last executing test programs:

20m45.055640683s ago: executing program 32 (id=1271):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@binder={0x73622a85, 0x1, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
poll(&(0x7f0000000240)=[{r1, 0x421a}], 0x1, 0x7)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

20m0.592116493s ago: executing program 33 (id=1644):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

19m58.624182826s ago: executing program 34 (id=1660):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

19m36.78292686s ago: executing program 35 (id=1803):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800010001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xfe6a, &(0x7f00000014c0)=""/4098, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23)

19m36.310201808s ago: executing program 36 (id=1807):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r0)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="819b24bd7000fbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4)

19m4.132325183s ago: executing program 37 (id=2017):
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x53, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x41, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x20008044)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000009, 0x32, 0xffffffffffffffff, 0x3000)
getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x80)

18m43.310115628s ago: executing program 38 (id=2240):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
close(0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10)

18m42.444418798s ago: executing program 39 (id=2250):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0)

18m12.61318858s ago: executing program 40 (id=2410):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000003680)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="8ea085", 0x3}], 0x1, 0x0, 0x0, 0xc000}], 0x1, 0x40040)

17m54.732767006s ago: executing program 41 (id=2481):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c851}, 0x4040080)

17m51.135400432s ago: executing program 42 (id=2495):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002180), 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x4c}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17m42.706754905s ago: executing program 43 (id=2539):
socket(0x28, 0x6, 0x72)
getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

16m44.127165456s ago: executing program 44 (id=2699):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0)

10m8.07809109s ago: executing program 45 (id=3648):
bpf$MAP_CREATE(0xb00000000000014, 0x0, 0x48)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xd000, 0x43102})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = eventfd(0xf3)
r6 = eventfd2(0xd, 0x1)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={r5, 0x3b, 0x2, r6})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

9m22.261688378s ago: executing program 46 (id=3771):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x804)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b<B\xc3k\xcd\x01\xe4\x05\n!\x02Y\xc7`ooveu`z\xb9\xf5r\xc0c\x95\xcbQbj5\xb1\x8f\xb9J\xa9#\x13\x92\x05H\x91\xa5\xdfxM\nD\xc70\xa11B\xf1\xab\xccw\x17\xbf\xc8W\xec\xb88\xc9\x1b*h\xc3c\x89n\x89ic\xfd\x9c\xfa~\xb5$VG\x85\xc2\x86\x89}*\x99\xda\x94\xba)\xb9b\xeb\xe9\x0f{V%TD\xbc\xee\x96C\x89No\xc9\n\x91\xe0\xfcqE4\x8c', 0x3a, '\x8c\xf0<\x06\xd3=(\xa0\x96k\xd8cf\x92\xd1\xed\xf5\x00\x00\xb5\xff\xd9o\x1c.\xecU \xc8\x12\xacf\x15I)S\xa5\xdb\x8f!\x8aA\xee$\x0e\x16\xf7wL\x9c~8\x10\xd2\nJ,D;Z \x92\xccY\xd7', 0x3a, './cgroup.cpu/cpuset.cpus/file0'}, 0x147)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

8m8.750280626s ago: executing program 7 (id=3956):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0)

8m8.208190257s ago: executing program 7 (id=3957):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth0_to_hsr\x00', &(0x7f00000002c0)=@ethtool_perm_addr={0x20, 0x6, "92d9108f75cd"}})

8m8.116708772s ago: executing program 4 (id=3958):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8m7.861626997s ago: executing program 7 (id=3959):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000003c0)='./file0\x00', 0x800, &(0x7f00000022c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_clone(0x22100900, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0)
ioprio_get$uid(0x3, 0xee01)
unlink(&(0x7f0000000000)='./file0/file0\x00')
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x90, 0x0, 0x401, {0x5, 0x0, 0x2, 0x293, 0x4, 0x5, {0x4, 0x8, 0x1, 0x9, 0x5, 0x0, 0x4, 0x7, 0x3, 0x2000, 0x3, 0xee01, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x2a, 0x6, 0x0, {0x5, 0x2, 0x1, 0x0, '+'}}, 0x2a)

8m7.711431106s ago: executing program 4 (id=3960):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0xd5a2, 0x24200)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0xb, 0x6})

8m6.787835079s ago: executing program 4 (id=3961):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
listen(r5, 0x0)
connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r5, 0x802)

8m5.831811183s ago: executing program 7 (id=3964):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1)
read(r4, &(0x7f0000000180)=""/65, 0x41)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}})
read(r4, &(0x7f0000000200)=""/95, 0x5f)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)

8m5.688861601s ago: executing program 4 (id=3966):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_mreq(r5, 0x29, 0x11, 0x0, &(0x7f0000002c40))
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1)

8m3.820177599s ago: executing program 4 (id=3970):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000140)={"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"})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x2ffe)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8m3.719441984s ago: executing program 4 (id=3972):
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0], 0x38, 0x10}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)

7m58.821635206s ago: executing program 7 (id=3982):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000002000010000000000fcdbdf250a005ffc00000003c7cb0300050016000200000014000200fc0200000000000000000008000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4c820)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

7m57.743838027s ago: executing program 7 (id=3986):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x101}, 0x1c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

7m48.613649531s ago: executing program 47 (id=3972):
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0], 0x38, 0x10}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)

7m42.272536785s ago: executing program 48 (id=3986):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x101}, 0x1c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

6m16.688430185s ago: executing program 3 (id=4178):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
syz_emit_ethernet(0x7a, &(0x7f0000005880)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "827503", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x6, 0x1, 0x2, 0x0, 0x1, 0x2, 0x3, 0x9}, 0x1, {0xcd9a}}}, {0x8, 0x22eb, 0x2, {{0x9, 0x2, 0x6, 0x1, 0x1, 0x3, 0x2, 0x6}, 0x2, {0x4, 0xceaa, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0)

6m16.407400502s ago: executing program 3 (id=4181):
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a419", 0x1ff, 0x6000000000000000, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000c000580"], 0x44}}, 0x20048004)

6m14.68786539s ago: executing program 3 (id=4183):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18}, 0xc800)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r1, 0xe, &(0x7f0000000100)={0xb, 0x80000100008a}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
r8 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0)
write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
sendto$inet(r7, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r7, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)
ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, 0x0, 0x0)

6m13.608755122s ago: executing program 0 (id=4184):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x5, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8880}, 0x0)

6m13.424532623s ago: executing program 3 (id=4185):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
close_range(0xffffffffffffffff, r0, 0x2)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1)

6m13.315704349s ago: executing program 0 (id=4187):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

6m12.002122324s ago: executing program 0 (id=4189):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1)
read(r4, &(0x7f0000000180)=""/65, 0x41)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}})
read(r4, &(0x7f0000000200)=""/95, 0x5f)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)

6m10.51251024s ago: executing program 0 (id=4191):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

6m9.850995638s ago: executing program 3 (id=4195):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18}, 0xc800)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
r8 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0)
write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
sendto$inet(r7, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r7, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)
ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, 0x0, 0x0)

6m9.099886221s ago: executing program 3 (id=4201):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1)
read(r4, &(0x7f0000000180)=""/65, 0x41)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}})
read(r4, &(0x7f0000000200)=""/95, 0x5f)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)

6m7.665513853s ago: executing program 49 (id=4201):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1)
read(r4, &(0x7f0000000180)=""/65, 0x41)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}})
read(r4, &(0x7f0000000200)=""/95, 0x5f)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)

6m7.660352664s ago: executing program 0 (id=4204):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@noload}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x41b, &(0x7f0000000940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x4)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x6000)
setresuid(0xee01, r1, r1)
pwrite64(r0, &(0x7f0000000000)='2', 0xfffffe6b, 0x5)

6m7.051688109s ago: executing program 0 (id=4207):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x110, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x0, 0x5}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
pwritev2(r1, &(0x7f0000000300)=[{&(0x7f00000003c0)="1bbc54a603ff246bd56edbce6558", 0xe}, {&(0x7f0000000040)="010130a7cd08f1cac7c721e886dd", 0x4a}], 0x2, 0xa74a, 0x80000000, 0x10)

6m5.791531591s ago: executing program 50 (id=4207):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x110, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x0, 0x5}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
pwritev2(r1, &(0x7f0000000300)=[{&(0x7f00000003c0)="1bbc54a603ff246bd56edbce6558", 0xe}, {&(0x7f0000000040)="010130a7cd08f1cac7c721e886dd", 0x4a}], 0x2, 0xa74a, 0x80000000, 0x10)

2m38.024176151s ago: executing program 9 (id=4787):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd2(0x400009, 0x80000)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x9, 0x2, r2})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = eventfd2(0x8, 0x80001)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r4, 0x7, 0x2, r2})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m37.587970647s ago: executing program 9 (id=4789):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x800)

2m36.626637903s ago: executing program 9 (id=4791):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r1, 0x13, &(0x7f0000000000)={0x24, 0xfe81, 0xffffffff})
tkill(r1, 0x12)
waitid(0x0, 0x0, 0x0, 0x8100000e, &(0x7f00000002c0))

2m36.307667702s ago: executing program 9 (id=4792):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@grpquota}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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")
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0)
creat(&(0x7f0000000580)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9)
write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b)
mremap(&(0x7f0000040000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0xc, 0x4)
io_setup(0x20, &(0x7f0000001140))

2m33.753630971s ago: executing program 9 (id=4802):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000003c0)='./file0\x00', 0x800, &(0x7f00000022c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_clone(0x22100900, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0)
ioprio_get$uid(0x3, 0xee01)
unlink(&(0x7f0000000000)='./file0/file0\x00')
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x90, 0x0, 0x401, {0x5, 0x0, 0x2, 0x293, 0x4, 0x5, {0x4, 0x8, 0x1, 0x9, 0x5, 0x0, 0x4, 0x7, 0x3, 0x2000, 0x3, 0xee01, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x2a, 0x6, 0x0, {0x5, 0x2, 0x1, 0x0, '+'}}, 0x2a)

2m32.263820898s ago: executing program 9 (id=4810):
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ppoll(&(0x7f0000001080), 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x8, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}}}})

2m31.7084127s ago: executing program 51 (id=4810):
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ppoll(&(0x7f0000001080), 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x8, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}}}})

10.035964464s ago: executing program 8 (id=5212):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x3, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)={0x2f})
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00011, &(0x7f00000002c0)={[{@orlov}, {@journal_dev={'journal_dev', 0x3d, 0x3b6}}, {@nodiscard}, {@resuid}]}, 0x0, 0x617, &(0x7f0000001100)="$eJzs3c9vVNUeAPDvnf6kfe9NIS/viQtpYgwkSksLGGJMhD0h+GPnqtJCkEIJrdEiiSXBjYlx48LElQvxv1ASt/4DLty4MiTEGBZiiIy5M3PL7XSmP6admTLz+SRXz7mXOefcyXz7vXPm3JkAetZ4+p9CxMGIuJ5EFHPH+qN6cLzy7x7+cetCuiVRKr39exK3PklW8m0l1f+PVh/8dzGSdOeBvvX9Li7fvDIzPz93o1qfXLp6fXJx+ebRy1dnLs1dmrs2/er0qZMnTp6aOraj8yvkymfvvP9h8bNz73779eNk6rtfziVxOp5Ux5aeV+1jh3bUc/qcjUep4lF+f/q8ntph23vFn8XsdfJUUrsj0y0n3UUuVl+PAxHx/yhGX+5VX4xP3+zo4ICWKiWrObIE9JqkqcAf3v2BAG2WXQdk7+3rvQ9er9DKSxKgTR6cqUwAVGJ/ICKy+O+vzA3GcHluYORhsmaeJ4mInc3MVaR9/PTjuTvpFg3m4YDWWLmdzffV5v+kHJtjMVyujTwsrIn/Qm5L97/VZP+VvzFP5xzFP7TPyu2IeK6a/wdjW/E/nov/9+q2vvknaOM1dfEPAAAAAAAAzbt3JiJeqbf+r7C6/mewzvqf0Yg4vQv9b/75X+F+tZDsQndAzoMzEa/XXf+7usZ3rK9a+3d5PcBAcvHy/NyxiPhPRByJgaG0PlXTbn6F8NHPD3zVqP/8+r90S/vP1gJWW7rfX7OMYHZmaWan5w1EPLgd8Xx5/e+h6p6163/S/J/Uyf9pfF/fYh8HXrp7vtGxzeMfaJXSNxGH6+b/p5fbycbfzzFZvh6YzK4K1nvh4y++b9S/+IfOSfP/yMbxP5Tkv69ncXvtD0bE8eX+UqPjzV7/Dybv9GXtpz6aWVq6MRUxmJxdv396e2OGbpXFQxYvafwfeXHj+b/V6/9cHO6LiJUt9vm/J6O/Njom/0PnpPE/u3H+H1ub/7dfmL479kOj/s9vKf+fKOf0I9U95v8gb/33cWw1QDsyXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4xhUi4l+RFCZWy4XCxETEaET8N0YK8wuLSy9fXPjg2mx6rPz7/4Xsl36LlXqS/f7/WK4+XVM/HhH7I+LLvn3l+sSFhfnZTp88AAAAAAAAAAAAAAAAAAAA7BGj5Xv+S0O19/+nfuvr9OiAVkpjPvqrFfEOvae/6UeWhnZ1IEDbNR//wLOucfzXpveBlo8FaK/G8f/ocamsrcMB2sj1P/SuJuPfxwXQBeR/6FVbnNMbbvU4gE6Q/wEAAAAAoKvsP3Tv5yQiVl7bV95Sg9VjFvtDdyt0egBAx1jDC72rf6HTIwA6xXt8IFkt/VX3Zv/Gq/+T1gwIAAAAAAAAAAAAAFjn8EH3/0Ov2vj+f2v7oZttcP9/veD3dQHQRRr/9IfcD93Oe3zoaaXiFrK9+/8BAAAAAAAAAAAAYA8YvnllZn5+7sbi8rNXeGPXW85uh27h4Fdm9sJTt7uFJ61peSAi9sYJtrsw2PrX4WaFDv5NAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1vgnAAD//48wHak=")

9.482211446s ago: executing program 1 (id=5217):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @aes128, 0x16, @auto="d883bead66483ec6"})

9.252109479s ago: executing program 5 (id=5221):
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x2, 0x7, 0x0, 0xe}, 'syz0\x00', 0x1c})
close(0xffffffffffffffff)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)})
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x10040, 0xffffffff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x4008104)
setitimer(0x1, &(0x7f00000001c0)={{0xfffffffffffffffe, 0x123c}, {0xffffffffffffffff, 0x2}}, 0x0)

9.107938838s ago: executing program 1 (id=5222):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)

5.806012211s ago: executing program 5 (id=5224):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180))
openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0)

5.595903103s ago: executing program 1 (id=5226):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
mknodat(r0, &(0x7f0000000240)='./file0/file0\x00', 0x8910, 0x2)
open_tree(r0, &(0x7f00000000c0)='./file0\x00', 0x1100)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
socket(0xa, 0x3, 0x3a)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a003000", @ANYRESOCT], 0xb8}}, 0x4000)

5.395895124s ago: executing program 5 (id=5227):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x28040c1, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x80}}, {@nobarrier}]}, 0xfb, 0x7a0, &(0x7f0000000280)="$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")
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140))
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280))
ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x2, 0x598, 0xf0, 0x0, 0xffffffff, 0xf0, 0x3f8, 0x4c8, 0x4c8, 0xffffffff, 0x4c8, 0x4c8, 0x5, 0x0, {[{{@ipv6={@remote, @private2, [0xff], [], 'veth1_virt_wifi\x00', 'ipvlan1\x00', {}, {}, 0x8}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@loopback, @gre_key=0x6, @gre_key=0x73b}}}, {{@ipv6={@loopback, @empty, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00', {}, {}, 0x5c, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0x1f8, 0x238, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x13b, 0x8, 'fsm\x00', "0100832d3f384a5a0c7d1599794f64c34da71224c8bc9bcaf1eb90957853ab32e3ef32677fc33754d786f2ab756c28dea7737205431a1a56fb1fd8752ea258b9a0475e97eb8f0b6af6f42ffef330f1b73e64bc46b3ab73c9ecad90528a7215a159b2264b5806aa27220531f24db0414a915c27f6033240604d1cf38dd88d3657", 0x22, 0x3, {0x7}}}, @common=@srh1={{0x90}, {0x16, 0x7, 0x9, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @local, [0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffffff, 0xff, 0xff000000], [0xffffffff, 0x0, 0xff000000], 0x200, 0x300}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x5f8)

5.382205145s ago: executing program 2 (id=5228):
r0 = dup(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(0xffffffffffffffff, 0x0, 0xfdef)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000100)=0x3)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000180)=0x6, 0x4)
userfaultfd(0x80001)
r2 = socket$inet6(0xa, 0x80002, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x300, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

5.323683539s ago: executing program 6 (id=5229):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000001180)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0x5, 0xc, 0x0, 0xbffffffc, 0x3, 0x32, 0x7fff, 0x7, 0x3, 0xe, 0x5f, 0x4, 0xd88, 0x200002, 0x80000000, 0x5, 0x4001ff, 0xfffffff9, 0x6}})
flock(r0, 0x5)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000100001040000", @ANYRES32=r4, @ANYBLOB="31000000bf3f9f8008000a00", @ANYRES32=0x0, @ANYBLOB="2c001280110001006272696467655f736c6176650000cd1a14000580080022008554b58fe386a1", @ANYRES32=0x0], 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b02300ffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fcntl$getownex(r5, 0x10, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x68, r11, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e38e7e1a5ea29bfc1b77b94955c07855eb12198979fea4538f5c09ab625bff936d53d3b7"}}]}, @TIPC_NLA_BEARER={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000024}, 0x0)

5.281807011s ago: executing program 1 (id=5230):
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
read$FUSE(r0, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0)
shutdown(r1, 0x1)
splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0)

4.44079165s ago: executing program 8 (id=5231):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x40042, 0x1, 0x2}, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf)
read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024)
lseek(r0, 0xfffffffffffffff5, 0x1)

4.201873454s ago: executing program 6 (id=5232):
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
getpid()
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f00000003c0)=0x1000, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x540, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x8000, &(0x7f0000000a80)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES8=r3, @ANYBLOB="41f53d8ea4eec15e3b0ac51edc2f1a99904001af7628ab56cda055a83b23b4f950c1c337588ed3b42f34752bd70e307237c846cc2d4de67127ff2177b7ea426e8b93f4f72bd2f6a34234016c53ee26f75eaa7e6df5a207f445cd303f6afb4f6370dc09696c91a171cbb13732c4f50f6b8ad51c1317eea579f39b1b38e75b237b78fbdef031ae262245dad9f72613b062a823e826dd87cac564731eb0f5bf6f48d4a3bf48ac3bf16381b3da5cd075213cf2f8d136d8653803ba3dc9e88a953bb68a9f1b4f2c06baa855d2cfcdb94edc48223db9c7a2c25a3b9080ecd549252f5ab8f73f46a9e8da6d7a0ff3", @ANYRESHEX, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2c6, &(0x7f0000000740)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000580)={[{@utf8}, {@umask={'umask', 0x3d, 0x8000}}, {@uid={'uid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0x1}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@errors_remount}]}, 0x1, 0x152b, &(0x7f0000002f80)="$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")
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00')
read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0xcb0a)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$int_in(r8, 0x5452, &(0x7f0000000240)=0x2)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f0000002380)={0xa, 0x4e20, 0x10000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1ff}, 0x1c)

4.147962217s ago: executing program 8 (id=5233):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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")
sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0xc001}, 0x1)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b)

4.055409463s ago: executing program 2 (id=5234):
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x2, 0x7, 0x0, 0xe}, 'syz0\x00', 0x1c})
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
setitimer(0x1, 0x0, 0x0)

4.044592543s ago: executing program 1 (id=5235):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x20000)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000240)={0xffff24df, 0x2bc04a7e, 0x1, 'queue1\x00', 0x4})
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00')
pread64(r5, &(0x7f00000006c0)=""/218, 0xda, 0x7)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)

3.123874857s ago: executing program 8 (id=5236):
socket$inet(0x2, 0x4000000000000001, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0xa, 0x0, 0x38}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

3.116338178s ago: executing program 6 (id=5237):
unshare(0x62000000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000180001002dbd6000fadbdf2502203014fd"], 0x2c}, 0x1, 0x0, 0x0, 0x48881}, 0x80)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0)

2.370877781s ago: executing program 1 (id=5238):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x78d, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCzbdhsQ80mW7Kb0oQcWkTwIqh4EPTSsy/15tWXq/4XHqSlalqseJDIbGbbbbObbtrsbjCfD0z2eWZm8zzffWaeeWZn2AlgzxpL/+QiDkXEh0nESDY/iYiBWqo/4sTGerfXVgvplMT6+pu/J7V1bq2tFqLhPakDWebJiPjhvYjDuc3lVpZX5qZLpeJilp+ozp+fqCyvHDk3Pz1bnC0uHJucmjp6/IXjx3Yu1j9/Xjl4/aPXnv36xN/vPnH1gx+TOBEHs2WNceyUsRjLPpOB9CO8x6s7XViPJb2uAA8l3TX7NvbyOBQj0VdLtTDUzZoBAJ2yDgDsQYkxAADsMfXvAW6trRbqU2+/keiuG69ExP6N+OvXNzeW9GfX7PbXroMO30ruuTKSRMToDpQ/FhGff/v2l+kUWTu4lgZ0w6XLEXFmdGxz/59sumdhu57bauH6YO1l7L7Ze+34A730XTr+ebHZ+C93Z/wTTcY/g0323Yfx4P0/dy1L9O1AcZuk47+XG+5tu90Qf2a0L8v9rzbmG0jOnisV077t/xExHgODaX6ytmrzkdv4zX9utiq/cfz3x8fvfJGWn77eXSN3rX/w3vfMTFenHzXuuhuXI57qbxZ/cqf9kxbj31NtlvH6S+9/1mpZGn8ab33aHH9nrV+JeKZp+99ty2TL+xMnapvDRH2jaOKbXz4dblV+Y/unU1p+/VygG9L2H946/tGk8X7NyvbL+OnKyPetlj04/ubb/77krVp6Xzbv4nS1ujgZsS95Y/P8o3ffW8/X10/jH3+6+f6/UWzz7T89JzzTZvz913/76uHj76w0/plttf/2E1dvz7Xsu9tr/6laajyb007/124FH+WzAwAAAAAAAAAAAAAAAAAAAAAAAIB25SLiYCS5/J10LpfPbzzD+/EYzpXKlerhs+WlhZmoPSt7NAZy9Z+6HGn4PdTJ7Pfw6/mj9+Wfj4jHIuKTwaFaPl8ol2Z6HTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZA60eP5/6tfBXtcOAOiY/b2uAADQdY7/ALD3bO/4P9SxegAA3eP8HwD2nraP/2c6Ww8AoHu2e/7f16F6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8J916uTJdFr/a221kOZnLiwvzZUvHJkpVuby80uFfKG8eD4/Wy7Plor5Qnm+5T+6tPFSKpfPT8XC0sWJarFSnagsr5yeLy8tVE+fm5+eLZ4uDnQtMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoX2V5ZW66VCouSmyZGNod1dg1if7YFdWQ6FiisZcY6l0HBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDL/RsAAP//gWUuJA==")
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000)
timer_create(0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

2.247970878s ago: executing program 2 (id=5239):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setpgid(r0, r0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000200)=0x6, 0x4)

2.22189508s ago: executing program 8 (id=5240):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x566b, 0x2, 0x1, 0x257})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4862, 0xc3)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)={[{0x2d, 'pids'}]}, 0x6)
write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x6)
io_uring_enter(r0, 0x2000000, 0x2, 0xf, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)

2.183034402s ago: executing program 5 (id=5241):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffdfffffffffffd}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[], 0x0)

1.858437471s ago: executing program 5 (id=5242):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001640)={[{@init_itable}]}, 0xff, 0x49b, &(0x7f0000001040)="$eJzs3MtvVNUfAPDvnbY8fjzaHyIKglbQSHy0tKCycKFGExeamOgCl7UtiAzU0JoIabQYg0tD4t64NPEvcOfGqAtj4lYTl4aEaGNCcTXmvugwnSltaTvS+XyS6ZxzH3PO9957Zs69p/cG0LH60z9JxPaI+DUievPsrQv0529zs9OjN2anR5Oo1d74M8mWuz47PVouWq63rcgcrkRUPkni+WRhuZMXLp4ZqVbHzxf5wamz7w1OXrj41OmzI6fGT42fGz5+/NjRoWefGX56VeJM47q+78OJ/XtfeevKa6Mnrrz9w9dptfYcyOfXx3FbN5oE1ER/utX+qmUa5z26jLrfDXbUpZPuNlaEZemKiHR39WTtvze6Yn7n9cbLH7dec/P6VBBYM+lv0yIteaYGbGBJtLsGQHuUP/Tp+W/5Wqeux3/CtRciNhXpudnp0bmb8XdHpZjes4bl90fEiZl/vkhfsdzrEAAAK5D1bZ5s1v+rxJ7sPR/r2FmMofRFxP8jYldE3BMRuyPi3ohs2fsi4v585VrvEsvvb8gv7P9Urjat8ypJ+3/P1fX95uriL976uorcjiz+nuTk6er4kWKbHI6ezWl+aJEyvn3pl89azavv/6WvtPyyL1hU4Gp3wwW6sZGpkdXaCNcuRezrbhZ/cnMkID0C9kbEvuV99M4ycfrxr/a3Wuj28S9iFcaZal9GPJbv/5loiL+ULD4+ObglquNHBsujYqEff778eqvy7yj+VXDt4AN5Yn7/NyzR+3eSj9f2RLU6fn5y+WVc/u3Tluc0Kz3+NyVvZmPWP72TT/tgZGrq/FDEpuTVLF+e02XTh+fXLfPl8unxf/hQ8/a/q1gnjT/dSulBfCAiHoyIh4q6PxwRByPi0CLxf//iI+8uEn8SSbRv/1+KGGv6/Xfz+O9L6sfrV5DoOvPdN61GzOv3fy1ptf+PxUz2XZvLvv9uY6kVvMPNBwAAAHeFSkRsj6QykKf7t0elMjCQ/w//7vhfpToxOfXEyYn3z43l9wj0RU+lvNLVW3c9dCiZKT4xzw8X14rL+UeL68afd23N8gOjE9WxNscOnW7bre0/yvaf+qOr3bUD1pz7taBzNbb/SpvqAay/pfz+OxeAjenW9r8l/bO1XXUB1pfzf+hczdr/Rw15/X/YmBY+AOj3Jo+sAzYi/X/oXNo/dC7tHzpSfif8lVjJff0rT5Q3C6z8c7Ys+Q7/TkmUT7xYy7K2xvyUqLQ95A5KpC1mfQudf4YKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3ezfAAAA//+5XeWQ")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000400)='f', 0x1, 0x2000003)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
setreuid(0xee01, 0xee00)
sendfile(r1, r1, 0x0, 0xe3aa6ea)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x8, 0x100000002, 0x1000000000000000, 0x4})

1.858332811s ago: executing program 6 (id=5243):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x40042, 0x1, 0x2}, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf)
read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024)
lseek(r0, 0xfffffffffffffff5, 0x1)

1.109586765s ago: executing program 2 (id=5244):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
dup(0xffffffffffffffff)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xa052)

834.385481ms ago: executing program 6 (id=5245):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf25020000001800018004000200"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20008004)

99.730534ms ago: executing program 2 (id=5246):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf535}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

93.498524ms ago: executing program 2 (id=5247):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d", 0x14)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
r2 = socket(0x2c, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
sigaltstack(&(0x7f0000000340)={0x0, 0x80000000}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000040), &(0x7f0000000080)=@udp6=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp=r2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r3, &(0x7f0000000540)}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000007e5000008"], 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc)

63.393896ms ago: executing program 5 (id=5248):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x20000)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000240)={0xffff24df, 0x2bc04a7e, 0x1, 'queue1\x00', 0x4})
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00')
pread64(r5, &(0x7f00000006c0)=""/218, 0xda, 0x7)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)

51.516247ms ago: executing program 8 (id=5249):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

0s ago: executing program 6 (id=5250):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socket$vsock_stream(0x28, 0x1, 0x0)
setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

[T18901] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[ 1061.766305][T18901] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (40000)
[ 1062.155727][T18905] tipc: Started in network mode
[ 1062.183877][T18905] tipc: Node identity 72210a57b027, cluster identity 4711
[ 1062.244409][T18905] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1062.358305][T18901] tipc: Resetting bearer <eth:syzkaller0>
[ 1062.531948][T18863] device hsr_slave_0 entered promiscuous mode
[ 1064.267921][ T4284] Bluetooth: hci4: command 0x040f tx timeout
[ 1064.339339][T18863] device hsr_slave_1 entered promiscuous mode
[ 1064.419327][T17292] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1064.431478][T17292] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1064.441070][T17292] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1064.448032][T18863] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1064.455637][T18863] Cannot create hsr debugfs directory
[ 1064.462934][ T4286] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1064.470478][ T4286] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1064.477682][ T4286] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1064.752280][T18900] tipc: Disabling bearer <eth:syzkaller0>
[ 1064.843418][T18831] tipc: Node number set to 3255175767
[ 1067.169388][ T4286] Bluetooth: hci4: command 0x0419 tx timeout
[ 1067.175469][ T4286] Bluetooth: hci6: command 0x0409 tx timeout
[ 1068.590775][T18919] chnl_net:caif_netlink_parms(): no params data found
[ 1069.238364][ T4286] Bluetooth: hci6: command 0x041b tx timeout
[ 1069.771835][T18919] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1069.839082][T18919] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1069.847647][T18919] device bridge_slave_0 entered promiscuous mode
[ 1069.964200][T18968] loop2: detected capacity change from 0 to 512
[ 1070.059860][T18968] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1070.108117][T18968] EXT4-fs (loop2): SIPHASH is not a valid default hash value
[ 1070.453642][T18919] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1070.468057][T18919] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1070.496271][T18919] device bridge_slave_1 entered promiscuous mode
[ 1070.533357][T18971] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1070.678784][T18919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1070.743947][T18919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1070.973262][T18919] team0: Port device team_slave_0 added
[ 1071.182514][T18919] team0: Port device team_slave_1 added
[ 1071.319857][ T4286] Bluetooth: hci6: command 0x040f tx timeout
[ 1071.874184][T18994] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4025'.
[ 1071.884316][T18919] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1071.904978][T18919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1072.262457][T18919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1072.276632][T19001] loop3: detected capacity change from 0 to 128
[ 1072.414660][T18919] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1072.421735][T18919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1072.448662][T18919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1072.460959][T19005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4027'.
[ 1072.536650][T18919] device hsr_slave_0 entered promiscuous mode
[ 1072.585735][T18919] device hsr_slave_1 entered promiscuous mode
[ 1072.612094][T18919] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1072.635708][T18919] Cannot create hsr debugfs directory
[ 1072.677786][T19010] loop2: detected capacity change from 0 to 128
[ 1072.752437][T18863] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1072.824822][T19010] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1072.848638][T19010] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1072.872103][T18863] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1072.981251][T18863] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1073.056953][T18863] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1073.169735][T17809] EXT4-fs (loop2): unmounting filesystem.
[ 1073.292783][T19024] loop3: detected capacity change from 0 to 256
[ 1073.348991][T19024] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[ 1073.438213][ T4286] Bluetooth: hci6: command 0x0419 tx timeout
[ 1075.203620][T19026] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1075.859839][T18863] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1075.973832][T19035] loop3: detected capacity change from 0 to 40427
[ 1076.001623][T19035] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 1076.049721][T19035] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1076.146949][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1076.155266][T19035] F2FS-fs (loop3): invalid crc value
[ 1076.158450][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1076.185902][T18863] 8021q: adding VLAN 0 to HW filter on device team0
[ 1076.252866][T19035] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1076.273484][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1076.302626][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1076.346521][ T4498] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1076.353691][ T4498] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1076.401377][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1076.441346][T18327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1076.484935][T18327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1076.533770][T19035] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1076.542007][T18327] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1076.549175][T18327] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1076.558438][T19035] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1076.644657][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1076.662093][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1077.438956][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1077.510986][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1077.545583][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1078.777420][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1078.794153][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1078.834366][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1078.881271][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1078.939827][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1078.977164][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1079.029958][T18863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1079.070995][T18919] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1079.196602][T18919] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1079.270892][T18919] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1079.340527][T18919] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1079.744334][T18919] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1079.840011][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1079.860113][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1079.911631][T18919] 8021q: adding VLAN 0 to HW filter on device team0
[ 1079.965372][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1080.004274][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1080.028756][ T4488] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1080.035911][ T4488] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1080.107177][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1080.128781][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1080.193387][ T4488] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1080.200555][ T4488] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1080.229911][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1080.269353][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1080.348656][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1080.408782][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1080.481645][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1080.519246][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1080.549193][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1080.587407][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1080.636965][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1080.664460][T18919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1080.736725][T18919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1080.792553][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1080.822674][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1080.877099][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1080.927738][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1080.994652][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1081.036417][T18863] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1081.598273][T19101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4040'.
[ 1083.758244][T19125] loop2: detected capacity change from 0 to 256
[ 1083.832512][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1083.846717][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1083.928773][T18919] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1083.952776][T19125] FAT-fs (loop2): Directory bread(block 64) failed
[ 1085.673200][T19125] FAT-fs (loop2): Directory bread(block 65) failed
[ 1086.698449][T19125] FAT-fs (loop2): Directory bread(block 66) failed
[ 1086.706369][T18351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1086.815975][T19125] FAT-fs (loop2): Directory bread(block 67) failed
[ 1086.828687][T18351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1086.838173][T19125] FAT-fs (loop2): Directory bread(block 68) failed
[ 1086.844685][T19125] FAT-fs (loop2): Directory bread(block 69) failed
[ 1086.928496][T18351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1086.944121][T19125] FAT-fs (loop2): Directory bread(block 70) failed
[ 1086.958380][T18351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1086.990193][T19125] FAT-fs (loop2): Directory bread(block 71) failed
[ 1087.047811][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1087.059080][T19125] FAT-fs (loop2): Directory bread(block 72) failed
[ 1087.072799][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1087.134586][T18919] device veth0_vlan entered promiscuous mode
[ 1087.141462][T19125] FAT-fs (loop2): Directory bread(block 73) failed
[ 1087.196053][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1087.268868][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1087.305489][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1087.343874][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1087.390379][T18919] device veth1_vlan entered promiscuous mode
[ 1087.429965][T18863] device veth0_vlan entered promiscuous mode
[ 1087.451530][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1087.481130][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1087.561276][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1087.653940][T18863] device veth1_vlan entered promiscuous mode
[ 1087.717491][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1087.728961][ T4284] Bluetooth: hci1: command 0x0406 tx timeout
[ 1087.735811][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1088.938501][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1088.949104][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1088.988666][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1089.055136][T18919] device veth0_macvtap entered promiscuous mode
[ 1089.139219][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1089.187148][T18919] device veth1_macvtap entered promiscuous mode
[ 1089.228708][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1089.257083][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1089.330386][T18863] device veth0_macvtap entered promiscuous mode
[ 1089.381551][   T27] kauditd_printk_skb: 8 callbacks suppressed
[ 1089.381566][   T27] audit: type=1326 audit(1770615630.083:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.2.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7af9aeb9 code=0x7ffc0000
[ 1089.423950][T18863] device veth1_macvtap entered promiscuous mode
[ 1089.453623][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1089.474869][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1089.490068][   T27] audit: type=1326 audit(1770615630.083:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.2.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7af9aeb9 code=0x7ffc0000
[ 1089.522839][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1089.576433][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1089.598227][   T27] audit: type=1326 audit(1770615630.103:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.2.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b7af5b78e code=0x7ffc0000
[ 1089.641002][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1089.668023][ T4410] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1089.675666][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1089.688021][   T27] audit: type=1326 audit(1770615630.103:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.2.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b7af9ab4b code=0x7ffc0000
[ 1089.717927][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1089.737927][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1089.758144][   T27] audit: type=1326 audit(1770615630.103:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.2.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b7af9ab4b code=0x7ffc0000
[ 1089.780783][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1089.811919][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1089.842380][   T27] audit: type=1326 audit(1770615630.113:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.2.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b7af9ab4b code=0x7ffc0000
[ 1089.857949][ T4410] usb 3-1: Using ep0 maxpacket: 16
[ 1089.865127][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1089.901531][ T4410] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1089.909443][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1089.926791][   T27] audit: type=1326 audit(1770615630.113:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.2.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b7af9ab4b code=0x7ffc0000
[ 1089.929741][ T4410] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1089.975776][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1090.006887][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1090.035180][   T27] audit: type=1326 audit(1770615630.383:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.2.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b7af9ab4b code=0x7ffc0000
[ 1090.075937][T18919] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1090.113781][ T4410] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1090.158037][   T27] audit: type=1326 audit(1770615630.383:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.2.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b7af9ab4b code=0x7ffc0000
[ 1090.157983][ T4410] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1090.161814][ T4410] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1090.278319][   T27] audit: type=1326 audit(1770615630.603:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19152 comm="syz.2.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b7af9ab4b code=0x7ffc0000
[ 1090.368052][ T4410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1090.418589][ T4410] usb 3-1: Product: syz
[ 1090.447762][ T4410] usb 3-1: Manufacturer: syz
[ 1090.470006][ T4410] usb 3-1: SerialNumber: syz
[ 1090.498135][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1090.560265][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1090.601025][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1090.640448][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1090.727157][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1090.738622][ T4410] usb 3-1: 0:2 : does not exist
[ 1090.772261][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1090.819185][ T4410] usb 3-1: USB disconnect, device number 27
[ 1090.823019][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1090.908058][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1090.957989][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1091.016208][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1091.063051][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1091.079838][T19175] udevd[19175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1091.124334][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1091.160397][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1091.955112][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.017995][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1092.064008][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.094940][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1092.125878][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.159759][T18919] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1092.179541][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1092.207998][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.238012][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1092.270174][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.293363][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1092.316338][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.353485][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1092.394251][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.446063][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1092.490844][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.537183][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1092.590135][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.635701][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1092.693625][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.738257][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1092.784798][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.839943][T18863] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1092.853633][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1092.893280][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1092.958827][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1092.988984][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1093.176527][T18919] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.229200][T18919] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.270658][T18919] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.295806][T18919] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1094.583992][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1094.628101][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.668114][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1094.718026][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.749485][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1094.816641][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.846967][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1094.888366][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.908064][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1094.976828][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.357636][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1095.522227][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.554581][T19218] loop2: detected capacity change from 0 to 2048
[ 1095.597992][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1095.618890][T19218] EXT4-fs: Ignoring removed i_version option
[ 1095.625912][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.658296][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1095.697968][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.729468][T18863] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1095.818399][T19218] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1095.826907][T19218] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1095.899233][T17993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1095.910825][T17993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1096.048584][T19218] fs-verity: sha512 using implementation "sha512-avx2"
[ 1096.060085][T18863] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1096.097314][T18863] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1096.134100][T18863] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1096.173157][T18863] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1096.312076][T17809] EXT4-fs (loop2): unmounting filesystem.
[ 1096.441741][ T4496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1097.912226][ T4496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1098.047198][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1098.108775][ T4496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1098.116598][ T4496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1098.154519][T12663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1098.220879][T12663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1098.267062][T18327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1098.276331][T18327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1098.301763][T17731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1098.313595][T17731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1098.340377][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1099.715643][T19251] loop0: detected capacity change from 0 to 512
[ 1099.851346][T19259] loop8: detected capacity change from 0 to 256
[ 1099.883485][T19251] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1099.914196][T19259] FAT-fs (loop8): Unrecognized mount option "ÿÿÿÿ°ºÿê~{£4øýá÷’�èëvX*0xffffffffffffffff" or missing value
[ 1099.941168][T19251] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1100.349541][T19264] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.4012: corrupted xattr block 33
[ 1100.447944][T19264] fscrypt (loop0, inode 15): Error -117 getting encryption context
[ 1100.664337][T19251] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz.0.4012: corrupted xattr block 6
[ 1100.842196][T19265] overlayfs: conflicting lowerdir path
[ 1103.193991][T18919] EXT4-fs (loop0): unmounting filesystem.
[ 1105.012529][T19293] loop0: detected capacity change from 0 to 256
[ 1105.086960][T19293] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1105.280645][T19293] syz.0.4082: attempt to access beyond end of device
[ 1105.280645][T19293] loop0: rw=524288, sector=280, nr_sectors = 128 limit=256
[ 1105.350443][T19293] syz.0.4082: attempt to access beyond end of device
[ 1105.350443][T19293] loop0: rw=524288, sector=408, nr_sectors = 256 limit=256
[ 1105.516423][T19293] syz.0.4082: attempt to access beyond end of device
[ 1105.516423][T19293] loop0: rw=0, sector=280, nr_sectors = 8 limit=256
[ 1105.540922][   T27] kauditd_printk_skb: 25 callbacks suppressed
[ 1105.540938][   T27] audit: type=1800 audit(1770615646.243:321): pid=19293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4082" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=1048749 res=0 errno=0
[ 1106.891120][T19313] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1108.043399][T19317] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4084'.
[ 1109.578032][T19233] usb 9-1: new low-speed USB device number 5 using dummy_hcd
[ 1109.769614][T19233] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[ 1109.801149][T19233] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1109.858090][T19233] usb 9-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[ 1109.887547][T19233] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1109.927112][T19233] usb 9-1: config 0 descriptor??
[ 1109.943376][T19341] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1111.241104][T19233] logitech 0003:046D:C294.001C: item fetching failed at offset 3/5
[ 1111.268961][T19233] logitech 0003:046D:C294.001C: parse failed
[ 1111.285329][T19233] logitech: probe of 0003:046D:C294.001C failed with error -22
[ 1113.177350][T19233] usb 9-1: USB disconnect, device number 5
[ 1115.255034][T19385] device syzkaller0 entered promiscuous mode
[ 1115.698516][T19393] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1115.722537][T19400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4103'.
[ 1115.799855][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.806180][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.939732][T19407] loop0: detected capacity change from 0 to 128
[ 1116.078821][T19407] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1116.126843][T19407] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1117.864267][T18919] EXT4-fs (loop0): unmounting filesystem.
[ 1118.924564][T19441] loop0: detected capacity change from 0 to 512
[ 1118.931723][T19441] EXT4-fs: Ignoring removed orlov option
[ 1118.981724][T19441] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=200dc018, mo2=0002]
[ 1118.989902][T19441] System zones: 0-2, 18-18, 34-35
[ 1119.049541][T19441] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1119.058613][T19441] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1123.847483][T18919] EXT4-fs (loop0): unmounting filesystem.
[ 1126.447960][T19471] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1126.458089][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4122'.
[ 1126.756034][T19516] loop8: detected capacity change from 0 to 512
[ 1126.791615][T19516] ext4: Unknown parameter 'obj_user'
[ 1126.988069][  T125] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1127.179294][   T27] audit: type=1326 audit(1770615667.883:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="syz.1.4132" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3a439aeb9 code=0x0
[ 1127.206112][  T125] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1127.242788][  T125] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1127.298264][  T125] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1127.347476][  T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1127.370288][  T125] usb 4-1: SerialNumber: syz
[ 1127.589733][  T125] usb 4-1: 0:2 : does not exist
[ 1127.625101][  T125] usb 4-1: USB disconnect, device number 43
[ 1127.909788][T19175] udevd[19175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1127.976836][T19500] loop0: detected capacity change from 0 to 131072
[ 1128.024065][T19500] F2FS-fs (loop0): Test dummy encryption mode enabled
[ 1128.145204][T19500] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1128.378164][T19500] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b
[ 1128.653068][   T27] audit: type=1326 audit(1770615669.353:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19555 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb579aeb9 code=0x7ffc0000
[ 1130.349517][   T27] audit: type=1326 audit(1770615669.353:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19555 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4fb575b78e code=0x7ffc0000
[ 1130.360837][T19562] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1130.443262][   T27] audit: type=1326 audit(1770615669.353:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19555 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4fb575b78e code=0x7ffc0000
[ 1130.549990][   T27] audit: type=1326 audit(1770615669.353:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19555 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb579aeb9 code=0x7ffc0000
[ 1130.687625][   T27] audit: type=1326 audit(1770615669.353:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19555 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f4fb579aeb9 code=0x7ffc0000
[ 1130.821903][   T27] audit: type=1326 audit(1770615669.353:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19555 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb579aeb9 code=0x7ffc0000
[ 1131.155205][   T27] audit: type=1326 audit(1770615669.353:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19555 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb579aeb9 code=0x7ffc0000
[ 1135.956247][T19624] loop2: detected capacity change from 0 to 512
[ 1136.084808][T19624] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1136.555986][T19624] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[ 1136.771048][T19624] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4142: bg 0: block 248: padding at end of block bitmap is not set
[ 1137.038652][T19644] No such timeout policy "syz1"
[ 1137.665403][T19624] Quota error (device loop2): write_blk: dquota write failed
[ 1137.695800][T19624] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[ 1137.929273][T19624] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.4142: Failed to acquire dquot type 1
[ 1138.708416][T19624] EXT4-fs (loop2): 1 truncate cleaned up
[ 1138.714094][T19624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1140.010612][T17809] EXT4-fs (loop2): unmounting filesystem.
[ 1140.140550][T19661] loop3: detected capacity change from 0 to 512
[ 1140.277651][T19661] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[ 1140.345300][T19661] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[ 1140.388180][T19661] EXT4-fs (loop3): group descriptors corrupted!
[ 1141.892394][T19680] loop2: detected capacity change from 0 to 512
[ 1141.976689][T19680] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1142.018025][T19680] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1142.241722][T19680] EXT4-fs (loop2): 1 truncate cleaned up
[ 1142.247517][T19680] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1143.464189][T17809] EXT4-fs (loop2): unmounting filesystem.
[ 1143.726074][T19709] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1143.906255][T19714] loop2: detected capacity change from 0 to 512
[ 1144.064536][T19714] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[ 1144.149585][T19714] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[ 1144.227485][T19714] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 1144.297659][T19714] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.4168: bad orphan inode 267
[ 1144.349029][T19714] EXT4-fs (loop2): Remounting filesystem read-only
[ 1144.355608][T19714] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1144.503811][T19722] loop3: detected capacity change from 0 to 256
[ 1144.600151][T19722] FAT-fs (loop3): Directory bread(block 64) failed
[ 1145.174160][T19722] FAT-fs (loop3): Directory bread(block 65) failed
[ 1145.208112][T19722] FAT-fs (loop3): Directory bread(block 66) failed
[ 1145.214701][T19722] FAT-fs (loop3): Directory bread(block 67) failed
[ 1145.320924][T19722] FAT-fs (loop3): Directory bread(block 68) failed
[ 1145.378606][T19722] FAT-fs (loop3): Directory bread(block 69) failed
[ 1145.418173][T19722] FAT-fs (loop3): Directory bread(block 70) failed
[ 1145.424810][T19722] FAT-fs (loop3): Directory bread(block 71) failed
[ 1145.478410][T19722] FAT-fs (loop3): Directory bread(block 72) failed
[ 1145.485093][T19722] FAT-fs (loop3): Directory bread(block 73) failed
[ 1145.681562][T19717] mmap: syz.0.4171 (19717) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1146.291248][T19734] loop3: detected capacity change from 0 to 512
[ 1146.386214][T19734] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[ 1147.169102][T19734] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[ 1147.181507][T19734] EXT4-fs (loop3): group descriptors corrupted!
[ 1147.606752][T17809] EXT4-fs (loop2): unmounting filesystem.
[ 1149.718067][  T125] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1150.477961][  T125] usb 3-1: Using ep0 maxpacket: 16
[ 1150.499540][  T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1150.568837][  T125] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1150.659773][  T125] usb 3-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice= 0.00
[ 1150.804825][  T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1150.860488][  T125] usb 3-1: config 0 descriptor??
[ 1152.286120][  T125] apple 0003:05AC:0249.001D: unknown global tag 0xe
[ 1152.317110][T19790] overlayfs: failed to clone upperpath
[ 1152.324605][  T125] apple 0003:05AC:0249.001D: item 0 0 1 14 parsing failed
[ 1152.365567][  T125] apple 0003:05AC:0249.001D: parse failed
[ 1152.397974][  T125] apple: probe of 0003:05AC:0249.001D failed with error -22
[ 1153.699585][  T125] usb 3-1: USB disconnect, device number 28
[ 1153.979410][T19806] loop3: detected capacity change from 0 to 8192
[ 1154.030269][T19806] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1154.332936][T19812] loop8: detected capacity change from 0 to 512
[ 1154.416003][T19812] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[ 1154.465273][T19812] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[ 1154.521912][T19812] EXT4-fs (loop8): group descriptors corrupted!
[ 1155.086515][T19827] loop0: detected capacity change from 0 to 512
[ 1155.850092][T19827] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1155.958772][T19827] EXT4-fs (loop0): 1 truncate cleaned up
[ 1155.964433][T19827] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1156.954085][T18919] EXT4-fs (loop0): unmounting filesystem.
[ 1158.306305][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1158.339312][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1158.355811][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1158.367302][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1158.375187][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1158.384449][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1158.478194][ T4490] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1158.713570][ T4490] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1159.495172][ T4490] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1159.831600][T19877] loop2: detected capacity change from 0 to 131072
[ 1159.848868][T19877] F2FS-fs (loop2): Test dummy encryption mode enabled
[ 1159.865204][T19877] F2FS-fs (loop2): invalid crc value
[ 1159.953321][ T4490] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1159.989606][T19877] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (9621037545273099749, 1348741209720293)
[ 1160.039155][T19877] F2FS-fs (loop2): sanity_check_inode: corrupted inode ino=3, run fsck to fix.
[ 1160.079752][T19877] F2FS-fs (loop2): Failed to read root inode
[ 1160.210984][T17292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1160.222933][T17292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1160.233686][T17292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1160.243945][T17292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1160.252045][T17292] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1160.261405][T17292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1160.438114][ T4286] Bluetooth: hci0: command 0x0409 tx timeout
[ 1160.590298][T19886] chnl_net:caif_netlink_parms(): no params data found
[ 1160.777346][T19859] chnl_net:caif_netlink_parms(): no params data found
[ 1161.032039][T19886] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1161.048025][T19886] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1161.059481][T19886] device bridge_slave_0 entered promiscuous mode
[ 1161.223405][T19886] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1162.288754][T19886] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1162.303524][T19886] device bridge_slave_1 entered promiscuous mode
[ 1162.358593][T17292] Bluetooth: hci2: command 0x0409 tx timeout
[ 1163.031049][T17292] Bluetooth: hci0: command 0x041b tx timeout
[ 1163.352922][T19917] loop2: detected capacity change from 0 to 256
[ 1163.444036][T19859] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1163.473399][T19859] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1163.519176][T19859] device bridge_slave_0 entered promiscuous mode
[ 1163.567230][T19859] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1163.628016][T19859] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1163.646992][T19859] device bridge_slave_1 entered promiscuous mode
[ 1163.804931][T19886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1164.144951][T19886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1164.250184][T19859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1164.438988][T17292] Bluetooth: hci2: command 0x041b tx timeout
[ 1164.577588][T19859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1164.604544][T19886] team0: Port device team_slave_0 added
[ 1164.656036][T19886] team0: Port device team_slave_1 added
[ 1164.668846][T19938] xt_socket: unknown flags 0xc
[ 1165.078187][T17292] Bluetooth: hci0: command 0x040f tx timeout
[ 1165.665697][T19943] loop8: detected capacity change from 0 to 256
[ 1165.698939][T19943] exfat: Deprecated parameter 'utf8'
[ 1166.226406][T19943] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[ 1166.464174][T19886] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1166.481562][T19886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1166.518772][T17292] Bluetooth: hci2: command 0x040f tx timeout
[ 1166.627952][T19886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1166.711917][T19859] team0: Port device team_slave_0 added
[ 1166.826619][T19957] loop8: detected capacity change from 0 to 256
[ 1166.908339][T19957] exFAT-fs (loop8): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001)
[ 1166.950105][T19957] exFAT-fs (loop8): Filesystem has been set read-only
[ 1166.953447][T19859] team0: Port device team_slave_1 added
[ 1166.957004][T19957] exFAT-fs (loop8): failed to load upcase table
[ 1166.998702][T19957] exFAT-fs (loop8): failed to recognize exfat type
[ 1167.018685][T19886] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1167.034690][T19886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1167.118099][T19886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1167.157951][T17292] Bluetooth: hci0: command 0x0419 tx timeout
[ 1167.244347][T19859] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1167.287585][T19859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1167.348252][T19859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1168.974846][T17292] Bluetooth: hci2: command 0x0419 tx timeout
[ 1169.168718][T19859] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1169.178196][T19859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1169.261571][T19859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1170.127182][T19859] device hsr_slave_0 entered promiscuous mode
[ 1170.208692][T19859] device hsr_slave_1 entered promiscuous mode
[ 1170.342739][T19859] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1170.376778][T19859] Cannot create hsr debugfs directory
[ 1171.470044][T19886] device hsr_slave_0 entered promiscuous mode
[ 1171.496583][T19886] device hsr_slave_1 entered promiscuous mode
[ 1171.503697][T19886] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1171.511826][T19886] Cannot create hsr debugfs directory
[ 1171.739474][T20005] loop8: detected capacity change from 0 to 1024
[ 1171.805408][T20005] EXT4-fs: Ignoring removed bh option
[ 1171.870202][T20005] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1171.986840][T20005] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1172.073767][   T27] audit: type=1800 audit(1770615712.773:330): pid=20005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4225" name="file1" dev="loop8" ino=15 res=0 errno=0
[ 1172.472095][ T4490] device hsr_slave_0 left promiscuous mode
[ 1172.517592][ T4490] device hsr_slave_1 left promiscuous mode
[ 1172.838410][ T4490] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1172.845906][ T4490] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1172.910433][ T4490] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1172.921855][ T4490] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1172.991372][T18863] EXT4-fs (loop8): unmounting filesystem.
[ 1173.040788][ T4490] device bridge_slave_1 left promiscuous mode
[ 1173.058268][ T4490] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1173.081040][T20030] loop8: detected capacity change from 0 to 128
[ 1173.094397][T20030] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[ 1173.115530][ T4490] device bridge_slave_0 left promiscuous mode
[ 1173.124699][ T4490] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1173.140818][T20030] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1173.173289][T20030] ext2 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1173.447691][ T4490] device veth1_macvtap left promiscuous mode
[ 1173.472861][ T4490] device veth0_macvtap left promiscuous mode
[ 1173.514995][ T4490] device veth1_vlan left promiscuous mode
[ 1173.553191][T18863] EXT4-fs (loop8): unmounting filesystem.
[ 1173.587689][ T4490] device veth0_vlan left promiscuous mode
[ 1173.683180][T20039] loop8: detected capacity change from 0 to 512
[ 1173.778939][T20039] EXT4-fs: Ignoring removed orlov option
[ 1173.786030][T20039] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1173.798967][T20039] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1173.825942][T20039] EXT4-fs (loop8): 1 truncate cleaned up
[ 1173.832464][T20039] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1175.981830][T18863] EXT4-fs (loop8): unmounting filesystem.
[ 1177.542772][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.569807][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[ 1179.142468][T20093] loop8: detected capacity change from 0 to 2048
[ 1179.188761][T20093] EXT4-fs: Ignoring removed i_version option
[ 1179.299565][T20093] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1179.358065][T20093] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1179.638779][T17292] Bluetooth: hci4: command 0x0406 tx timeout
[ 1179.788690][T18863] EXT4-fs (loop8): unmounting filesystem.
[ 1180.539246][ T4490] team0 (unregistering): Port device team_slave_1 removed
[ 1180.856373][ T4490] team0 (unregistering): Port device team_slave_0 removed
[ 1180.991341][ T4490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1181.243878][ T4490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1184.280283][ T4490] bond0 (unregistering): Released all slaves
[ 1187.795871][T20149] loop8: detected capacity change from 0 to 40427
[ 1187.877155][T20149] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x3ffff
[ 1187.932250][T20149] F2FS-fs (loop8): invalid crc value
[ 1188.040991][T20149] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1188.174615][T20149] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 1188.481610][T18863] syz-executor: attempt to access beyond end of device
[ 1188.481610][T18863] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1188.669681][T19859] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1188.710541][T19859] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1188.735488][T19859] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1188.770256][T19859] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1189.643577][T19886] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1190.003775][T19886] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1190.187180][T19886] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1190.431176][T19886] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1191.341841][T19859] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1191.418554][T18327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1191.438379][T18327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1191.520748][T19859] 8021q: adding VLAN 0 to HW filter on device team0
[ 1191.551989][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1191.565746][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1191.608584][T12663] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1191.615720][T12663] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1191.668699][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1191.708710][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1191.748352][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1191.778629][T12663] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1191.785771][T12663] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1191.818576][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1191.857082][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1191.870932][T20208] 9pnet_fd: Insufficient options for proto=fd
[ 1192.001503][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1192.036965][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1192.069092][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1192.091557][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1192.115468][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1192.144492][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1192.188706][T20214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4261'.
[ 1192.234216][T19859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1192.260486][T19859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1192.289054][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1192.297648][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1192.333983][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1192.374288][T19886] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1192.460757][T19886] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1192.599812][T19886] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1192.658054][T19886] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1193.874067][T19886] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1193.942888][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1193.953226][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1193.969494][T19886] 8021q: adding VLAN 0 to HW filter on device team0
[ 1194.003678][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1194.048707][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1194.077173][T14112] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1194.084333][T14112] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1194.148364][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1194.204043][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1194.238829][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1194.288344][T12663] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1194.295480][T12663] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1194.352728][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1194.368260][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1194.384942][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1194.407864][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1194.436394][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1194.460927][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1194.478282][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1194.501572][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1194.518991][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1194.540642][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1194.555726][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1194.586785][T19886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1194.629331][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1194.636910][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1194.671670][T19859] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1195.293991][T20256] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4263'.
[ 1195.392589][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1195.405065][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1195.475759][T19886] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1197.405838][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1197.437231][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1197.550266][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1197.608788][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1197.650847][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1197.688761][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1197.728597][T19859] device veth0_vlan entered promiscuous mode
[ 1197.810865][T19859] device veth1_vlan entered promiscuous mode
[ 1197.910844][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1197.920582][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1197.959577][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1197.989295][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1198.011106][T19859] device veth0_macvtap entered promiscuous mode
[ 1198.053677][T19859] device veth1_macvtap entered promiscuous mode
[ 1198.123284][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1198.161340][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1198.188026][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1198.238135][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1198.292044][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1198.337655][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1198.378253][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1198.427954][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1198.468154][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1198.498027][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1198.537880][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1198.567449][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1198.598411][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1198.617870][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1198.627744][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1198.678582][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1198.699518][T19859] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1198.715072][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1198.726166][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1198.736404][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1198.757342][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1198.776673][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1198.816547][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1198.857385][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1198.869062][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1198.879149][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1198.897318][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1198.927983][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1198.977301][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1198.993295][T20304] overlayfs: failed to clone upperpath
[ 1199.088381][T20305] overlayfs: failed to clone upperpath
[ 1199.301486][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1199.500705][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1199.667846][T19859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1199.731132][T19859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1199.782588][T19859] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1199.853764][T19859] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1199.908388][T19859] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1199.958399][T19859] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1199.995673][T19859] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1200.041416][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1200.062559][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1200.108967][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1200.137602][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1200.185376][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1200.213216][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1201.324580][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1202.108507][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1202.258508][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1202.298523][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1202.359973][T19886] device veth0_vlan entered promiscuous mode
[ 1202.383985][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1202.398305][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1202.441731][T19886] device veth1_vlan entered promiscuous mode
[ 1202.501711][T17731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1202.519782][T17731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1202.548102][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1202.566031][T19886] device veth0_macvtap entered promiscuous mode
[ 1202.598808][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1202.607617][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1202.643615][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1202.646847][T19886] device veth1_macvtap entered promiscuous mode
[ 1202.668025][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1202.674969][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1202.692845][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1202.708692][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1202.734074][T19886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1202.753382][T19886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1202.770394][T19886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1202.787871][T19886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1202.805587][T19886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1202.826357][T19886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1202.836308][T19886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1202.873291][T19886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1202.902446][T19886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1202.928043][T19886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1202.957915][T19886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1202.978016][T19886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1203.008052][T19886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1203.044294][T19886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1203.078208][T19886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1203.117893][T19886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1203.137881][T19886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1203.178093][T19886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1203.219047][T19886] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1203.281413][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1203.305857][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1203.377994][T20334] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4278'.
[ 1203.398815][T19886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1203.444110][T19886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1203.501135][T19886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1203.563548][T19886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1203.623995][T19886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1203.677320][T19886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1203.687974][T19886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1203.717987][T19886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1203.738193][T19886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1203.759257][T19886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1203.787494][T19886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1203.818659][T19886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1203.837057][T19886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1203.856580][T19886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1203.874175][T19886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1203.887981][T19886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1203.905470][T19886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1203.917068][T19886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1203.950237][T19886] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1203.966502][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1204.006807][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1204.143052][T19886] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1204.177917][T19886] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1204.237457][T19886] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1204.257937][T19886] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1204.516369][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1204.529495][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1205.262526][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1205.300120][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1205.316799][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1205.365517][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1212.087219][T20429] device veth0 entered promiscuous mode
[ 1212.154207][T20428] device veth0 left promiscuous mode
[ 1212.595215][ T4321] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0
[ 1212.627964][ T4321] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0
[ 1212.655786][ T4321] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0
[ 1212.696390][ T4321] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0
[ 1212.710460][ T4321] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0
[ 1212.741042][ T4321] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0
[ 1212.767338][ T4321] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0
[ 1212.806225][ T4321] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0
[ 1212.833210][ T4321] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0
[ 1212.860815][ T4321] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0
[ 1212.891184][ T4321] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0
[ 1213.093003][ T4321] hid-generic 0103:0004:0000.001E: hidraw0: <UNKNOWN> HID v0.02 Device [syz0] on syz1
[ 1213.455898][T20466] loop9: detected capacity change from 0 to 256
[ 1213.519759][T20466] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[ 1214.487198][T20462] fido_id[20462]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1215.752321][T20482] loop9: detected capacity change from 0 to 1024
[ 1215.819332][T20482] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1215.825986][T20482] EXT4-fs: inline encryption not supported
[ 1215.978017][T20482] EXT4-fs: Ignoring removed i_version option
[ 1216.106800][T20482] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1216.987278][T20503] netlink: 'syz.2.4311': attribute type 13 has an invalid length.
[ 1217.110848][T20503] netlink: 'syz.2.4311': attribute type 17 has an invalid length.
[ 1218.599170][T19886] EXT4-fs (loop9): unmounting filesystem.
[ 1218.802348][T20518] loop9: detected capacity change from 0 to 512
[ 1218.919578][T20518] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.4314: bg 0: block 248: padding at end of block bitmap is not set
[ 1219.728607][T20518] Quota error (device loop9): write_blk: dquota write failed
[ 1219.736092][T20518] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[ 1219.757997][T20518] EXT4-fs error (device loop9): ext4_acquire_dquot:6835: comm syz.9.4314: Failed to acquire dquot type 1
[ 1219.838295][T20518] EXT4-fs (loop9): 1 truncate cleaned up
[ 1219.850694][T20518] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1219.891548][T20503] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1219.908126][T20518] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1219.982324][T20518] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[ 1219.996529][T20503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1220.029102][T20518] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[ 1220.068058][T20518] EXT4-fs error (device loop9): ext4_acquire_dquot:6835: comm syz.9.4314: Failed to acquire dquot type 1
[ 1220.215861][T19886] EXT4-fs (loop9): unmounting filesystem.
[ 1221.712080][ T4314] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1223.386930][ T4314] usb 10-1: device descriptor read/64, error -71
[ 1223.699810][T20560] loop9: detected capacity change from 0 to 256
[ 1227.368950][T20611] netlink: 9 bytes leftover after parsing attributes in process `syz.9.4330'.
[ 1227.429902][T20611] device gretap0 entered promiscuous mode
[ 1227.454857][T20612] netlink: 5 bytes leftover after parsing attributes in process `syz.9.4330'.
[ 1227.467732][T20612] 0ªX¹¦D: renamed from gretap0
[ 1228.089500][T20612] device 
30ªX¹¦D left promiscuous mode
[ 1228.096840][T20612] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[ 1228.256884][T20619] netlink: 'syz.9.4341': attribute type 12 has an invalid length.
[ 1228.285340][T20619] netlink: 'syz.9.4341': attribute type 29 has an invalid length.
[ 1228.325871][T20619] netlink: 148 bytes leftover after parsing attributes in process `syz.9.4341'.
[ 1228.346037][T20619] netlink: 51 bytes leftover after parsing attributes in process `syz.9.4341'.
[ 1228.356433][T20623] overlayfs: failed to clone upperpath
[ 1228.393779][T20623] overlayfs: failed to clone upperpath
[ 1228.552800][T20627] loop9: detected capacity change from 0 to 256
[ 1228.600490][T20629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4344'.
[ 1228.827909][T20627] FAT-fs (loop9): IO charset is¸õ`Fo8859-2 not found
[ 1235.402749][T20716] overlayfs: failed to clone upperpath
[ 1237.889051][T20739] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4372'.
[ 1238.680614][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.686985][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.838920][T20729] overlayfs: failed to clone upperpath
[ 1240.435088][T20770] loop9: detected capacity change from 0 to 8192
[ 1241.681999][T20809] loop9: detected capacity change from 0 to 2048
[ 1243.609146][T20826] fuse: Bad value for 'fd'
[ 1243.672235][T20826] overlayfs: missing 'lowerdir'
[ 1247.574203][T20862] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4406'.
[ 1247.621897][T20862] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4406'.
[ 1250.121696][T20896] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4416'.
[ 1251.565766][T20914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4410'.
[ 1253.994090][T20953] loop9: detected capacity change from 0 to 256
[ 1254.051547][T20953] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[ 1255.537921][ T4314] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1255.747877][ T4314] usb 10-1: Using ep0 maxpacket: 32
[ 1255.755010][ T4314] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1255.807968][ T4314] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1255.848203][ T4314] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1255.888610][ T4314] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1255.921080][ T4314] usb 10-1: config 0 descriptor??
[ 1255.950122][ T4314] hub 10-1:0.0: USB hub found
[ 1256.137659][ T4314] hub 10-1:0.0: config failed, can't read hub descriptor (err -90)
[ 1256.358115][ T4314] usbhid 10-1:0.0: can't add hid device: -71
[ 1256.364582][ T4314] usbhid: probe of 10-1:0.0 failed with error -71
[ 1256.439956][ T4314] usb 10-1: USB disconnect, device number 18
[ 1256.789783][T21009] overlayfs: failed to clone upperpath
[ 1259.263033][T21030] loop9: detected capacity change from 0 to 512
[ 1259.325523][T21030] EXT4-fs: Ignoring removed oldalloc option
[ 1259.398014][T21030] EXT4-fs error (device loop9): ext4_xattr_inode_iget:397: comm syz.9.4452: Parent and EA inode have the same ino 15
[ 1259.492460][T21030] EXT4-fs (loop9): 1 orphan inode deleted
[ 1259.510401][T21030] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1259.701945][T19886] EXT4-fs (loop9): unmounting filesystem.
[ 1260.632076][T21052] No such timeout policy "syz1"
[ 1267.604622][T21101] loop9: detected capacity change from 0 to 40427
[ 1267.663778][T21101] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[ 1267.698170][T21101] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 1267.810219][T21101] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1268.023480][T21101] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[ 1268.078362][T21101] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 1268.932943][T21101] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix.
[ 1268.933007][T21101] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix.
[ 1269.050463][T21101] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix.
[ 1269.088457][T21101] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix.
[ 1269.096056][T21101] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix.
[ 1269.139025][T21101] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix.
[ 1269.146639][T21101] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix.
[ 1269.189468][T21112] overlayfs: failed to clone upperpath
[ 1269.875766][T21139] No such timeout policy "syz1"
[ 1270.240109][T21147] overlayfs: failed to clone upperpath
[ 1270.285937][   T27] audit: type=1326 audit(2000000096.140:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21144 comm="syz.5.4474" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ed9aeb9 code=0x0
[ 1271.101951][T21161] loop9: detected capacity change from 0 to 128
[ 1271.279458][T21161] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1271.308387][T21161] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1271.566214][T19886] EXT4-fs (loop9): unmounting filesystem.
[ 1272.783513][T21181] fuse: Bad value for 'fd'
[ 1272.809027][T21181] overlayfs: failed to clone upperpath
[ 1272.852270][T21186] binder: 21183:21186 ioctl c0306201 2000000003c0 returned -14
[ 1273.738476][T21191] No such timeout policy "syz1"
[ 1277.197164][T21225] loop9: detected capacity change from 0 to 256
[ 1277.397973][T17292] Bluetooth: hci2: command 0x0405 tx timeout
[ 1277.438267][T21225] FAT-fs (loop9): Directory bread(block 64) failed
[ 1277.444836][T21225] FAT-fs (loop9): Directory bread(block 65) failed
[ 1277.521375][T21233] overlayfs: failed to clone upperpath
[ 1277.583307][T21225] FAT-fs (loop9): Directory bread(block 66) failed
[ 1277.646410][T21225] FAT-fs (loop9): Directory bread(block 67) failed
[ 1277.708038][T21225] FAT-fs (loop9): Directory bread(block 68) failed
[ 1277.770596][T21225] FAT-fs (loop9): Directory bread(block 69) failed
[ 1277.817607][T21225] FAT-fs (loop9): Directory bread(block 70) failed
[ 1277.878037][T21225] FAT-fs (loop9): Directory bread(block 71) failed
[ 1277.928029][T21225] FAT-fs (loop9): Directory bread(block 72) failed
[ 1277.976410][T21225] FAT-fs (loop9): Directory bread(block 73) failed
[ 1278.472667][T21247] overlayfs: failed to clone upperpath
[ 1282.120412][T17292] Bluetooth: hci0: command 0x0406 tx timeout
[ 1287.164850][ T4286] Bluetooth: hci2: command 0x0406 tx timeout
[ 1293.437277][T21421] ipt_CLUSTERIP: Please specify destination IP
[ 1294.286403][T21435] loop9: detected capacity change from 0 to 256
[ 1294.546114][T21437] loop9: detected capacity change from 0 to 512
[ 1294.604612][T21437] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[ 1294.648230][T21437] EXT4-fs (loop9): invalid journal inode
[ 1294.654013][T21437] EXT4-fs (loop9): can't get journal size
[ 1294.752062][T21437] EXT4-fs (loop9): 1 truncate cleaned up
[ 1294.771940][T21437] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1294.845762][T21437] EXT4-fs warning (device loop9): ext4_group_add:1743: No reserved GDT blocks, can't resize
[ 1294.978877][T19886] EXT4-fs (loop9): unmounting filesystem.
[ 1295.820744][T21446] loop9: detected capacity change from 0 to 128
[ 1296.858530][ T4515] kworker/u4:22: attempt to access beyond end of device
[ 1296.858530][ T4515] loop9: rw=1, sector=145, nr_sectors = 56 limit=128
[ 1297.570621][T21466] loop9: detected capacity change from 0 to 128
[ 1297.737039][T21466] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1297.758279][T21466] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1297.948360][T19886] EXT4-fs (loop9): unmounting filesystem.
[ 1298.084095][T21481] loop9: detected capacity change from 0 to 256
[ 1298.920257][T21481] FAT-fs (loop9): Directory bread(block 64) failed
[ 1298.934454][T21481] FAT-fs (loop9): Directory bread(block 65) failed
[ 1298.952027][T21481] FAT-fs (loop9): Directory bread(block 66) failed
[ 1299.007932][T21481] FAT-fs (loop9): Directory bread(block 67) failed
[ 1299.014584][T21481] FAT-fs (loop9): Directory bread(block 68) failed
[ 1299.037164][T21481] FAT-fs (loop9): Directory bread(block 69) failed
[ 1299.050557][T21481] FAT-fs (loop9): Directory bread(block 70) failed
[ 1299.057592][T21481] FAT-fs (loop9): Directory bread(block 71) failed
[ 1299.065719][T21481] FAT-fs (loop9): Directory bread(block 72) failed
[ 1299.072756][T21481] FAT-fs (loop9): Directory bread(block 73) failed
[ 1299.575092][T21502] fuse: Bad value for 'fd'
[ 1300.121937][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.128888][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[ 1306.766087][T21587] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4583'.
[ 1307.558717][T21587] device gretap0 entered promiscuous mode
[ 1307.567400][T21588] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4583'.
[ 1307.576769][T21588] 0ªX¹¦D: renamed from gretap0
[ 1307.587157][T21588] device 
30ªX¹¦D left promiscuous mode
[ 1307.594612][T21588] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[ 1310.418314][T21630] 9pnet_fd: Insufficient options for proto=fd
[ 1311.213828][ T6709] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1311.339167][T21640] device veth0 entered promiscuous mode
[ 1311.401755][T21638] device veth0 left promiscuous mode
[ 1311.437959][ T6709] usb 10-1: Using ep0 maxpacket: 32
[ 1311.462733][T21620] loop9: detected capacity change from 0 to 512
[ 1311.557728][T21620] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1311.937174][T21620] EXT4-fs (loop9): 1 truncate cleaned up
[ 1311.992231][T21620] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1312.321745][ T6709] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1312.368331][ T6709] usb 10-1: unable to read config index 0 descriptor/start: -71
[ 1312.387847][ T6709] usb 10-1: can't read configurations, error -71
[ 1312.539852][T21652] 9pnet_fd: Insufficient options for proto=fd
[ 1313.519115][T19886] EXT4-fs (loop9): unmounting filesystem.
[ 1314.386487][T21673] overlayfs: failed to resolve './file0': -2
[ 1315.750746][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4614'.
[ 1323.835120][T21801] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1326.438490][T21819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4648'.
[ 1328.415756][T21843] loop9: detected capacity change from 0 to 2048
[ 1329.752163][   T27] audit: type=1326 audit(2000000155.610:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21864 comm="syz.8.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912f99aeb9 code=0x7ffc0000
[ 1329.888802][   T27] audit: type=1326 audit(2000000155.650:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21864 comm="syz.8.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912f99aeb9 code=0x7ffc0000
[ 1330.002579][   T27] audit: type=1326 audit(2000000155.650:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21864 comm="syz.8.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f912f99aeb9 code=0x7ffc0000
[ 1330.039043][   T27] audit: type=1326 audit(2000000155.650:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21864 comm="syz.8.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912f99aeb9 code=0x7ffc0000
[ 1330.091906][   T27] audit: type=1326 audit(2000000155.650:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21864 comm="syz.8.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912f99aeb9 code=0x7ffc0000
[ 1330.145332][   T27] audit: type=1326 audit(2000000155.650:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21864 comm="syz.8.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f912f99aeb9 code=0x7ffc0000
[ 1330.285127][   T27] audit: type=1326 audit(2000000155.650:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21864 comm="syz.8.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912f99aeb9 code=0x7ffc0000
[ 1330.309494][   T27] audit: type=1326 audit(2000000155.650:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21864 comm="syz.8.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912f99aeb9 code=0x7ffc0000
[ 1330.332673][   T27] audit: type=1326 audit(2000000155.650:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21864 comm="syz.8.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f912f99aeb9 code=0x7ffc0000
[ 1330.355056][   T27] audit: type=1326 audit(2000000155.650:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21864 comm="syz.8.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912f99aeb9 code=0x7ffc0000
[ 1330.738497][T21870] overlayfs: failed to clone upperpath
[ 1332.069488][T21875] loop9: detected capacity change from 0 to 40427
[ 1332.140236][T21875] F2FS-fs (loop9): build fault injection attr: rate: 174, type: 0x3ffff
[ 1335.894484][T21919] loop9: detected capacity change from 0 to 256
[ 1340.932299][T21960] 9pnet_fd: Insufficient options for proto=fd
[ 1342.823950][T21980] ipt_REJECT: ECHOREPLY no longer supported.
[ 1343.498670][T21981] loop9: detected capacity change from 0 to 2048
[ 1344.606531][T21988] loop9: detected capacity change from 0 to 256
[ 1344.627893][T21988] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1344.683536][T21988] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[ 1344.740187][T21988] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1344.983510][T21992] fuse: Bad value for 'fd'
[ 1346.121845][T22003] loop9: detected capacity change from 0 to 256
[ 1346.135197][T22003] exfat: Bad value for 'uid'
[ 1348.093708][T21900] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1350.800935][T22031] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4717'.
[ 1351.214956][T22014] loop9: detected capacity change from 0 to 40427
[ 1351.259092][T22014] F2FS-fs (loop9): invalid crc value
[ 1351.359758][T22014] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1351.691143][T22042] device bridge2 entered promiscuous mode
[ 1352.209175][T22014] F2FS-fs (loop9): Start checkpoint disabled!
[ 1354.478505][   T27] kauditd_printk_skb: 4 callbacks suppressed
[ 1354.478521][   T27] audit: type=1326 audit(2000000180.340:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22081 comm="syz.5.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1354.560804][   T27] audit: type=1326 audit(2000000180.340:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22081 comm="syz.5.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1354.595645][   T27] audit: type=1326 audit(2000000180.370:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22081 comm="syz.5.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1354.631315][   T27] audit: type=1326 audit(2000000180.370:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22081 comm="syz.5.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1355.440194][   T27] audit: type=1326 audit(2000000180.370:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22081 comm="syz.5.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1355.496234][   T27] audit: type=1326 audit(2000000180.370:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22081 comm="syz.5.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1356.303964][   T27] audit: type=1326 audit(2000000180.370:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22081 comm="syz.5.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1356.398103][   T27] audit: type=1326 audit(2000000180.370:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22081 comm="syz.5.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1356.477807][   T27] audit: type=1326 audit(2000000180.370:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22081 comm="syz.5.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1356.547808][   T27] audit: type=1326 audit(2000000180.370:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22081 comm="syz.5.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1359.122462][T22154] loop9: detected capacity change from 0 to 128
[ 1359.230940][T22154] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1359.293095][T22154] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1360.262040][T22154] fscrypt (loop9, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[ 1360.451743][T22154] fscrypt (loop9, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[ 1360.921169][T19886] EXT4-fs (loop9): unmounting filesystem.
[ 1361.560732][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.567155][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[ 1367.990004][T22258] overlayfs: failed to resolve './file0': -2
[ 1368.054412][T22259] loop9: detected capacity change from 0 to 512
[ 1368.249124][T22259] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1368.269603][T22259] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1370.360539][T22289] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4801'.
[ 1370.398933][T19886] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[ 1370.484091][T19886] EXT4-fs (loop9): Remounting filesystem read-only
[ 1370.547906][T19886] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5933: Corrupt filesystem
[ 1370.611928][T19886] EXT4-fs (loop9): Remounting filesystem read-only
[ 1370.722430][T19886] EXT4-fs error (device loop9): ext4_dirty_inode:6137: inode #2: comm syz-executor: mark_inode_dirty error
[ 1370.804657][T19886] EXT4-fs (loop9): Remounting filesystem read-only
[ 1371.055524][T19886] EXT4-fs (loop9): unmounting filesystem.
[ 1371.068466][T19886] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5933: Corrupt filesystem
[ 1371.130901][T19886] EXT4-fs (loop9): Remounting filesystem read-only
[ 1371.167516][T19886] EXT4-fs error (device loop9): ext4_quota_off:7141: inode #4: comm syz-executor: mark_inode_dirty error
[ 1371.220519][T19886] EXT4-fs (loop9): Remounting filesystem read-only
[ 1372.067302][T14112] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1372.728742][T14112] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1373.459204][T17292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1373.470412][T17292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1373.478738][T17292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1373.489826][T17292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1373.497365][T17292] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1373.504683][T17292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1373.563022][T14112] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1373.806720][T22338] fuse: Bad value for 'fd'
[ 1374.663827][T14112] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1374.977403][T22326] chnl_net:caif_netlink_parms(): no params data found
[ 1375.362784][T22326] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1375.487882][T22326] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1375.496601][T22326] device bridge_slave_0 entered promiscuous mode
[ 1375.558101][T17292] Bluetooth: hci2: command 0x0409 tx timeout
[ 1375.599636][T22326] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1375.606708][T22326] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1375.716589][T22326] device bridge_slave_1 entered promiscuous mode
[ 1375.858880][T22326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1376.547379][T22326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1376.805954][T22377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4821'.
[ 1376.988595][T22326] team0: Port device team_slave_0 added
[ 1377.151007][T22326] team0: Port device team_slave_1 added
[ 1377.350135][T22326] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1377.359946][T22326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1377.507406][T22326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1377.638073][T17292] Bluetooth: hci2: command 0x041b tx timeout
[ 1377.713033][T22326] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1377.737841][T22326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1377.857928][T22326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1378.432213][T22326] device hsr_slave_0 entered promiscuous mode
[ 1378.519657][T22326] device hsr_slave_1 entered promiscuous mode
[ 1378.587195][T22326] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1378.637844][T22326] Cannot create hsr debugfs directory
[ 1379.718673][T17292] Bluetooth: hci2: command 0x040f tx timeout
[ 1380.419487][T22421] netlink: 'syz.1.4843': attribute type 4 has an invalid length.
[ 1381.808287][T17292] Bluetooth: hci2: command 0x0419 tx timeout
[ 1382.041793][T22326] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1382.267946][T14112] device hsr_slave_0 left promiscuous mode
[ 1382.299119][T14112] device hsr_slave_1 left promiscuous mode
[ 1382.309329][T14112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1382.316754][T14112] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1382.365930][T14112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1382.397850][T14112] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1382.428441][T14112] device bridge_slave_1 left promiscuous mode
[ 1382.434715][T14112] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1382.498715][T14112] device bridge_slave_0 left promiscuous mode
[ 1382.504982][T14112] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1382.709217][T14112] device veth1_macvtap left promiscuous mode
[ 1382.718109][T14112] device veth0_macvtap left promiscuous mode
[ 1382.736719][T14112] device veth1_vlan left promiscuous mode
[ 1382.803211][T14112] device veth0_vlan left promiscuous mode
[ 1390.213876][T14112] team0 (unregistering): Port device team_slave_1 removed
[ 1390.393085][T14112] team0 (unregistering): Port device team_slave_0 removed
[ 1390.608414][T14112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1390.778116][T14112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1391.343848][T14112] bond0 (unregistering): Released all slaves
[ 1391.476903][T22326] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1391.600185][T22463] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1391.610102][T22463] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1391.619773][T22463] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1392.580040][T22326] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1393.109986][T22326] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1393.363103][T22516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4866'.
[ 1394.562447][T22326] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1394.572323][T22326] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1394.655276][T22326] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1394.764161][T22326] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1396.333612][T22326] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1396.679090][T22326] 8021q: adding VLAN 0 to HW filter on device team0
[ 1396.737570][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1396.748821][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1396.878389][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1396.887454][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1396.983738][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1396.990917][ T4529] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1397.031511][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1397.059448][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1397.090019][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1397.097155][ T4529] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1397.158566][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1397.187624][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1397.220124][T22571] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4878'.
[ 1397.918358][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1397.949698][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1398.095156][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1398.713575][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1398.774181][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1398.808362][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1398.834944][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1398.863696][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1399.629159][T22326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1399.754752][T22577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1399.773447][T22577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1400.635121][T17993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1400.656012][T17993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1400.666880][T22326] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1404.293063][T22637] overlayfs: failed to clone upperpath
[ 1405.534034][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1405.554602][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1405.655649][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1405.688408][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1405.736986][T22326] device veth0_vlan entered promiscuous mode
[ 1405.756505][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1405.806221][   T27] kauditd_printk_skb: 13 callbacks suppressed
[ 1405.806235][   T27] audit: type=1326 audit(2000000231.660:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22667 comm="syz.5.4897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1405.806672][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1405.823000][   T27] audit: type=1326 audit(2000000231.670:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22667 comm="syz.5.4897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1405.964368][T22326] device veth1_vlan entered promiscuous mode
[ 1406.005058][   T27] audit: type=1326 audit(2000000231.670:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22667 comm="syz.5.4897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1406.079654][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1406.091911][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1406.701357][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1406.719018][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1406.735884][T22326] device veth0_macvtap entered promiscuous mode
[ 1406.753936][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1406.769058][T22326] device veth1_macvtap entered promiscuous mode
[ 1406.827231][T22326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1406.844152][T22326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1406.857652][T22326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1406.877839][T22326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1406.894866][T22326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1406.927929][T22326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1406.962151][T22326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1407.001307][T22326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1407.037236][T22326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1407.077812][T22326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1407.087684][T22326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1407.137232][T22326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1407.155724][T22326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1407.208003][T22326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1407.237894][T22326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1407.293997][T22326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1407.324030][T22326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1407.357785][T22326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1407.387036][T22326] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1407.421313][T18351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1407.440917][T18351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1407.471464][T22326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1407.517771][T22326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1407.527665][T22326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1407.617843][T22326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1407.657914][T22326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1407.692164][T22326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1407.741257][T22326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1407.767800][T22326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1407.799554][T22326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1407.839646][T22326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1407.871590][T22326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1407.899636][T22326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1407.936643][T22326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1407.976940][T22326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1408.012229][T22326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1408.037784][T22326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1408.078029][T22326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1408.127743][T22326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1408.166785][T22326] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1408.195817][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1408.249611][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1408.273846][T22326] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1408.307816][T22326] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1408.316560][T22326] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1408.367827][T22326] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1408.646500][T17731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1408.697993][T17731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1408.725022][T18351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1408.750495][T18351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1408.750787][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1408.814653][T17731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1410.272222][T22746] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4920'.
[ 1410.592560][T22755] xt_hashlimit: max too large, truncated to 1048576
[ 1410.695350][T22755] tipc: Started in network mode
[ 1410.700409][T22755] tipc: Node identity ac1414aa, cluster identity 4711
[ 1410.716317][T22755] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1411.814702][T22772] loop6: detected capacity change from 0 to 256
[ 1411.825299][T22772] exfat: Bad value for 'uid'
[ 1411.838959][   T26] tipc: Node number set to 2886997162
[ 1413.483609][T22664] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1414.546403][T22797] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1414.628106][ T4328] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1415.323496][ T4328] usb 7-1: config 0 has an invalid descriptor of length 229, skipping remainder of the config
[ 1415.344460][ T4328] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1415.364831][ T4328] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[ 1415.375265][ T4328] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1415.385528][ T4328] usb 7-1: config 0 descriptor??
[ 1415.398713][ T4328] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1417.812677][ T4328] usb 7-1: USB disconnect, device number 17
[ 1418.192838][T22851] loop6: detected capacity change from 0 to 512
[ 1418.265283][T22851] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002]
[ 1418.329780][T22851] System zones: 0-2, 18-18, 34-34
[ 1418.348974][T22851] EXT4-fs (loop6): orphan cleanup on readonly fs
[ 1418.398065][T22851] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.4945: bad orphan inode 13
[ 1418.426769][T22851] ext4_test_bit(bit=12, block=18) = 1
[ 1418.446885][T22851] is_bad_inode(inode)=0
[ 1418.473423][T22851] NEXT_ORPHAN(inode)=2130706432
[ 1418.488247][T22851] max_ino=32
[ 1418.491488][T22851] i_nlink=1
[ 1418.505615][T22851] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1419.452221][T22326] EXT4-fs (loop6): unmounting filesystem.
[ 1420.890271][T22900] ipt_REJECT: ECHOREPLY no longer supported.
[ 1422.707933][ T4378] usb 7-1: new full-speed USB device number 18 using dummy_hcd
[ 1422.909431][ T4378] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1422.940090][ T4378] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1422.984396][ T4378] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1423.001832][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.009203][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.027884][ T4378] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[ 1423.059204][ T4378] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1423.081754][ T4378] usb 7-1: config 0 descriptor??
[ 1423.504292][ T4378] usbhid 7-1:0.0: can't add hid device: -71
[ 1423.527968][ T4378] usbhid: probe of 7-1:0.0 failed with error -71
[ 1423.558135][ T4378] usb 7-1: USB disconnect, device number 18
[ 1429.511190][T22959] ipt_REJECT: ECHOREPLY no longer supported.
[ 1430.508182][T22979] fuse: Bad value for 'fd'
[ 1444.695030][T23126] loop6: detected capacity change from 0 to 8192
[ 1446.941993][T23154] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5020'.
[ 1447.195409][T23163] xt_hashlimit: max too large, truncated to 1048576
[ 1447.213766][T23163] tipc: Started in network mode
[ 1447.218908][T23163] tipc: Node identity ac1414aa, cluster identity 4711
[ 1447.226291][T23163] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1448.312959][T23180] ipt_REJECT: ECHOREPLY no longer supported.
[ 1448.337813][ T4378] tipc: Node number set to 2886997162
[ 1450.726100][T23203] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5034'.
[ 1450.898809][T23205] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5035'.
[ 1451.138763][T23210] xt_hashlimit: max too large, truncated to 1048576
[ 1451.156474][T23210] tipc: Started in network mode
[ 1451.161475][T23210] tipc: Node identity ac1414aa, cluster identity 4711
[ 1451.168738][T23210] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1451.668001][T23212] loop6: detected capacity change from 0 to 2048
[ 1452.456757][ T4378] tipc: Node number set to 2886997162
[ 1452.695538][T23217] loop6: detected capacity change from 0 to 128
[ 1452.845015][T23217] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1452.895862][T23217] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1453.017860][T23217] fscrypt (loop6, inode 12): Unsupported encryption flags (0x16)
[ 1453.219748][T22326] EXT4-fs (loop6): unmounting filesystem.
[ 1454.355704][T23238] loop6: detected capacity change from 0 to 512
[ 1454.388951][T23238] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[ 1454.398988][T23238] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[ 1454.409127][T23238] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[ 1455.868739][T23238] EXT4-fs (loop6): revision level too high, forcing read-only mode
[ 1455.876755][T23238] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000]
[ 1455.884595][T23238] EXT4-fs (loop6): failed to initialize system zone (-117)
[ 1455.891884][T23238] EXT4-fs (loop6): mount failed
[ 1457.279687][T23249] loop6: detected capacity change from 0 to 2048
[ 1457.382660][T23251] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5046'.
[ 1457.454197][T23249] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1457.474837][T23249] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1457.653944][T23249] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.5045: bg 0: block 345: padding at end of block bitmap is not set
[ 1457.794565][T23249] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 117
[ 1457.835607][T23249] EXT4-fs (loop6): This should not happen!! Data will be lost
[ 1457.835607][T23249] 
[ 1458.020227][T22326] EXT4-fs (loop6): unmounting filesystem.
[ 1458.330803][T23268] loop6: detected capacity change from 0 to 2048
[ 1458.373908][T23273] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5050'.
[ 1458.813936][T23281] xt_hashlimit: max too large, truncated to 1048576
[ 1459.336798][T23281] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1460.681434][T23296] loop6: detected capacity change from 0 to 256
[ 1460.717215][T23296] FAT-fs (loop6): Directory bread(block 64) failed
[ 1460.776131][T23296] FAT-fs (loop6): Directory bread(block 65) failed
[ 1460.828169][T23296] FAT-fs (loop6): Directory bread(block 66) failed
[ 1460.850230][T23296] FAT-fs (loop6): Directory bread(block 67) failed
[ 1460.877609][T23296] FAT-fs (loop6): Directory bread(block 68) failed
[ 1460.937898][T23296] FAT-fs (loop6): Directory bread(block 69) failed
[ 1460.969956][T23296] FAT-fs (loop6): Directory bread(block 70) failed
[ 1461.017164][T23296] FAT-fs (loop6): Directory bread(block 71) failed
[ 1461.065124][T23296] FAT-fs (loop6): Directory bread(block 72) failed
[ 1461.128612][T23296] FAT-fs (loop6): Directory bread(block 73) failed
[ 1461.446010][   T27] audit: type=1800 audit(2000000287.300:372): pid=23296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5055" name=989FC7B899BFAA5B7A23CDCB94F26BA476C82EA38E5FBAF545F68A36CD43 dev="loop6" ino=1048787 res=0 errno=0
[ 1464.040379][T23322] loop6: detected capacity change from 0 to 512
[ 1464.227247][T23322] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.5061: inode has both inline data and extents flags
[ 1464.390674][T23322] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.5061: couldn't read orphan inode 15 (err -117)
[ 1464.412945][T23322] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1464.558572][T23329] overlayfs: filesystem on './file0' not supported as upperdir
[ 1464.610855][T23331] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5065'.
[ 1464.917277][T23336] xt_hashlimit: max too large, truncated to 1048576
[ 1465.661959][T22326] EXT4-fs (loop6): unmounting filesystem.
[ 1465.880493][T23343] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5068'.
[ 1466.013179][T23344] 9pnet_fd: Insufficient options for proto=fd
[ 1466.831475][T23352] loop6: detected capacity change from 0 to 512
[ 1466.894492][T23352] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1466.927790][T23352] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1467.000753][T23352] EXT4-fs error (device loop6): xattr_find_entry:297: inode #15: comm syz.6.5066: corrupted xattr entries
[ 1467.059387][T23352] EXT4-fs (loop6): 1 orphan inode deleted
[ 1467.130550][T23352] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1467.344655][T23371] overlayfs: failed to clone upperpath
[ 1467.681273][T23352] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[ 1467.698693][T23367] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz.6.5066: deleted inode referenced: 15
[ 1468.477486][T22326] EXT4-fs (loop6): unmounting filesystem.
[ 1468.969045][T23395] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5078'.
[ 1469.291270][T23397] xt_hashlimit: max too large, truncated to 1048576
[ 1478.998443][T17292] Bluetooth: hci2: command 0x0405 tx timeout
[ 1484.468445][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.475389][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.795633][T23550] sch_fq: defrate 53322 ignored.
[ 1485.759026][T23566] loop6: detected capacity change from 0 to 1024
[ 1486.609789][T23566] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #4: comm syz.6.5123: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[ 1486.757961][T23566] EXT4-fs error (device loop6): ext4_quota_enable:7046: comm syz.6.5123: Bad quota inode: 4, type: 1
[ 1486.809059][T23566] EXT4-fs warning (device loop6): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[ 1486.901317][T23566] EXT4-fs (loop6): mount failed
[ 1487.590123][T23574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5112'.
[ 1487.618772][T23574] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1487.970119][T23574] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1488.955182][T23607] loop6: detected capacity change from 0 to 256
[ 1489.008904][T23607] exfat: Deprecated parameter 'utf8'
[ 1489.034968][T23607] exfat: Deprecated parameter 'utf8'
[ 1489.055350][T23607] exfat: Deprecated parameter 'utf8'
[ 1489.844187][T23607] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[ 1493.771553][T23655] device macsec1 entered promiscuous mode
[ 1495.016693][T23661] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5154'.
[ 1495.478595][T23662] tipc: Started in network mode
[ 1495.483614][T23662] tipc: Node identity ac1414aa, cluster identity 4711
[ 1495.490849][T23662] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1496.609553][ T5409] tipc: Node number set to 2886997162
[ 1496.767982][T17292] Bluetooth: hci2: command 0x0406 tx timeout
[ 1499.039125][   T27] audit: type=1326 audit(2000000324.900:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23697 comm="syz.5.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1499.151306][   T27] audit: type=1326 audit(2000000324.900:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23697 comm="syz.5.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1499.223963][   T27] audit: type=1326 audit(2000000324.900:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23697 comm="syz.5.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1499.338365][   T27] audit: type=1326 audit(2000000324.900:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23697 comm="syz.5.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1499.420626][   T27] audit: type=1326 audit(2000000324.900:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23697 comm="syz.5.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1499.683514][   T27] audit: type=1326 audit(2000000324.900:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23697 comm="syz.5.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1499.761705][   T27] audit: type=1326 audit(2000000324.900:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23697 comm="syz.5.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1500.396812][   T27] audit: type=1326 audit(2000000324.900:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23697 comm="syz.5.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1500.422851][   T27] audit: type=1326 audit(2000000324.900:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23697 comm="syz.5.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6e3ed9aeb9 code=0x7ffc0000
[ 1500.725182][T23717] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5172'.
[ 1500.996739][T23720] xt_hashlimit: max too large, truncated to 1048576
[ 1501.014442][T23720] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1502.795363][ T4328] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1502.921362][ T4410] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1503.835149][ T4410] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1503.885725][T23749] loop6: detected capacity change from 0 to 256
[ 1503.958765][ T4410] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1503.969737][ T4410] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1504.598134][ T4328] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1507.877815][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1509.359159][T23800] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5199'.
[ 1509.410284][T23800] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5199'.
[ 1509.467028][T23800] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5199'.
[ 1509.623588][T23809] loop6: detected capacity change from 0 to 2048
[ 1511.027815][   T27] audit: type=1326 audit(2000000336.860:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23816 comm="syz.6.5206" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bb979aeb9 code=0x0
[ 1514.414194][T23837] overlayfs: upper fs does not support file handles, falling back to index=off.
[ 1517.683930][   T27] audit: type=1326 audit(2000000342.700:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23852 comm="syz.6.5220" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bb979aeb9 code=0x0
[ 1517.689224][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1518.795321][T23879] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5229'.
[ 1518.944933][T23885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5228'.
[ 1519.807786][T23890] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1520.179958][T23907] loop6: detected capacity change from 0 to 128
[ 1520.195789][T23907] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1520.379630][T23907] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1520.807423][T23911] syz.2.5234 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1521.003908][T17516] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1521.909518][T23921] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5237'.
[ 1525.347852][T23958] 
[ 1525.350736][T23958] =============================
[ 1525.355601][T23958] WARNING: suspicious RCU usage
[ 1525.360518][T23958] syzkaller #0 Not tainted
[ 1525.364921][T23958] -----------------------------
[ 1525.369824][T23958] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage!
[ 1525.378335][T23958] 
[ 1525.378335][T23958] other info that might help us debug this:
[ 1525.378335][T23958] 
[ 1525.388677][T23958] 
[ 1525.388677][T23958] rcu_scheduler_active = 2, debug_locks = 1
[ 1525.396731][T23958] 1 lock held by syz.2.5247/23958:
[ 1525.401875][T23958]  #0: ffffffff8cb2d7a0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70
[ 1525.412091][T23958] 
[ 1525.412091][T23958] stack backtrace:
[ 1525.418064][T23958] CPU: 1 PID: 23958 Comm: syz.2.5247 Not tainted syzkaller #0
[ 1525.425562][T23958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1525.436187][T23958] Call Trace:
[ 1525.439470][T23958]  <TASK>
[ 1525.442479][T23958]  dump_stack_lvl+0x188/0x24e
[ 1525.447161][T23958]  ? show_regs_print_info+0x12/0x12
[ 1525.452369][T23958]  ? load_image+0x400/0x400
[ 1525.456955][T23958]  lockdep_rcu_suspicious+0x1dd/0x300
[ 1525.462429][T23958]  get_callchain_entry+0x2a5/0x3b0
[ 1525.467537][T23958]  get_perf_callchain+0xc4/0x490
[ 1525.472474][T23958]  ? put_callchain_entry+0xb0/0xb0
[ 1525.477795][T23958]  ? plist_add+0x3d4/0x480
[ 1525.482201][T23958]  ? verify_lock_unused+0x140/0x140
[ 1525.488115][T23958]  __bpf_get_stack+0x2de/0x520
[ 1525.492896][T23958]  ? stack_map_get_build_id_offset+0x970/0x970
[ 1525.499320][T23958]  ? __cant_sleep+0x220/0x220
[ 1525.504005][T23958]  ? bpf_prog_14d9fb3786f83342+0x3d/0x41
[ 1525.509656][T23958]  bpf_get_stack_raw_tp+0x189/0x1c0
[ 1525.514867][T23958]  bpf_prog_14d9fb3786f83342+0x3d/0x41
[ 1525.520317][T23958]  bpf_prog_run_pin_on_cpu+0x64/0x150
[ 1525.525686][T23958]  bpf_prog_test_run_syscall+0x313/0x4a0
[ 1525.531335][T23958]  ? sock_gen_cookie+0x60/0x60
[ 1525.536108][T23958]  ? sock_gen_cookie+0x60/0x60
[ 1525.540905][T23958]  bpf_prog_test_run+0x31e/0x390
[ 1525.545855][T23958]  __sys_bpf+0x62b/0x780
[ 1525.550119][T23958]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1525.555506][T23958]  ? __sys_connect+0x11a/0x450
[ 1525.560363][T23958]  ? lock_chain_count+0x20/0x20
[ 1525.565647][T23958]  __x64_sys_bpf+0x78/0x90
[ 1525.570060][T23958]  do_syscall_64+0x4c/0xa0
[ 1525.574657][T23958]  ? clear_bhb_loop+0x60/0xb0
[ 1525.579338][T23958]  ? clear_bhb_loop+0x60/0xb0
[ 1525.584020][T23958]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1525.589911][T23958] RIP: 0033:0x7f2b7af9aeb9
[ 1525.594312][T23958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1525.614008][T23958] RSP: 002b:00007f2b791b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1525.622429][T23958] RAX: ffffffffffffffda RBX: 00007f2b7b216180 RCX: 00007f2b7af9aeb9
[ 1525.630405][T23958] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a
[ 1525.638374][T23958] RBP: 00007f2b7b008c1f R08: 0000000000000000 R09: 0000000000000000
[ 1525.646334][T23958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1525.654291][T23958] R13: 00007f2b7b216218 R14: 00007f2b7b216180 R15: 00007ffe5ecb7c98
[ 1525.662262][T23958]  </TASK>
[ 1526.579478][T23962] overlayfs: failed to clone upperpath
[ 1533.077837][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!