ T7257] tipc: Failed to set node id, please configure manually
[  415.458310][ T7257] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  415.526185][ T7259] netlink: 452 bytes leftover after parsing attributes in process `syz.0.584'.
[  422.178303][ T6730] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  422.334786][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'.
[  422.398475][ T6730] usb 2-1: Using ep0 maxpacket: 16
[  422.409119][ T7338] loop5: detected capacity change from 0 to 512
[  422.410930][ T6730] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  422.416384][ T7338] EXT4-fs: inline encryption not supported
[  422.492352][ T6730] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  422.545228][ T7338] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  422.566945][ T6730] usb 2-1: config 0 interface 0 has no altsetting 0
[  422.620959][ T6730] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  422.642606][ T7338] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  422.682884][ T6730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.730435][ T6730] usb 2-1: config 0 descriptor??
[  422.977070][ T5847] EXT4-fs (loop5): unmounting filesystem.
[  424.054135][ T6730] razer 0003:1532:011B.0003: item fetching failed at offset 0/3
[  424.167295][ T6730] razer: probe of 0003:1532:011B.0003 failed with error -22
[  424.199804][ T6730] usb 2-1: USB disconnect, device number 3
[  424.701462][ T6730] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  425.081270][ T6730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  425.113818][ T6730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  425.179070][ T6730] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[  425.222964][ T6730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.271310][ T6730] usb 3-1: config 0 descriptor??
[  425.307909][ T7373] loop3: detected capacity change from 0 to 32768
[  425.339363][ T7373] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.617 (7373)
[  425.379037][ T7373] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  425.390870][ T7373] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  425.402106][ T7373] BTRFS info (device loop3): using free space tree
[  425.449965][ T4303] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  425.474024][ T7373] BTRFS info (device loop3): enabling ssd optimizations
[  425.629053][ T4261] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  425.760442][ T6730] uclogic 0003:5543:0004.0004: unknown main item tag 0x0
[  425.767551][ T6730] uclogic 0003:5543:0004.0004: unknown main item tag 0x0
[  425.774862][ T6730] uclogic 0003:5543:0004.0004: unknown main item tag 0x0
[  425.782862][ T6730] uclogic 0003:5543:0004.0004: unknown main item tag 0x0
[  425.804355][ T4303] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  425.819615][ T6730] uclogic 0003:5543:0004.0004: unknown main item tag 0x0
[  425.829806][ T4303] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  425.839833][ T6730] uclogic 0003:5543:0004.0004: No inputs registered, leaving
[  425.851750][ T4303] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  425.872150][ T6730] uclogic 0003:5543:0004.0004: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.2-1/input0
[  425.884647][ T4303] usb 1-1: config 0 interface 0 has no altsetting 0
[  425.896168][ T4303] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  425.918199][ T4303] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  425.939399][ T4303] usb 1-1: config 0 interface 0 has no altsetting 0
[  425.971553][ T4303] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  426.002383][ T4303] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  426.030791][ T4303] usb 1-1: config 0 interface 0 has no altsetting 0
[  426.068964][ T4303] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  426.096113][ T4303] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  426.116127][ T4303] usb 1-1: config 0 interface 0 has no altsetting 0
[  426.159796][ T4303] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  426.170345][ T4303] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  426.181779][ T4303] usb 1-1: config 0 interface 0 has no altsetting 0
[  426.238610][ T4303] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  426.250069][ T4303] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  426.263401][ T4303] usb 1-1: config 0 interface 0 has no altsetting 0
[  426.327859][ T4303] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  426.336919][ T4303] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  426.357874][ T4303] usb 1-1: config 0 interface 0 has no altsetting 0
[  426.394071][ T4303] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  426.403127][ T4303] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  426.414134][ T4303] usb 1-1: config 0 interface 0 has no altsetting 0
[  426.440203][ T4303] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  426.449526][ T6731] usb 3-1: USB disconnect, device number 4
[  426.460318][   T26] audit: type=1326 audit(1747294146.727:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff959185927 code=0x7ffc0000
[  426.462513][ T4303] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  426.545152][ T4303] usb 1-1: Product: syz
[  426.549415][ T4303] usb 1-1: Manufacturer: syz
[  426.568589][ T4303] usb 1-1: SerialNumber: syz
[  426.575079][ T4303] usb 1-1: config 0 descriptor??
[  426.586283][   T26] audit: type=1326 audit(1747294146.757:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff95912ab39 code=0x7ffc0000
[  426.607869][ T4303] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  426.644850][ T6697] udevd[6697]: failed to send result of seq 13369 to main daemon: Connection refused
[  426.690454][   T26] audit: type=1326 audit(1747294146.757:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff959185927 code=0x7ffc0000
[  426.898246][   T26] audit: type=1326 audit(1747294146.757:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff95912ab39 code=0x7ffc0000
[  426.967917][   T26] audit: type=1326 audit(1747294146.757:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff959185927 code=0x7ffc0000
[  427.472473][ T2185] usb 1-1: USB disconnect, device number 2
[  427.608026][   T26] audit: type=1326 audit(1747294146.757:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff95912ab39 code=0x7ffc0000
[  427.650402][ T2185] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  427.670801][ T7404] loop5: detected capacity change from 0 to 32768
[  427.717925][ T7404] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.622 (7404)
[  427.754454][   T26] audit: type=1326 audit(1747294146.757:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff959185927 code=0x7ffc0000
[  427.832915][ T7404] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  427.841358][   T26] audit: type=1326 audit(1747294146.757:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff95912ab39 code=0x7ffc0000
[  427.855540][ T7404] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  427.867744][   T26] audit: type=1326 audit(1747294146.757:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff959185927 code=0x7ffc0000
[  427.899267][   T26] audit: type=1326 audit(1747294146.757:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff95912ab39 code=0x7ffc0000
[  427.921481][ T7404] BTRFS info (device loop5): turning on flush-on-commit
[  427.939395][ T7404] BTRFS info (device loop5): enabling disk space caching
[  427.946495][ T7404] BTRFS info (device loop5): turning off barriers
[  427.960760][ T7404] BTRFS info (device loop5): doing ref verification
[  427.982611][ T7404] BTRFS info (device loop5): enabling auto defrag
[  428.006001][ T7404] BTRFS info (device loop5): force clearing of disk cache
[  428.017649][ T7404] BTRFS info (device loop5): turning on sync discard
[  428.026056][ T7404] BTRFS info (device loop5): using default commit interval 30s
[  428.034303][ T7404] BTRFS info (device loop5): disk space caching is enabled
[  428.061578][ T7404] BTRFS info (device loop5): enabling ssd optimizations
[  428.072840][ T7404] BTRFS info (device loop5): rebuilding free space tree
[  428.099343][ T4303] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  428.111073][ T7404] BTRFS info (device loop5): disabling free space tree
[  428.124364][ T7404] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  428.137476][ T7404] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  428.438150][ T4303] usb 3-1: Using ep0 maxpacket: 8
[  428.445800][ T4303] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  428.461945][ T4303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.579137][ T4303] pvrusb2: Hardware description: Terratec Grabster AV400
[  428.597380][ T5847] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  428.599548][ T4303] pvrusb2: **********
[  428.760019][ T4303] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  428.879039][ T4303] pvrusb2: Important functionality might not be entirely working.
[  428.887122][ T4303] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  428.915861][ T4303] pvrusb2: **********
[  429.419711][ T2310] pvrusb2: Invalid write control endpoint
[  429.536160][ T2310] pvrusb2: Invalid write control endpoint
[  429.569494][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  429.607022][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  429.653128][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  429.807404][ T6578] usb 3-1: USB disconnect, device number 5
[  429.921406][ T2310] pvrusb2: Device being rendered inoperable
[  430.023716][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  430.163796][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  430.266243][ T7474] bridge0: port 3(gretap0) entered blocking state
[  430.387808][ T2310] pvrusb2: Attached sub-driver cx25840
[  430.398029][ T7474] bridge0: port 3(gretap0) entered disabled state
[  430.478308][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  430.493182][ T7474] device gretap0 entered promiscuous mode
[  430.535723][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  430.547354][ T7474] bridge0: port 3(gretap0) entered blocking state
[  430.554614][ T7474] bridge0: port 3(gretap0) entered forwarding state
[  431.369598][ T7502] netlink: 452 bytes leftover after parsing attributes in process `syz.5.647'.
[  432.692550][ T7525] bridge0: port 3(gretap0) entered blocking state
[  432.716380][ T7525] bridge0: port 3(gretap0) entered disabled state
[  432.747438][ T7525] device gretap0 entered promiscuous mode
[  432.771353][ T7525] bridge0: port 3(gretap0) entered blocking state
[  432.777908][ T7525] bridge0: port 3(gretap0) entered forwarding state
[  433.078050][ T7538] random: crng reseeded on system resumption
[  433.665508][ T7534] loop3: detected capacity change from 0 to 32768
[  433.681153][ T7538] Restarting kernel threads ... done.
[  433.699638][ T7534] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.659 (7534)
[  433.817432][ T7532] loop5: detected capacity change from 0 to 32768
[  433.880857][ T7532] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.658 (7532)
[  433.898151][ T7534] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  433.928344][ T7534] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  433.944192][ T7532] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  433.955939][ T7534] BTRFS info (device loop3): setting nodatacow, compression disabled
[  433.964297][ T7532] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  433.974473][ T7532] BTRFS info (device loop5): enabling disk space caching
[  433.985245][ T7534] BTRFS info (device loop3): max_inline at 0
[  433.987437][ T7532] BTRFS info (device loop5): enabling auto defrag
[  433.998176][ T7532] BTRFS info (device loop5): doing ref verification
[  434.004955][ T7532] BTRFS info (device loop5): use no compression
[  434.005933][ T7534] BTRFS info (device loop3): enabling disk space caching
[  434.011430][ T7532] BTRFS info (device loop5): force clearing of disk cache
[  434.025800][ T7532] BTRFS info (device loop5): disabling disk space caching
[  434.033341][ T7534] BTRFS info (device loop3): disabling tree log
[  434.040859][ T7534] BTRFS info (device loop3): turning on flush-on-commit
[  434.048573][ T7534] BTRFS info (device loop3): doing ref verification
[  434.056608][ T7534] BTRFS info (device loop3): use no compression
[  434.063062][ T7534] BTRFS info (device loop3): force clearing of disk cache
[  434.071033][ T7534] BTRFS info (device loop3): enabling ssd optimizations
[  434.078189][ T7534] BTRFS info (device loop3): force zlib compression, level 3
[  434.085820][ T7534] BTRFS error (device loop3): unrecognized mount option 'max_inline='
[  434.215117][ T7534] BTRFS error (device loop3): open_ctree failed: -22
[  434.232863][ T7532] BTRFS info (device loop5): enabling ssd optimizations
[  434.242925][ T7532] BTRFS info (device loop5): rebuilding free space tree
[  434.277513][ T7532] BTRFS info (device loop5): disabling free space tree
[  434.285166][ T7562] netlink: 452 bytes leftover after parsing attributes in process `syz.2.663'.
[  434.318482][ T7532] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  434.345389][ T7532] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  435.320873][ T5847] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  440.088538][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  440.094895][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  440.470931][ T7660] loop3: detected capacity change from 0 to 256
[  440.753755][ T4967] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  440.938998][ T4967] usb 6-1: Using ep0 maxpacket: 8
[  440.949382][ T4967] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  440.962743][ T4967] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  440.982562][ T4967] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  441.022253][ T4967] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  441.091883][ T4967] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  441.128279][ T4967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.230127][ T7674] netlink: 452 bytes leftover after parsing attributes in process `syz.3.698'.
[  441.887182][ T4967] usb 6-1: GET_CAPABILITIES returned 0
[  441.892816][ T4967] usbtmc 6-1:16.0: can't read capabilities
[  441.911508][ T7682] input: syz0 as /devices/virtual/input/input10
[  442.108158][ T6731] usb 6-1: USB disconnect, device number 2
[  442.935411][ T7710] netlink: 452 bytes leftover after parsing attributes in process `syz.1.712'.
[  443.708185][ T6731] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  443.910101][ T6731] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  443.938387][ T6731] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  443.957567][ T6731] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  443.983776][ T6731] usb 4-1: config 0 interface 0 has no altsetting 0
[  443.999606][ T6731] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  444.023757][ T6731] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  444.055196][ T6731] usb 4-1: config 0 interface 0 has no altsetting 0
[  444.058263][ T4318] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  444.076768][ T6731] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  444.263568][ T4318] usb 6-1: config 0 has an invalid interface number: 93 but max is 0
[  444.275034][ T6731] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  444.286574][ T6731] usb 4-1: config 0 interface 0 has no altsetting 0
[  444.299743][ T6731] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  444.307942][ T4318] usb 6-1: config 0 has no interface number 0
[  444.318260][ T6731] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  444.338525][ T6731] usb 4-1: config 0 interface 0 has no altsetting 0
[  444.448716][ T4318] usb 6-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  444.533879][ T4318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.640247][ T4318] usb 6-1: Product: syz
[  444.700818][ T4318] usb 6-1: Manufacturer: syz
[  444.773352][ T4318] usb 6-1: SerialNumber: syz
[  444.972793][ T4318] usb 6-1: config 0 descriptor??
[  445.102484][ T6731] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  445.111621][ T6731] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  445.122590][ T6731] usb 4-1: config 0 interface 0 has no altsetting 0
[  445.139179][ T6731] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  445.150201][ T6731] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  445.177316][ T6731] usb 4-1: config 0 interface 0 has no altsetting 0
[  445.188545][ T4318] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  445.206666][ T6731] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  445.224093][ T4318] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  445.225957][ T6731] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  445.254056][ T4318] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  445.272639][ T6731] usb 4-1: config 0 interface 0 has no altsetting 0
[  445.285827][ T4318] usb 6-1: media controller created
[  445.290040][ T6731] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  445.304065][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  445.360697][ T6731] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  445.378849][ T6731] usb 4-1: config 0 interface 0 has no altsetting 0
[  445.405509][ T6731] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  445.425458][ T6731] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  445.615261][ T6731] usb 4-1: Product: syz
[  445.619602][ T6731] usb 4-1: Manufacturer: syz
[  445.624389][ T6731] usb 4-1: SerialNumber: syz
[  445.631614][ T6731] usb 4-1: config 0 descriptor??
[  445.638638][ T4318] DVB: Unable to find symbol dib7000p_attach()
[  445.645970][ T4318] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  445.661535][ T6731] usb 4-1: can't set config #0, error -71
[  445.675346][ T6731] usb 4-1: USB disconnect, device number 4
[  445.701601][ T4318] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  445.737915][ T4318] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  445.776006][ T4318] usb 6-1: media controller created
[  445.811564][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  445.846227][ T4318] dib0700: the master dib7090 has to be initialized first
[  445.867471][ T4318] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  445.940323][ T7742] loop3: detected capacity change from 0 to 8192
[  446.040668][ T7742] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  446.063900][ T7742] FAT-fs (loop3): Filesystem has been set read-only
[  446.082958][ T7742] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  446.103874][ T7742] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  446.114003][ T7742] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  446.123624][ T7742] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  446.133186][ T7742] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  446.138405][ T4318] rc_core: IR keymap rc-dib0700-rc5 not found
[  446.142820][ T7742] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  446.159976][ T4318] Registered IR keymap rc-empty
[  446.163312][ T7742] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  446.165669][ T4318] dvb-usb: could not initialize remote control.
[  446.181566][ T7742] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  446.187338][ T4318] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  446.198440][ T7742] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  446.217465][ T4318] usb 6-1: USB disconnect, device number 3
[  446.234944][   T26] kauditd_printk_skb: 56 callbacks suppressed
[  446.234960][   T26] audit: type=1800 audit(1747294166.492:118): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.723" name="file2" dev="loop3" ino=1048601 res=0 errno=0
[  446.345519][ T7742] syz.3.723 (7742) used greatest stack depth: 19344 bytes left
[  446.351593][ T4318] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  447.888904][ T7775] loop3: detected capacity change from 0 to 1024
[  447.928385][ T6731] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  447.994011][ T7775] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  448.121494][ T6731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  448.166159][ T6731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  448.261586][ T7787] Invalid ELF header magic: != ELF
[  448.310937][ T6731] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  448.330228][ T6731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.344109][ T6731] usb 2-1: config 0 descriptor??
[  448.361993][ T4261] EXT4-fs (loop3): unmounting filesystem.
[  448.943302][ T6731] cm6533_jd 0003:0D8C:0022.0005: No inputs registered, leaving
[  449.000496][ T6731] cm6533_jd 0003:0D8C:0022.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  449.153886][ T6731] usb 2-1: USB disconnect, device number 4
[  450.115629][ T7830] overlayfs: maximum fs stacking depth exceeded
[  450.481307][ T7837] netlink: 452 bytes leftover after parsing attributes in process `syz.5.749'.
[  451.455139][ T7845] Invalid ELF header magic: != ELF
[  452.169109][ T7861] syz.3.757 uses obsolete (PF_INET,SOCK_PACKET)
[  453.719830][ T7892] netlink: 452 bytes leftover after parsing attributes in process `syz.3.763'.
[  453.985196][ T7890] Invalid ELF header magic: != ELF
[  454.896234][ T7913] loop5: detected capacity change from 0 to 1024
[  454.930753][ T7913] EXT4-fs: Ignoring removed orlov option
[  454.966495][ T7913] EXT4-fs: Ignoring removed nomblk_io_submit option
[  454.997203][ T7913] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  455.054521][ T7913] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002]
[  455.105774][ T7913] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  455.342899][ T5847] EXT4-fs (loop5): unmounting filesystem.
[  456.349199][ T7938] Invalid ELF header magic: != ELF
[  456.529996][ T7949] device bridge0 entered promiscuous mode
[  456.623185][ T7949] device macvlan2 entered promiscuous mode
[  456.721927][ T7949] bridge0: port 3(macvlan2) entered blocking state
[  456.766641][ T7949] bridge0: port 3(macvlan2) entered disabled state
[  456.797035][ T7949] device bridge0 left promiscuous mode
[  458.532529][ T7981] netlink: 452 bytes leftover after parsing attributes in process `syz.0.787'.
[  459.008124][    C0] hrtimer: interrupt took 71537 ns
[  459.461205][ T7997] Invalid ELF header magic: != ELF
[  459.547766][ T4954] kernel read not supported for file /dsp (pid: 4954 comm: kworker/1:8)
[  460.527310][ T8016] netlink: 'syz.2.798': attribute type 10 has an invalid length.
[  460.574918][ T8016] netlink: 40 bytes leftover after parsing attributes in process `syz.2.798'.
[  460.727849][ T8016] team0: Port device geneve0 added
[  460.901571][ T8024] netlink: 172 bytes leftover after parsing attributes in process `syz.5.800'.
[  461.775456][ T8036] netlink: 452 bytes leftover after parsing attributes in process `syz.1.803'.
[  462.612688][ T8051] Invalid ELF header magic: != ELF
[  463.451454][ T8066] device macvlan1 entered promiscuous mode
[  463.480955][ T8066] device ipvlan0 entered promiscuous mode
[  463.487989][ T8066] device ipvlan0 left promiscuous mode
[  463.500060][ T8066] device macvlan1 left promiscuous mode
[  465.621534][ T4954] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  465.668466][ T4954] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  467.539551][ T8126] loop5: detected capacity change from 0 to 1024
[  467.636116][ T8126] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  467.771456][ T8142] EXT4-fs error (device loop5): __ext4_remount:6611: comm syz.5.829: Abort forced by user
[  467.796164][ T8142] EXT4-fs (loop5): Remounting filesystem read-only
[  467.807295][ T8142] EXT4-fs (loop5): re-mounted. Quota mode: none.
[  467.974307][ T8144] netlink: 452 bytes leftover after parsing attributes in process `syz.1.834'.
[  468.740815][ T5847] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  468.784069][ T5847] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  468.949303][ T7357] EXT4-fs (loop5): unmounting filesystem.
[  469.238221][ T4306] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  470.128302][ T4306] usb 4-1: Using ep0 maxpacket: 8
[  470.135547][ T4306] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  470.179948][ T4306] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  470.213924][ T4306] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  470.413287][ T4306] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  470.427374][ T4306] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  470.436600][ T4306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.453250][   T75] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.580568][   T75] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.691324][ T4306] usb 4-1: GET_CAPABILITIES returned 0
[  470.696874][ T4306] usbtmc 4-1:16.0: can't read capabilities
[  470.717870][   T75] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.855424][   T75] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.919368][ T4318] usb 4-1: USB disconnect, device number 5
[  471.272036][ T8184] netlink: 452 bytes leftover after parsing attributes in process `syz.2.849'.
[  471.301589][   T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  471.325374][   T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  471.334869][   T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  471.357173][   T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  471.364963][   T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  471.381867][   T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  471.544579][ T8185] lo speed is unknown, defaulting to 1000
[  471.790425][ T8195] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  471.844734][ T8195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  472.634817][   T75] bridge0: port 3(gretap0) entered disabled state
[  473.157659][   T75] device gretap0 left promiscuous mode
[  473.385682][   T75] bridge0: port 3(gretap0) entered disabled state
[  473.468474][   T47] Bluetooth: hci1: command 0x0409 tx timeout
[  473.552750][ T8185] chnl_net:caif_netlink_parms(): no params data found
[  473.711319][ T8185] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.718691][ T8185] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.726959][ T8185] device bridge_slave_0 entered promiscuous mode
[  474.028391][ T8185] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.041220][ T8185] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.093111][ T8185] device bridge_slave_1 entered promiscuous mode
[  474.629001][ T8185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  474.654353][ T8185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  474.889904][ T8185] team0: Port device team_slave_0 added
[  474.911280][ T8185] team0: Port device team_slave_1 added
[  474.978662][   T75] device hsr_slave_0 left promiscuous mode
[  474.998562][   T75] device hsr_slave_1 left promiscuous mode
[  475.027512][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  475.049890][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  475.071791][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  475.081535][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  475.090006][   T75] device bridge_slave_1 left promiscuous mode
[  475.096352][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.114487][   T75] device bridge_slave_0 left promiscuous mode
[  475.135637][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.199167][   T75] device veth1_macvtap left promiscuous mode
[  475.205260][   T75] device veth0_macvtap left promiscuous mode
[  475.218343][   T75] device veth1_vlan left promiscuous mode
[  475.224218][   T75] device veth0_vlan left promiscuous mode
[  475.548490][   T47] Bluetooth: hci1: command 0x041b tx timeout
[  476.093563][   T75] team0 (unregistering): Port device team_slave_1 removed
[  476.146143][ T8265] netlink: 452 bytes leftover after parsing attributes in process `syz.2.870'.
[  476.188377][   T75] team0 (unregistering): Port device team_slave_0 removed
[  476.294901][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  476.377304][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  477.353609][   T75] bond0 (unregistering): Released all slaves
[  477.497661][ T8254] netlink: 24 bytes leftover after parsing attributes in process `syz.0.867'.
[  477.618504][ T8185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  477.627648][ T8185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  477.658831][   T47] Bluetooth: hci1: command 0x040f tx timeout
[  477.686959][ T8185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  477.756450][ T8185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  477.773393][ T8185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  477.929637][ T8185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  478.529840][ T8185] device hsr_slave_0 entered promiscuous mode
[  478.772548][ T8185] device hsr_slave_1 entered promiscuous mode
[  478.796321][ T8185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  478.856225][ T8185] Cannot create hsr debugfs directory
[  479.566950][ T8185] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  479.597950][ T8185] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  479.636923][ T8185] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  479.696308][ T8185] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  479.708584][   T47] Bluetooth: hci1: command 0x0419 tx timeout
[  479.984528][ T8185] 8021q: adding VLAN 0 to HW filter on device bond0
[  480.052940][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  480.061565][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  480.095781][ T8185] 8021q: adding VLAN 0 to HW filter on device team0
[  480.121296][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  480.151337][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  480.182328][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.189512][ T4316] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.217744][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  480.254312][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  480.264917][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  480.289174][ T4316] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.296596][ T4316] bridge0: port 2(bridge_slave_1) entered forwarding state
[  480.349401][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  480.362227][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  480.368078][ T8326] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  480.389080][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  480.410020][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  480.437466][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  480.450260][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  480.459859][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  480.484777][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  480.494685][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  480.521445][ T8185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  480.562378][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  480.591871][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  480.602149][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  481.271867][ T8343] Invalid ELF header magic: != ELF
[  482.022912][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  482.038000][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  482.077871][ T8185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  483.988594][ T4967] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  484.014433][ T4967] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  484.063392][ T8398] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  484.136728][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  484.169145][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  484.233904][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  484.269270][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  484.289923][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  484.309104][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  484.321083][ T8185] device veth0_vlan entered promiscuous mode
[  484.473162][ T8402] Invalid ELF header magic: != ELF
[  485.085827][ T8185] device veth1_vlan entered promiscuous mode
[  485.154710][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  485.168917][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  485.678938][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  485.700154][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  485.726834][ T8185] device veth0_macvtap entered promiscuous mode
[  485.767273][ T8185] device veth1_macvtap entered promiscuous mode
[  485.846007][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.867959][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.885908][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.913329][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.930905][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.970206][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.998348][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  486.009022][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.021047][ T8185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  486.072566][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  486.197193][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  486.362210][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  486.486991][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  486.808862][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.832076][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.852185][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.929529][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.960031][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.984228][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.001521][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  487.024358][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.037484][ T8185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  487.049540][ T8185] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  487.058700][ T8185] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  487.067547][ T8185] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  487.088898][ T8185] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  487.105680][ T8418] lo speed is unknown, defaulting to 1000
[  487.191725][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  487.205479][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  488.056633][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  488.081681][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  488.116310][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  488.137641][ T5046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  488.153238][ T5046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  488.179460][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  488.282207][ T8454] loop3: detected capacity change from 0 to 1024
[  488.304382][ T8454] EXT4-fs: Ignoring removed orlov option
[  488.357418][ T8454] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  488.394015][ T8462] netlink: 'syz.0.922': attribute type 1 has an invalid length.
[  488.424274][ T8454] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[  488.444282][ T8462] device bond1 entered promiscuous mode
[  488.472067][ T8465] bond1: (slave erspan1): making interface the new active one
[  488.479350][ T8454] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[  488.479746][ T8465] device erspan1 entered promiscuous mode
[  488.496212][ T8465] bond1: (slave erspan1): Enslaving as an active interface with an up link
[  488.666080][ T4261] EXT4-fs (loop3): unmounting filesystem.
[  491.573372][ T8524] Invalid ELF header magic: != ELF
[  491.829665][   T47] Bluetooth: Unexpected continuation frame (len 10)
[  492.732863][ T8545] fuse: root generation should be zero
[  493.086302][ T8554] 8021q: adding VLAN 0 to HW filter on device bond1
[  493.125890][ T8554] bridge0: port 3(bond1) entered blocking state
[  493.146860][ T8554] bridge0: port 3(bond1) entered disabled state
[  493.311203][ T8554] device bond1 entered promiscuous mode
[  493.318975][ T8554] bridge0: port 3(bond1) entered blocking state
[  493.326080][ T8554] bridge0: port 3(bond1) entered forwarding state
[  493.877824][ T5046] bridge0: port 3(bond1) entered disabled state
[  494.633698][ T4967] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  494.818217][ T4967] usb 7-1: Using ep0 maxpacket: 32
[  494.836030][ T4967] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  494.854129][ T8589] loop3: detected capacity change from 0 to 32768
[  494.860588][ T4967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.875893][ T4967] usb 7-1: config 0 descriptor??
[  494.885368][ T8589] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.966 (8589)
[  494.888018][ T4967] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  494.915956][ T8589] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  494.948331][ T8589] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  494.957111][ T8589] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  494.966642][ T8589] BTRFS info (device loop3): force zstd compression, level 3
[  494.974184][ T8589] BTRFS info (device loop3): max_inline at 0
[  494.980483][ T8589] BTRFS info (device loop3): enabling disk space caching
[  494.987559][ T8589] BTRFS info (device loop3): setting nodatasum
[  494.993850][ T8589] BTRFS info (device loop3): turning off barriers
[  495.002469][ T8589] BTRFS info (device loop3): turning on flush-on-commit
[  495.014018][ T8589] BTRFS info (device loop3): enabling ssd optimizations
[  495.028354][ T8589] BTRFS info (device loop3): using spread ssd allocation scheme
[  495.039132][ T8589] BTRFS info (device loop3): use zstd compression, level 3
[  495.046435][ T8589] BTRFS info (device loop3): force clearing of disk cache
[  495.071263][ T8589] BTRFS info (device loop3): max_inline at 4096
[  495.077615][ T8589] BTRFS info (device loop3): disk space caching is enabled
[  495.295437][ T8589] BTRFS info (device loop3): rebuilding free space tree
[  495.334741][ T8589] BTRFS info (device loop3): disabling free space tree
[  495.357858][ T8589] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  495.390731][ T8589] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  496.027141][ T4261] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  496.315974][ T4967] gspca_vc032x: reg_w err -71
[  496.321078][ T4967] gspca_vc032x: I2c Bus Busy Wait 00
[  496.326527][ T4967] gspca_vc032x: I2c Bus Busy Wait 00
[  496.333851][ T4967] gspca_vc032x: I2c Bus Busy Wait 00
[  496.339418][ T4967] gspca_vc032x: I2c Bus Busy Wait 00
[  496.344834][ T4967] gspca_vc032x: I2c Bus Busy Wait 00
[  496.351594][ T4967] gspca_vc032x: I2c Bus Busy Wait 00
[  496.357020][ T4967] gspca_vc032x: I2c Bus Busy Wait 00
[  496.363283][ T4967] gspca_vc032x: I2c Bus Busy Wait 00
[  496.369535][ T4967] gspca_vc032x: I2c Bus Busy Wait 00
[  496.374935][ T4967] gspca_vc032x: I2c Bus Busy Wait 00
[  496.380477][ T4967] gspca_vc032x: I2c Bus Busy Wait 00
[  496.385960][ T4967] gspca_vc032x: I2c Bus Busy Wait 00
[  496.391464][ T4967] gspca_vc032x: I2c Bus Busy Wait 00
[  496.396945][ T4967] gspca_vc032x: I2c Bus Busy Wait 00
[  496.402504][ T4967] gspca_vc032x: I2c Bus Busy Wait 00
[  496.408112][ T4967] gspca_vc032x: I2c Bus Busy Wait 00
[  496.413542][ T4967] gspca_vc032x: I2c Bus Busy Wait 00
[  496.420485][ T4967] gspca_vc032x: I2c Bus Busy Wait 00
[  496.426016][ T4967] gspca_vc032x: Unknown sensor...
[  496.433013][ T4967] vc032x: probe of 7-1:0.0 failed with error -22
[  496.453966][ T4967] usb 7-1: USB disconnect, device number 2
[  497.478018][ T8639] netlink: 'syz.3.974': attribute type 10 has an invalid length.
[  497.514794][ T8639] device syz_tun entered promiscuous mode
[  497.603152][ T8639] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  499.048805][ T8657] overlayfs: failed to resolve './file0': -2
[  499.720208][ T8670] syz.1.986[8670] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  499.720322][ T8670] syz.1.986[8670] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  499.763719][ T8670] netlink: 'syz.1.986': attribute type 10 has an invalid length.
[  499.832140][ T8670] team0: Device ipvlan1 failed to register rx_handler
[  501.470489][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  501.477001][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  502.208722][ T8686] loop6: detected capacity change from 0 to 32768
[  503.480664][ T8713] program syz.3.1002 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  504.555348][ T8734] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1009'.
[  505.082915][ T8743] netlink: 'syz.6.1013': attribute type 12 has an invalid length.
[  505.096583][ T8743] netlink: 'syz.6.1013': attribute type 29 has an invalid length.
[  505.104854][ T8743] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1013'.
[  505.121323][ T8743] netlink: 'syz.6.1013': attribute type 1 has an invalid length.
[  505.131653][ T8743] netlink: 'syz.6.1013': attribute type 2 has an invalid length.
[  505.146132][ T8743] netlink: 39 bytes leftover after parsing attributes in process `syz.6.1013'.
[  505.409248][ T8750] loop6: detected capacity change from 0 to 512
[  505.427029][ T8750] EXT4-fs: Ignoring removed mblk_io_submit option
[  505.536446][ T8750] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  506.681385][ T8185] EXT4-fs (loop6): unmounting filesystem.
[  506.833495][ T4967] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  507.042903][ T4967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  507.066238][ T4967] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  507.092497][ T4967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.117813][ T4967] usb 3-1: config 0 descriptor??
[  507.342073][ T4967] usbhid 3-1:0.0: can't add hid device: -71
[  507.349594][ T4967] usbhid: probe of 3-1:0.0 failed with error -71
[  507.377792][ T4967] usb 3-1: USB disconnect, device number 6
[  507.603193][ T8773] loop3: detected capacity change from 0 to 32768
[  507.625992][ T8773] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1024 (8773)
[  507.674173][ T8773] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  507.694827][ T8773] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  507.726225][ T8773] BTRFS info (device loop3): using free space tree
[  507.904390][ T8773] BTRFS info (device loop3): enabling ssd optimizations
[  507.958342][ T4967] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  508.150902][ T4967] usb 3-1: Using ep0 maxpacket: 32
[  508.167362][ T4967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  508.193176][ T8806] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  508.224528][ T4967] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  508.238342][ T4967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.269656][ T4261] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  508.279314][ T4967] usb 3-1: config 0 descriptor??
[  508.291349][ T4967] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  508.329303][ T4967] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  509.964809][ T8820] loop3: detected capacity change from 0 to 4096
[  509.973191][ T8820] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  509.990753][ T4303] usb 3-1: USB disconnect, device number 7
[  510.001153][ T4303] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  510.057676][ T8820] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  511.010565][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.190365][ T8843] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.197551][ T8843] bridge0: port 1(bridge_slave_0) entered forwarding state
[  511.258836][ T8845] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1040'.
[  511.384004][ T8831] loop6: detected capacity change from 0 to 32768
[  511.484005][ T8831] XFS (loop6): Mounting V5 Filesystem
[  511.607058][ T8831] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  511.783328][ T8831] XFS (loop6): Starting recovery (logdev: internal)
[  512.778561][ T8831] XFS (loop6): Ending recovery (logdev: internal)
[  512.843994][ T8874] kvm [8873]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x310
[  512.911389][   T26] audit: type=1800 audit(1747294233.180:119): pid=8831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1037" name="file2" dev="loop6" ino=4423 res=0 errno=0
[  513.465948][ T8185] XFS (loop6): Unmounting Filesystem
[  514.881086][ T8909] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1054'.
[  516.229615][ T8923] loop3: detected capacity change from 0 to 32768
[  516.318805][ T8923] XFS (loop3): Mounting V5 Filesystem
[  516.554536][ T8923] XFS (loop3): Ending clean mount
[  516.596316][ T8923] XFS (loop3): Quotacheck needed: Please wait.
[  516.697331][ T8923] XFS (loop3): Quotacheck: Done.
[  517.049772][ T4261] XFS (loop3): Unmounting Filesystem
[  517.416168][ T8965] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.427901][ T2185] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  517.604882][ T8965] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.632168][ T2185] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  517.654976][ T2185] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  517.683555][ T2185] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  517.700574][ T2185] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  517.746141][ T2185] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  517.766738][ T2185] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  517.776996][ T2185] usb 3-1: Manufacturer: syz
[  517.789824][ T2185] usb 3-1: config 0 descriptor??
[  517.859740][ T8965] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.997983][ T8965] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.120579][ T8965] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  518.137323][ T8965] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  518.161749][ T8965] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  518.186224][ T8965] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  518.222902][ T2185] appleir 0003:05AC:8243.0008: unknown main item tag 0x0
[  518.239895][ T2185] appleir 0003:05AC:8243.0008: No inputs registered, leaving
[  518.263659][ T2185] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  519.608901][ T8962] raw-gadget.0 gadget.2: fail, usb_ep_queue returned -108
[  519.692571][ T2185] usb 3-1: reset high-speed USB device number 8 using dummy_hcd
[  519.708369][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[  520.215765][ T9006] block device autoloading is deprecated and will be removed.
[  520.543992][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1083'.
[  520.563744][ T9012] device vcan0 entered promiscuous mode
[  521.553033][ T6579] usb 3-1: USB disconnect, device number 8
[  521.607742][ T9024] syz.1.1085 sent an empty control message without MSG_MORE.
[  521.621940][ T9007] loop3: detected capacity change from 0 to 40427
[  521.640330][ T9007] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff
[  521.678320][ T9007] F2FS-fs (loop3): invalid crc value
[  521.848515][ T9007] F2FS-fs (loop3): Found nat_bits in checkpoint
[  522.118738][ T9007] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  522.688288][   T26] audit: type=1800 audit(1747294242.917:120): pid=9007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1082" name="file1" dev="loop3" ino=10 res=0 errno=0
[  522.810525][   T26] audit: type=1800 audit(1747294243.057:121): pid=9007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1082" name="file1" dev="loop3" ino=10 res=0 errno=0
[  522.821870][ T9007] syz.3.1082: attempt to access beyond end of device
[  522.821870][ T9007] loop3: rw=2049, sector=45096, nr_sectors = 88 limit=40427
[  522.921244][ T9051] loop6: detected capacity change from 0 to 256
[  522.944514][ T9007] syz.3.1082: attempt to access beyond end of device
[  522.944514][ T9007] loop3: rw=2049, sector=77824, nr_sectors = 8 limit=40427
[  522.997423][ T9051] FAT-fs (loop6): Directory bread(block 64) failed
[  523.004212][ T9051] FAT-fs (loop6): Directory bread(block 65) failed
[  523.016098][ T9051] FAT-fs (loop6): Directory bread(block 66) failed
[  523.022902][ T9051] FAT-fs (loop6): Directory bread(block 67) failed
[  523.035156][ T9051] FAT-fs (loop6): Directory bread(block 68) failed
[  523.042708][ T9051] FAT-fs (loop6): Directory bread(block 69) failed
[  523.060593][ T9051] FAT-fs (loop6): Directory bread(block 70) failed
[  523.067180][ T9051] FAT-fs (loop6): Directory bread(block 71) failed
[  523.095115][ T9051] FAT-fs (loop6): Directory bread(block 72) failed
[  523.114944][ T9051] FAT-fs (loop6): Directory bread(block 73) failed
[  523.131004][ T4261] syz-executor: attempt to access beyond end of device
[  523.131004][ T4261] loop3: rw=2049, sector=45184, nr_sectors = 16 limit=40427
[  526.451499][ T9095] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.648111][ T9095] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.905835][ T9095] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.138393][ T9095] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.421073][ T9099] loop6: detected capacity change from 0 to 32768
[  527.491934][ T9099] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1107 (9099)
[  527.539481][ T9099] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  527.549870][ T9099] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  527.569716][ T9099] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  527.579600][ T9099] BTRFS info (device loop6): force zstd compression, level 3
[  527.587810][ T9099] BTRFS info (device loop6): max_inline at 0
[  527.595674][ T9099] BTRFS info (device loop6): enabling disk space caching
[  527.602924][ T9099] BTRFS info (device loop6): setting nodatasum
[  527.610677][ T9099] BTRFS info (device loop6): turning off barriers
[  527.617430][ T9099] BTRFS info (device loop6): turning on flush-on-commit
[  527.624570][ T9099] BTRFS info (device loop6): enabling ssd optimizations
[  527.631702][ T9099] BTRFS info (device loop6): using spread ssd allocation scheme
[  527.644910][ T9099] BTRFS info (device loop6): use zstd compression, level 3
[  527.658399][ T9099] BTRFS info (device loop6): force clearing of disk cache
[  527.668303][ T9099] BTRFS info (device loop6): max_inline at 4096
[  527.674677][ T9099] BTRFS info (device loop6): disk space caching is enabled
[  527.722667][ T9095] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  527.746211][ T9095] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  527.774218][ T9095] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  527.806736][ T9095] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  528.540244][ T9099] BTRFS info (device loop6): rebuilding free space tree
[  528.609655][ T9099] BTRFS info (device loop6): disabling free space tree
[  528.624473][ T9099] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  528.668202][ T9099] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  529.305485][ T8185] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  529.313807][ T9151] loop3: detected capacity change from 0 to 2048
[  529.345009][ T9151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  530.251753][ T8222] bond0: (slave syz_tun): Releasing backup interface
[  530.295090][ T9159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1121'.
[  530.409077][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1121'.
[  530.660342][ T4349] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.484171][ T4349] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.587853][ T4349] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.131799][ T4349] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.827059][ T4273] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  532.841063][ T4273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  532.849977][ T4273] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  532.860123][ T4273] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  532.867746][ T4273] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  532.878139][ T4273] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  533.003981][ T9195] lo speed is unknown, defaulting to 1000
[  533.184530][ T4349] tipc: Disabling bearer <udp:syz2>
[  533.239080][ T4349] tipc: Left network mode
[  533.410528][ T9187] loop6: detected capacity change from 0 to 32768
[  533.444996][ T9187] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop6 scanned by syz.6.1129 (9187)
[  533.478599][ T9187] BTRFS info (device loop6): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  533.513244][ T9187] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  533.542557][ T9195] chnl_net:caif_netlink_parms(): no params data found
[  533.548654][ T9187] BTRFS info (device loop6): using free space tree
[  533.715974][ T9224] device syzkaller0 entered promiscuous mode
[  533.842897][ T9187] BTRFS info (device loop6): enabling ssd optimizations
[  534.148248][ T9195] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.256158][ T9195] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.427963][ T9195] device bridge_slave_0 entered promiscuous mode
[  534.831235][ T8185] BTRFS info (device loop6): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  534.904807][ T9195] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.922814][ T4273] Bluetooth: hci3: command 0x0409 tx timeout
[  534.948885][ T9195] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.961750][ T9195] device bridge_slave_1 entered promiscuous mode
[  536.051908][ T9195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  536.095997][ T9195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  536.288705][ T9261] loop6: detected capacity change from 0 to 1024
[  536.296138][ T9261] EXT4-fs: Ignoring removed nomblk_io_submit option
[  536.395488][ T9195] team0: Port device team_slave_0 added
[  536.413457][ T9258] device syzkaller1 entered promiscuous mode
[  536.424723][ T9195] team0: Port device team_slave_1 added
[  536.431635][ T9261] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  536.585208][ T9195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  536.605945][ T9195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.673659][ T9195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  536.692347][ T8185] EXT4-fs (loop6): unmounting filesystem.
[  536.746534][ T9195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  536.759991][ T9195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.795024][ T9195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  536.889042][ T9195] device hsr_slave_0 entered promiscuous mode
[  536.896096][ T9195] device hsr_slave_1 entered promiscuous mode
[  536.909120][ T9195] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  536.920437][ T9195] Cannot create hsr debugfs directory
[  536.994599][ T4273] Bluetooth: hci3: command 0x041b tx timeout
[  538.266797][ T4349] device hsr_slave_0 left promiscuous mode
[  538.275737][ T4349] device hsr_slave_1 left promiscuous mode
[  538.288342][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  538.295960][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_0
[  538.333363][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  538.383557][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.110637][ T4273] Bluetooth: hci3: command 0x040f tx timeout
[  539.162175][ T4349] device bridge_slave_1 left promiscuous mode
[  539.653435][ T4349] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.850964][ T4349] device bridge_slave_0 left promiscuous mode
[  539.857373][ T4349] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.963879][ T4349] device veth1_macvtap left promiscuous mode
[  539.972560][ T4349] device veth0_macvtap left promiscuous mode
[  539.979032][ T4349] device veth1_vlan left promiscuous mode
[  539.986559][ T4349] device veth0_vlan left promiscuous mode
[  540.873936][ T4349] team0 (unregistering): Port device team_slave_1 removed
[  540.934922][ T4349] team0 (unregistering): Port device team_slave_0 removed
[  540.996813][ T4349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  541.005836][ T4349] device bond_slave_1 left promiscuous mode
[  541.061410][ T4349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  541.070993][ T4349] device bond_slave_0 left promiscuous mode
[  541.158270][ T4273] Bluetooth: hci3: command 0x0419 tx timeout
[  541.729219][ T4349] bond0 (unregistering): Released all slaves
[  542.050456][ T9195] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  542.070867][ T9195] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  542.182064][ T9195] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  542.456754][ T9195] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  542.965623][ T9195] 8021q: adding VLAN 0 to HW filter on device bond0
[  543.021923][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  543.039211][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  543.051796][ T9195] 8021q: adding VLAN 0 to HW filter on device team0
[  543.064181][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  543.065281][ T9339] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  543.074508][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  543.093757][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.100956][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  543.188753][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  543.209544][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  543.240466][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  543.259031][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.266231][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  543.278444][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  543.309306][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  543.420440][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  543.590949][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  543.832830][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  543.997880][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  544.094029][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  544.144498][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  544.189480][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  544.212343][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  544.227583][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  544.247930][ T9195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  544.440939][ T9361] device syzkaller0 entered promiscuous mode
[  544.454797][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1174'.
[  544.709256][   T14] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  544.905018][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  544.920866][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  544.938635][   T14] usb 7-1: config 0 has no interfaces?
[  544.949631][   T14] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  544.953375][ T9195] 8021q: adding VLAN 0 to HW filter on device batadv0
[  544.972838][   T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  544.993667][   T14] usb 7-1: SerialNumber: syz
[  545.009528][   T14] usb 7-1: config 0 descriptor??
[  545.246556][   T14] usb 7-1: USB disconnect, device number 3
[  545.347211][ T9379] capability: warning: `syz.1.1177' uses deprecated v2 capabilities in a way that may be insecure
[  545.412477][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  545.423764][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  545.483836][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  545.497796][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  545.518534][ T9195] device veth0_vlan entered promiscuous mode
[  545.527141][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  545.541279][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  545.561937][ T9195] device veth1_vlan entered promiscuous mode
[  545.602938][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  545.623287][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  545.635542][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  545.648653][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  545.673339][ T9195] device veth0_macvtap entered promiscuous mode
[  545.693232][ T9195] device veth1_macvtap entered promiscuous mode
[  545.744851][ T9195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.765688][ T9195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.804790][ T9195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.816446][ T9195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.827118][ T9195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.843302][ T9195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.853775][ T9195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.865638][ T9195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.893606][ T9195] batman_adv: batadv0: Interface activated: batadv_slave_0
[  545.913502][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  545.930457][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  545.940004][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  546.049363][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  546.327839][ T9393] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1182'.
[  547.026133][ T9195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.061457][ T9195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.107550][ T9195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.151640][ T9195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.194088][ T9195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.225059][ T9195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.270327][ T9195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.296997][ T9195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.330896][ T9195] batman_adv: batadv0: Interface activated: batadv_slave_1
[  547.350611][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  547.364221][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  547.397887][ T9195] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  547.418335][ T9195] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  547.427434][ T9195] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  547.468212][ T9195] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  547.774439][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.825351][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.196223][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  548.439975][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.474927][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.566385][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  551.418561][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1200'.
[  551.553535][ T9455] device veth3 entered promiscuous mode
[  551.591348][ T9455] bridge1: port 1(veth3) entered blocking state
[  551.608238][ T9455] bridge1: port 1(veth3) entered disabled state
[  552.572533][   T22] kernel read not supported for file bpf-prog (pid: 22 comm: kworker/1:0)
[  554.438387][ T9491] loop7: detected capacity change from 0 to 512
[  554.526620][ T9491] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  554.541862][ T9491] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  555.429352][ T9195] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[  555.594929][ T9195] EXT4-fs (loop7): unmounting filesystem.
[  555.603435][ T9195] EXT4-fs error (device loop7): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1750779511 in block_group 0
[  555.793609][ T9195] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5914: Corrupt filesystem
[  555.969119][ T9195] EXT4-fs error (device loop7): ext4_quota_off:7108: inode #3: comm syz-executor: mark_inode_dirty error
[  556.139064][ T9195] EXT4-fs error (device loop7): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1750779511 in block_group 0
[  556.312357][ T9195] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5914: Corrupt filesystem
[  556.389916][ T9195] EXT4-fs error (device loop7): ext4_quota_off:7108: inode #4: comm syz-executor: mark_inode_dirty error
[  556.679955][ T9520] tipc: Started in network mode
[  556.685273][ T9520] tipc: Node identity 8ad0ac2287bd, cluster identity 4711
[  556.726336][ T9520] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  556.750031][ T9525] syzkaller0: MTU too low for tipc bearer
[  556.755903][ T9525] tipc: Disabling bearer <eth:syzkaller0>
[  557.358936][ T4380] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.479555][ T4380] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.635714][ T4380] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.884654][ T9548] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1228'.
[  557.887857][ T4380] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.851592][   T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  558.878060][   T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  558.887042][   T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  558.901655][   T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  558.909468][   T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  558.916803][   T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  559.106380][ T4303] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  559.354664][ T4303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  559.366629][ T4303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  559.376783][ T4303] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  559.974970][ T4303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.078380][ T4303] usb 3-1: config 0 descriptor??
[  560.102757][ T9556] lo speed is unknown, defaulting to 1000
[  560.503265][ T4303] elan 0003:04F3:0755.0009: failed to start in urb: -90
[  560.525144][ T4303] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[  560.719148][ T4303] usb 3-1: USB disconnect, device number 9
[  560.821667][ T9556] chnl_net:caif_netlink_parms(): no params data found
[  560.988789][   T47] Bluetooth: hci3: command 0x0409 tx timeout
[  561.205489][ T9556] bridge0: port 1(bridge_slave_0) entered blocking state
[  561.237048][ T9556] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.294209][ T9556] device bridge_slave_0 entered promiscuous mode
[  561.344893][ T9594] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1242'.
[  561.407652][ T9556] bridge0: port 2(bridge_slave_1) entered blocking state
[  561.415105][ T9556] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.425621][ T9556] device bridge_slave_1 entered promiscuous mode
[  561.438354][ T4303] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  561.594789][ T9556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  561.607715][ T9556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  561.642090][ T4303] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  561.656502][ T4303] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  561.682458][ T4303] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  561.697562][ T4303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.713258][ T4303] usb 2-1: Product: syz
[  561.717731][ T4303] usb 2-1: Manufacturer: syz
[  561.723698][ T4303] usb 2-1: SerialNumber: syz
[  561.830210][ T9603] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  561.883401][ T6720] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  561.947910][ T4303] usb 2-1: 0:2 : does not exist
[  561.983114][ T4303] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  562.001918][ T9556] team0: Port device team_slave_0 added
[  562.083008][ T6720] usb 3-1: config 0 has an invalid interface number: 138 but max is 0
[  562.097623][ T9556] team0: Port device team_slave_1 added
[  562.103409][ T6720] usb 3-1: config 0 has no interface number 0
[  562.113401][ T4303] usb 2-1: USB disconnect, device number 5
[  562.119948][ T6720] usb 3-1: config 0 interface 138 altsetting 0 has an invalid endpoint with address 0x61, skipping
[  562.132320][ T6720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=c8.66
[  562.142901][ T6720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.176357][ T6720] usb 3-1: config 0 descriptor??
[  562.328871][ T9556] batman_adv: batadv0: Adding interface: batadv_slave_0
[  562.335905][ T9556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  562.392558][ T9556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  562.404727][ T6720] usb 3-1: string descriptor 0 read error: -71
[  562.406016][ T9556] batman_adv: batadv0: Adding interface: batadv_slave_1
[  562.417932][ T9556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  562.423034][ T6720] usbtest 3-1:0.138: Linux gadget zero
[  562.444670][ T9556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  562.771614][ T6720] usbtest 3-1:0.138: full-speed {control in/out iso-out} tests (+alt)
[  562.928767][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  562.936134][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  563.071642][ T6720] usb 3-1: USB disconnect, device number 10
[  563.118547][ T4273] Bluetooth: hci3: command 0x041b tx timeout
[  563.181649][ T4380] device hsr_slave_0 left promiscuous mode
[  563.218459][ T4380] device hsr_slave_1 left promiscuous mode
[  563.240374][ T4380] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  563.247865][ T4380] batman_adv: batadv0: Removing interface: batadv_slave_0
[  563.269252][ T4380] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  563.296207][ T4380] batman_adv: batadv0: Removing interface: batadv_slave_1
[  563.319248][ T4380] device bridge_slave_1 left promiscuous mode
[  563.327407][ T4380] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.349711][ T4380] device bridge_slave_0 left promiscuous mode
[  563.366356][ T4380] bridge0: port 1(bridge_slave_0) entered disabled state
[  563.444081][ T4380] device veth1_macvtap left promiscuous mode
[  563.458161][ T4380] device veth0_macvtap left promiscuous mode
[  563.464608][ T4380] device veth1_vlan left promiscuous mode
[  563.486045][ T4380] device veth0_vlan left promiscuous mode
[  565.148097][ T4273] Bluetooth: hci3: command 0x040f tx timeout
[  566.819534][ T4380] team0 (unregistering): Port device team_slave_1 removed
[  566.933282][ T4380] team0 (unregistering): Port device team_slave_0 removed
[  567.017345][ T4380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  567.110745][ T4380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  567.242161][ T4273] Bluetooth: hci3: command 0x0419 tx timeout
[  568.366671][ T9691] loop6: detected capacity change from 0 to 8
[  569.278825][ T4380] bond0 (unregistering): Released all slaves
[  569.512400][ T9556] device hsr_slave_0 entered promiscuous mode
[  569.559671][ T9556] device hsr_slave_1 entered promiscuous mode
[  569.566520][ T9556] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  569.588269][ T9556] Cannot create hsr debugfs directory
[  674.627981][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  674.634989][    C1] rcu: 	0-...!: (0 ticks this GP) idle=bd14/1/0x4000000000000000 softirq=33833/33833 fqs=0
[  674.646975][    C1] 	(detected by 1, t=10502 jiffies, g=46269, q=106 ncpus=2)
[  674.654291][    C1] Sending NMI from CPU 1 to CPUs 0:
[  674.659520][    C0] NMI backtrace for cpu 0
[  674.659533][    C0] CPU: 0 PID: 9556 Comm: syz-executor Not tainted 6.1.138-syzkaller #0
[  674.659551][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  674.659562][    C0] RIP: 0010:kasan_check_range+0xd/0x290
[  674.659596][    C0] Code: c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 a4 01 00 00 41 57 <41> 56 53 49 89 f8 49 01 f0 0f 82 57 02 00 00 49 89 f8 49 c1 e8 2f
[  674.659622][    C0] RSP: 0018:ffffc90000007b30 EFLAGS: 00000002
[  674.659637][    C0] RAX: 00000000ffffff01 RBX: ffffffff96be4758 RCX: ffffffff81642a2e
[  674.659650][    C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff96be4758
[  674.659661][    C0] RBP: ffffc90000007bf0 R08: dffffc0000000000 R09: fffffbfff2117049
[  674.659674][    C0] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: ffffffff96be4768
[  674.659686][    C0] R13: ffffffff96be4760 R14: 1ffffffff2d7c8ed R15: 1ffffffff2d7c8ec
[  674.659699][    C0] FS:  000055557b7b1500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  674.659715][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  674.659727][    C0] CR2: 00007f59cbce56c0 CR3: 00000000780c1000 CR4: 00000000003506f0
[  674.659742][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001000
[  674.659752][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  674.659763][    C0] Call Trace:
[  674.659770][    C0]  <IRQ>
[  674.659780][    C0]  do_raw_spin_lock+0x10e/0x280
[  674.659809][    C0]  ? __rwlock_init+0x140/0x140
[  674.659840][    C0]  _raw_spin_lock_irqsave+0xb0/0xf0
[  674.659865][    C0]  ? _raw_spin_lock+0x40/0x40
[  674.659888][    C0]  ? advance_sched+0x6cc/0x970
[  674.659912][    C0]  debug_object_deactivate+0x63/0x340
[  674.659938][    C0]  debug_deactivate+0x29/0x240
[  674.659957][    C0]  __hrtimer_run_queues+0x2d0/0xc80
[  674.659979][    C0]  ? taprio_free_sched_cb+0x190/0x190
[  674.660006][    C0]  ? hrtimer_interrupt+0x8d0/0x8d0
[  674.660023][    C0]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  674.660048][    C0]  hrtimer_interrupt+0x3bb/0x8d0
[  674.660078][    C0]  __sysvec_apic_timer_interrupt+0x153/0x5a0
[  674.660104][    C0]  sysvec_apic_timer_interrupt+0x9b/0xc0
[  674.660132][    C0]  </IRQ>
[  674.660136][    C0]  <TASK>
[  674.660142][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  674.660158][    C0] RIP: 0010:kasan_quarantine_put+0x84/0x220
[  674.660183][    C0] Code: e8 21 e0 b4 ff 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 83 00 00 00 41 f7 c7 00 02 00 00 74 01 fb 31 c0 <48> 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f c3 48 8d 80 40 66 03 00 45
[  674.660197][    C0] RSP: 0018:ffffc90003236c70 EFLAGS: 00000206
[  674.660211][    C0] RAX: 193e7c9d46b1e201 RBX: ffff88801c681600 RCX: 193e7c9d46b1e200
[  674.660224][    C0] RDX: dffffc0000000000 RSI: ffffffff8a6bfe00 RDI: ffffffff8abf0da0
[  674.660237][    C0] RBP: ffff88801c681600 R08: dffffc0000000000 R09: fffffbfff211704a
[  674.660250][    C0] R10: fffffbfff211704a R11: 1ffffffff2117049 R12: 0000000000000000
[  674.660262][    C0] R13: ffffc90003236d08 R14: 00000000000ad688 R15: 0000000000000286
[  674.660285][    C0]  slab_free_freelist_hook+0x131/0x1a0
[  674.660309][    C0]  ? kobject_uevent_env+0x355/0x8a0
[  674.660326][    C0]  __kmem_cache_free+0xb6/0x1f0
[  674.660348][    C0]  kobject_uevent_env+0x355/0x8a0
[  674.660370][    C0]  netdev_queue_update_kobjects+0x23f/0x480
[  674.660398][    C0]  netdev_register_kobject+0x265/0x310
[  674.660424][    C0]  register_netdevice+0x12b9/0x1aa0
[  674.660454][    C0]  ? netif_stacked_transfer_operstate+0x200/0x200
[  674.660484][    C0]  ? netif_inherit_tso_max+0x15c/0x250
[  674.660502][    C0]  veth_newlink+0x592/0xbe0
[  674.660523][    C0]  ? rtnl_newlink+0x13ca/0x1ff0
[  674.660549][    C0]  ? veth_validate+0x1f0/0x1f0
[  674.660598][    C0]  ? validate_linkmsg+0x3db/0x4c0
[  674.660624][    C0]  ? veth_validate+0x1f0/0x1f0
[  674.660645][    C0]  rtnl_newlink+0x14c4/0x1ff0
[  674.660674][    C0]  ? rtnl_newlink+0x501/0x1ff0
[  674.660703][    C0]  ? rtnl_setlink+0x450/0x450
[  674.660725][    C0]  ? trace_raw_output_contention_end+0xd0/0xd0
[  674.660756][    C0]  ? rcu_read_unlock+0x8c/0xa0
[  674.660787][    C0]  ? rtnl_setlink+0x450/0x450
[  674.660809][    C0]  ? rtnetlink_rcv_msg+0x1d8/0xed0
[  674.660833][    C0]  rtnetlink_rcv_msg+0x79b/0xed0
[  674.660863][    C0]  ? rtnetlink_bind+0x80/0x80
[  674.660885][    C0]  ? mark_lock+0x94/0x320
[  674.660909][    C0]  ? __lock_acquire+0x12e5/0x7c50
[  674.660944][    C0]  ? netlink_sendmsg+0x645/0xbc0
[  674.660969][    C0]  ? verify_lock_unused+0x140/0x140
[  674.661007][    C0]  netlink_rcv_skb+0x1de/0x420
[  674.661032][    C0]  ? rtnetlink_bind+0x80/0x80
[  674.661056][    C0]  ? netlink_ack+0x1100/0x1100
[  674.661085][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  674.661111][    C0]  netlink_unicast+0x74c/0x8c0
[  674.661140][    C0]  netlink_sendmsg+0x89e/0xbc0
[  674.661174][    C0]  ? netlink_getsockopt+0x540/0x540
[  674.661200][    C0]  ? aa_sock_msg_perm+0x94/0x150
[  674.661218][    C0]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  674.661236][    C0]  ? security_socket_sendmsg+0x7c/0xa0
[  674.661264][    C0]  __sys_sendto+0x44f/0x5c0
[  674.661290][    C0]  ? __ia32_sys_getpeername+0x80/0x80
[  674.661326][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  674.661349][    C0]  ? lock_chain_count+0x20/0x20
[  674.661374][    C0]  __x64_sys_sendto+0xda/0xf0
[  674.661398][    C0]  do_syscall_64+0x4c/0xa0
[  674.661419][    C0]  ? clear_bhb_loop+0x45/0xa0
[  674.661434][    C0]  ? clear_bhb_loop+0x45/0xa0
[  674.661451][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  674.661476][    C0] RIP: 0033:0x7f114fd907fc
[  674.661500][    C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  674.661513][    C0] RSP: 002b:00007ffe075e7390 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  674.661529][    C0] RAX: ffffffffffffffda RBX: 00007f1150ae4620 RCX: 00007f114fd907fc
[  674.661541][    C0] RDX: 000000000000006c RSI: 00007f1150ae4670 RDI: 0000000000000003
[  674.661552][    C0] RBP: 0000000000000000 R08: 00007ffe075e73e4 R09: 000000000000000c
[  674.661562][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  674.661572][    C0] R13: 0000000000000000 R14: 00007f1150ae4670 R15: 0000000000000000
[  674.661591][    C0]  </TASK>
[  674.662513][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g46269 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  675.277069][    C1] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=26132
[  675.284978][    C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g46269 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  675.296367][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  675.306348][    C1] rcu: RCU grace-period kthread stack dump:
[  675.312244][    C1] task:rcu_preempt     state:I stack:26912 pid:16    ppid:2      flags:0x00004000
[  675.321477][    C1] Call Trace:
[  675.324770][    C1]  <TASK>
[  675.327734][    C1]  __schedule+0x10e9/0x40d0
[  675.332298][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  675.337554][    C1]  ? _raw_spin_unlock+0x40/0x40
[  675.342446][    C1]  ? release_firmware_map_entry+0x18a/0x18a
[  675.348375][    C1]  schedule+0xb9/0x180
[  675.352467][    C1]  schedule_timeout+0x15c/0x280
[  675.357346][    C1]  ? console_conditional_schedule+0x40/0x40
[  675.363263][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  675.369267][    C1]  ? update_process_times+0x1b0/0x1b0
[  675.374676][    C1]  ? prepare_to_swait_event+0x335/0x350
[  675.380253][    C1]  rcu_gp_fqs_loop+0x2f2/0x1310
[  675.385133][    C1]  ? rcu_gp_kthread+0x380/0x380
[  675.390005][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  675.396013][    C1]  ? rcu_gp_init+0x14b0/0x14b0
[  675.400794][    C1]  ? rcu_gp_cleanup+0xb4c/0xca0
[  675.405668][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  675.410899][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  675.416133][    C1]  rcu_gp_kthread+0x95/0x380
[  675.420744][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  675.425878][    C1]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  675.431804][    C1]  ? __kthread_parkme+0x162/0x1c0
[  675.436863][    C1]  kthread+0x29d/0x330
[  675.440963][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  675.446088][    C1]  ? kthread_blkcg+0xd0/0xd0
[  675.450705][    C1]  ret_from_fork+0x1f/0x30
[  675.455170][    C1]  </TASK>
[  675.458202][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  675.464532][    C1] Sending NMI from CPU 1 to CPUs 0:
[  675.469754][    C0] NMI backtrace for cpu 0
[  675.469763][    C0] CPU: 0 PID: 9556 Comm: syz-executor Not tainted 6.1.138-syzkaller #0
[  675.469781][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  675.469790][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x90/0x100
[  675.469818][    C0] Code: 75 08 e8 f3 1b 4a f7 4c 89 f7 e8 4b e1 4a f7 f7 c3 00 02 00 00 74 05 e8 ae e3 6d f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 <f6> 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e8
[  675.469833][    C0] RSP: 0018:ffffc90000007c80 EFLAGS: 00000046
[  675.469848][    C0] RAX: 0000000000000001 RBX: 0000000000000806 RCX: 0000000000000000
[  675.469859][    C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880b8e2a580
[  675.469870][    C0] RBP: ffffc90000007d10 R08: dffffc0000000000 R09: ffffed10171c54b1
[  675.469884][    C0] R10: ffffed10171c54b1 R11: 1ffff110171c54b0 R12: dffffc0000000000
[  675.469897][    C0] R13: dffffc0000000000 R14: ffff8880b8e2a580 R15: 1ffff92000000f90
[  675.469910][    C0] FS:  000055557b7b1500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  675.469925][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  675.469937][    C0] CR2: 00007f59cbce56c0 CR3: 00000000780c1000 CR4: 00000000003506f0
[  675.469952][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001000
[  675.469962][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  675.469973][    C0] Call Trace:
[  675.469979][    C0]  <IRQ>
[  675.469987][    C0]  ? _raw_spin_unlock+0x40/0x40
[  675.470013][    C0]  ? timerqueue_del+0xaa/0x100
[  675.470040][    C0]  __hrtimer_run_queues+0x41b/0xc80
[  675.470062][    C0]  ? taprio_free_sched_cb+0x190/0x190
[  675.470089][    C0]  ? hrtimer_interrupt+0x8d0/0x8d0
[  675.470106][    C0]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  675.470137][    C0]  hrtimer_interrupt+0x3bb/0x8d0
[  675.470167][    C0]  __sysvec_apic_timer_interrupt+0x153/0x5a0
[  675.470193][    C0]  sysvec_apic_timer_interrupt+0x9b/0xc0
[  675.470220][    C0]  </IRQ>
[  675.470224][    C0]  <TASK>
[  675.470230][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  675.470247][    C0] RIP: 0010:kasan_quarantine_put+0x84/0x220
[  675.470268][    C0] Code: e8 21 e0 b4 ff 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 83 00 00 00 41 f7 c7 00 02 00 00 74 01 fb 31 c0 <48> 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f c3 48 8d 80 40 66 03 00 45
[  675.470281][    C0] RSP: 0018:ffffc90003236c70 EFLAGS: 00000206
[  675.470295][    C0] RAX: 193e7c9d46b1e201 RBX: ffff88801c681600 RCX: 193e7c9d46b1e200
[  675.470307][    C0] RDX: dffffc0000000000 RSI: ffffffff8a6bfe00 RDI: ffffffff8abf0da0
[  675.470320][    C0] RBP: ffff88801c681600 R08: dffffc0000000000 R09: fffffbfff211704a
[  675.470333][    C0] R10: fffffbfff211704a R11: 1ffffffff2117049 R12: 0000000000000000
[  675.470344][    C0] R13: ffffc90003236d08 R14: 00000000000ad688 R15: 0000000000000286
[  675.470368][    C0]  slab_free_freelist_hook+0x131/0x1a0
[  675.470392][    C0]  ? kobject_uevent_env+0x355/0x8a0
[  675.470408][    C0]  __kmem_cache_free+0xb6/0x1f0
[  675.470431][    C0]  kobject_uevent_env+0x355/0x8a0
[  675.470452][    C0]  netdev_queue_update_kobjects+0x23f/0x480
[  675.470480][    C0]  netdev_register_kobject+0x265/0x310
[  675.470505][    C0]  register_netdevice+0x12b9/0x1aa0
[  675.470534][    C0]  ? netif_stacked_transfer_operstate+0x200/0x200
[  675.470564][    C0]  ? netif_inherit_tso_max+0x15c/0x250
[  675.470582][    C0]  veth_newlink+0x592/0xbe0
[  675.470603][    C0]  ? rtnl_newlink+0x13ca/0x1ff0
[  675.470629][    C0]  ? veth_validate+0x1f0/0x1f0
[  675.470678][    C0]  ? validate_linkmsg+0x3db/0x4c0
[  675.470704][    C0]  ? veth_validate+0x1f0/0x1f0
[  675.470725][    C0]  rtnl_newlink+0x14c4/0x1ff0
[  675.470754][    C0]  ? rtnl_newlink+0x501/0x1ff0
[  675.470783][    C0]  ? rtnl_setlink+0x450/0x450
[  675.470805][    C0]  ? trace_raw_output_contention_end+0xd0/0xd0
[  675.470837][    C0]  ? rcu_read_unlock+0x8c/0xa0
[  675.470867][    C0]  ? rtnl_setlink+0x450/0x450
[  675.470891][    C0]  ? rtnetlink_rcv_msg+0x1d8/0xed0
[  675.470914][    C0]  rtnetlink_rcv_msg+0x79b/0xed0
[  675.470944][    C0]  ? rtnetlink_bind+0x80/0x80
[  675.470967][    C0]  ? mark_lock+0x94/0x320
[  675.470989][    C0]  ? __lock_acquire+0x12e5/0x7c50
[  675.471023][    C0]  ? netlink_sendmsg+0x645/0xbc0
[  675.471048][    C0]  ? verify_lock_unused+0x140/0x140
[  675.471087][    C0]  netlink_rcv_skb+0x1de/0x420
[  675.471110][    C0]  ? rtnetlink_bind+0x80/0x80
[  675.471140][    C0]  ? netlink_ack+0x1100/0x1100
[  675.471169][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  675.471196][    C0]  netlink_unicast+0x74c/0x8c0
[  675.471224][    C0]  netlink_sendmsg+0x89e/0xbc0
[  675.471253][    C0]  ? netlink_getsockopt+0x540/0x540
[  675.471279][    C0]  ? aa_sock_msg_perm+0x94/0x150
[  675.471297][    C0]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  675.471316][    C0]  ? security_socket_sendmsg+0x7c/0xa0
[  675.471344][    C0]  __sys_sendto+0x44f/0x5c0
[  675.471370][    C0]  ? __ia32_sys_getpeername+0x80/0x80
[  675.471406][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  675.471430][    C0]  ? lock_chain_count+0x20/0x20
[  675.471454][    C0]  __x64_sys_sendto+0xda/0xf0
[  675.471479][    C0]  do_syscall_64+0x4c/0xa0
[  675.471499][    C0]  ? clear_bhb_loop+0x45/0xa0
[  675.471514][    C0]  ? clear_bhb_loop+0x45/0xa0
[  675.471530][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  675.471555][    C0] RIP: 0033:0x7f114fd907fc
[  675.471569][    C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  675.471583][    C0] RSP: 002b:00007ffe075e7390 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  675.471599][    C0] RAX: ffffffffffffffda RBX: 00007f1150ae4620 RCX: 00007f114fd907fc
[  675.471611][    C0] RDX: 000000000000006c RSI: 00007f1150ae4670 RDI: 0000000000000003
[  675.471621][    C0] RBP: 0000000000000000 R08: 00007ffe075e73e4 R09: 000000000000000c
[  675.471631][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  675.471641][    C0] R13: 0000000000000000 R14: 00007f1150ae4670 R15: 0000000000000000
[  675.471660][    C0]  </TASK>