last executing test programs:

8m44.673085105s ago: executing program 0 (id=65):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x10000000000000)

8m43.68692714s ago: executing program 0 (id=68):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e44000720"], 0x6a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
prlimit64(r0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')

8m43.155484534s ago: executing program 0 (id=72):
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000010000000000080000000000000", @ANYRES32], 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189)
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

8m42.205873715s ago: executing program 0 (id=75):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x2, 0x4b1, &(0x7f0000001d00)="$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")
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @private0}, 0x1c, 0x0, 0x0, 0x0, 0x100}, 0x20000000)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4001, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b)
syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0})
getdents(r2, &(0x7f0000000100)=""/97, 0x61)

8m41.213379187s ago: executing program 0 (id=82):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)

8m39.829778319s ago: executing program 0 (id=87):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x6e2cbbdc3b304684, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0x1e}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

8m38.573235548s ago: executing program 32 (id=87):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x6e2cbbdc3b304684, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0x1e}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

8m15.319916261s ago: executing program 6 (id=89):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./bus\x00', 0x141842, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000640), 0x3, 0x42f, &(0x7f0000000200)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0x81, 0x10000000000000)

8m13.419861922s ago: executing program 6 (id=185):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0)
creat(&(0x7f00000002c0)='./file1\x00', 0x24)

8m12.098132194s ago: executing program 6 (id=193):
keyctl$chown(0x4, 0x0, 0xee00, 0x0)
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f00000001c0)=ANY=[], 0x4, 0x20c, &(0x7f0000000880)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket(0x1, 0x803, 0x0)
bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)

8m9.782360679s ago: executing program 33 (id=193):
keyctl$chown(0x4, 0x0, 0xee00, 0x0)
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f00000001c0)=ANY=[], 0x4, 0x20c, &(0x7f0000000880)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket(0x1, 0x803, 0x0)
bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)

7m49.669460127s ago: executing program 4 (id=246):
r0 = socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x4000000)

7m48.754768957s ago: executing program 4 (id=248):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001a40)={0x44, &(0x7f0000000080)={0x20, 0x5, 0x1, 'E'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000580)={0x40, 0x6, 0x2, "93bc"}, 0x0, 0x0, 0x0, 0x0, 0x0})
mknodat(0xffffffffffffffff, 0x0, 0x8000, 0x3)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "af5de0b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

7m44.851708847s ago: executing program 4 (id=262):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TCSETS2(r1, 0x402c542b, 0x0)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000))
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)

7m42.670902223s ago: executing program 4 (id=268):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80700a, 0x0)
getpid()
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

7m41.614003541s ago: executing program 4 (id=269):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r2 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811)

7m39.382021516s ago: executing program 4 (id=275):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1048c, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./bus\x00', 0x400)
link(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00')
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x20064, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))
stat(&(0x7f0000000280)='./bus\x00', &(0x7f00000004c0))

7m39.046903986s ago: executing program 34 (id=275):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1048c, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./bus\x00', 0x400)
link(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00')
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x20064, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))
stat(&(0x7f0000000280)='./bus\x00', &(0x7f00000004c0))

4m40.720316046s ago: executing program 2 (id=547):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0)
mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)

4m39.073180582s ago: executing program 2 (id=548):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002)

4m25.715099855s ago: executing program 2 (id=563):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)={0x1, 0x0, [{0x0, 0xf3, &(0x7f0000000500)=""/243}]})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x100000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)

4m20.690953386s ago: executing program 1 (id=555):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000300)=0x3)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x989680}, 0x1, 0x4})
io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0)

4m20.494221974s ago: executing program 2 (id=557):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
read$FUSE(r0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x10010, r0, 0x8000000)
r1 = socket(0x28, 0x5, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6(0xa, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)

4m18.285927911s ago: executing program 1 (id=560):
r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0xa, 0x14f, &(0x7f0000000500), 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
ioperm(0x3, 0x4, 0x1000009)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r2 = socket$packet(0x11, 0x3, 0x300)
close(r2)

4m18.168889974s ago: executing program 2 (id=561):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x5586, &(0x7f00000079c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r3, &(0x7f0000000180), 0x40041)

4m16.95179932s ago: executing program 1 (id=567):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

4m15.442157672s ago: executing program 1 (id=570):
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0x7ffff024}, {0x6, 0x0, 0x10}]}, 0x10)

4m13.546643969s ago: executing program 2 (id=572):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xa8, 0xc8, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x20000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x0, 0x1, 0x3, 0x2}})

4m12.252451058s ago: executing program 1 (id=573):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)
sendfile(r4, r3, 0x0, 0xffffffff)

4m8.880807164s ago: executing program 1 (id=578):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(r0, r1, 0x0)

3m56.73105824s ago: executing program 35 (id=572):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xa8, 0xc8, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x20000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x0, 0x1, 0x3, 0x2}})

3m53.310176004s ago: executing program 36 (id=578):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(r0, r1, 0x0)

26.30108053s ago: executing program 8 (id=831):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851000103"])

23.963103115s ago: executing program 8 (id=834):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_init_net_socket$ax25(0x3, 0x5, 0xf0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r3)
sched_setscheduler(0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)

18.049283663s ago: executing program 5 (id=841):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
socket$xdp(0x2c, 0x3, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x9, 0x466, 0xffffffffffffffff}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00000c7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x6, 0x4, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2})

16.437983899s ago: executing program 5 (id=842):
r0 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1081801, &(0x7f0000000680)=ANY=[], 0x0, 0x1f8, &(0x7f0000000400)="$eJxiGAWjYBSMWPDo4dcHvU4WIToMDAw8DCoM7FDxF8wQ+j8/qvo7M0u1p9q6ztl0e+mRPL7aXejmMYL0/CfefjYGBoYDjswMJQyMLFAbUXSrQCgmJDZDKAMTgyaUHc7AyKAHYf75DwYQTioDI0MkVE0WEjufE8rISdVLzs9JScvMSTUAEYYgwghEGCPbD3LU20ZGhhQGBgYOsOv+/2dEki+urMpOzMlJLUJnsP6H2YMhRSoDX/iB3efIxGDLAAu9//9BgRXR0dwI4kPDhsGAgQkefoYMTAyGHBC2MQMjQzBU3IKBnUFPTw8RJEj+l2JBmM9MjP8HlrEKzBDUpZelkATKwDAY/I6f8S9qVvwgcAZ5DNYqPmi6o8QcRnQRRmQDxd7CykBkNU8H3O/kMxigeR1D6hJXTo4vBSazYQkoOANRPoFKdnWk8omFgQVefuiX5BboF1dW6WbmJqanpqfmGRkZmxmYGBiYGumDCyIIiaf84wCXT1xI5rPiUMvGyMZQkVhSUmRYwcBQUmQI5xtBSKQSN3hb/huwHiZw+cfEoKEMMYMRWmfBK0o0wAjFTGAaxNJgxq6yAaefRsEoGAWjYBSMglEwCkbBKBgFo2AUjIJRMApGwSgYBaMAO5BnYGSAzIT9Z4QOiGIDRgHgEUpAAAAA///Q52Q/")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x8010, r3, 0x114f0000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40c8, &(0x7f0000000200), 0xfb, 0x496, &(0x7f0000000f40)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000640), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000600)=ANY=[@ANYRESDEC=r0], 0x1, 0x68d, &(0x7f0000001a00)="$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")

14.768972317s ago: executing program 3 (id=843):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f0000000080)=0x5, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000700)={0x0, 0x3132564e, 0x2})
r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

14.31920028s ago: executing program 7 (id=844):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
bind$inet6(r3, 0x0, 0x0)
listen(r4, 0x4000000)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

13.368450792s ago: executing program 3 (id=845):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]})
close_range(r0, 0xffffffffffffffff, 0x0)

11.373915633s ago: executing program 7 (id=846):
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, [<r6=>0x0], [0x0, 0x7], [0x0, 0x0, 0x2], [0x0, 0x0, 0x1, 0x1]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, <r7=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7})
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0)

11.348918989s ago: executing program 3 (id=847):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c404}, 0x40810)
r1 = socket$unix(0x1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500080000000800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, &(0x7f0000000040))
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20008000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
fcntl$notify(0xffffffffffffffff, 0x402, 0x2)
unshare(0x2040600)
r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000004c0), 0x1, 0x4e1, &(0x7f0000001400)="$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")
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000440)={0x0, 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}], 0x2, 0x0, &(0x7f00000006c0)=[{}, {}], 0x1, 0x0, &(0x7f00000003c0)=[{}], 0x4, 0x0, &(0x7f0000000600)=[{}, {}, {}, {}]})

11.054486042s ago: executing program 5 (id=848):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r3, 0x0, 0x0, 0x24040890)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b55385"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$netlink(r0, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x30)

9.305691283s ago: executing program 7 (id=849):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040))
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r5, 0x0, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

9.301160839s ago: executing program 8 (id=850):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000180), 0x1, 0x3f0, &(0x7f00000008c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
ioctl$LOOP_CLR_FD(r1, 0x4c01)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r5, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080))

6.997538279s ago: executing program 7 (id=851):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0)
syz_pidfd_open(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x41, 0x0, "d86adaa9ce82e10f6177fa999685c43d5042ddd6740fb249181d73dab87ea2fa8ee95f3f70c56ff9ef31c4fc281a67440ff0e38e6ba0997b1028741368abc8cd7c8d9d9ae736ede0eb4ff476a0469d17"}, 0xd8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8971, &(0x7f0000000040)={'netdevsim0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0xffffffff}})
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {}, {0x0, 0xc}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
mknodat$loop(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0)
linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0)

6.961550348s ago: executing program 5 (id=852):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet(0x2, 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x30b}, 0x14}}, 0x40000)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x24000014)
setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x1c)
socket$netlink(0x10, 0x3, 0x0)
r6 = dup(r0)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000480)='mm_page_alloc\x00', r7}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)

6.87901328s ago: executing program 3 (id=853):
io_setup(0x4, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x8}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
dup2(r2, r0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000980)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r4})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000002780)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x3, r3, 0x5})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24004014})

5.59743512s ago: executing program 8 (id=854):
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0x3, &(0x7f0000000140)={0x4, 0x10008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000600)=ANY=[], 0xde, 0xc2d, &(0x7f0000002d80)="$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")
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x3, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x400000, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
open(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)

3.660694446s ago: executing program 5 (id=855):
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
chdir(0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000040605000000000000000001000000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80)

3.645803234s ago: executing program 7 (id=856):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0x3)
r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000)
keyctl$read(0xb, r3, &(0x7f00000010c0)=""/4096, 0x1000)
setuid(0xee00)
open(&(0x7f00000020c0)='./file0\x00', 0x2ca7c2, 0x100)
io_setup(0x2, &(0x7f0000000080))
flock(0xffffffffffffffff, 0x1)
flock(0xffffffffffffffff, 0x1)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)

3.625664331s ago: executing program 8 (id=857):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.571238304s ago: executing program 3 (id=858):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
bind$inet6(r3, 0x0, 0x0)
listen(r4, 0x4000000)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

687.689357ms ago: executing program 7 (id=859):
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0)
r0 = socket(0x840000000002, 0x3, 0xff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00')
read$FUSE(r4, &(0x7f0000002100)={0x2020}, 0x1bdb)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x53b0}, {}, 0x0, 0x9, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x2, 0xb7}}, 0xe8)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94)

683.623862ms ago: executing program 3 (id=860):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, 0x0, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x33, 0x0, 0x0)
listen(r5, 0x2)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r7})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r7, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e})
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

341.799329ms ago: executing program 8 (id=861):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
close(0xffffffffffffffff)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00')
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00')
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")

0s ago: executing program 5 (id=862):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, 0x0, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000280), &(0x7f0000000380)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2)
r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, 0xc})

kernel console output (not intermixed with test programs):

2(bridge_slave_1) entered disabled state
[  191.532689][ T6732] bridge_slave_1: entered allmulticast mode
[  191.586806][ T6732] bridge_slave_1: entered promiscuous mode
[  192.972188][   T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  193.150308][   T24] usb 6-1: Using ep0 maxpacket: 32
[  193.705004][ T6732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.719790][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  193.779485][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  193.859573][   T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  193.868828][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.921749][   T24] usb 6-1: config 0 descriptor??
[  193.927736][ T6993] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  193.958571][ T6732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.961774][   T24] hub 6-1:0.0: USB hub found
[  194.166783][   T24] hub 6-1:0.0: 1 port detected
[  195.493351][   T24] hub 6-1:0.0: hub_hub_status failed (err = -71)
[  195.509222][   T24] hub 6-1:0.0: config failed, can't get hub status (err -71)
[  195.810681][   T24] usbhid 6-1:0.0: can't add hid device: -71
[  195.816730][   T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  195.845597][ T6732] team0: Port device team_slave_0 added
[  195.865633][   T24] usb 6-1: USB disconnect, device number 4
[  196.002726][ T6013] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.079760][ T6013] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  196.153846][ T6732] team0: Port device team_slave_1 added
[  197.069006][ T6013] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.745762][ T6013] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  198.077183][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.405129][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.432490][ T6732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.072523][ T5136] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  199.082129][ T5136] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  199.090406][ T5136] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  199.099288][ T5136] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  199.107991][ T5136] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  199.260358][ T6013] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.312888][ T6013] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  199.510281][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.517286][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.555075][ T6732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.910680][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  199.975846][ T6013] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.993124][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  200.001706][ T6013] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  200.034851][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  200.069560][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  200.092125][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  201.223966][ T5855] Bluetooth: hci2: command tx timeout
[  201.957044][ T7062] loop5: detected capacity change from 0 to 8
[  201.970975][ T7062] unable to read id index table
[  202.434289][ T5855] Bluetooth: hci5: command tx timeout
[  202.931301][ T6732] hsr_slave_0: entered promiscuous mode
[  202.938056][ T6732] hsr_slave_1: entered promiscuous mode
[  202.948189][ T7077] loop2: detected capacity change from 0 to 16
[  202.982269][ T6732] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  203.009929][ T6732] Cannot create hsr debugfs directory
[  203.078190][ T7077] erofs (device loop2): mounted with root inode @ nid 36.
[  203.158076][ T7082] loop1: detected capacity change from 0 to 128
[  203.187492][ T7083] syz.2.289: attempt to access beyond end of device
[  203.187492][ T7083] loop2: rw=0, sector=14546590680, nr_sectors = 16 limit=16
[  203.201852][ T7083] erofs (device loop2): read error -5 @ 43 of nid 36
[  203.272323][ T7084] erofs (device loop2): readahead error at folio 40 @ nid 36
[  203.280121][ T7084] erofs (device loop2): readahead error at folio 39 @ nid 36
[  203.287926][ T7084] erofs (device loop2): readahead error at folio 38 @ nid 36
[  203.295425][ T5855] Bluetooth: hci2: command tx timeout
[  203.301958][ T7084] erofs (device loop2): readahead error at folio 34 @ nid 36
[  203.309628][ T7084] erofs (device loop2): readahead error at folio 32 @ nid 36
[  203.317258][ T7084] erofs (device loop2): readahead error at folio 30 @ nid 36
[  203.326273][ T7084] erofs (device loop2): readahead error at folio 27 @ nid 36
[  203.334052][ T7084] erofs (device loop2): readahead error at folio 26 @ nid 36
[  203.343738][ T7084] erofs (device loop2): readahead error at folio 25 @ nid 36
[  203.351601][ T7084] erofs (device loop2): readahead error at folio 24 @ nid 36
[  203.359010][ T7084] erofs (device loop2): readahead error at folio 23 @ nid 36
[  203.363041][ T7082] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  203.366625][ T7084] erofs (device loop2): readahead error at folio 22 @ nid 36
[  203.387184][ T7084] erofs (device loop2): readahead error at folio 21 @ nid 36
[  203.395745][ T7084] erofs (device loop2): readahead error at folio 20 @ nid 36
[  203.403260][ T7084] erofs (device loop2): readahead error at folio 18 @ nid 36
[  203.411158][ T7084] erofs (device loop2): readahead error at folio 12 @ nid 36
[  203.418627][ T7084] erofs (device loop2): readahead error at folio 10 @ nid 36
[  203.426554][ T7084] erofs (device loop2): readahead error at folio 6 @ nid 36
[  203.433966][ T7084] erofs (device loop2): readahead error at folio 4 @ nid 36
[  203.441653][ T7084] erofs (device loop2): invalid logical cluster 0 at nid 36
[  203.448990][ T7084] erofs (device loop2): readahead error at folio 0 @ nid 36
[  203.457527][ T7084] syz.2.289: attempt to access beyond end of device
[  203.457527][ T7084] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16
[  203.468544][ T7082] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  203.473415][ T7084] syz.2.289: attempt to access beyond end of device
[  203.473415][ T7084] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  203.503489][    C0] vkms_vblank_simulate: vblank timer overrun
[  203.523702][ T7084] syz.2.289: attempt to access beyond end of device
[  203.523702][ T7084] loop2: rw=524288, sector=6520, nr_sectors = 16 limit=16
[  203.537690][ T7084] syz.2.289: attempt to access beyond end of device
[  203.537690][ T7084] loop2: rw=524288, sector=34359736328, nr_sectors = 16 limit=16
[  203.552207][ T7084] syz.2.289: attempt to access beyond end of device
[  203.552207][ T7084] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16
[  203.565995][ T7084] syz.2.289: attempt to access beyond end of device
[  203.565995][ T7084] loop2: rw=524288, sector=536576856, nr_sectors = 16 limit=16
[  203.583707][ T7084] syz.2.289: attempt to access beyond end of device
[  203.583707][ T7084] loop2: rw=524288, sector=13478624032, nr_sectors = 8 limit=16
[  203.598100][ T7084] syz.2.289: attempt to access beyond end of device
[  203.598100][ T7084] loop2: rw=524288, sector=13716630376, nr_sectors = 8 limit=16
[  203.612469][ T7084] syz.2.289: attempt to access beyond end of device
[  203.612469][ T7084] loop2: rw=524288, sector=133693448, nr_sectors = 8 limit=16
[  203.632105][ T7084] erofs (device loop2): readahead error at folio 86 @ nid 36
[  203.639635][ T7084] erofs (device loop2): readahead error at folio 84 @ nid 36
[  203.647360][ T7084] erofs (device loop2): readahead error at folio 80 @ nid 36
[  203.656455][ T7084] erofs (device loop2): readahead error at folio 74 @ nid 36
[  203.663968][ T7084] erofs (device loop2): readahead error at folio 72 @ nid 36
[  203.671685][ T7084] erofs (device loop2): readahead error at folio 70 @ nid 36
[  203.680352][ T7084] erofs (device loop2): bogus lookback distance 1388 @ lcn 62 of nid 36
[  203.689796][ T7084] erofs (device loop2): readahead error at folio 63 @ nid 36
[  203.697314][ T7084] erofs (device loop2): bogus lookback distance 1388 @ lcn 62 of nid 36
[  203.705752][ T7084] erofs (device loop2): readahead error at folio 62 @ nid 36
[  203.713446][ T7084] erofs (device loop2): readahead error at folio 58 @ nid 36
[  203.720922][ T7084] erofs (device loop2): readahead error at folio 57 @ nid 36
[  203.728648][ T7084] erofs (device loop2): readahead error at folio 54 @ nid 36
[  203.736082][ T7084] erofs (device loop2): readahead error at folio 53 @ nid 36
[  203.743527][ T7084] erofs (device loop2): readahead error at folio 52 @ nid 36
[  203.750970][ T7084] erofs (device loop2): readahead error at folio 51 @ nid 36
[  203.758374][ T7084] erofs (device loop2): bogus lookback distance 363 @ lcn 50 of nid 36
[  203.766580][  T970] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  203.774137][ T7084] erofs (device loop2): readahead error at folio 50 @ nid 36
[  203.783814][ T7084] erofs (device loop2): readahead error at folio 47 @ nid 36
[  203.791249][ T7084] erofs (device loop2): readahead error at folio 46 @ nid 36
[  203.824431][  T970] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  203.875868][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  203.887069][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  204.491542][ T5855] Bluetooth: hci5: command tx timeout
[  205.375431][ T5855] Bluetooth: hci2: command tx timeout
[  206.138523][ T6013] bridge_slave_1: left allmulticast mode
[  206.180326][ T6013] bridge_slave_1: left promiscuous mode
[  206.198983][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.228840][ T6013] bridge_slave_0: left allmulticast mode
[  206.265467][ T6013] bridge_slave_0: left promiscuous mode
[  206.284683][ T5837] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  206.295192][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.620368][ T5855] Bluetooth: hci5: command tx timeout
[  207.544203][ T5855] Bluetooth: hci2: command tx timeout
[  207.961039][ T6013] bond1 (unregistering): (slave geneve2): Releasing active interface
[  208.669759][ T5855] Bluetooth: hci5: command tx timeout
[  208.824120][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.848677][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.871847][ T6013] bond0 (unregistering): Released all slaves
[  209.043675][ T6013] bond1 (unregistering): Released all slaves
[  209.544791][ T7040] chnl_net:caif_netlink_parms(): no params data found
[  209.837980][ T7048] chnl_net:caif_netlink_parms(): no params data found
[  209.978376][ T6732] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  210.048416][ T6732] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  210.104220][ T6013] hsr_slave_0: left promiscuous mode
[  210.116502][ T6013] hsr_slave_1: left promiscuous mode
[  210.135342][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.147288][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.167112][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.177201][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.207373][ T6013] veth1_macvtap: left promiscuous mode
[  210.213474][ T6013] veth0_macvtap: left promiscuous mode
[  210.222183][ T6013] veth1_vlan: left promiscuous mode
[  210.227745][ T6013] veth0_vlan: left promiscuous mode
[  210.272702][ T6057] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  210.439818][ T6057] usb 3-1: Using ep0 maxpacket: 8
[  210.501855][ T6057] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  210.530660][ T6057] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.539196][ T6057] usb 3-1: Product: syz
[  210.578961][ T6057] usb 3-1: Manufacturer: syz
[  210.586585][ T6057] usb 3-1: SerialNumber: syz
[  210.613860][ T6057] usb 3-1: config 0 descriptor??
[  210.839022][ T6057] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  210.885794][ T7169] loop5: detected capacity change from 0 to 2048
[  210.944704][ T7169] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  212.351453][ T6057] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  212.366197][ T6057] usb 3-1: USB disconnect, device number 6
[  212.709028][ T6013] team0 (unregistering): Port device team_slave_1 removed
[  212.796921][ T6013] team0 (unregistering): Port device team_slave_0 removed
[  212.822917][ T7186] binder: 7185:7186 ioctl c0306201 2000000003c0 returned -14
[  214.143579][ T7198] netlink: 'syz.2.313': attribute type 39 has an invalid length.
[  214.457416][ T6732] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  214.690144][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.726337][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.740800][ T7040] bridge_slave_0: entered allmulticast mode
[  214.759061][ T7040] bridge_slave_0: entered promiscuous mode
[  214.829541][ T6732] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  215.479912][ T7211] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  215.569795][ T7203] orangefs_mount: mount request failed with -4
[  215.816112][ T7040] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.858861][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.866704][ T7040] bridge_slave_1: entered allmulticast mode
[  215.874850][ T7040] bridge_slave_1: entered promiscuous mode
[  221.271545][ T7040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.302098][ T7048] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.309307][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.379654][ T7048] bridge_slave_0: entered allmulticast mode
[  221.512349][ T7048] bridge_slave_0: entered promiscuous mode
[  221.855249][ T7048] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.870326][ T7048] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.898747][ T7048] bridge_slave_1: entered allmulticast mode
[  221.926575][ T7048] bridge_slave_1: entered promiscuous mode
[  222.197395][ T7040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.333095][ T7221] syzkaller0: entered promiscuous mode
[  222.338636][ T7221] syzkaller0: entered allmulticast mode
[  222.381019][ T7241] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  222.416938][ T7048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.615984][ T7040] team0: Port device team_slave_0 added
[  222.667903][ T7048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.718746][ T7040] team0: Port device team_slave_1 added
[  222.768503][ T6013] IPVS: stop unused estimator thread 0...
[  222.969535][ T6057] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  223.074807][ T7048] team0: Port device team_slave_0 added
[  223.132219][ T6057] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  223.142622][ T6057] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  223.169184][ T6057] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.198936][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.212119][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.241915][ T7040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.284569][ T7048] team0: Port device team_slave_1 added
[  223.287228][ T6057] usb 6-1: config 0 descriptor??
[  223.308845][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.326410][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.328544][ T6057] pwc: Askey VC010 type 2 USB webcam detected.
[  223.377555][ T7040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.758475][ T6057] pwc: recv_control_msg error -32 req 02 val 2b00
[  223.786489][ T6057] pwc: recv_control_msg error -32 req 02 val 2700
[  223.801397][ T7266] netlink: 'syz.2.326': attribute type 1 has an invalid length.
[  223.812867][ T7048] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.814112][ T6057] pwc: recv_control_msg error -32 req 02 val 2c00
[  223.826628][ T7048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.855250][ T6057] pwc: recv_control_msg error -32 req 04 val 1000
[  223.860365][ T7048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.877214][ T6057] pwc: recv_control_msg error -32 req 04 val 1300
[  223.892978][ T6057] pwc: recv_control_msg error -32 req 04 val 1400
[  223.910083][ T6057] pwc: recv_control_msg error -32 req 02 val 2000
[  223.922686][ T6057] pwc: recv_control_msg error -32 req 02 val 2100
[  223.935310][ T6057] pwc: recv_control_msg error -32 req 04 val 1500
[  224.163055][ T7267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.326'.
[  224.415015][ T6057] pwc: recv_control_msg error -71 req 02 val 2400
[  224.453185][ T6057] pwc: recv_control_msg error -71 req 02 val 2600
[  224.498097][ T6057] pwc: recv_control_msg error -71 req 02 val 2900
[  224.550070][ T6057] pwc: recv_control_msg error -71 req 02 val 2800
[  224.588955][ T6057] pwc: recv_control_msg error -71 req 04 val 1100
[  224.645043][ T6057] pwc: recv_control_msg error -71 req 04 val 1200
[  224.681032][ T6057] pwc: Registered as video103.
[  224.688535][ T6057] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7
[  224.735632][ T6013] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.808669][ T6057] usb 6-1: USB disconnect, device number 5
[  224.849653][ T7048] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.902145][ T7048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.991373][ T7048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.010964][ T7274] binder_alloc: 7273: binder_alloc_buf, no vma
[  225.026908][ T7267] 8021q: adding VLAN 0 to HW filter on device bond1
[  225.221733][ T6013] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.297823][ T7040] hsr_slave_0: entered promiscuous mode
[  225.321037][ T7040] hsr_slave_1: entered promiscuous mode
[  225.335915][ T7040] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  225.345343][ T7040] Cannot create hsr debugfs directory
[  225.540229][ T6013] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.440168][ T6013] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.584195][ T7048] hsr_slave_0: entered promiscuous mode
[  227.607950][ T7048] hsr_slave_1: entered promiscuous mode
[  227.624307][ T7048] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.644527][ T7048] Cannot create hsr debugfs directory
[  229.813317][ T7312] binder_alloc: 7311: binder_alloc_buf, no vma
[  230.040339][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  230.090362][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  230.099112][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  230.109473][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  230.129824][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  231.055205][ T6013] bridge_slave_1: left allmulticast mode
[  231.062418][ T6013] bridge_slave_1: left promiscuous mode
[  231.078477][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.124660][ T6013] bridge_slave_0: left allmulticast mode
[  231.166150][ T6013] bridge_slave_0: left promiscuous mode
[  231.203410][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.568014][   T56] Bluetooth: hci1: command 0x0406 tx timeout
[  231.574512][ T5850] Bluetooth: hci4: command 0x0406 tx timeout
[  231.581721][ T5839] Bluetooth: hci3: command 0x0406 tx timeout
[  232.249575][ T5136] Bluetooth: hci0: command tx timeout
[  232.478982][ T7348] loop2: detected capacity change from 0 to 2048
[  232.548457][ T7348] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  232.658543][ T7353] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  232.905390][ T7350] loop5: detected capacity change from 0 to 8192
[  233.996540][ T7360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.349'.
[  234.332770][ T5136] Bluetooth: hci0: command tx timeout
[  234.500303][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  234.543518][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  234.555672][ T6013] bond0 (unregistering): Released all slaves
[  236.176585][ T7372] loop5: detected capacity change from 0 to 2048
[  236.211072][ T7372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  236.589542][ T5136] Bluetooth: hci0: command tx timeout
[  238.660042][ T5136] Bluetooth: hci0: command tx timeout
[  239.109493][ T6013] hsr_slave_0: left promiscuous mode
[  239.132639][ T6013] hsr_slave_1: left promiscuous mode
[  239.145577][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.177699][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.183102][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.184301][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.219577][ T6013] veth1_macvtap: left promiscuous mode
[  239.303241][ T6013] veth0_macvtap: left promiscuous mode
[  239.309137][ T6013] veth1_vlan: left promiscuous mode
[  241.239718][ T6013] veth0_vlan: left promiscuous mode
[  244.719889][   T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  246.225394][   T24] usb 2-1: unable to read config index 0 descriptor/start: -71
[  246.270406][   T24] usb 2-1: can't read configurations, error -71
[  246.800607][ T5136] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1
[  246.808942][ T5136] Bluetooth: hci4: unexpected event for opcode 0x203e
[  247.892432][ T7451] loop2: detected capacity change from 0 to 1024
[  247.926418][ T7451] EXT4-fs: Ignoring removed orlov option
[  248.364275][ T7451] EXT4-fs (loop2): Test dummy encryption mode enabled
[  248.382146][ T7451] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled
[  250.349049][ T7451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.499300][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.851614][ T7471] loop1: detected capacity change from 0 to 512
[  250.860870][ T7471] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  251.775890][ T7471] EXT4-fs (loop1): 1 truncate cleaned up
[  251.813396][ T7471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.216054][ T6013] team0 (unregistering): Port device team_slave_1 removed
[  252.259594][ T5842] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  252.339120][ T6013] team0 (unregistering): Port device team_slave_0 removed
[  252.403350][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.432437][ T5842] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  252.452833][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.504935][ T5842] usb 6-1: config 0 descriptor??
[  252.542962][ T5842] cp210x 6-1:0.0: cp210x converter detected
[  252.671893][ T7485] loop2: detected capacity change from 0 to 8192
[  252.686060][ T7485] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  252.701275][ T7487] loop1: detected capacity change from 0 to 2048
[  252.758251][ T7487] UDF-fs: warning (device loop1): udf_fill_super: No fileset found
[  252.988693][ T5842] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  253.308791][ T5842] usb 6-1: cp210x converter now attached to ttyUSB0
[  253.476001][ T5842] usb 6-1: USB disconnect, device number 6
[  253.554987][ T5842] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  253.615528][ T5842] cp210x 6-1:0.0: device disconnected
[  254.669373][ T5841] Bluetooth: hci1: command 0x0406 tx timeout
[  259.774936][ T7519] loop1: detected capacity change from 0 to 32768
[  259.785529][ T7519] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.397 (7519)
[  259.808146][ T7519] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  259.818899][ T7519] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  259.827385][ T7519] BTRFS info (device loop1): using free-space-tree
[  261.094264][ T7519] BTRFS info (device loop1): rebuilding free space tree
[  261.131888][ T7519] BTRFS info (device loop1): checking UUID tree
[  261.410586][ T7546] loop2: detected capacity change from 0 to 2048
[  261.551156][ T7519] BTRFS info (device loop1): balance: start -d -m
[  261.572921][ T7519] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata
[  261.595115][ T7546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.698222][ T7519] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata
[  261.816789][ T7519] BTRFS info (device loop1): found 9 extents, stage: move data extents
[  261.845679][ T7546] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  261.948018][ T7519] BTRFS info (device loop1): found 1 extents, stage: update data pointers
[  261.987491][ T7519] BTRFS info (device loop1): balance: ended with status: 0
[  262.052605][ T7546] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28
[  262.105196][ T7546] EXT4-fs (loop2): This should not happen!! Data will be lost
[  262.105196][ T7546] 
[  262.140372][ T7546] EXT4-fs (loop2): Total free blocks count 0
[  262.161452][ T7546] EXT4-fs (loop2): Free/Dirty block details
[  262.179054][ T7546] EXT4-fs (loop2): free_blocks=2415919104
[  262.215481][ T7546] EXT4-fs (loop2): dirty_blocks=48
[  262.244415][ T7546] EXT4-fs (loop2): Block reservation details
[  262.288689][ T7546] EXT4-fs (loop2): i_reserved_data_blocks=3
[  262.470624][ T5837] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  262.624481][ T5136] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  262.633127][ T5136] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  262.647614][ T5136] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  262.663289][ T5136] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  262.678646][ T5136] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  262.898863][ T5136] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  262.910418][ T5136] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  262.919655][ T5136] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  262.931921][ T5136] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  262.941146][ T5136] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  263.923831][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.879530][ T5136] Bluetooth: hci6: command tx timeout
[  265.298844][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  265.305564][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  265.725445][ T5136] Bluetooth: hci7: command tx timeout
[  267.513786][ T5136] Bluetooth: hci6: command tx timeout
[  267.774204][ T5136] Bluetooth: hci7: command tx timeout
[  268.415294][ T7595] loop5: detected capacity change from 0 to 2048
[  268.914006][ T7595] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  269.159587][ T7592] netlink: 'syz.1.399': attribute type 4 has an invalid length.
[  269.489192][ T7319] chnl_net:caif_netlink_parms(): no params data found
[  269.531266][ T5136] Bluetooth: hci6: command tx timeout
[  269.849673][ T5136] Bluetooth: hci7: command tx timeout
[  271.609595][ T5136] Bluetooth: hci6: command tx timeout
[  271.929908][ T5136] Bluetooth: hci7: command tx timeout
[  276.389686][  T973] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  276.800393][  T973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.227566][  T973] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  277.237577][  T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.270977][  T973] usb 6-1: config 0 descriptor??
[  277.550645][  T973] usbhid 6-1:0.0: can't add hid device: -71
[  277.569083][  T973] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  278.086650][ T7680] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96
[  278.106160][  T973] usb 6-1: USB disconnect, device number 7
[  279.449631][ T7319] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.476178][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.495201][ T7319] bridge_slave_0: entered allmulticast mode
[  279.539254][ T7319] bridge_slave_0: entered promiscuous mode
[  279.568247][ T7557] chnl_net:caif_netlink_parms(): no params data found
[  279.580866][ T7691] loop2: detected capacity change from 0 to 256
[  279.608248][ T7691] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  279.621101][ T7562] chnl_net:caif_netlink_parms(): no params data found
[  280.265666][ T7319] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.292656][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.329975][ T7319] bridge_slave_1: entered allmulticast mode
[  280.427543][ T7319] bridge_slave_1: entered promiscuous mode
[  282.242441][ T7707] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  282.970908][ T5136] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  282.980786][ T5136] Bluetooth: hci4: Injecting HCI hardware error event
[  282.991087][ T5841] Bluetooth: hci4: hardware error 0x00
[  283.421833][ T7319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  283.531153][ T7711] sctp: failed to load transform for md5: -2
[  283.705286][ T7319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  284.939097][ T7319] team0: Port device team_slave_0 added
[  285.219643][ T5841] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  285.861999][ T7746] loop5: detected capacity change from 0 to 2048
[  285.932069][ T7752] input: syz0 as /devices/virtual/input/input8
[  285.972311][ T7557] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.979798][ T7557] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.987097][ T7557] bridge_slave_0: entered allmulticast mode
[  285.995331][ T7557] bridge_slave_0: entered promiscuous mode
[  286.025338][ T7557] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.081714][ T7557] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.225726][ T7746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.250391][ T7557] bridge_slave_1: entered allmulticast mode
[  286.282747][ T5833] udevd[5833]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  286.300753][ T7557] bridge_slave_1: entered promiscuous mode
[  286.322254][ T7746] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  286.372743][ T7319] team0: Port device team_slave_1 added
[  286.447102][ T7746] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28
[  286.489874][ T7746] EXT4-fs (loop5): This should not happen!! Data will be lost
[  286.489874][ T7746] 
[  286.536791][ T7746] EXT4-fs (loop5): Total free blocks count 0
[  286.559618][ T7746] EXT4-fs (loop5): Free/Dirty block details
[  286.565589][ T7746] EXT4-fs (loop5): free_blocks=2415919104
[  286.593327][ T7746] EXT4-fs (loop5): dirty_blocks=48
[  286.598485][ T7746] EXT4-fs (loop5): Block reservation details
[  286.759721][ T7746] EXT4-fs (loop5): i_reserved_data_blocks=3
[  288.277922][ T7557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  288.343950][ T7562] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.385450][ T7562] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.398808][ T7562] bridge_slave_0: entered allmulticast mode
[  288.417430][ T7562] bridge_slave_0: entered promiscuous mode
[  288.446705][ T7562] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.465623][ T7562] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.479211][ T7562] bridge_slave_1: entered allmulticast mode
[  288.504107][ T7562] bridge_slave_1: entered promiscuous mode
[  288.649540][  T973] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  289.448598][ T7557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  289.479833][  T973] usb 2-1: Using ep0 maxpacket: 32
[  289.511117][  T973] usb 2-1: config 0 has an invalid interface number: 16 but max is 0
[  289.529642][  T973] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  289.571564][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.660176][  T973] usb 2-1: config 0 has no interface number 0
[  289.667013][  T973] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  289.679603][  T973] usb 2-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  289.698024][  T973] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  289.707851][  T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.729517][  T973] usb 2-1: Product: syz
[  289.733729][  T973] usb 2-1: Manufacturer: syz
[  289.738348][  T973] usb 2-1: SerialNumber: syz
[  289.783451][  T973] usb 2-1: config 0 descriptor??
[  289.789297][ T7777] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  289.844764][  T973] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  289.865433][  T973] usb 2-1: invalid MIDI in EP 0
[  290.647419][ T7557] team0: Port device team_slave_0 added
[  290.648004][  T973] snd-usb-audio 2-1:0.16: probe with driver snd-usb-audio failed with error -22
[  290.696104][  T973] usb 2-1: USB disconnect, device number 11
[  290.746250][ T7557] team0: Port device team_slave_1 added
[  290.793923][ T7788] bridge0: port 3(vlan2) entered blocking state
[  290.800460][ T7788] bridge0: port 3(vlan2) entered disabled state
[  290.808755][ T7788] vlan2: entered allmulticast mode
[  290.832686][ T7788] bond0: entered allmulticast mode
[  290.836914][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  290.849547][ T7788] bond_slave_0: entered allmulticast mode
[  290.862566][ T7788] bond_slave_1: entered allmulticast mode
[  290.900091][ T5136] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  290.926220][ T5136] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  290.935107][ T5136] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  290.954223][ T5136] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  290.960268][ T7788] vlan2: entered promiscuous mode
[  290.966815][ T7788] bond0: entered promiscuous mode
[  290.968057][ T5136] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  291.012080][ T7788] bond_slave_0: entered promiscuous mode
[  291.129365][ T7788] bond_slave_1: entered promiscuous mode
[  291.181980][ T7788] bridge0: port 3(vlan2) entered blocking state
[  291.188867][ T7788] bridge0: port 3(vlan2) entered forwarding state
[  291.267953][ T7562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.050203][ T5136] Bluetooth: hci2: command tx timeout
[  293.299562][ T5136] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1
[  293.307370][ T5136] Bluetooth: hci3: unexpected event for opcode 0x203e
[  293.370612][ T7562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.417085][ T7557] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.436313][ T7557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.269710][ T7557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  294.490181][ T7557] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.497172][ T7557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.546768][ T7815] loop5: detected capacity change from 0 to 2048
[  294.629525][ T7815] UDF-fs: warning (device loop5): udf_fill_super: No fileset found
[  294.852248][ T7557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.839687][ T5136] Bluetooth: hci2: command tx timeout
[  295.979199][ T6013] bridge_slave_1: left allmulticast mode
[  296.066450][ T6013] bridge_slave_1: left promiscuous mode
[  296.189903][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.267759][ T6013] bridge_slave_0: left allmulticast mode
[  296.284375][ T6013] bridge_slave_0: left promiscuous mode
[  296.300564][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.829659][ T6013] bridge_slave_1: left allmulticast mode
[  296.835311][ T7820] loop1: detected capacity change from 0 to 8192
[  296.862270][ T7820] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  296.875184][ T6013] bridge_slave_1: left promiscuous mode
[  296.920425][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.975317][ T6013] bridge_slave_0: left allmulticast mode
[  296.998127][ T6013] bridge_slave_0: left promiscuous mode
[  297.029731][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.149130][ T6013] bridge_slave_1: left allmulticast mode
[  297.361137][ T7836] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  297.488327][ T6013] bridge_slave_1: left promiscuous mode
[  297.494348][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.524647][ T6013] bridge_slave_0: left allmulticast mode
[  297.550086][ T6013] bridge_slave_0: left promiscuous mode
[  298.485041][ T5136] Bluetooth: hci3: command 0x0406 tx timeout
[  298.491150][ T5136] Bluetooth: hci2: command tx timeout
[  298.546311][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.274592][ T5841] Bluetooth: hci2: command tx timeout
[  301.432853][ T7858] loop1: detected capacity change from 0 to 1024
[  301.440739][ T7858] EXT4-fs: Ignoring removed i_version option
[  301.517121][ T7858] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  302.547434][ T7858] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:482: comm syz.1.454: Invalid block bitmap block 0 in block_group 0
[  302.800232][ T7858] Quota error (device loop1): write_blk: dquota write failed
[  302.807946][ T7858] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  302.818755][ T7858] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.454: Failed to acquire dquot type 0
[  302.882371][ T7858] EXT4-fs error (device loop1): ext4_free_blocks:6586: comm syz.1.454: Freeing blocks not in datazone - block = 0, count = 4096
[  302.913979][ T7858] EXT4-fs error (device loop1): ext4_read_inode_bitmap:138: comm syz.1.454: Invalid inode bitmap blk 0 in block_group 0
[  302.929580][ T7858] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  302.940473][ T7858] EXT4-fs (loop1): 1 orphan inode deleted
[  302.966972][ T7858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.058150][ T6225] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8
[  303.312975][ T6225] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0
[  305.783470][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.015231][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  309.938310][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  309.979847][ T6013] bond0 (unregistering): Released all slaves
[  311.196362][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  311.300009][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  311.348934][ T6013] bond0 (unregistering): Released all slaves
[  311.433408][ T7902] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  311.850399][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  312.034246][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  312.298279][ T6013] bond0 (unregistering): Released all slaves
[  313.151121][ T7910] xt_connbytes: Forcing CT accounting to be enabled
[  313.158075][ T7910] --map-set only usable from mangle table
[  313.829209][ T7562] team0: Port device team_slave_0 added
[  313.977910][ T7562] team0: Port device team_slave_1 added
[  316.264428][ T7557] hsr_slave_0: entered promiscuous mode
[  316.286081][ T7557] hsr_slave_1: entered promiscuous mode
[  316.295867][ T7557] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  316.335485][ T7557] Cannot create hsr debugfs directory
[  316.478206][ T6013] hsr_slave_0: left promiscuous mode
[  316.530832][ T6013] hsr_slave_1: left promiscuous mode
[  316.775835][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.791275][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1
[  318.190460][ T6013] hsr_slave_0: left promiscuous mode
[  318.251115][ T6013] hsr_slave_1: left promiscuous mode
[  318.266364][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0
[  318.317008][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1
[  318.423347][ T7943] loop5: detected capacity change from 0 to 16
[  318.432969][ T6013] hsr_slave_0: left promiscuous mode
[  318.488343][ T6013] hsr_slave_1: left promiscuous mode
[  318.526116][ T7943] erofs (device loop5): mounted with root inode @ nid 36.
[  318.540194][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0
[  318.660672][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1
[  325.038236][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  325.053097][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  325.061329][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  325.069150][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  325.127005][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  325.139933][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  325.147382][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  325.161758][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  325.169202][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  325.169919][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  326.468471][ T6013] team0 (unregistering): Port device team_slave_1 removed
[  326.694698][ T7983] sctp: failed to load transform for md5: -2
[  326.781668][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  326.788032][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  327.008358][ T6013] team0 (unregistering): Port device team_slave_0 removed
[  327.799517][ T5841] Bluetooth: hci0: command tx timeout
[  327.805944][ T5841] Bluetooth: hci5: command tx timeout
[  329.969618][ T5855] Bluetooth: hci5: command tx timeout
[  329.975082][ T5855] Bluetooth: hci0: command tx timeout
[  330.006763][ T8013] loop1: detected capacity change from 0 to 2048
[  330.054495][ T8013] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  330.236995][ T8019] loop5: detected capacity change from 0 to 512
[  330.284314][ T8019] EXT4-fs: Ignoring removed nobh option
[  330.370922][ T8019] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.491: invalid indirect mapped block 256 (level 2)
[  330.438242][ T8019] EXT4-fs (loop5): 2 truncates cleaned up
[  330.447514][ T8019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.721307][ T8026] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz.5.491: bg 0: block 5: invalid block bitmap
[  330.800161][ T8026] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  330.800703][ T8026] EXT4-fs (loop5): This should not happen!! Data will be lost
[  330.800703][ T8026] 
[  330.800995][ T8026] EXT4-fs (loop5): Total free blocks count 0
[  330.801179][ T8026] EXT4-fs (loop5): Free/Dirty block details
[  330.801439][ T8026] EXT4-fs (loop5): free_blocks=0
[  330.801640][ T8026] EXT4-fs (loop5): dirty_blocks=66
[  330.801821][ T8026] EXT4-fs (loop5): Block reservation details
[  330.801999][ T8026] EXT4-fs (loop5): i_reserved_data_blocks=66
[  331.303895][ T6225] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[  331.549379][ T6013] team0 (unregistering): Port device team_slave_1 removed
[  332.589933][ T5841] Bluetooth: hci5: command tx timeout
[  332.595458][ T5855] Bluetooth: hci0: command tx timeout
[  333.078744][ T6013] team0 (unregistering): Port device team_slave_0 removed
[  333.160848][ T8041] loop5: detected capacity change from 0 to 256
[  333.218217][ T8041] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d)
[  334.789520][ T5855] Bluetooth: hci0: command tx timeout
[  334.795015][ T5855] Bluetooth: hci5: command tx timeout
[  338.904697][ T8058] No such timeout policy "syz1"
[  339.025305][ T8060] uprobe: syz.2.502:8060 failed to unregister, leaking uprobe
[  339.063586][ T6013] team0 (unregistering): Port device team_slave_1 removed
[  339.115529][ T6013] team0 (unregistering): Port device team_slave_0 removed
[  341.796602][ T7791] chnl_net:caif_netlink_parms(): no params data found
[  346.007951][ T8141] loop1: detected capacity change from 0 to 512
[  346.389949][ T8141] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  348.262155][ T8141] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  348.310628][ T8141] EXT4-fs (loop1): 1 truncate cleaned up
[  348.318438][ T8141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  349.253471][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.051150][ T8156] block device autoloading is deprecated and will be removed.
[  352.210197][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  352.246674][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  352.260186][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  352.269977][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  352.279954][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  355.303971][ T5841] Bluetooth: hci2: command tx timeout
[  355.871842][ T7977] chnl_net:caif_netlink_parms(): no params data found
[  356.577064][ T8208] netfs: Couldn't get user pages (rc=-14)
[  356.583070][ T8208] netfs: Zero-sized read [R=53]
[  357.406180][ T5841] Bluetooth: hci2: command tx timeout
[  358.074753][ T7976] chnl_net:caif_netlink_parms(): no params data found
[  358.348686][ T7977] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.380371][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.397155][ T7977] bridge_slave_0: entered allmulticast mode
[  358.407766][ T7977] bridge_slave_0: entered promiscuous mode
[  358.741270][ T7977] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.748545][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.756392][ T7977] bridge_slave_1: entered allmulticast mode
[  358.804538][ T7977] bridge_slave_1: entered promiscuous mode
[  359.519536][ T5841] Bluetooth: hci2: command tx timeout
[  362.149868][ T5841] Bluetooth: hci2: command tx timeout
[  363.002248][ T7977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  363.019508][   T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  363.033263][ T7977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.091196][ T7976] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.123406][ T7976] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.137950][ T7976] bridge_slave_0: entered allmulticast mode
[  363.146252][ T7976] bridge_slave_0: entered promiscuous mode
[  363.176937][ T7976] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.189381][ T7976] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.380453][ T7976] bridge_slave_1: entered allmulticast mode
[  363.399668][   T24] usb 6-1: Using ep0 maxpacket: 8
[  363.406833][   T24] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  363.416677][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.426504][ T7976] bridge_slave_1: entered promiscuous mode
[  363.485840][   T24] usb 6-1: config 0 descriptor??
[  364.516242][ T8245] loop5: detected capacity change from 0 to 512
[  364.551618][ T8245] EXT4-fs: Ignoring removed nobh option
[  364.618195][ T8262] loop1: detected capacity change from 0 to 16
[  364.660373][ T8245] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.531: invalid indirect mapped block 256 (level 2)
[  364.675334][ T8245] EXT4-fs (loop5): 2 truncates cleaned up
[  364.690297][ T8262] erofs (device loop1): mounted with root inode @ nid 36.
[  364.736120][ T8245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  364.867616][ T8266] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[  364.880580][ T8266] erofs (device loop1): failed to decompress -29 in[58, 4038] out[1851]
[  364.889197][ T8266] erofs (device loop1): read error -117 @ 43 of nid 36
[  364.916791][ T8266] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[  364.925885][ T8266] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[  364.934679][ T8266] erofs (device loop1): readahead error at folio 42 @ nid 36
[  364.942345][ T8266] erofs (device loop1): bogus lookback distance 774 @ lcn 40 of nid 36
[  364.950744][ T8266] erofs (device loop1): readahead error at folio 41 @ nid 36
[  364.959151][ T8266] erofs (device loop1): bogus lookback distance 774 @ lcn 40 of nid 36
[  364.971015][ T8266] erofs (device loop1): readahead error at folio 40 @ nid 36
[  364.978659][ T8266] erofs (device loop1): readahead error at folio 39 @ nid 36
[  364.986318][ T8266] erofs (device loop1): readahead error at folio 38 @ nid 36
[  364.997294][ T8266] erofs (device loop1): readahead error at folio 36 @ nid 36
[  365.005898][ T8266] erofs (device loop1): bogus lookback distance 1468 @ lcn 31 of nid 36
[  365.014573][ T8266] erofs (device loop1): readahead error at folio 31 @ nid 36
[  365.025963][ T8266] erofs (device loop1): readahead error at folio 25 @ nid 36
[  365.033805][ T8266] erofs (device loop1): readahead error at folio 24 @ nid 36
[  365.042300][ T8266] erofs (device loop1): readahead error at folio 19 @ nid 36
[  365.052368][ T8266] bio_check_eod: 18 callbacks suppressed
[  365.052401][ T8266] syz.1.534: attempt to access beyond end of device
[  365.052401][ T8266] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16
[  365.075651][ T8266] syz.1.534: attempt to access beyond end of device
[  365.075651][ T8266] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  365.092820][ T8266] syz.1.534: attempt to access beyond end of device
[  365.092820][ T8266] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  365.111006][ T8266] erofs (device loop1): failed to decompress -29 in[58, 4038] out[2639]
[  365.121523][ T8266] erofs (device loop1): bogus lookback distance 1586 @ lcn 46 of nid 36
[  365.130231][ T8266] erofs (device loop1): readahead error at folio 47 @ nid 36
[  365.137822][ T8266] erofs (device loop1): bogus lookback distance 1586 @ lcn 46 of nid 36
[  365.146482][ T8266] erofs (device loop1): readahead error at folio 46 @ nid 36
[  365.154904][ T8266] erofs (device loop1): readahead error at folio 45 @ nid 36
[  365.164685][ T8266] syz.1.534: attempt to access beyond end of device
[  365.164685][ T8266] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16
[  365.204391][ T8266] erofs (device loop1): failed to decompress -29 in[58, 4038] out[3537]
[  365.463054][   T30] audit: type=1800 audit(1746791761.601:4): pid=8245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.531" name="bus" dev="loop5" ino=18 res=0 errno=0
[  365.482515][ T8245] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  365.701217][ T8269] xt_TPROXY: Can be used only with -p tcp or -p udp
[  365.817276][  T973] usb 6-1: USB disconnect, device number 8
[  366.205791][ T7977] team0: Port device team_slave_0 added
[  366.233498][ T7976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  366.304182][ T7976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  366.573849][ T8165] chnl_net:caif_netlink_parms(): no params data found
[  367.541144][ T7977] team0: Port device team_slave_1 added
[  367.782841][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.966220][ T7976] team0: Port device team_slave_0 added
[  369.007029][ T7976] team0: Port device team_slave_1 added
[  369.038131][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_0
[  369.049616][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.373195][ T7977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  369.387366][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_1
[  369.395106][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.403798][ T7977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  372.046223][ T8307] sctp: failed to load transform for md5: -2
[  372.313626][ T7976] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.352093][ T7976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.378041][    C1] vkms_vblank_simulate: vblank timer overrun
[  372.401393][ T7976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  374.862115][ T7977] hsr_slave_0: entered promiscuous mode
[  374.911404][ T7977] hsr_slave_1: entered promiscuous mode
[  374.940404][ T7977] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  374.978449][ T7977] Cannot create hsr debugfs directory
[  375.072391][ T7976] batman_adv: batadv0: Adding interface: batadv_slave_1
[  375.089126][ T7976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.095680][ T7976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  376.851100][ T8165] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.862029][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.838061][ T8165] bridge_slave_0: entered allmulticast mode
[  377.892901][ T8165] bridge_slave_0: entered promiscuous mode
[  377.927195][ T6013] bridge_slave_1: left allmulticast mode
[  377.973335][ T6013] bridge_slave_1: left promiscuous mode
[  377.979184][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.043550][ T6013] bridge_slave_0: left allmulticast mode
[  378.069534][ T6013] bridge_slave_0: left promiscuous mode
[  378.184568][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.632996][ T6013] bridge_slave_1: left allmulticast mode
[  378.638691][ T6013] bridge_slave_1: left promiscuous mode
[  378.729762][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.795832][ T6013] bridge_slave_0: left allmulticast mode
[  378.836114][ T6013] bridge_slave_0: left promiscuous mode
[  378.850916][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.955556][ T6013] bridge_slave_1: left allmulticast mode
[  378.983260][ T6013] bridge_slave_1: left promiscuous mode
[  379.006611][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.081100][ T6013] bridge_slave_0: left allmulticast mode
[  379.087153][ T6013] bridge_slave_0: left promiscuous mode
[  379.102427][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.614378][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  379.624095][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  379.634618][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  379.645746][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  379.653756][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  379.687383][ T5136] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  379.703898][ T5136] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  379.722136][ T5136] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  379.738092][ T5136] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  379.751257][ T5136] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  380.017719][ T6013] bond0 (unregistering): Released all slaves
[  380.037337][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.048723][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.060219][ T6013] bond0 (unregistering): Released all slaves
[  380.082488][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.095491][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.106970][ T6013] bond0 (unregistering): Released all slaves
[  380.128624][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.149921][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.166410][ T6013] bond0 (unregistering): Released all slaves
[  380.196243][ T8165] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.209631][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.230350][ T8165] bridge_slave_1: entered allmulticast mode
[  380.238510][ T8165] bridge_slave_1: entered promiscuous mode
[  380.496869][ T6013] hsr_slave_0: left promiscuous mode
[  380.521463][ T6013] hsr_slave_1: left promiscuous mode
[  380.527670][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0
[  380.569691][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1
[  380.972893][ T6013] team0 (unregistering): Port device team_slave_1 removed
[  381.021178][ T6013] team0 (unregistering): Port device team_slave_0 removed
[  381.279302][ T6013] team0 (unregistering): Port device team_slave_1 removed
[  381.315607][ T6013] team0 (unregistering): Port device team_slave_0 removed
[  381.548107][ T6013] team0 (unregistering): Port device team_slave_1 removed
[  381.579993][ T6013] team0 (unregistering): Port device team_slave_0 removed
[  381.769762][ T5841] Bluetooth: hci7: command tx timeout
[  381.775976][ T5841] Bluetooth: hci6: command tx timeout
[  381.788248][ T8165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.894078][ T8165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  382.016920][ T8165] team0: Port device team_slave_0 added
[  382.049378][ T8165] team0: Port device team_slave_1 added
[  382.172246][ T8165] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.179239][ T8165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.205676][ T8165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  382.242416][ T8165] batman_adv: batadv0: Adding interface: batadv_slave_1
[  382.258989][ T8165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.290138][ T8165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.386637][ T8165] hsr_slave_0: entered promiscuous mode
[  382.397571][ T8165] hsr_slave_1: entered promiscuous mode
[  382.404450][ T8165] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  382.412177][ T8165] Cannot create hsr debugfs directory
[  382.702708][ T8370] chnl_net:caif_netlink_parms(): no params data found
[  382.886424][ T8372] chnl_net:caif_netlink_parms(): no params data found
[  383.120845][ T8370] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.128014][ T8370] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.143140][ T8370] bridge_slave_0: entered allmulticast mode
[  383.156610][ T8370] bridge_slave_0: entered promiscuous mode
[  383.206071][ T8370] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.213631][ T8370] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.221789][ T8370] bridge_slave_1: entered allmulticast mode
[  383.229695][ T8370] bridge_slave_1: entered promiscuous mode
[  383.282598][ T8372] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.291011][ T8372] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.298203][ T8372] bridge_slave_0: entered allmulticast mode
[  383.308092][ T8372] bridge_slave_0: entered promiscuous mode
[  383.354484][ T8372] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.363853][ T8372] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.372915][ T8372] bridge_slave_1: entered allmulticast mode
[  383.382179][ T8372] bridge_slave_1: entered promiscuous mode
[  383.432218][ T8370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.480624][ T8370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  383.544486][ T8372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.558882][ T8372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  383.594311][ T8370] team0: Port device team_slave_0 added
[  383.609285][ T8370] team0: Port device team_slave_1 added
[  383.704477][ T8372] team0: Port device team_slave_0 added
[  383.717507][ T8372] team0: Port device team_slave_1 added
[  383.724906][ T8370] batman_adv: batadv0: Adding interface: batadv_slave_0
[  383.733315][ T8370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.759550][ T8370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  383.813852][ T8370] batman_adv: batadv0: Adding interface: batadv_slave_1
[  383.821895][ T8370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.849569][ T5841] Bluetooth: hci6: command tx timeout
[  383.849717][ T5136] Bluetooth: hci7: command tx timeout
[  383.855673][ T8370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  383.956023][ T8372] batman_adv: batadv0: Adding interface: batadv_slave_0
[  383.963867][ T8372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.991257][ T8372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  384.006881][ T8372] batman_adv: batadv0: Adding interface: batadv_slave_1
[  384.013949][ T8372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  384.040201][ T8372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  384.114347][ T8370] hsr_slave_0: entered promiscuous mode
[  384.121453][ T8370] hsr_slave_1: entered promiscuous mode
[  384.127813][ T8370] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  384.135476][ T8370] Cannot create hsr debugfs directory
[  384.142323][ T6013] bridge_slave_1: left allmulticast mode
[  384.148003][ T6013] bridge_slave_1: left promiscuous mode
[  384.156080][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.166089][ T6013] bridge_slave_0: left allmulticast mode
[  384.172430][ T6013] bridge_slave_0: left promiscuous mode
[  384.178229][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.190140][ T6013] bridge_slave_1: left allmulticast mode
[  384.195818][ T6013] bridge_slave_1: left promiscuous mode
[  384.201830][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.215671][ T6013] bridge_slave_0: left allmulticast mode
[  384.221398][ T6013] bridge_slave_0: left promiscuous mode
[  384.227129][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.486252][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  384.499088][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  384.510982][ T6013] bond0 (unregistering): Released all slaves
[  384.535648][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  384.548602][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  384.563412][ T6013] bond0 (unregistering): Released all slaves
[  384.726814][ T8372] hsr_slave_0: entered promiscuous mode
[  384.738053][ T8372] hsr_slave_1: entered promiscuous mode
[  384.744859][ T8372] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  384.752544][ T8372] Cannot create hsr debugfs directory
[  384.768305][ T8165] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  384.807072][ T8165] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  384.847652][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0
[  384.860970][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.871330][ T6013] hsr_slave_0: left promiscuous mode
[  384.877318][ T6013] hsr_slave_1: left promiscuous mode
[  384.884371][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0
[  384.895314][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.954850][ T6013] team0 (unregistering): Port device team_slave_1 removed
[  384.992790][ T6013] team0 (unregistering): Port device team_slave_0 removed
[  385.316440][ T6013] team0 (unregistering): Port device team_slave_1 removed
[  385.351642][ T6013] team0 (unregistering): Port device team_slave_0 removed
[  385.549049][ T8165] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  385.609202][ T8165] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  385.929742][ T5136] Bluetooth: hci7: command tx timeout
[  385.929910][ T5841] Bluetooth: hci6: command tx timeout
[  386.063192][ T8370] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  386.112258][ T8370] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  386.126759][ T8370] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  386.138348][ T8370] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  386.189279][ T8165] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.289227][ T8165] 8021q: adding VLAN 0 to HW filter on device team0
[  386.320491][ T8372] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  386.345746][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.352940][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.366381][ T8372] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  386.407830][ T8372] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  386.428088][ T8372] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  386.446148][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.453298][ T6225] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.592713][ T8370] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.665669][ T8370] 8021q: adding VLAN 0 to HW filter on device team0
[  386.714717][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.721958][ T6013] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.743175][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.750413][ T6013] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.893674][ T8372] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.972390][ T8372] 8021q: adding VLAN 0 to HW filter on device team0
[  386.997624][ T8130] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.004857][ T8130] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.045159][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.052350][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.088817][ T8165] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.754768][ T8370] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.946283][ T8370] veth0_vlan: entered promiscuous mode
[  387.985733][ T8370] veth1_vlan: entered promiscuous mode
[  388.012809][ T5841] Bluetooth: hci6: command tx timeout
[  388.012820][ T5136] Bluetooth: hci7: command tx timeout
[  388.068425][ T8372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  388.123862][ T8165] veth0_vlan: entered promiscuous mode
[  388.178958][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  388.186700][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  388.201035][ T8165] veth1_vlan: entered promiscuous mode
[  388.248196][ T8370] veth0_macvtap: entered promiscuous mode
[  388.289286][ T8370] veth1_macvtap: entered promiscuous mode
[  388.334467][ T8165] veth0_macvtap: entered promiscuous mode
[  388.409456][ T8165] veth1_macvtap: entered promiscuous mode
[  388.441187][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.473720][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.483749][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.501702][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.527192][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.537695][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.554846][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_0
[  388.617794][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.656232][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.676263][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.696895][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.708126][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.721592][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.734489][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_1
[  388.769295][ T8370] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.800216][ T8370] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.812076][ T8370] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  388.821945][ T8370] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.853890][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.886818][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.917787][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.939562][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.954165][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.979563][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.999523][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.012434][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.025918][ T8165] batman_adv: batadv0: Interface activated: batadv_slave_0
[  389.045480][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.059037][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.070084][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.081839][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.092008][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.102733][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.112907][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.125302][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.137553][ T8165] batman_adv: batadv0: Interface activated: batadv_slave_1
[  389.253684][ T8165] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.272129][ T8165] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.281284][ T8165] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.290832][ T8165] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.373914][ T8372] veth0_vlan: entered promiscuous mode
[  389.404018][ T8372] veth1_vlan: entered promiscuous mode
[  389.410006][ T6013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.417855][ T6013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.574010][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.578752][ T8372] veth0_macvtap: entered promiscuous mode
[  389.595149][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.640006][ T8372] veth1_macvtap: entered promiscuous mode
[  389.665252][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.696481][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.835978][ T8127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.868686][ T8127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.927277][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  390.091187][ T8434] loop5: detected capacity change from 0 to 4096
[  390.578942][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.638471][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  390.660847][ T8436] xt_TPROXY: Can be used only with -p tcp or -p udp
[  390.672818][ T8434] ntfs3(loop5): ino=1a, mi_enum_attr
[  390.678453][ T8434] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  390.919597][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.930157][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  390.940671][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  391.514789][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  391.560107][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  391.626761][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  391.678981][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  391.788764][ T8372] batman_adv: batadv0: Interface activated: batadv_slave_0
[  391.948565][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  392.004757][ T8442] loop1: detected capacity change from 0 to 256
[  392.010422][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.049716][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  392.084140][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.156461][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  392.290664][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.428206][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  392.565891][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.992608][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  393.003364][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.019298][ T8372] batman_adv: batadv0: Interface activated: batadv_slave_1
[  394.712797][ T8372] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  394.849485][ T8372] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  394.862690][ T8372] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  394.889527][ T8372] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.499503][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  395.582839][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.357742][ T6013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.414407][ T6013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.902550][ T8482] loop2: detected capacity change from 0 to 40427
[  399.256840][ T8485] netlink: 20 bytes leftover after parsing attributes in process `syz.7.565'.
[  399.268373][ T8485] netlink: 20 bytes leftover after parsing attributes in process `syz.7.565'.
[  399.277373][ T8485] netlink: 204 bytes leftover after parsing attributes in process `syz.7.565'.
[  399.287334][ T8482] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  399.295712][ T8482] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  400.059033][ T8482] F2FS-fs (loop2): invalid crc value
[  400.316417][ T8482] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  400.323716][ T8482] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  401.230072][ T8505] syz.2.561: attempt to access beyond end of device
[  401.230072][ T8505] loop2: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  403.764780][ T8518] loop1: detected capacity change from 0 to 40427
[  404.124700][ T8520] loop8: detected capacity change from 0 to 128
[  404.137375][ T8520] vfat: Unknown parameter ''
[  404.375668][ T8518] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  404.384291][ T8518] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  404.539641][ T8518] F2FS-fs (loop1): invalid crc value
[  405.661936][ T8518] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  405.669032][ T8518] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  415.630685][ T8570] sctp: failed to load transform for md5: -2
[  418.079482][   T30] audit: type=1326 audit(1746791812.911:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bad8e969 code=0x7ffc0000
[  418.709505][   T30] audit: type=1326 audit(1746791812.931:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f29bad8e969 code=0x7ffc0000
[  418.883306][   T30] audit: type=1326 audit(1746791812.931:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bad8e969 code=0x7ffc0000
[  419.089582][   T30] audit: type=1326 audit(1746791812.931:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f29bad8e969 code=0x7ffc0000
[  419.112049][   T30] audit: type=1326 audit(1746791812.931:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bad8e969 code=0x7ffc0000
[  419.145086][   T30] audit: type=1326 audit(1746791812.931:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bad8e969 code=0x7ffc0000
[  419.168491][   T30] audit: type=1326 audit(1746791812.981:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29bad8e969 code=0x7ffc0000
[  419.191165][   T30] audit: type=1326 audit(1746791812.981:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bad8e969 code=0x7ffc0000
[  419.489587][   T30] audit: type=1326 audit(1746791812.981:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bad8e969 code=0x7ffc0000
[  420.124027][   T30] audit: type=1326 audit(1746791812.981:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f29bad8e969 code=0x7ffc0000
[  425.601567][ T5136] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  425.616475][ T5136] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  425.625462][ T5136] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  425.676998][ T5136] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  425.706141][ T5136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  427.786953][ T5841] Bluetooth: hci0: command tx timeout
[  429.855839][ T5841] Bluetooth: hci0: command tx timeout
[  430.480234][ T6013] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.548281][ T5136] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  430.559236][ T5136] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  430.572403][ T5136] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  430.582480][ T5136] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  430.590793][ T5136] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  432.200171][ T5841] Bluetooth: hci0: command tx timeout
[  432.364156][ T6013] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.652698][ T5841] Bluetooth: hci1: command tx timeout
[  434.428534][ T5841] Bluetooth: hci0: command tx timeout
[  434.601635][ T6013] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.739526][ T5841] Bluetooth: hci1: command tx timeout
[  436.223468][ T8718] loop3: detected capacity change from 0 to 1024
[  437.297311][ T5841] Bluetooth: hci1: command tx timeout
[  438.018302][ T8718] hfsplus: failed to load extents file
[  438.020089][ T6013] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.370556][ T5136] Bluetooth: hci1: command tx timeout
[  440.678240][ T8674] chnl_net:caif_netlink_parms(): no params data found
[  442.309823][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  442.309888][   T30] audit: type=1800 audit(1746791838.341:26): pid=8761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.625" name="bus" dev="tmpfs" ino=85 res=0 errno=0
[  443.918626][ T6013] vlan2: left allmulticast mode
[  443.928497][ T6013] bond0: left allmulticast mode
[  444.147298][ T6013] bond_slave_0: left allmulticast mode
[  444.170647][ T6013] bond_slave_1: left allmulticast mode
[  444.176294][ T6013] vlan2: left promiscuous mode
[  444.199472][ T6013] bond0: left promiscuous mode
[  444.204293][ T6013] bond_slave_0: left promiscuous mode
[  445.219243][ T6013] bond_slave_1: left promiscuous mode
[  445.520147][ T6013] bridge0: port 3(vlan2) entered disabled state
[  445.738348][ T8785] loop7: detected capacity change from 0 to 256
[  445.791233][ T6013] bridge_slave_1: left allmulticast mode
[  445.811461][ T6013] bridge_slave_1: left promiscuous mode
[  445.848752][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.009699][ T5841] Bluetooth: hci1: command 0x0405 tx timeout
[  447.113425][ T8785] FAT-fs (loop7): Directory bread(block 64) failed
[  447.172682][ T8785] FAT-fs (loop7): Directory bread(block 65) failed
[  447.229994][ T8785] FAT-fs (loop7): Directory bread(block 66) failed
[  447.302848][ T8785] FAT-fs (loop7): Directory bread(block 67) failed
[  447.390170][ T8785] FAT-fs (loop7): Directory bread(block 68) failed
[  447.493181][ T8785] FAT-fs (loop7): Directory bread(block 69) failed
[  447.591076][ T8785] FAT-fs (loop7): Directory bread(block 70) failed
[  447.600539][ T8785] FAT-fs (loop7): Directory bread(block 71) failed
[  447.607191][ T8785] FAT-fs (loop7): Directory bread(block 72) failed
[  447.613853][ T8785] FAT-fs (loop7): Directory bread(block 73) failed
[  447.670786][ T6013] bridge_slave_0: left allmulticast mode
[  447.698306][ T6013] bridge_slave_0: left promiscuous mode
[  447.763861][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.237475][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  450.279541][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  450.947251][ T8818] loop8: detected capacity change from 0 to 128
[  451.584072][ T8818] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  451.644030][ T8818] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  452.996395][ T8372] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  454.384720][ T8853] loop5: detected capacity change from 0 to 256
[  457.622448][ T8872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  460.240977][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  461.666508][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  461.911125][ T6013] bond0 (unregistering): Released all slaves
[  463.687349][ T8921] loop7: detected capacity change from 0 to 512
[  463.753669][ T8921] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  463.778531][ T6013] bond1 (unregistering): Released all slaves
[  463.867724][ T8921] EXT4-fs (loop7): 1 truncate cleaned up
[  463.951399][ T8921] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  465.006042][ T8165] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.130644][ T8644] chnl_net:caif_netlink_parms(): no params data found
[  469.475255][ T8957] loop5: detected capacity change from 0 to 40427
[  469.503341][ T8957] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  469.513538][ T8957] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  469.555589][ T8957] F2FS-fs (loop5): invalid crc value
[  469.718009][ T8957] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  469.725250][ T8957] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  472.581526][ T8674] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.588707][ T8674] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.666491][ T8674] bridge_slave_0: entered allmulticast mode
[  472.690238][ T8674] bridge_slave_0: entered promiscuous mode
[  472.699206][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.706407][ T8674] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.713677][ T8674] bridge_slave_1: entered allmulticast mode
[  472.721711][ T8674] bridge_slave_1: entered promiscuous mode
[  472.752834][ T8973] loop8: detected capacity change from 0 to 8192
[  473.273804][ T8991] Invalid source name
[  473.277893][ T8991] UBIFS error (pid: 8991): cannot open "./file0", error -22
[  477.289716][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[  481.304040][ T8674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  481.443699][ T9020] loop8: detected capacity change from 0 to 1024
[  482.299583][ T6013] hsr_slave_0: left promiscuous mode
[  482.330036][ T9020] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  482.411908][ T6013] hsr_slave_1: left promiscuous mode
[  482.440327][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  482.447809][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0
[  482.587496][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  482.643190][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1
[  482.868722][ T6013] veth1_macvtap: left promiscuous mode
[  483.432908][ T9018] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  483.449558][ T9018] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  483.462539][ T9018] EXT4-fs (loop8): This should not happen!! Data will be lost
[  483.462539][ T9018] 
[  483.472280][ T9018] EXT4-fs (loop8): Total free blocks count 0
[  483.478342][ T9018] EXT4-fs (loop8): Free/Dirty block details
[  483.484372][ T9018] EXT4-fs (loop8): free_blocks=68451041280
[  483.490338][ T9018] EXT4-fs (loop8): dirty_blocks=32
[  483.495528][ T9018] EXT4-fs (loop8): Block reservation details
[  483.501998][ T9018] EXT4-fs (loop8): i_reserved_data_blocks=2
[  483.702737][ T6013] veth0_macvtap: left promiscuous mode
[  483.708492][ T6013] veth1_vlan: left promiscuous mode
[  483.713979][ T6013] veth0_vlan: left promiscuous mode
[  484.042156][ T8372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.066282][ T9036] loop3: detected capacity change from 0 to 512
[  484.586330][ T9036] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  484.628861][ T9036] EXT4-fs (loop3): invalid journal inode
[  484.689602][ T9036] EXT4-fs (loop3): can't get journal size
[  484.823298][ T9036] EXT4-fs (loop3): 1 truncate cleaned up
[  484.929198][ T9036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  484.943029][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  484.959909][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  484.971434][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  484.990247][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  485.003681][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  485.095264][ T9042] loop5: detected capacity change from 0 to 256
[  485.121780][ T9042] FAT-fs (loop5): Directory bread(block 64) failed
[  485.128343][ T9042] FAT-fs (loop5): Directory bread(block 65) failed
[  485.135017][ T9042] FAT-fs (loop5): Directory bread(block 66) failed
[  485.141636][ T9042] FAT-fs (loop5): Directory bread(block 67) failed
[  485.148260][ T9042] FAT-fs (loop5): Directory bread(block 68) failed
[  485.154946][ T9042] FAT-fs (loop5): Directory bread(block 69) failed
[  485.161610][ T9042] FAT-fs (loop5): Directory bread(block 70) failed
[  485.168163][ T9042] FAT-fs (loop5): Directory bread(block 71) failed
[  485.177241][ T9042] FAT-fs (loop5): Directory bread(block 72) failed
[  485.184072][ T9042] FAT-fs (loop5): Directory bread(block 73) failed
[  486.906439][ T8370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.989142][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  487.007419][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  487.030568][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  487.053386][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  487.063110][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  487.289599][ T5841] Bluetooth: hci3: command tx timeout
[  487.308193][ T9057] loop8: detected capacity change from 0 to 256
[  487.315577][ T9057] exfat: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿÿ'
[  488.401000][ T9057] loop8: detected capacity change from 0 to 128
[  488.408247][ T9057] ext4: Unknown parameter 'fowner'
[  489.397290][ T5841] Bluetooth: hci0: command tx timeout
[  489.397331][ T5136] Bluetooth: hci3: command tx timeout
[  489.646378][ T9068] loop7: detected capacity change from 0 to 4096
[  489.668711][ T9068] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  491.559547][ T5841] Bluetooth: hci3: command tx timeout
[  491.567362][ T5136] Bluetooth: hci0: command tx timeout
[  492.764450][ T9068] ntfs3(loop7): Failed to read $UpCase (-4).
[  493.619621][ T5841] Bluetooth: hci3: command tx timeout
[  493.625116][ T5136] Bluetooth: hci0: command tx timeout
[  495.689493][ T5136] Bluetooth: hci0: command tx timeout
[  501.853552][ T9116] xt_CT: You must specify a L4 protocol and not use inversions on it
[  501.947439][ T9111] loop8: detected capacity change from 0 to 512
[  503.034195][ T9111] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  503.069188][ T9111] EXT4-fs (loop8): 1 truncate cleaned up
[  503.098185][ T9111] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  503.929737][ T5839] Bluetooth: hci7: command 0x0406 tx timeout
[  503.960000][ T5855] Bluetooth: hci6: command 0x0406 tx timeout
[  504.599259][ T9126] loop7: detected capacity change from 0 to 512
[  504.619180][ T8372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  504.640720][ T9126] EXT4-fs: inline encryption not supported
[  504.657415][ T9126] EXT4-fs (loop7): VFS: Can't find ext4 filesystem
[  507.441309][ T9136] syz.3.708 (9136): /proc/9132/oom_adj is deprecated, please use /proc/9132/oom_score_adj instead.
[  510.622284][ T6013] team0 (unregistering): Port device team_slave_1 removed
[  511.056662][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  511.076887][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  512.557989][ T6013] team0 (unregistering): Port device team_slave_0 removed
[  512.940194][ T9157] loop8: detected capacity change from 0 to 32768
[  513.882809][ T9157] XFS (loop8): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  514.103942][ T9157] XFS (loop8): Ending clean mount
[  514.182183][ T9157] XFS (loop8): Quotacheck needed: Please wait.
[  514.307240][ T9157] XFS (loop8): Quotacheck: Done.
[  515.985563][ T8372] XFS (loop8): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  517.543227][ T9182] loop3: detected capacity change from 0 to 40427
[  518.039502][ T9182] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  518.049616][ T9182] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  518.319490][ T9182] F2FS-fs (loop3): invalid crc value
[  518.448780][ T9182] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  518.458287][ T9182] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  519.541024][ T9197] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  519.541024][ T9197]    program syz.7.722 not setting count and/or reply_len properly
[  522.488977][ T8674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  524.488430][ T9224] loop7: detected capacity change from 0 to 1024
[  526.506847][ T9235] loop3: detected capacity change from 0 to 4096
[  526.792733][ T9235] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  527.283251][ T9224] EXT4-fs (loop7): insufficient memory
[  527.845892][ T9224] EXT4-fs (loop7): mount failed
[  530.111360][ T9246] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  532.884457][ T9262] loop8: detected capacity change from 0 to 1024
[  534.373020][ T8116] hfsplus: b-tree write err: -5, ino 4
[  539.790083][ T9304] loop8: detected capacity change from 0 to 4096
[  539.798014][ T9304] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512).
[  539.824932][ T9304] ntfs3(loop8): failed to replay log file. Can't mount rw!
[  540.154499][ T9039] chnl_net:caif_netlink_parms(): no params data found
[  543.696535][ T5841] Bluetooth: hci0: link tx timeout
[  543.702264][ T5841] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  543.717919][ T5841] Bluetooth: hci0: link tx timeout
[  543.723725][ T5841] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  544.304266][ T9048] chnl_net:caif_netlink_parms(): no params data found
[  544.482698][ T9324] loop3: detected capacity change from 0 to 1024
[  545.774298][ T5841] Bluetooth: hci0: command 0x0406 tx timeout
[  545.808259][ T9324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  548.126501][ T8370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.489865][ T8121] bridge_slave_1: left allmulticast mode
[  549.495558][ T8121] bridge_slave_1: left promiscuous mode
[  549.579680][ T8121] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.757534][ T8121] bridge_slave_0: left allmulticast mode
[  549.779509][ T8121] bridge_slave_0: left promiscuous mode
[  549.785312][ T8121] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.145930][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  550.182193][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  550.275162][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  550.295766][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  550.312766][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  551.140050][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  551.172770][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  551.203167][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  551.219246][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  551.230433][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  552.570528][ T8121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  553.409600][ T5839] Bluetooth: hci1: command tx timeout
[  553.416240][ T5839] Bluetooth: hci3: command tx timeout
[  553.467742][ T8121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  554.356137][ T8121] bond0 (unregistering): Released all slaves
[  554.493499][ T8121] bond0 (unregistering): Released all slaves
[  555.458167][ T5841] Bluetooth: hci3: command tx timeout
[  555.463704][ T5841] Bluetooth: hci1: command tx timeout
[  558.279241][ T5841] Bluetooth: hci1: command tx timeout
[  558.285013][ T5839] Bluetooth: hci3: command tx timeout
[  558.763077][ T9420] dlm: no local IP address has been set
[  558.768901][ T9420] dlm: cannot start dlm midcomms -107
[  560.731073][ T5841] Bluetooth: hci3: command tx timeout
[  560.731089][ T5839] Bluetooth: hci1: command tx timeout
[  561.272954][ T9429] loop7: detected capacity change from 0 to 256
[  561.290127][ T9429] vfat: Bad value for 'shortname'
[  561.359304][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.7.763'.
[  561.391908][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.7.763'.
[  564.889483][ T9438] loop5: detected capacity change from 0 to 1024
[  565.131830][ T9438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  565.938001][ T9464] loop7: detected capacity change from 0 to 1024
[  566.127208][ T9464] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  566.211834][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  567.250156][ T9454] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  567.639093][ T8165] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  569.977560][ T9491] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  571.113917][ T9495] loop3: detected capacity change from 0 to 1024
[  571.261606][ T9495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  572.496657][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  572.561134][ T5839] Bluetooth: hci7: unexpected event for opcode 0x0000
[  573.458698][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  574.538123][ T8370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.435873][ T9516] loop8: detected capacity change from 0 to 64
[  576.569526][ T5839] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0
[  576.578281][ T5839] Bluetooth: hci7: Injecting HCI hardware error event
[  576.587172][ T5841] Bluetooth: hci7: hardware error 0x00
[  576.594544][ T9516] hfs: get root inode failed
[  580.160476][ T5841] Bluetooth: hci7: Opcode 0x0c03 failed: -110
[  580.698154][ T9369] chnl_net:caif_netlink_parms(): no params data found
[  581.261472][ T9374] chnl_net:caif_netlink_parms(): no params data found
[  583.904628][ T9583] trusted_key: encrypted_key: insufficient parameters specified
[  586.178015][ T9597] loop5: detected capacity change from 0 to 512
[  588.301417][ T9597] EXT4-fs: error -4 creating inode table initialization thread
[  589.050465][ T9597] EXT4-fs (loop5): mount failed
[  590.063373][ T9616] loop7: detected capacity change from 0 to 2048
[  593.644306][ T9374] bridge0: port 1(bridge_slave_0) entered blocking state
[  593.777435][ T9374] bridge0: port 1(bridge_slave_0) entered disabled state
[  593.986732][ T5833] Alternate GPT is invalid, using primary GPT.
[  594.009845][ T9374] bridge_slave_0: entered allmulticast mode
[  594.017937][ T5833]  loop7: p1 p2 p3
[  594.800992][ T9374] bridge_slave_0: entered promiscuous mode
[  594.869634][ T9374] bridge0: port 2(bridge_slave_1) entered blocking state
[  594.876829][ T9374] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.896903][ T9374] bridge_slave_1: entered allmulticast mode
[  594.914661][ T9374] bridge_slave_1: entered promiscuous mode
[  595.506627][ T9628] loop3: detected capacity change from 0 to 2048
[  595.551602][ T5858] udevd[5858]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  595.585905][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  595.597660][ T5833] udevd[5833]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  595.618237][ T9628] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  600.763643][ T9659] loop7: detected capacity change from 0 to 16
[  600.810341][ T9659] erofs (device loop7): mounted with root inode @ nid 36.
[  600.825705][ T9374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  601.823130][ T9369] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.850066][ T9369] bridge0: port 1(bridge_slave_0) entered disabled state
[  601.857413][ T9369] bridge_slave_0: entered allmulticast mode
[  603.789901][ T9369] bridge_slave_0: entered promiscuous mode
[  604.025029][ T5841] erofs (device loop7): failed to decompress -26 in[46, 0] out[9000]
[  604.027952][ T9374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  604.201090][ T9670] erofs (device loop7): failed to decompress -26 in[46, 4050] out[8192]
[  604.293528][ T9670] erofs (device loop7): read error -117 @ 0 of nid 89
[  604.317725][   T30] audit: type=1800 audit(1746792000.451:27): pid=9670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.803" name="file2" dev="loop7" ino=89 res=0 errno=0
[  605.149719][ T9369] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.159574][ T9369] bridge0: port 2(bridge_slave_1) entered disabled state
[  605.179866][ T9369] bridge_slave_1: entered allmulticast mode
[  605.725983][ T9369] bridge_slave_1: entered promiscuous mode
[  611.219742][ T9697] loop7: detected capacity change from 0 to 512
[  611.423324][ T9697] EXT4-fs warning (device loop7): ext4_multi_mount_protect:397: Unable to create kmmpd thread for loop7.
[  612.358038][ T9709] loop3: detected capacity change from 0 to 256
[  612.494421][ T9701] loop8: detected capacity change from 0 to 4096
[  612.609316][ T9701] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  612.689853][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.698966][ T9714] FAT-fs (loop3): Filesystem has been set read-only
[  612.707996][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.716861][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.725731][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.734921][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.743705][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.752498][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.761717][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.772356][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.782689][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.791867][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.800656][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.809348][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.820451][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.829159][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.837913][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.847050][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.855786][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.864527][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.875394][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.885583][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.894323][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.903516][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.912599][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.925759][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.934981][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.943797][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.952598][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.961605][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.972167][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.982348][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  612.991411][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.000153][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.008880][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.017826][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.026599][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.035440][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.044698][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.053810][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.062605][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.073526][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.083752][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.092602][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.101762][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.110535][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.119286][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.128466][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.137196][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.145901][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.154936][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.163692][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.174279][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.184666][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  613.656805][ T9701] ntfs3(loop8): It is recommened to use chkdsk.
[  613.817439][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  614.431781][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  614.473959][ T9701] ntfs3(loop8): Failed to read $UpCase (-4).
[  614.945150][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  614.990219][ T9720] loop7: detected capacity change from 0 to 512
[  614.999533][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  615.027730][ T9720] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  615.041838][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  615.091200][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  615.379697][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  616.324331][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  616.350307][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  616.380268][ T9720] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  616.441492][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  616.469885][ T9720] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  616.479316][ T9720] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.815: Failed to acquire dquot type 0
[  616.491716][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  616.520134][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  616.528764][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  616.558555][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  616.579642][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  616.659543][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  616.669606][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  616.679481][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  616.701709][ T9720] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1129: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  616.719071][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  617.016312][ T5136] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  617.026036][ T5136] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  617.029613][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  617.034139][ T5136] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  617.052168][ T5136] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  618.018301][ T8121] bond0 (unregistering): Released all slaves
[  618.374108][ T5136] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  619.385500][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  619.555961][ T9720] EXT4-fs (loop7): 1 truncate cleaned up
[  619.592103][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  619.601571][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  619.611204][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  619.620073][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  619.631775][ T9714] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  619.648690][   T30] audit: type=1800 audit(1746792015.781:28): pid=9714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.814" name="file1" dev="loop3" ino=1048684 res=0 errno=0
[  619.681413][ T9720] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  619.735494][ T8121] bond0 (unregistering): Released all slaves
[  620.089579][ T5136] Bluetooth: hci0: command tx timeout
[  621.307340][ T8165] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.492603][ T5136] Bluetooth: hci1: command tx timeout
[  622.247162][ T5136] Bluetooth: hci0: command tx timeout
[  623.575076][ T5136] Bluetooth: hci1: command tx timeout
[  624.659464][ T5136] Bluetooth: hci0: command tx timeout
[  625.660920][ T5136] Bluetooth: hci1: command tx timeout
[  626.745998][ T5136] Bluetooth: hci0: command tx timeout
[  627.699510][ T5136] Bluetooth: hci1: command tx timeout
[  627.989273][ T9780] loop7: detected capacity change from 0 to 4096
[  628.068850][ T9780] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  628.202940][ T9780] ntfs3(loop7): It is recommened to use chkdsk.
[  629.277851][ T9786] ntfs3(loop7): failed to convert "076c" to iso8859-1
[  631.125523][ T9798] loop5: detected capacity change from 0 to 1024
[  632.641395][ T9798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  632.717202][ T9814] loop8: detected capacity change from 0 to 16
[  632.766203][ T9814] erofs (device loop8): mounted with root inode @ nid 36.
[  633.468742][ T9797] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  633.484682][ T9797] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  633.497089][ T9797] EXT4-fs (loop5): This should not happen!! Data will be lost
[  633.497089][ T9797] 
[  633.506886][ T9797] EXT4-fs (loop5): Total free blocks count 0
[  633.513002][ T9797] EXT4-fs (loop5): Free/Dirty block details
[  633.518979][ T9797] EXT4-fs (loop5): free_blocks=68451041280
[  633.524936][ T9797] EXT4-fs (loop5): dirty_blocks=32
[  633.530233][ T9797] EXT4-fs (loop5): Block reservation details
[  633.536308][ T9797] EXT4-fs (loop5): i_reserved_data_blocks=2
[  634.009841][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  634.024678][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  634.681207][ T9823] loop7: detected capacity change from 0 to 512
[  634.769748][ T9823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  634.823026][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.915404][ T9827] loop3: detected capacity change from 0 to 1024
[  635.221593][ T9827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  636.154058][ T5136] Bluetooth: hci6: unexpected event for opcode 0x0c6d
[  636.187639][ T5136] erofs (device loop8): failed to decompress -26 in[46, 0] out[9000]
[  636.269760][ T8165] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.335881][ T9817] erofs (device loop8): failed to decompress -26 in[46, 4050] out[8192]
[  636.373313][ T8121] bridge_slave_1: left allmulticast mode
[  636.378995][ T8121] bridge_slave_1: left promiscuous mode
[  636.419723][ T8121] bridge0: port 2(bridge_slave_1) entered disabled state
[  636.433677][ T9817] erofs (device loop8): read error -117 @ 0 of nid 89
[  636.488119][ T8121] bridge_slave_0: left allmulticast mode
[  636.555052][ T9843] xt_connbytes: Forcing CT accounting to be enabled
[  636.561884][ T9843] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  636.573738][ T9843] xt_bpf: check failed: parse error
[  637.374070][ T8121] bridge_slave_0: left promiscuous mode
[  637.379968][ T8121] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.390176][   T30] audit: type=1800 audit(1746792032.621:29): pid=9817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.834" name="file2" dev="loop8" ino=89 res=0 errno=0
[  637.433256][ T8370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.574363][ T8121] bridge_slave_1: left allmulticast mode
[  637.591856][ T8121] bridge_slave_1: left promiscuous mode
[  637.597644][ T8121] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.809866][  T973] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  639.039653][  T973] usb 8-1: Using ep0 maxpacket: 8
[  639.106697][  T973] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  639.367441][  T973] usb 8-1: config 0 has no interfaces?
[  639.386119][  T973] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  640.370218][  T973] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.687417][ T8121] bridge_slave_0: left allmulticast mode
[  640.769520][ T8121] bridge_slave_0: left promiscuous mode
[  640.775354][ T8121] bridge0: port 1(bridge_slave_0) entered disabled state
[  640.854483][  T973] usb 8-1: config 0 descriptor??
[  641.089905][  T973] usb 8-1: can't set config #0, error -71
[  641.107408][  T973] usb 8-1: USB disconnect, device number 2
[  641.121099][ T9861] loop5: detected capacity change from 0 to 16
[  642.555434][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.7.844'.
[  644.110784][ T9861] loop5: detected capacity change from 0 to 512
[  644.193886][ T9861] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #17: comm syz.5.842: iget: bogus i_mode (0)
[  644.207302][ T9861] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.842: couldn't read orphan inode 17 (err -117)
[  644.314639][ T9861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  644.513909][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  645.779272][ T9881] loop3: detected capacity change from 0 to 512
[  645.842892][ T9881] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  646.072718][ T9881] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  646.083223][ T9881] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  646.115322][ T9881] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.847: Failed to acquire dquot type 0
[  646.227976][ T9881] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1129: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  646.467134][ T9881] EXT4-fs (loop3): 1 truncate cleaned up
[  646.519780][ T9881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  648.465441][ T8121] bond0 (unregistering): Released all slaves
[  648.537087][ T9894] loop8: detected capacity change from 0 to 512
[  648.576710][ T8121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  648.621681][ T9894] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  648.642956][ T8370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  648.912908][ T8121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  649.801290][ T9903] netlink: 'syz.7.851': attribute type 16 has an invalid length.
[  649.809056][ T9903] netlink: 'syz.7.851': attribute type 17 has an invalid length.
[  649.888361][ T9904] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  650.264108][ T9905] loop5: detected capacity change from 0 to 512
[  650.270788][ T8121] bond0 (unregistering): Released all slaves
[  650.294497][ T9905] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  650.304933][ T8372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  650.328140][ T9905] EXT4-fs (loop5): 1 truncate cleaned up
[  650.391919][ T9905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  650.640718][ T9913] loop8: detected capacity change from 0 to 2048
[  650.678151][ T9913] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  651.898555][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  653.210100][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.858'.
[  655.570569][ T8125] ------------[ cut here ]------------
[  655.576466][ T8125] WARNING: CPU: 1 PID: 8125 at io_uring/io_uring.c:2924 io_ring_exit_work+0x3c1/0xf60
[  655.586251][ T8125] Modules linked in:
[  655.590661][ T8125] CPU: 1 UID: 0 PID: 8125 Comm: kworker/u8:17 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) 
[  655.603401][ T8125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  655.613666][ T8125] Workqueue: iou_exit io_ring_exit_work
[  655.619358][ T8125] RIP: 0010:io_ring_exit_work+0x3c1/0xf60
[  655.625464][ T8125] Code: d1 09 00 00 48 8b 05 1e a9 3d 09 4c 8b b5 a8 fe ff ff 31 ff 49 29 c6 4c 89 f6 e8 ba b4 f7 fc 4d 85 f6 79 14 e8 40 b9 f7 fc 90 <0f> 0b 90 48 c7 85 a0 fe ff ff 70 17 00 00 e8 2c b9 f7 fc 48 8b b5
[  655.645368][ T8125] RSP: 0018:ffffc90002ef7aa0 EFLAGS: 00010293
[  655.651819][ T8125] RAX: 0000000000000000 RBX: ffff888053d42680 RCX: ffffffff84c368f6
[  655.660219][ T8125] RDX: ffff88801fb6da00 RSI: ffffffff84c36900 RDI: 0000000000000007
[  655.669258][ T8125] RBP: ffffc90002ef7c50 R08: 0000000000000007 R09: 0000000000000000
[  655.678287][ T8125] R10: fffffffffffffffb R11: 0000000000000000 R12: ffff888053d42040
[  655.686683][ T8125] R13: dffffc0000000000 R14: fffffffffffffffb R15: ffff888053d42000
[  655.695030][ T8125] FS:  0000000000000000(0000) GS:ffff888124ae8000(0000) knlGS:0000000000000000
[  655.704489][ T8125] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  655.711408][ T8125] CR2: 0000200000001000 CR3: 000000002a901000 CR4: 0000000000350ef0
[  655.719769][ T8125] Call Trace:
[  655.723355][ T8125]  <TASK>
[  655.726523][ T8125]  ? __pfx_io_ring_exit_work+0x10/0x10
[  655.732361][ T8125]  ? __lock_acquire+0xaa4/0x1ba0
[  655.737694][ T8125]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.743621][ T8125]  ? try_to_wake_up+0x157/0x1680
[  655.749007][ T8125]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.755317][ T8125]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.761181][ T8125]  ? process_one_work+0x9cf/0x1b70
[  655.766361][ T8125]  process_one_work+0x9cf/0x1b70
[  655.772593][ T8125]  ? __pfx_bond_alb_monitor+0x10/0x10
[  655.778079][ T8125]  ? __pfx_process_one_work+0x10/0x10
[  655.783552][ T8125]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.789270][ T8125]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.794996][ T8125]  ? assign_work+0x1a0/0x250
[  655.799667][ T8125]  worker_thread+0x6c8/0xf10
[  655.804340][ T8125]  ? __pfx_worker_thread+0x10/0x10
[  655.809531][ T8125]  kthread+0x3c5/0x780
[  655.813653][ T8125]  ? __pfx_kthread+0x10/0x10
[  655.818310][ T8125]  ? __pfx_kthread+0x10/0x10
[  655.822996][ T8125]  ? __pfx_kthread+0x10/0x10
[  655.827649][ T8125]  ? __pfx_kthread+0x10/0x10
[  655.832330][ T8125]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.838028][ T8125]  ? rcu_is_watching+0x12/0xc0
[  655.842900][ T8125]  ? __pfx_kthread+0x10/0x10
[  655.847551][ T8125]  ret_from_fork+0x48/0x80
[  655.852030][ T8125]  ? __pfx_kthread+0x10/0x10
[  655.856691][ T8125]  ret_from_fork_asm+0x1a/0x30
[  655.861573][ T8125]  </TASK>
[  655.864630][ T8125] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  655.871908][ T8125] CPU: 1 UID: 0 PID: 8125 Comm: kworker/u8:17 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) 
[  655.884156][ T8125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  655.894216][ T8125] Workqueue: iou_exit io_ring_exit_work
[  655.899782][ T8125] Call Trace:
[  655.903060][ T8125]  <TASK>
[  655.905991][ T8125]  dump_stack_lvl+0x3d/0x1f0
[  655.910603][ T8125]  panic+0x71c/0x800
[  655.914519][ T8125]  ? __pfx_panic+0x10/0x10
[  655.918955][ T8125]  ? show_trace_log_lvl+0x29b/0x3e0
[  655.924175][ T8125]  ? check_panic_on_warn+0x1f/0xb0
[  655.929311][ T8125]  ? io_ring_exit_work+0x3c1/0xf60
[  655.934433][ T8125]  check_panic_on_warn+0xab/0xb0
[  655.939402][ T8125]  __warn+0xf6/0x3c0
[  655.943351][ T8125]  ? io_ring_exit_work+0x3c1/0xf60
[  655.948483][ T8125]  report_bug+0x3c3/0x580
[  655.952839][ T8125]  ? io_ring_exit_work+0x3c1/0xf60
[  655.957961][ T8125]  handle_bug+0x184/0x210
[  655.962326][ T8125]  exc_invalid_op+0x17/0x50
[  655.966842][ T8125]  asm_exc_invalid_op+0x1a/0x20
[  655.971729][ T8125] RIP: 0010:io_ring_exit_work+0x3c1/0xf60
[  655.977472][ T8125] Code: d1 09 00 00 48 8b 05 1e a9 3d 09 4c 8b b5 a8 fe ff ff 31 ff 49 29 c6 4c 89 f6 e8 ba b4 f7 fc 4d 85 f6 79 14 e8 40 b9 f7 fc 90 <0f> 0b 90 48 c7 85 a0 fe ff ff 70 17 00 00 e8 2c b9 f7 fc 48 8b b5
[  655.997109][ T8125] RSP: 0018:ffffc90002ef7aa0 EFLAGS: 00010293
[  656.003188][ T8125] RAX: 0000000000000000 RBX: ffff888053d42680 RCX: ffffffff84c368f6
[  656.011162][ T8125] RDX: ffff88801fb6da00 RSI: ffffffff84c36900 RDI: 0000000000000007
[  656.019152][ T8125] RBP: ffffc90002ef7c50 R08: 0000000000000007 R09: 0000000000000000
[  656.027127][ T8125] R10: fffffffffffffffb R11: 0000000000000000 R12: ffff888053d42040
[  656.035101][ T8125] R13: dffffc0000000000 R14: fffffffffffffffb R15: ffff888053d42000
[  656.043088][ T8125]  ? io_ring_exit_work+0x3b6/0xf60
[  656.048233][ T8125]  ? io_ring_exit_work+0x3c0/0xf60
[  656.053371][ T8125]  ? __pfx_io_ring_exit_work+0x10/0x10
[  656.058843][ T8125]  ? __lock_acquire+0xaa4/0x1ba0
[  656.063808][ T8125]  ? srso_alias_return_thunk+0x5/0xfbef5
[  656.069461][ T8125]  ? try_to_wake_up+0x157/0x1680
[  656.074430][ T8125]  ? srso_alias_return_thunk+0x5/0xfbef5
[  656.080095][ T8125]  ? srso_alias_return_thunk+0x5/0xfbef5
[  656.085773][ T8125]  ? process_one_work+0x9cf/0x1b70
[  656.090897][ T8125]  process_one_work+0x9cf/0x1b70
[  656.095865][ T8125]  ? __pfx_bond_alb_monitor+0x10/0x10
[  656.101256][ T8125]  ? __pfx_process_one_work+0x10/0x10
[  656.106636][ T8125]  ? srso_alias_return_thunk+0x5/0xfbef5
[  656.112291][ T8125]  ? srso_alias_return_thunk+0x5/0xfbef5
[  656.117935][ T8125]  ? assign_work+0x1a0/0x250
[  656.122538][ T8125]  worker_thread+0x6c8/0xf10
[  656.127157][ T8125]  ? __pfx_worker_thread+0x10/0x10
[  656.132280][ T8125]  kthread+0x3c5/0x780
[  656.136364][ T8125]  ? __pfx_kthread+0x10/0x10
[  656.140964][ T8125]  ? __pfx_kthread+0x10/0x10
[  656.145557][ T8125]  ? __pfx_kthread+0x10/0x10
[  656.150158][ T8125]  ? __pfx_kthread+0x10/0x10
[  656.154751][ T8125]  ? srso_alias_return_thunk+0x5/0xfbef5
[  656.160399][ T8125]  ? rcu_is_watching+0x12/0xc0
[  656.165187][ T8125]  ? __pfx_kthread+0x10/0x10
[  656.169784][ T8125]  ret_from_fork+0x48/0x80
[  656.174220][ T8125]  ? __pfx_kthread+0x10/0x10
[  656.178815][ T8125]  ret_from_fork_asm+0x1a/0x30
[  656.183632][ T8125]  </TASK>
[  656.186973][ T8125] Kernel Offset: disabled
[  656.191308][ T8125] Rebooting in 86400 seconds..