last executing test programs:

7m17.301339557s ago: executing program 32 (id=300):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)

5m56.888312129s ago: executing program 33 (id=407):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4)

5m56.861447499s ago: executing program 34 (id=410):
socket$packet(0x11, 0x3, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)

5m56.843296629s ago: executing program 35 (id=409):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000dc0)=@newqdisc={0x2c, 0x28, 0x1, 0x4003, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x2, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}}, 0x4000080)

5m35.388756275s ago: executing program 36 (id=421):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5)

3m58.307765708s ago: executing program 37 (id=614):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

3m58.1572364s ago: executing program 8 (id=618):
r0 = socket(0x400000000010, 0x3, 0x0)
close(0x3)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000c5c0)=@newtfilter={0x3414, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x0, 0x4}, {0x2, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x33e4, 0x2, [@TCA_CGROUP_ACT={0x914, 0x1, [@m_xt={0x778, 0x3, 0x0, 0x0, {{0x7}, {0x750, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xcd, 0x6, {0x6, 'raw\x00', 0x4, 0x3, "fc3523567cce5f1e99ae68309173092bd8b3762ec2831af8551db27283a374ebf75642e38914cfa0e998b05a3bdfc775f0b342fe05a8e7215c92242afa9dca000d06f71b9ca7cedeb7fc0c00d3dba80b5e42108ab82e3c2a686607fb91b68b2813a4c4a81c0e5d047423d77a594c59a8bc550e99f5d120c430095153a77511791975f2fd847292b644513a1bb4fc2d5831d38509b5df70fc2bdc343a62c0ac8c7b2b83"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x629, 0x6, {0x4, 'filter\x00', 0x3, 0x3ff, "44ec0a80ca0b8bffa75e9cefcf49fe69f857aa81f516509d0f2896d0a4f929acc3bd1197e8fdaeb8cbcbe7e0158350c402a98a889b92266db6f284665a46b2263659c74c9e2cca18219fb66377c04ce5c1721778cb709edb21d074ec6dc5b17736665766ba1182acaf69902dba764534f458f5f3bec5ce1533dc953205194418c963016446ea59760e5e8e98987617aa08c5af2d1183021a4ad0547f0323cad1933cceb046fcf72e02458be7642fce6a1c940f138451a37533059423429caaee0905dd66f9ebc3a312c63ea5af510e0e32128cbc0f3e03e2660b66cf5104db199b1c4b1fa1382b9a84d676e68dcfa0d695e169b3696f0d7464e1f9dfaa65a2b40782c88d22c1a2d6e345057ca85e03e709c711a50fa1cacfa4d358ff0803eed5ebfc9fb788319f869de8c4a11d153713bc8abe570c64d5cbee37c60edb7f4ff1ede965672423b853c0e9f9ef8a81e32e35ebda63f627b097a0d8651c76551a48a6e5a27a9828102eee2aa1cc6cc0f9f37a364c91db5286c9cc3815acf414be065fd0466f6e78fe85ea457e249dac76383aed8e28ffec33d07b83df18ac1d1d13e02b1b2cfb71a19bc9b200e5f30c4fa3850a6a903360f44d4cb4b80f8ad91bc5c05e77992754f18d0ee460cf030a129ba24c03e20fe10d1f3536f0384379511c14292e2863dd1cbadf730c39abf90f3a5baba6044edd6293018cd1079d19f8b47b5a8985c1c77382973c5b532c040d5f0a161bbd5f4285d2df3599acf1b9d71c5dfcc49517a1580e20dfef0cfb365c20a870055597f82dca63d1222662c9a2b33e3f7faa91c86f886bbe5bd8f1b2335213deb0fffad8a29204498c70cb8548271a3f6ba46e812757f53cc7346575be129f50669891e8c6205785fa45c5956dbcb18bce358e8a0b5295b4192a3045d8c1afea58e20195e5b4786fabd96a4fd2ad9202392c55c905557031e656d9f803df85f7a4e69c9a4cc36b3d9e6daba5848609dd7025a1b60ca3b6dde17286d00d101eb551365ef56a2469a31665e94823dbfea3b04acd68571b7ec4ce89af5a2459e1c4563fab65f7668a33f30f5d75cba377295ced00450b64d98d7336376c8314488b6d0ed6653ca7882b5f9eefd7f31764e77c15a922e597991dda49fd00c8092fe9b8d3d31b84bf1986ae4010d74ff73cf490a68dc293b2a1d9b8b0f602a03894a7f2e91a9e3cd369659e063d93673bd4dc6cd3c09cae86d809c534cece6c52ef2ce47a463851cc2a4e3cd038544aaa0f3e08efc9306f64081b26175bfda929466fe3da9a6355f9895bc3f5aa8036c6aa15517c05bae8a59e715e365a4e7d08986c6530530560a52dd54d5dabf340aac428713d0fadc93bed0d090b2ea499febc566e4c77287fd9dccc89d58745d66de06424c0ae5d7b546ae8c8b31160805dc88cccaf370039d39e5ddc7aa7cd6d0485fdf152b14c01c0198b19e61bad1951ade2ba904df5925819929dfe0f52314373c0249462c8f24a8be8fb63a80172956368c98cf6b7421bce8a551ec34f1cdd325d111cb0f0d5633225c0593a2012aaa2e3f9de83f056943f73e056caeeb61b921e2db4b08e21d40fc5b8ca0b4bf37151f09acb15466e8dbb72b5b7eea6ebc94eb3c2fc1c9e4771ab195a38069475f31b1494a0e7f7fad2362b4288e0fdb0e868c61a74a309ecc1b8e533b4a7ddd24aa45b144b55a84cecee2ae22abba37698470310d4b17a5d56e2f50ab3d26a06dffb2bc00225d6cd20c0e752cfa19b614a8a8b8bfdd6827b158df5f6ba1b5f068657384625559411f4c316c13303e40d126002b921793c55a90485b4b573aaacf3fc2ae48decfd0f6dfeb7f9c48ca033222f1d075c465a984935fa0523ce1d624ff9c5f6838acced5beea24de5abcbdd703814b397f54ed3c0df9c140578e8a8fda1899dbd82a857609725351ecf06c389d4fed0fa238f553022b2a917c24d03ffa7ff2c0419ed35a9ff6f63a8a1fe625859ce0544eefbdd08aa96bbb2b7b6af1ab306879618a05d60f8595a6b0f568bb1e7abbb22637baa9cabeedc388a8035458f5baf3413e0dd552657ec70470f18a726102ed5e7032e24f5b45fb1f828f565c52c7e560c034687a41fc643071c15151e041a8a32943bd63be6ffaecc4ac5a8b96d6625612c7c047050eaa03a5126"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0x120, 0x20, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xe9, 0x6, "9ebfd113dd0174a726daf13d7a0d3619215ac5998306c4bca46d748180813c937da3f2ead366b3d528cb6a4a3f0c0241c21feb55ef6bdab20a2c6ac5b86fe037957dea77707c49221ab70b1c2085cf614c94ce6ebb1fc923304cefbb2a2a8bef26f6b5a03c6386efd8602b28415b72019041aff16358d8ed74c8467c01d2b09d2de46a1e56098a06b720a124d2991a82ef49a120ea984e09fab4f364dbf338fc84d00513958e39c898b3a187a3cea8e74548ea5145392d767a44ca9517ef714b1306fd3983237d9ed34dc8032daf77663d566c65e87a897afd0742d0627db54cd1376a9004"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x78, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x4d, 0x6, "7f62278439a1b9f7d1e845ad691e484f5d2c10d1306bea2a3f4fe201b6c411d119909124323723cf4e09170c034bb218fc6959810b93ab295293519029312f9e619a39d44b8496da3c"}, {0xc}, {0xc}}}]}, @TCA_CGROUP_ACT={0x2a94, 0x1, [@m_pedit={0x2a90, 0xd, 0x0, 0x0, {{0xa}, {0x2a64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x9, 0x20000000, 0x5, 0x7fff}, 0xb, 0x2f}, [{0xffffffff, 0x8000000, 0x7, 0x101, 0x0, 0x1}, {0x401, 0x8, 0x6, 0x7, 0x8001, 0x2}, {0x5, 0x8000, 0x4, 0x400, 0x9, 0x5}, {0x2, 0x5, 0x9, 0x4, 0x6, 0x7}, {0xfffffff8, 0x0, 0x6, 0x0, 0x7, 0x5}, {0xfffffffe, 0x0, 0x7fff, 0x4, 0x3, 0x3}, {0x7, 0x200, 0x1ff, 0x9, 0x5, 0x4}, {0x11, 0x7fff, 0x3, 0x5, 0xff, 0x3}, {0x5, 0x1, 0x3, 0xb4e, 0x3, 0x3}, {0x9, 0x609, 0x7, 0x7fffffff, 0x8}, {0x5, 0x6, 0xfffffff8, 0x1, 0x6, 0xffff6755}, {0xffff, 0x5c, 0xc06, 0xae0, 0x7, 0x86b}, {0x8, 0x2, 0x0, 0x5, 0x8000, 0x48ea}, {0x10001, 0xc, 0x1, 0x9, 0x71a, 0x1}, {0xf49, 0x1, 0x7, 0xecc2, 0xffff, 0xb}, {0xa90, 0x9, 0x1, 0x5, 0x80000001, 0x200}, {0xb, 0xd4ac, 0xfff, 0x400, 0x6, 0x7ca}, {0x0, 0xd0, 0x1, 0x524c, 0xd1f}, {0x8000, 0x5, 0x0, 0xb70b, 0xf, 0xfffffffd}, {0x9, 0xc1, 0xfffffffa, 0x3, 0x3, 0x7fffffff}, {0x7, 0x3, 0xffff2a73, 0x100, 0x3, 0x6dbd}, {0x4, 0x40, 0x3, 0x45, 0xffff8001, 0xb48}, {0x55cf, 0x962b, 0xa, 0x5, 0x10000, 0x3}, {0x0, 0x0, 0xf, 0xfff, 0x3, 0x2}, {0xe6, 0x8f7, 0x29, 0xb, 0x6, 0x4}, {0x6d9, 0x1, 0x1, 0x7fff, 0x400, 0x7ff}, {0x5, 0xf, 0x4, 0xfffffffa, 0x6, 0x3}, {0xa2ed, 0x10001, 0x9, 0x4534, 0x5, 0x5}, {0x401, 0x2, 0xdd01, 0x10, 0x200, 0x93d1}, {0x8, 0x8, 0x401, 0x2, 0x4, 0x5}, {0x98f4, 0x3, 0x3, 0x9, 0x40, 0xa}, {0xfffffff8, 0x3, 0x0, 0xce, 0x5, 0x1}, {0x10001, 0x8, 0x2, 0x10000, 0x8, 0x4}, {0x9, 0xfffffff9, 0xe4, 0x0, 0xe, 0x2}, {0x2, 0x800, 0xfffffff8, 0x9, 0xb, 0x23f6}, {0x80000000, 0x10, 0x5, 0x0, 0xebc9}, {0x1, 0xc, 0x20e0, 0xfffffff8, 0x5}, {0x6, 0x3, 0x3, 0x4c, 0x9, 0x200}, {0xfff, 0x6, 0xa62, 0x0, 0xb5ae}, {0x800, 0x0, 0x9, 0xe4fa, 0xffffffc1, 0x7}, {0x3, 0x6, 0x5, 0x101, 0x0, 0x400}, {0xfff, 0x0, 0xde2, 0x2, 0x44c, 0xfffffaa2}, {0x4, 0x5, 0x8825, 0x14b, 0x10000, 0x1}, {0x3, 0x1, 0xc21f, 0x0, 0x9, 0x1}, {0x7f, 0x1, 0x1, 0x1c, 0x3, 0x7648}, {0x2, 0xffff, 0x7, 0x5, 0x6b59, 0x100}, {0x1, 0x4, 0x0, 0x8, 0x3, 0x5}, {0xfffffffd, 0x1, 0x0, 0x5, 0x2, 0x2}, {0x8, 0x8, 0x4, 0x10, 0x2, 0x80}, {0x5, 0xfffffff9, 0xfffffff9, 0x5, 0x2b, 0x7}, {0x503, 0x1, 0x1000, 0x8, 0x9, 0xfffffffd}, {0x7ff, 0xbb8, 0x0, 0x80000000, 0x400, 0x3}, {0x9, 0x7fff, 0x53b1, 0x4, 0xb, 0x5}, {0x2, 0xe9f, 0x7fff, 0x0, 0x80000000}, {0x1, 0x4, 0xc6b, 0x7fffffff, 0x6, 0x4}, {0x9, 0xffffffcb, 0x4, 0xb17, 0x2}, {0x80000000, 0x52e7, 0x9, 0x3, 0x2, 0x8}, {0x7, 0x4, 0x200, 0x2, 0x6, 0x8}, {0x5d1e5b07, 0xa2, 0xa19d, 0x6, 0x1, 0x7f}, {0x225d, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x2, 0x4a27, 0xfd8, 0x5, 0xfffffff1}, {0xf, 0x4, 0x0, 0x6, 0x8000, 0x2}, {0x2, 0xae, 0x1, 0x7f, 0x80000001, 0xfffffffc}, {0xbc, 0x9, 0x7, 0x3, 0x40, 0x7fffffff}, {0xe, 0x7fff, 0x0, 0x4, 0x7, 0x83}, {0x4, 0x3ff, 0x5, 0x6, 0xa5f, 0x4}, {0xfffffff9, 0x8, 0x3, 0x6, 0x6, 0x9a}, {0x800, 0xfffffff8, 0x6, 0x0, 0x3e9, 0x8}, {0x3, 0x8, 0x10, 0x6, 0xffffb2dc, 0x7f}, {0x5, 0x1000, 0x0, 0x4, 0x25, 0x1ff}, {0x45b0, 0x2, 0x2, 0x6, 0x6, 0xb2da}, {0x3, 0x4, 0x7, 0x4, 0x4, 0xfffffffe}, {0x9, 0x31dd, 0xfffffffa, 0x9, 0x9, 0x4}, {0x4, 0xd, 0xfa, 0x8000, 0x5, 0x9}, {0x1, 0xfffffffa, 0x0, 0x5d23, 0xfff, 0x9ba}, {0x9, 0x3, 0xa9, 0x52, 0x4, 0x9b5}, {0x6, 0x2, 0x1ff, 0x340, 0x6a, 0xfffffffa}, {0x4042, 0xc, 0x9, 0x99, 0x400, 0x3}, {0x8, 0xfffff000, 0xb, 0x2, 0x9, 0x5}, {0x9, 0x8d19, 0x2, 0x1bd57217, 0x7, 0x101}, {0x4, 0x9, 0x33e4000, 0x7, 0x8, 0x470}, {0xffffffff, 0x7fff, 0x80, 0x5, 0x5, 0x6}, {0xd, 0x7, 0x8001, 0x4, 0x1}, {0xfffffff8, 0x3, 0x6, 0x7f, 0x8, 0x2}, {0x5bf, 0x7827ee5b, 0x6, 0x3, 0x4}, {0x8852, 0x83, 0x6, 0xce3, 0xfffffff7, 0x7fffffff}, {0x5, 0xfffff000, 0x0, 0x4, 0x7ff, 0x3a91}, {0x5, 0x1, 0x77, 0xa, 0x9, 0x3}, {0x7fff, 0x0, 0x6, 0x2, 0x491e, 0x5}, {0x7, 0xcaa, 0x9c, 0x1, 0x7, 0xb6}, {0x2, 0x100000, 0x6, 0x7, 0x4, 0xc}, {0x3, 0x7, 0x8, 0x8, 0x7, 0x2}, {0x0, 0x7, 0x7, 0xe, 0x2, 0xd3}, {0x80000, 0x7, 0x5, 0x4, 0x6, 0x948}, {0x4, 0xdb0, 0x401, 0xc27e, 0x200, 0xfff}, {0x41b780, 0x56a4, 0x1, 0x1800, 0x11, 0x6}, {0x5, 0xf4, 0x6, 0x9000000, 0x7df49cc6, 0xcb3}, {0x9, 0xb, 0xee39, 0x1ca, 0x3, 0x4}, {0x709, 0x2, 0x8001, 0x4, 0x8, 0x80000001}, {0x1, 0xdca0, 0x5, 0x8, 0x1, 0x74f8}, {0x1, 0x2, 0x4, 0x1, 0x8, 0x80000000}, {0x9, 0x0, 0x5, 0x0, 0x0, 0x80f}, {0x5, 0x4a, 0x401, 0x6, 0x7f, 0x8}, {0x1, 0x4, 0xfff, 0x61d7, 0xb, 0x1}, {0x1, 0x7ff, 0xb, 0x4, 0xb9b, 0x101}, {0x10, 0x1, 0x3, 0xfffffffb, 0x5, 0xfffffffb}, {0x5, 0x5, 0xdf1, 0x0, 0x7ff, 0x4dc}, {0x8, 0xfffffff6, 0x9, 0xffff, 0x81, 0x6}, {0x81, 0x6, 0x0, 0x8, 0x387a, 0x3}, {0x7, 0xffffff80, 0x5, 0xfff, 0xcb, 0x400}, {0x4, 0xfa, 0xffffffff, 0x7, 0x200, 0xffffffff}, {0x7fffffff, 0xf, 0x3ff, 0x9, 0x4718322f, 0x8}, {0x1, 0x1, 0x200, 0x7, 0x1, 0x7f}, {0x1, 0x7, 0x7ff, 0x11, 0x5, 0x7}, {0x0, 0x400, 0x27f, 0x2, 0x8, 0x1}, {0x1, 0x200, 0x928b, 0x4, 0x7, 0x8030}, {0x1, 0x3, 0x6, 0x0, 0xfffffffa, 0xe}, {0xfffffffb, 0x4, 0x1, 0x6, 0xfffffff8, 0x1}, {0x2e, 0x7fe0, 0x7f, 0x5, 0x3, 0x2}, {0x1, 0x7fff, 0x5, 0x8, 0x8, 0x2}, {0x101e, 0x9, 0x1ff, 0x7, 0x7, 0x3}, {0x3, 0x32, 0x655f, 0x6, 0x81, 0x7}, {0x5, 0x3, 0x100, 0x2000000, 0xa0, 0x3}, {0x8000, 0x81, 0x0, 0x7, 0x0, 0x8}, {0x3, 0x8, 0x1, 0x3, 0xc987, 0x2}, {0x0, 0x1, 0x100, 0x7, 0x5, 0x8000}, {0x945, 0x2db1, 0x5, 0xb, 0x8, 0x3ff}, {0x0, 0x3, 0x891, 0x17623ec6, 0x8, 0x10001}], [{0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0xc6b049b0a879e563}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x1}, {0x5}, {0x3}, {0x4}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x983880b854c4583f}, {0x3}, {}, {0x8, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0xd854e709c091e0f2, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x5}, {0x1}, {0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0xd49f0dea9106a2d4}, {0x1}, {0x2, 0x5c5daab8eacda5b5}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}]}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x40, 0x3, 0x2, 0x2, 0x2}, 0x29, 0x7}, [{0x4, 0x2, 0xfffffff9, 0x9, 0x40, 0xc0000}, {0x3, 0x5, 0x4, 0x9, 0x1000, 0xfffff34c}, {0x10001, 0xfffffff7, 0xc2, 0x5, 0x9, 0x3}, {0x7f, 0xa, 0x52, 0x80000000, 0x5883e64b, 0x800}, {0x800, 0x6, 0x1, 0x1, 0x9, 0x80000001}, {0x101, 0xcc, 0x2, 0x100, 0x4be4}, {0x1, 0x3a6, 0x3, 0x0, 0xfdb6, 0x2}, {0xe0, 0x2225, 0xe27, 0xc86, 0x81, 0x9}, {0x81, 0x3ff, 0x6, 0xc5, 0x6, 0x5}, {0x7, 0x9, 0x1ff, 0x8, 0xffff2017, 0x7}, {0x1, 0x5, 0xfffffffd, 0x0, 0xfffffff9}, {0x6, 0x0, 0x4, 0x10001, 0x2, 0x2}, {0x81, 0x8, 0x5, 0x7fffffff, 0x3, 0xa4}, {0x6, 0x8, 0x1ff, 0x80000001, 0x1, 0x35}, {0x2, 0x0, 0x7c, 0x7, 0x5, 0x3e96}, {0x1, 0x45b, 0x7fffffff, 0xd2a2, 0xfffffffe, 0x100}, {0x0, 0x2, 0x0, 0x80000000, 0xffffffff, 0x3e9e}, {0x1, 0x800, 0x8, 0x765, 0x1, 0x81}, {0x4, 0x9, 0x4, 0xd, 0x6, 0x5}, {0x8001, 0x3, 0xae1, 0x2, 0x8, 0x4}, {0xfffffffa, 0xfffffff9, 0xb, 0x5, 0x7fff, 0x1}, {0x7f, 0x18, 0x7fff, 0x42, 0x7f, 0x3}, {0x3, 0x3, 0x200, 0x40, 0xfffffff7, 0x9}, {0xd97f, 0x5cf2, 0x7, 0x9, 0x8, 0x5f}, {0x1, 0x3870, 0x915, 0x35, 0x5, 0x48}, {0x2, 0x0, 0x116, 0x255, 0x1, 0x7fffffff}, {0xc00, 0xfffffffc, 0x8, 0x4, 0x32, 0x3}, {0x2, 0x7, 0x0, 0x4, 0x2}, {0x401, 0x3, 0x8, 0x9, 0x6798, 0x80000000}, {0xffffffee, 0x8000, 0x5, 0x2, 0x5, 0xd1}, {0xf, 0x8, 0x10, 0x7, 0x8, 0x2}, {0x1000, 0xc, 0x3832, 0x8, 0x6, 0x10}, {0x81, 0x9, 0x264, 0x1, 0x2, 0x2}, {0xfffffffa, 0x5, 0x5, 0x7fffffff, 0x7, 0x2}, {0x3, 0x81, 0x3, 0x7, 0xb, 0x7}, {0x7f, 0x9, 0x8001, 0x0, 0x7, 0x7}, {0x973, 0x9, 0x6, 0x8, 0x5, 0xfff}, {0x4, 0x3, 0x1, 0xc, 0x8, 0xd}, {0x8, 0x9, 0x2, 0x9, 0x1ce1, 0x6}, {0x0, 0x1, 0x800, 0x7, 0xb1, 0x7}, {0xd38, 0x6, 0x2, 0xb4c, 0x0, 0xf}, {0x5, 0x4088, 0x5de, 0x7, 0x5, 0x7}, {0x3, 0x100, 0x6, 0x1, 0x7, 0x9}, {0x400, 0x9ea6, 0x7fffffff, 0x6e6, 0x0, 0x7fffffff}, {0x80000000, 0x7, 0x1, 0x7e, 0x1, 0xffffe49d}, {0x7, 0x6, 0xffff9518, 0x800, 0x10001, 0x8}, {0x2, 0x3, 0x7, 0x7fff, 0x2, 0x3}, {0x1731, 0x1000, 0x1, 0x8, 0x8, 0x4}, {0x3, 0x7, 0x2, 0x5, 0x80000000, 0x1}, {0xfffffff8, 0x80, 0xdda, 0xd17, 0xfffffff9}, {0x6, 0x8, 0x0, 0x8, 0xa4, 0x8000}, {0xfffffff8, 0xd, 0x1, 0xb, 0x0, 0x6}, {0x9, 0x8, 0x7, 0x6, 0x1, 0x7f}, {0x1, 0x0, 0x0, 0x4, 0xfffffffc, 0x8000}, {0x8, 0x4358, 0x3, 0x7, 0x5, 0x3}, {0x2, 0x2, 0x3, 0x7, 0x5, 0x5}, {0x0, 0x6, 0x7fffffff, 0x1, 0x9a, 0x9}, {0x0, 0x800, 0xd3, 0x5, 0x5f, 0x2}, {0x0, 0x3, 0xf, 0x4, 0x2, 0x1}, {0xb, 0xc3, 0x3, 0xb, 0x6, 0x5000000}, {0x4, 0xb555, 0xffffff68, 0xc, 0x200, 0x6}, {0x9, 0x376387c7, 0x7f, 0x72d7, 0x4, 0x4}, {0xffff, 0x80000000, 0x3345cc1, 0x40, 0x8, 0x5}, {0x1, 0x6, 0x1000, 0x3, 0x7, 0x2}, {0x419, 0xfff, 0x8, 0x681, 0x980, 0x3}, {0x1, 0xffffb008, 0x2, 0x2, 0x5, 0x9}, {0x8, 0x8, 0x7f, 0x2, 0x6ae, 0x4}, {0x8, 0xea1, 0x5, 0xffffffff, 0x9, 0x400}, {0x0, 0xfffffffd, 0x5, 0x0, 0x80000000, 0x81}, {0x9, 0x7, 0x2, 0xd, 0x2, 0x2}, {0x8, 0x1000, 0x1, 0x4, 0x9, 0x400}, {0x6, 0x80000001, 0x8, 0xda000000, 0x7f}, {0x3ff, 0xd, 0x672b, 0x3ff, 0x6, 0x100}, {0x3d, 0x3, 0x9, 0xfff, 0x7, 0x9}, {0x9, 0x8, 0x20a, 0x0, 0x9}, {0xe, 0x9, 0x4, 0x6, 0x400}, {0xa, 0x9, 0x0, 0x2, 0x3, 0xd5bd}, {0x800, 0x9, 0x6c89000, 0xffffffff, 0x7ff, 0x9}, {0x3, 0xc, 0x5a5c2768, 0x3, 0x8, 0x5}, {0x800, 0xfff, 0x6, 0x171, 0xd9f, 0x2}, {0x6, 0x3bb41816, 0x5, 0x2, 0xcdf, 0x6}, {0x2c, 0xf4, 0x5, 0x1, 0x2, 0xa}, {0x7, 0x1c00000, 0xb, 0xfffffff8, 0xfffffffe, 0x180}, {0x2, 0x4, 0xf38, 0x4, 0x7, 0x1}, {0x6, 0x7, 0x2, 0x3, 0x3149, 0xfdc}, {0xc4, 0x9, 0x5, 0x1, 0x8ce, 0x3}, {0x0, 0x3ff, 0x3, 0xe, 0x7, 0x5}, {0x75, 0x9, 0x9, 0x5, 0x6, 0xd6bf}, {0xb, 0x4, 0xffffffff, 0x4e, 0x5, 0x8}, {0x1, 0xf, 0xfffffff9, 0x1, 0x7fffffff, 0x4}, {0x8, 0x1, 0x3, 0x7a420076, 0x9, 0x7f}, {0x2, 0x0, 0x2426ec7b, 0x2, 0xc, 0xa3bd}, {0x200, 0x9, 0xfffffff7, 0x2, 0x6, 0x8}, {0x9, 0xffffafeb, 0xfffff85d, 0x101, 0x1, 0x383}, {0x4, 0x2, 0x4, 0x7fff, 0xc, 0x6}, {0xfffffff7, 0xfff, 0xf2b8, 0x7, 0xfffffc14, 0x1}, {0x5, 0xfffffffe, 0x3ff, 0x4, 0x2, 0x4}, {0x5, 0x9, 0x1, 0xfff, 0x4, 0x8f}, {0x400, 0x200, 0x10, 0x8000, 0x800, 0xeaa}, {0x7fffffff, 0x4, 0x33, 0x81, 0x1, 0x2}, {0x1959, 0xff, 0x7, 0x6, 0x3, 0x7fffffff}, {0xffff898a, 0x3, 0xbe72, 0x672, 0x1, 0x1}, {0x7fff, 0x4, 0x100, 0xef01, 0x7, 0x9}, {0x7f, 0xfffffffd, 0x0, 0x1, 0x3, 0x1}, {0xe, 0x80, 0x80, 0x9, 0x3b9}, {0xbff2580, 0xffff0001, 0x8, 0x2a, 0x1, 0x10000}, {0x1, 0x249, 0x4, 0x4, 0xaf0, 0x1}, {0xe, 0x7ff, 0x0, 0x6, 0x7fffffff, 0x4}, {0x5, 0x2, 0xfffffff5, 0x7, 0x3, 0x931}, {0x9ed, 0x3, 0x1, 0x7fffffff, 0x1, 0x4}, {0x2, 0x7fffffff, 0x6, 0x1, 0xf, 0xe0000000}, {0x0, 0x1f, 0xffff, 0x129, 0x0, 0x16e6}, {0x7, 0x8001, 0x7, 0x7e5, 0x2, 0xb57f}, {0x5, 0x2, 0x9, 0x5, 0xfff, 0x4}, {0x3, 0x8000, 0xac, 0x0, 0xfffface5, 0x4}, {0x1c2, 0xffff, 0x7, 0x3, 0x6, 0x3}, {0x74, 0x9, 0x8, 0x80, 0xf}, {0x1, 0x7, 0xc6, 0x4, 0x4, 0x7f}, {0x0, 0x8, 0x8, 0x4, 0x4, 0x3}, {0x2d78, 0x3, 0x8001, 0xfffff801, 0x1}, {0x121, 0x1, 0x1, 0x2f, 0x2, 0x9}, {0x7ba, 0x8, 0x7ff, 0x80000000, 0x0, 0x9}, {0x0, 0x6ab, 0x2, 0x1, 0x5, 0xe}, {0x5, 0x5, 0x2, 0xd7, 0xe, 0x938}, {0x1b0c73d9, 0x0, 0x9, 0x5, 0x5, 0x9}, {0x1, 0x401, 0xe6c, 0x7, 0x5, 0x5}, {0x4, 0x3, 0x1, 0x58, 0xfffffffb, 0x5}, {0xff, 0x6, 0x2, 0x10001, 0x2}], [{0x7, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x5}, {}, {0x3}, {0x2}, {0x4}, {0x5}, {0x0, 0x1}, {}, {0x3}, {0x5, 0xeba1f7e827ff06a4}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x4}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x6}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x3f9f601428fe155d, 0x1}, {0x4}, {0x5}, {}, {0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1}, {0x4}, {0x2}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x4, 0x5, 0xd9, 0xbd9c}, 0x9, 0x3}, [{0x3, 0x7, 0xeff7, 0x4, 0xc3, 0x9}, {0x5, 0x8, 0x76f, 0x3, 0xc02, 0xb}, {0xffffff80, 0x5, 0x9, 0x0, 0x7, 0x8}, {0x317, 0x1, 0x7, 0x10001, 0xb, 0x2}, {0xd7d, 0x0, 0xc, 0x80000000, 0x7, 0x6}, {0x1c37, 0x7fff, 0x401, 0x0, 0x2, 0x3}, {0x8, 0x3, 0xd, 0x3, 0x80000001, 0x1}, {0x400, 0x1, 0x6, 0x200000, 0x8001, 0x81}, {0x6, 0x8, 0x2, 0x6, 0xdc, 0xd}, {0x81, 0x8, 0x1cfa, 0x9, 0x9, 0x7ff}, {0x2, 0x7, 0xcdf, 0x4a03, 0x1, 0x77}, {0x2, 0xa, 0xb, 0x7, 0x1436, 0x3ff}, {0x6, 0x6, 0x7, 0xfffffff0, 0x7ff, 0x2}, {0x6, 0x8, 0x767, 0xfffffffe, 0x0, 0x2}, {0xb86, 0x27c5, 0x9, 0x9f, 0x8}, {0x12, 0x1611, 0x4082, 0x8, 0x5, 0x1}, {0xffffff94, 0x5, 0xff, 0x1bb5, 0x5, 0x4}, {0x7fff, 0xfffffffb, 0xfffffff9, 0x6, 0x7, 0x1}, {0x10000, 0x80000001, 0x8, 0xfffffffb, 0x9, 0x9}, {0x6, 0x2, 0x6, 0x2, 0xc, 0x9}, {0x5, 0x401, 0xeb, 0x3, 0x6f42, 0x2}, {0x5, 0x2, 0x7, 0x9, 0xfffff801, 0x1}, {0x1, 0x8, 0xfffffffe, 0xe9, 0xfffffffb, 0x7}, {0x1000, 0x7, 0x3, 0x52d, 0xec, 0x7}, {0xffff, 0xb, 0x0, 0xc469, 0x3, 0x7}, {0x0, 0x1999, 0x6, 0x7f, 0x40, 0x6}, {0x6166, 0x5, 0x7, 0x8, 0x1, 0xa}, {0x3bb4, 0x2, 0x2, 0x10000, 0x7ff, 0x1}, {0xfffffffb, 0x4, 0x6, 0x2, 0x9, 0x9}, {0x0, 0xffff0001, 0x8, 0x4a6000, 0x4}, {0x9, 0x2, 0xc5c, 0x7, 0x7fff, 0x5}, {0xc, 0x3, 0xfffffb87, 0xa2, 0x38, 0x3}, {0x10001, 0x8, 0x8, 0x4, 0x8, 0x3}, {0x8, 0x7, 0x80, 0x5fa2, 0x9, 0x2}, {0x0, 0x9, 0x6, 0xd, 0x149, 0x9}, {0x5, 0x5, 0x5, 0xe9, 0x80, 0x9}, {0x10000, 0x4, 0x6, 0xfffffffa, 0x8000, 0x10}, {0x6, 0x7, 0x7, 0x4, 0x2, 0x80000000}, {0x2412609, 0x800, 0x3, 0x8, 0x77e0, 0xff}, {0xb067, 0x400, 0xe2, 0x9, 0x7f, 0x91}, {0x7, 0x9d2, 0x8, 0xabe3, 0x6, 0x3}, {0xa, 0x8000, 0x2, 0x1, 0x1, 0x4}, {0x0, 0x0, 0x2, 0x6, 0x7, 0x3}, {0x7, 0x4, 0x6, 0x9, 0x6, 0x6}, {0x0, 0x400, 0x4, 0xc0b, 0x10001, 0x72e0}, {0x30, 0x80, 0xfffffff7, 0x9, 0x2, 0x9}, {0x5, 0x0, 0x8, 0xa9, 0x2, 0x4}, {0x5, 0x9, 0x8, 0x0, 0xffffff01, 0x7fff}, {0x5, 0xfffffff4, 0x7, 0x1000, 0x9, 0xf6a}, {0x8000, 0x9, 0x3, 0x4, 0x1e, 0x7fff}, {0x7, 0x80000001, 0x4, 0xb89, 0x7, 0x6b49}, {0x9, 0x0, 0x8, 0x8001, 0x6, 0x8001}, {0x7821, 0x529, 0x3e, 0x37, 0x401, 0x6}, {0x3766, 0x1ff, 0xfffffffe, 0x7f, 0x7, 0x72}, {0x5, 0x1000, 0x6, 0x80000000, 0x442, 0x3}, {0x7, 0x5, 0x3, 0x6, 0x3, 0xaf11}, {0x10000, 0x800, 0x401, 0x4, 0x8, 0xd}, {0x2, 0x6, 0x1, 0x0, 0x2d, 0xc9}, {0x5, 0x9, 0x392, 0x3, 0x7, 0x5}, {0x40, 0x258, 0x3, 0xd6, 0xfffffffc, 0xa3a}, {0xfffffffa, 0x1, 0x4, 0x6de6173a, 0x2, 0x200}, {0xffff65de, 0x6, 0x200, 0xcf, 0x0, 0x4}, {0x0, 0x80000000, 0x1, 0x5, 0x3, 0xffffff00}, {0x8, 0xb1e, 0x5fee949d, 0x101, 0xffffe000, 0x4}, {0x9, 0x3ff, 0x400, 0x8bb, 0x6bd, 0x1000}, {0x8001, 0x3598, 0xfff, 0xa028, 0x5, 0x9}, {0xb21, 0x6, 0x6, 0x8, 0x5, 0x9}, {0x3, 0x6, 0x1, 0x80000000, 0x1, 0xffffffff}, {0x8, 0x6, 0x0, 0xf, 0x1, 0x9}, {0x7, 0xa2e, 0x9, 0x9, 0x2, 0xc}, {0x101, 0x8, 0x4, 0x0, 0x8001, 0xa0}, {0x3, 0x1, 0x39ef, 0x8, 0x7fffffff, 0x3}, {0x2, 0x1, 0x5, 0xd2d, 0xd71b06f, 0x9}, {0x1a, 0x80, 0x99, 0x32bf, 0x9, 0x10001}, {0x3, 0x100, 0x6, 0x2, 0x3, 0x48000}, {0x5, 0x65, 0x3, 0xcd8a, 0x2, 0x2}, {0xb57, 0x79, 0x515, 0x7, 0x1000, 0x3}, {0x1, 0x87, 0x64a8, 0x1b, 0xef1, 0x2}, {0x80000000, 0x7, 0xffa0, 0x6, 0x9, 0x1d58}, {0x3, 0x0, 0x7, 0x7, 0x9, 0x1d0}, {0x8001, 0xf5a8, 0xffffffff, 0xffffffff, 0x7, 0x2ed}, {0x5, 0x9334, 0x9891, 0x88, 0x3, 0x3c8}, {0xdb, 0x5, 0xa, 0x4, 0xdc8, 0x1000}, {0xfff, 0x0, 0x1, 0x8, 0x1, 0x1}, {0x5, 0x7, 0xff, 0xffff, 0x0, 0x3}, {0x0, 0x61, 0x2, 0x9, 0x1, 0x8000}, {0xea, 0x4, 0xfffffff9, 0x80000001, 0x3, 0x6}, {0x9, 0x91, 0x3, 0x397, 0x1, 0x113}, {0x8001, 0x79, 0x400, 0x9, 0x4}, {0x8, 0x8000, 0x4, 0x5210c97c, 0x4, 0x8}, {0x2, 0xf58, 0x3, 0x1000, 0x5, 0x2}, {0x3, 0x9, 0x9, 0x1, 0x8, 0xe37}, {0x1, 0x0, 0x4, 0x80, 0x3, 0x1}, {0x5d, 0x5, 0x7, 0x64f, 0x11fa, 0x6}, {0x7ff, 0x2, 0xfffffff9, 0x0, 0x8, 0xd24}, {0x0, 0x4, 0x6de, 0x2, 0x5da, 0x9}, {0x10000, 0xc, 0x5, 0x10, 0x7fffffff, 0x40}, {0x9, 0x7f, 0x6, 0x9, 0x5}, {0x6, 0xfffffffd, 0xfffffe01, 0x1, 0xa, 0x3c6}, {0x8, 0x8, 0x2, 0x3, 0xff, 0x1}, {0x4, 0xec1, 0x25e, 0xfffffc01, 0x401, 0x9}, {0xc5f, 0x8bb, 0x5, 0xb, 0x4, 0x10}, {0x3, 0x5, 0x3, 0x4, 0x400, 0x58ad}, {0x2b, 0xd987, 0x7, 0x7, 0x401, 0x1}, {0x9, 0x6198, 0x0, 0x2, 0x2, 0xfffffbff}, {0x9, 0xe7a, 0xffffff00, 0x401, 0x6, 0xffffffff}, {0x81, 0xc9, 0x6, 0x9, 0x2, 0x7f}, {0x3, 0xfffeffff, 0xa4, 0xffffffff, 0x8, 0xc297}, {0x781, 0x8001, 0x2, 0x8, 0x2afd, 0x6}, {0xfffffbff, 0xd09d, 0x7, 0x6f6, 0x5, 0xbb8}, {0x9a9, 0x1, 0x66, 0xf0, 0x4, 0xf}, {0x81, 0x9, 0x6, 0x24, 0x3}, {0x93bb, 0x101, 0x80, 0x3, 0x2, 0x5}, {0x18800, 0x9, 0x6, 0xe, 0x1, 0xc}, {0xc64, 0x0, 0x7, 0x1000, 0xfffffffa, 0x2}, {0xc, 0x1, 0x304, 0xc8b, 0x9, 0x2}, {0x6, 0xf, 0x400, 0xffff, 0x1, 0x1}, {0x7, 0x7, 0x3, 0x2, 0x2, 0xa}, {0x5, 0xffffff7a, 0x7, 0xbe000000, 0x5}, {0x7, 0x1200000, 0x1, 0xc4a7, 0xdc, 0xffff}, {0x3, 0x10, 0x1, 0x6, 0x4, 0xfff}, {0x0, 0x4, 0xfffffff6, 0xfffffff9, 0x4, 0x9}, {0xffffffff, 0xbd0, 0xe24, 0xa5, 0xfffffffd, 0x7}, {0x400, 0x8e, 0x22c5, 0x2, 0x3, 0x6}, {0x3, 0x3, 0x5, 0x42, 0x7a2}, {0xffffffa4, 0x401, 0xec40, 0x7f, 0x3}, {0x0, 0x25e, 0xa42, 0x7, 0xc, 0x80000000}, {0x3ff, 0x5, 0x1, 0x9, 0x3, 0x8}], [{0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x2}, {0x5}, {0xc}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x4}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x3}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x46f6a93105b4990c}, {0xfba07d8923bb1442}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x3}, {0x5}, {}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x7}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0xaf2860f7bc84c649, 0x1}, {0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_CGROUP_ACT={0x34, 0x1, [@m_skbedit={0x30, 0x10, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_CGROUP_POLICE={0x4}]}}]}, 0x3414}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)

3m58.15710451s ago: executing program 38 (id=617):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
close(0x3)

3m57.868757063s ago: executing program 8 (id=620):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x68, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x2, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4090}, 0x0)

3m57.835765854s ago: executing program 8 (id=621):
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX])
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000814)

3m57.733823464s ago: executing program 8 (id=622):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@nouid32}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x2}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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")
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x33)

3m57.481369048s ago: executing program 8 (id=625):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40)
close(0x3)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000884}, 0x8000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x4c}}, 0x884)

3m56.281427352s ago: executing program 8 (id=631):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000048000)=0x1, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000003c0)={[{@abort}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x36}}, {@user_xattr}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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")
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28c002, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x6, 0x5})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001040)={<r3=>0x0, 0x8001, 0x0, [0x4, 0x1, 0x7fff, 0x2, 0x2], [0x1000, 0x7fff, 0x4, 0xd, 0xc8220000000000, 0xffffffff, 0x608, 0x1, 0x4, 0x1, 0x9, 0x8, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x4, 0x7, 0x5, 0x6, 0xffffffffffffff81, 0x4, 0x5, 0x1c24, 0x6, 0x9, 0x1, 0x7, 0x8, 0x7, 0x7, 0xff, 0x0, 0x10001, 0x5, 0x1, 0x1, 0x5, 0x100000001, 0x2, 0x3, 0x9, 0x3, 0x6, 0x6, 0x7, 0x5033, 0x8000, 0x3, 0x5, 0x2, 0x4, 0xffffffffff800000, 0x9, 0xe000000000, 0x10001, 0x8000, 0x4, 0x7ff, 0x1fe, 0x7, 0x4, 0x8000000000000000, 0x8000000000000001, 0x80000001, 0x2, 0x400, 0x4, 0x4, 0x4d, 0x4, 0xffffffffffffffff, 0x9, 0x8, 0x6, 0x2, 0x4, 0xc, 0x0, 0x9, 0x3, 0x2, 0x2, 0x9, 0xc57, 0x1, 0xa, 0x101, 0x6, 0x9, 0x80, 0x3, 0xc, 0x0, 0x2, 0x4, 0x4, 0x1, 0xe, 0x6, 0x62, 0x3, 0x2, 0x5000, 0xa, 0x2, 0x80, 0x3, 0x10001, 0xe747, 0x8, 0x10000, 0x8, 0x6108, 0x92b2, 0xf804, 0x9, 0x2, 0x7, 0x11d7, 0x80, 0x2, 0x2]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001480)={{}, r2, 0x0, @unused=[0x5d0, 0x8, 0x9, 0x5], @devid=r3})
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0x48e320c0ee55d2e9, 0x6, "6d88fbd4db34"}, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0xe0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000540)=ANY=[@ANYBLOB="2006ab000000d18465eae42927e2a395bf68a24260bddbac7d5e75424002293d7b5f878903e9d9e340487be1de5d34c8df8540e078ab2aeda1391af8858c5708268efa0197b3bba7bf3a95affc2d670ecf790200000000"], 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0})

3m56.222078452s ago: executing program 39 (id=631):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000048000)=0x1, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000003c0)={[{@abort}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x36}}, {@user_xattr}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62bxZs8nE7OcDm32emWd3vt/M27PPsxtAxxrI/iQRuyLi14joa1QXNhhoPN28fnH81vWL40nMzb32R5K3u3H94njZtHzdzqIymEakHybFRhaaPn/h9Fi9XjtX1Idnzrw1PH3+whPvnBk7VTtVOzt67NjRIyNPPzX6ZFvyzPK6ceD9qYP7X3zjysvjJ668+ePXWby7ivXNebTLQJb4n3O51nWPtntjFdvdVE66KwyEO9IVEdnu6snP/77oits7ry9e+KDS4IB1ld2bti2/enYO2MKSqDoCoBrljT77/Fs+NqjrsSlce7bxASjL+2bxaKzpjrRo09Py+badBiLixOxfn2ePWKdxCACAZh+Pf3a8NyLeu/XVS1nfo29+TRr35M+/5X/3FHMo/RHx/4jYGxF3RcS+iLg7Im97b0Tct8Z4Fvd/0qtrfMsVZf2/Z4q5rYX9v7L3F/1dRW13nn9PcnKyXjtc/E8Go2dbVh9ZYRvfPv/LJ8uta+7/ZY9s+2VfsIjjanfLAN3E2MxY3iltg2uXIw50L5V/Mj8TkETE/og4cGdvvacsTD725cHlGq2e/wraMM8090WW3myW/2y05F9KmucnJxfNTw5vj3rt8HB5VCz2088fvbrc9teUfxtcqzWem/Z/a5P+pHm+drq92/+Xx3/am7yel3uLZe+OzcycG4noTY4vXj56+7VlvWyfHf+Dh5Y+//cWr8nyvz8isoP4gYh4MCIeKmJ/OCIeiYhDK+T4w3Or5x9pRfv/csTEkte/+eO/Zf/feaHr9PffLLf9f7b/j+alwWJJfv1bxVLhZJeL1gDX8r8DAACA/4o0/w58kg7Nl9N0aKjxHf598b+0PjU98/jJqbfPTjS+K98fPWk50tVXjIfWJ+u1kWS2eMfG+OhoMVZcjpceKcaNP+3akdeHxqfqExXnDp1u5zLnf+b3rqqjA9bZjiWXjvZueCBABVrn0dOF1UuvhIsBbFV+rw2da5XzP92oOICN5/4PnWup8/9SS91cAGxN7v/QuZz/0KHS76qOAKiQ+z90pLX8rn8dC9s3RxjVFDbrTskLEWUh3RTxKKxToeorEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHv8HQAA//+j6+Z2")
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28c002, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x6, 0x5})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001040)={<r3=>0x0, 0x8001, 0x0, [0x4, 0x1, 0x7fff, 0x2, 0x2], [0x1000, 0x7fff, 0x4, 0xd, 0xc8220000000000, 0xffffffff, 0x608, 0x1, 0x4, 0x1, 0x9, 0x8, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x4, 0x7, 0x5, 0x6, 0xffffffffffffff81, 0x4, 0x5, 0x1c24, 0x6, 0x9, 0x1, 0x7, 0x8, 0x7, 0x7, 0xff, 0x0, 0x10001, 0x5, 0x1, 0x1, 0x5, 0x100000001, 0x2, 0x3, 0x9, 0x3, 0x6, 0x6, 0x7, 0x5033, 0x8000, 0x3, 0x5, 0x2, 0x4, 0xffffffffff800000, 0x9, 0xe000000000, 0x10001, 0x8000, 0x4, 0x7ff, 0x1fe, 0x7, 0x4, 0x8000000000000000, 0x8000000000000001, 0x80000001, 0x2, 0x400, 0x4, 0x4, 0x4d, 0x4, 0xffffffffffffffff, 0x9, 0x8, 0x6, 0x2, 0x4, 0xc, 0x0, 0x9, 0x3, 0x2, 0x2, 0x9, 0xc57, 0x1, 0xa, 0x101, 0x6, 0x9, 0x80, 0x3, 0xc, 0x0, 0x2, 0x4, 0x4, 0x1, 0xe, 0x6, 0x62, 0x3, 0x2, 0x5000, 0xa, 0x2, 0x80, 0x3, 0x10001, 0xe747, 0x8, 0x10000, 0x8, 0x6108, 0x92b2, 0xf804, 0x9, 0x2, 0x7, 0x11d7, 0x80, 0x2, 0x2]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001480)={{}, r2, 0x0, @unused=[0x5d0, 0x8, 0x9, 0x5], @devid=r3})
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0x48e320c0ee55d2e9, 0x6, "6d88fbd4db34"}, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0xe0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000540)=ANY=[@ANYBLOB="2006ab000000d18465eae42927e2a395bf68a24260bddbac7d5e75424002293d7b5f878903e9d9e340487be1de5d34c8df8540e078ab2aeda1391af8858c5708268efa0197b3bba7bf3a95affc2d670ecf790200000000"], 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0})

3m55.53859397s ago: executing program 6 (id=635):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x1, 0x10, 0x0, 0x0, 0x1f, 0x14, "6bf125058e637b44e58c1c72a4c01c47e50a2793c042d4aea4dcf9c014d0e072a3f096bdbdce0ceb94cb576a5d539a0f68412e32c7881104f7a2a88bb4a033af", "563e7e5b61a321b296a4d858a1a07e3c87df2f85a1df2c809cda49a11ff76e906b13a0c26ef2f2b08d4dcaffbc3200f99d6f328ccecaf9ec49aa55fba663c523", "6dd01086736c1613ad1d72b5e9aa72a58f30d74d3a7893dcfc2d1e56229263b3", [0xa2, 0x3562]})

3m55.52029837s ago: executing program 6 (id=636):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc)

3m55.453840021s ago: executing program 6 (id=637):
r0 = getpid()
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x810)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x240080c4)
ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000180))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x90)
chdir(0x0)

3m54.577779981s ago: executing program 6 (id=641):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
syz_open_procfs(0x0, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0)
umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1)

3m54.576338641s ago: executing program 6 (id=642):
timer_create(0x2, 0x0, &(0x7f0000000600))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x18004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
fsopen(0x0, 0x1)
semop(0x0, 0x0, 0x0)

3m54.093853776s ago: executing program 6 (id=646):
unshare(0x8000000)
semget(0x1, 0x4, 0x3c4)
r0 = semget$private(0x0, 0x7, 0x191)
semtimedop(r0, &(0x7f0000000200)=[{0x4, 0xffff, 0x2000}], 0x1, 0x0)
semctl$SEM_STAT(r0, 0x3, 0x12, 0x0)

3m54.057058607s ago: executing program 40 (id=646):
unshare(0x8000000)
semget(0x1, 0x4, 0x3c4)
r0 = semget$private(0x0, 0x7, 0x191)
semtimedop(r0, &(0x7f0000000200)=[{0x4, 0xffff, 0x2000}], 0x1, 0x0)
semctl$SEM_STAT(r0, 0x3, 0x12, 0x0)

2m13.801422036s ago: executing program 1 (id=1318):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab538000905060200"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)

2m13.165879914s ago: executing program 1 (id=1325):
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020)

2m12.297250583s ago: executing program 1 (id=1331):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40)
close(0x3)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000884}, 0x8000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x4c}}, 0x884)

2m12.094864116s ago: executing program 1 (id=1334):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000000)={[{@nogrpid}, {@oldalloc}]}, 0xff, 0x58d, &(0x7f0000000800)="$eJzs3V9rW+UfAPDvSZvuT7ffOhjjpxdS2IWTuXRt/TPBi3kpOhzo/QxtVkbTZTTpWOvA7cLdeCNDEHEgvgDvvfBi+AZ8FQMdTB1FL7ypnPRkS9ukTdZ07ZbPB5I+zzlP+pxvzvk+eU5OQgLoW6PpXS7ipYj4Kok40rRuMLKVo6vtlh/dmEpvSaysfPxnEkmM1Jc12ifZ3+Gs8v+I+OWLiFO5jf1WF5dmi+VyaT6rj9Xmro5VF5dOX54rzpRmSlcmJifPvjk58c7bb/Us1tcu/PPtR/feP/vlieVvfnxw9E4S5+JQtq45jm242VwZjdHsOcnHuXUNx3vQ2V6S7PYG8FQGsjzPRzoGHImBLOuBF9/nEbEC9KlE/kOfaswDGuf2PToPfm48fG/1BGhj/IOr743E/vq50cHlZM2ZUXq+O9KD/tM+fvr97p30Fr17HwJgSzdvRcSZwcGN41+SjX9P70wHbdb30eX4t9LlJgFN7qXzn9dbzX8qWYv99fv185/hFrn7NLbO/9yDHnTTVjr/e7fl/PfxRauRgax2uD7nyyeXLpdL6dj2v4g4Gfl9aX2z6zlnl++3HaeezP+G6nPAtP/GXDDbjgeD+9Y+ZrpYK24n5mYPb0W83HL+mzye/yYt9n/6fFzosI/jpbuvtFvXPP9tHf/OWvkh4tVs/99cc0705IpWsvn1ybH68TDWOCo2+vv28V/b9d8+/sM7EO1G6f4/2PL4fxz/SNJ8vbbafR/f7/+31G7d1vu/9fE/lHxSLw9ly64Xa7X58Yih5MONyyeePLZRb7RP4z95onX+b3b8H4iITzuM//ax22ua/txV/DsrjX+6q/3ffeH+B599167/zvb/G/XSyWxJJ+Nfpxu4necOAAAAAAAA9ppcRByKJFdIy/m0nMsVCquf7zgWB3PlSrV26lJl4cp01L8rOxL5XONK93DT5yHGs8/DNuoT6+qTEXE0Ir4eOFCvF6Yq5endDh4AAAAAAAAAAAAAAAAAAAD2iOHm7//Xy1H//n/qt4Hd3jpgx/nJb+hfW+Z/L37pCdiTvP5D/2qd/8kz3w7g2fP6D/1L/kP/kv/Qv+Q/9C/5D/1L/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXTh/Pr2tLD+6MZXWp68tLsxWrp2eLlVnC3MLU4WpyvzVwkylMlMuFaYqc5v+s+SvKFcqV8cnYuH6WK1UrY1VF5cuzlUWrtQuXp4rzpQulvLPKjAAAAAAAAAAAAAAAAAAAAB4jlQXl2aL5XJpXkFhTeGPiOik8eDub+oLXIhcl49qJPa2e9/dcQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//waxN+Q=")
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES8], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

2m11.864309708s ago: executing program 1 (id=1339):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)

2m11.033913328s ago: executing program 2 (id=1342):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000800))

2m11.026751588s ago: executing program 1 (id=1343):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f00000008c0)={0x40, 0x16, 0x5b, "0084d862c3a62acf405293b93e9f1b8b30f86715e8502cf388cf8414c3c3139d9a2db2601c44d2fc7e6030a0e5f15f71ce3646640060ca6588b71099b35074d1122574f067fd83b609676120290643e7521435b744492a287c662e"}, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r1, 0x0, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x6011, r2, 0x0)
syz_open_procfs(0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2m10.932104439s ago: executing program 41 (id=1343):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f00000008c0)={0x40, 0x16, 0x5b, "0084d862c3a62acf405293b93e9f1b8b30f86715e8502cf388cf8414c3c3139d9a2db2601c44d2fc7e6030a0e5f15f71ce3646640060ca6588b71099b35074d1122574f067fd83b609676120290643e7521435b744492a287c662e"}, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r1, 0x0, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x6011, r2, 0x0)
syz_open_procfs(0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2m10.921646869s ago: executing program 2 (id=1345):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r3, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x2000056}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

2m10.709802242s ago: executing program 2 (id=1347):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r0, 0x4, 0x2800)
connect$inet(r0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0x2000009)
sendfile(r0, r1, 0x0, 0x7ffff004)

2m10.684038942s ago: executing program 2 (id=1348):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x232f453, 0x0)
umount2(&(0x7f0000000240)='./file0/file0\x00', 0x9)

2m10.625448503s ago: executing program 2 (id=1349):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701)
ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f00000001c0))

2m9.664636853s ago: executing program 2 (id=1358):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r0, 0x4, 0x2800)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ftruncate(r1, 0x2000009)
sendfile(r0, r1, 0x0, 0x7ffff004)

2m9.599652294s ago: executing program 42 (id=1358):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r0, 0x4, 0x2800)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ftruncate(r1, 0x2000009)
sendfile(r0, r1, 0x0, 0x7ffff004)

1m30.70237884s ago: executing program 3 (id=1661):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdafe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

1m30.646689891s ago: executing program 3 (id=1662):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x14, &(0x7f0000000380)={[{@nolazytime}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@init_itable}, {@lazytime}]}, 0xfe, 0x26a, &(0x7f00000003c0)="$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")
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0x4462, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd38f}, 0x1c)
capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)={0x40, 0xf, 0x6, 0x8c3, 0x10000, 0xffffff36})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x98dc)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)})
sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0)

1m29.730847761s ago: executing program 3 (id=1669):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1)

1m28.707725283s ago: executing program 3 (id=1679):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000001180)=ANY=[], 0xfd, 0x198, &(0x7f0000000280)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

1m28.608489464s ago: executing program 3 (id=1682):
setresgid(0xee00, 0x0, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x880, &(0x7f0000001b80)=ANY=[], 0x1, 0x1548, &(0x7f0000000600)="$eJzs3AuYTlXbOPD7XmvtMSSeJjkMa6178ySHRZLkkCSHJEmSJKfklCZ5JSExhCQNSUgOQxJDSA4Tk8b5fD4kJEmTJCE5Jet/Tbi8vdW/vq++1/e9c/+ua1+z7mfve+21n3s/z7P2npnnm65DazauVa0hEcFfghd+JAJALAAMBIDcABAAQLm4cnGZ67NLTPxrO2F/rwdTrvQI2JXE9c/auP5ZG9c/a+P6Z21c/6yN65+1cf2zNq4/Y1nZpmkFruEl6y58////uNi/ksyf//9BMkqN/WJNqeu6AcT8ia2zA9c/y+P6/8cK/sxGXP+sjeufVf2laSP7P+DpP7ENv/6zgmy/u4brn7Vx/RnLyq70/ec/vyAA/P39QuR/2XNwJPuFwvyb9nelzz/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY1nDaX+ZAoBL7Ss9LsYYY4wxxhhjjP19fLYrPQLGGGOMMcYYY4z9z0MQIEFBADGQDWIhO+QAAQBXQy7IDRG4BuLgWsgD10FeyAf5oQDEQ0EoBBoMWCAIoTAUgShcD0XhBigGxaEElAQHpaA03Ahl4CYoCzdDObgFysOtUAEqQiWoDLdBFbgdqsIdUA3uhOpQA2pCLbgLasPdUAfugbpwL9SD+6A+3A8N4AFoCA9CI3gIGsPD0AQegabQDJpDC2j5+/ntEOB38p+DnvA89ILekAh9oC+8AP2gPwyAF2EgvASD4GUYDK9AEgyBofAqDIPXYDi8DiNgJIyCN2A0vAljYCyMg/GQDBNgIrwFk+BtmAzvwBSYCikwDabDuzADZsIseA9mw/swB+bCPJgPqfABLICFkAYfwiL4CNJhMSyBpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22ww74GHbCJ7ALdsMe+BT2wmf/xfxT/5LfDQEBBQpUqDAGYzAWYzEH5sCcmBNzYS6MYATjMA7zYB7Mi3kxP+bHeIzHQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOiyNpbEM3oRlsSyWw3JYHstjBayIFbEyVsYqWAWrYlWshtWwOlbHmlgT78K7sA/WwTpYF+tiPax36fYUNsSG2AgbYWNsjE2wCTbFptgcm2NLbImtsBW2xtbYFttie2yPHbADJmACdsSO2Ak7YWfsjF2wC3bFrtgNu2P3jOeyAT6Pz2NvrC76YF/si/0wKdsAfBFfxJdwEL6ML+MrmIRDcCi+iq/iazgcT+IIHImjcBRWEW/iGByLJMZjMibjRJyIk3BS5ukG7+BUTMFpOB2n4wyciTPxPZyN7+P7OBfn4nxMxVRcgAsxDdNwEZ7CdFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9GBYCf4G7cjUm4F/fiPtyH+3E/HsADmIEZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/CZ+K8afVx8dRKITEooESNiRKyIFTlEDpFT5BS5RC4RERERJ+JEHpFH5BV5RX6RX8SLeFFIFBJGGEEijAEAERVRUVQUFcVEMVFClBBOOFFalBZlRBlRVpQV5cQtory4VVQQFUUbV1lUFlVEW1dV3CGqiWqiuqghaopaopaoLWqLOqKOqCvqinqinqgv7hcNRB8cgA+KzMo0FkOwiRiKTUUzIS++g7USw7G1aCPainZiJI7ADqKVSxBPio5iDHYS/xBj8WnRRYzHruJZ0U10Fz3Ec6KnaO16id5iMvYRfcVU7Cf6iwHiRTEDa4j3cHb2muIVkSSGiKHiVTEfXxPDxetihBgpRok3so8Wb4oxYqwYJ8aLZDFBTBRviUnibTFZvCOmiKkiRUwT08W7YoaYKWaJ98Rs8b6YI+aKeWK+SBUfiAVioUgTH4pF4iORLhaLJWKpWCaWixVipVglVos1Yq1YJ9aLDWKj2CQ2iy1iq9gmtosd4mOxU3widondYo/4VOwVn4l94nOxX3whDogvRYb4ShwUX4tD4htxWHwrjojvxFFxTBwX34sT4gdxUpwSp8UZcVb8KM6Jn8R54QVIlEJKqWQgY2Q2GSuzyxzyKplTBhef3WtknLxW5pHXybwyn8wvC8h4WVAWkloaaSXJUBaWRWRUXi+LyhtkMVlclpAlpZOlZGl5oywjb5Jl5c2ynLxFlpe3ygqyoqwkK8vbZBV5u4TIhX1UlzVkTVlL3iUT4W5ZR94j68p7ZT15n6wv75cN5AOyoXxQNpIPycbyYdlEPiKbymayuWwhW8pHZSv5mGwt28i2sp1sLx+XHeQTMkE+KTtKf/EUeVp2kc/IrvJZ2U12lz3kT/K89LKX7C2hD8i+8gXZT/aXA2IBQL4kB8mX5WD5ikySQ+RQ+aocJl+Tw+XrcoQcKUfJN+Ro+aYcI8fKcXK8TJYT5ET5lpwk35aT5TtyipwqU+Q0OUAO/LmnWVL+Yf5bv5E/+Oe9b5Sb5Ga5RW6V2+R2uUN+LHfKnXKX3CX3yD1yr9wr98l9cr/cLw/IAzJDZsiD8qA8JA/Jw/KwPCKPyKPymDwjv5cn5A/ypDwlT8kz8qw8K89dfA5AoRJKKqUCFaOyqViVXeVQV6mc6mqVS+VWEXWNist8F1bXqbwqn8qvCqh4VVAVUloZZRWpUBVWRVRUXY8XTxhVQpVUTpVSpdWNF/LVtSrPH+erouoGVUwV/0X+pfEl/s74WqqWqpVqpVqr1qqtaqvaq/aqg+qgElSC6qg6qk6qk+qsOqsuqovqqrqqbqqb6qF6qJ6qp+qleqlElaj6qhdUP9VfDVAvqoHqJTVIDVKD1WCVpJLUUDVUDVPD1HA1XI1QI9QoNUqNVqPVGDVGjVPjVLJKVhPVRDVJTVKT1WQ1RU1RKSpFTVfT1Qw1Q81Ss9RsNVvNUXPUPDVPpapUtUAtUGkqTS1Si1S6WqwWq6VqqVqulquVaqVarVartWqtWq/Wq3S1SW1SW9QWtU1tUzvUDrVT7VS71C61R+1Re9VetU/tU/vVfnVAHVAZKkMdVAfVIXVIHVaH1RF1RB1VR9VxdVydUCfUSXVSnVan1Vl1Vp1T59R5dT5z2heIQAQqUEFMEBPEBrFBjiBHkDPIGeQKcgWRIBLEBXFBnuC6IG+QL8gfFAjig4JBoUAHJrCBuFj0aHB9UDS4ISgWFA9KBCUDF5QKSgc3BmWCm4Kywc1BueCWoHxwa1AhqBhUCioHtwVVgtuDqsEdQbXgzqB6UCOoGdQK7gpqB3cHdYJ7grrBvUG94L6gfnB/0CB4IGgYPBg0Ch4KGgcPB02CR4KmQbOgedAiaPm39u/9yXyPuV66t07UfXRf/YLup/vrAfpFPVC/pAfpl/Vg/YpO0kP0UP2qHqZf08P163qEHqlH6Tf0aP2mHqPH6nF6vE7WE/RE/ZaepN/Wk/U7eoqeqlP0ND1dv6tn6Jl6ln5Pz9bv6zl6rp6n5+tU/YFeoBfqNP2hXqQ/0ul6sV6il+plerleoVfqVXq1XqPX6nV6vQK9UW/Sm/UWvVVv09v1Dv2x3qk/0bv0br1Hf6r36s/0Pv253q+/0Af0lzpDf6UP6q/1If2NPqy/1Uf0d/qoPqaP6+/1Cf2DPqlP6dP6jD6rf9Tn9E/6vPaZk/vMj3ejjDIxJsbEmliTw+QwOU1Ok8vkMhETMXEmzuQxeUxek9fkN/lNvIk3hUwhk4kMmcKmsImaqClqippippgpYUoYZ5wpbUqbMqaMKWvKmnKmnClvypsKpoKpZCqZ28xt5nZzu7nD3GHuNHeaGqaGqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYpqapaW6am5ampWllWpnWprVpa9qa9qa96WA6mASTYDqajqaT6WQ6m86mi+liupquppvpZnqYHqan6Wl6mV4m0SSavqav6Wf6mQFmgBloBppBZpAZbAabJJNkhpqhZpgZZoab4WaEGWlGZU5UzZtmjBlrxpnxJtkkm4lmoplkJpnJZrKZYqaYFJNippvpZoaZYWaZWWa2mW3mmDlmnplnUk2qWWAWmDSTZhaZRSbdpJslZolZZpaZFWaFWWVWmTVmjVkH68wGs8FsMpvMFrPFbDPbzA6zw+w0O80us8vsMXvMXrPXI4DZb/abA+aAyTAZ5qA5aA6ZQ+awOWyOmCPmqDlqjpvj5oQ5YU6ak+a0OW3OmnwXPy+9ibXZbQ57lc1pr7a5bG77r3F+W8DG24K2kNU2r833i9hYa4vZ4raELWmdLWVL2xt/FVewFW0lW9neZqvY223VX8W17d22jr3H1rX32lr2rl/E9ex9tr592DZABLDNbCPbwja2D9sm9hHb1DazzW0L294+bjvYJ2yCfdJ2tE/9Kl5gF9pVdrVdY9faXXa3PW3P2EP2G3vW/mh72d52oH3JDrIv28H2FZtkh/wqHmXfsKPtm3aMHWvH2fG/iqfYqTbFTrPT7bt2hp35qzjVfmBn2zQ7x8618+z8n+PMMaXZD+0i+5FNtwEssUvtMrvcrrArL43V57br7Qa70e60n9gtdqvdZrfbHZcmwna33WM/tXvtZ/ag/drut1/YA/awzbBf/RxnHt9h+609Yr+zR+0xe9x+b0/YH9Sl7Mxj/97+ZM9bb4GQgCQpCiiGslEsZaccdBXlpKspF+WmCF1DcXQt5aHrKC/lo/xUgOKpIBUiTYYsEYVUmIpQlK6nS8MrQSXJUSkqTTdSGbqJytLNVI5uofJ0K1WgilSJKtNtVIVup6p0B1WjO6k61aCaVIvuotp0N9Whe6gu3Uv16D6qT/dTA3qAGtKD1Igeosb0MDWhR6gpNaPm1IJa0qPUih6j1tSG2lI7ak+PUwd6ghLoSepIT1En+gd1pqepCz1DXelZ6kbdqQc9Rz3peepFvSmR+lBfeoH6UX8aQC/SQHqJBtHLNJheoSQaQkPpVRpGr9Fwep1G0EgaRW/QaHqTxtBYGkfjKZkm0ER6iybR2zSZ3qEpNJVSaBpNp3dpBs2kWfQezab3aQ7NpXk0n1LpA1pACymNPqRF9BGl02JaQktpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbacd9DHtpE9oF+2mPfQp7aXPaB99TvvpCzpAX1IGfUUH6Ws6RN/QYfrW96bv6Cgdo+P0PZ2gH+gknaLTdIbO0o90jn6i8+QJQgxFKEMVBmFMmC2MDbOHOcKrwpzh1WGuMHcYCa8J48JrwzzhdWHeMF+YPywQxocFw0KhDk1oQwrDsHBYJIyG14dFwxvCYmHxsERYMnRhqbB0eGNYJrwpLBveHJYLbwnLh7eGFcKK4cP3Vg5vC6uEt4dVwzvCauGdYfWwRlgzrBXeFdYO7w7rhPeEdcN7w7LhfWH98P6wQfhA2DB8MGwUPhQ2Dh8Om4SPhE3DZmHzsEXYMnw0bBU+FrYO24Rtw3Zh+/DxsEP4RJgQPhl2DJ/6ef19C39/fWLYJ+wbvhC+EHp/j5wXnR9NjX4QXRBdGE2LfhhdFP0omh5dHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q3Rj1vlY2cOiEk065wMW4bC7WZXc53FUup7va5XK5XcRd4+LctS6Pu87ldflcflfAxbuCrpDTzjjryIWusCviou56V9Td4Iq54q6EK+mcK+VKuxaupWvpWrnHXGvXxrV17Vw797h73D3hnnBPuo7uKdfJ/cN1dk+7Lu4Z94x71nVz3V0P95zr6SbkuvCaTHR9XV/Xz/VzA9wAN9ANdIPcIDfYDXZJLskNdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbtkN9FNdJPcJDfZTXZT3BSX4lLcdDfdzXAzXJWZF/Yyx81x89w8l+pS3QKXOWdMc4vcIpfu0t0St8Qtc8vcCrfCrXKr3Bq3xq1z69wGt8FtcpvcFrfFbXPb3A63w+10O90un/tCp26v2+f2uf1uvzvgvnQZ7it30H3tDrlv3GH3rTvivnNH3TF33H3vTrgf3El3yp12Z9xZ96M7535y5513yZEJkYmRtyKTIm9HJkfeiUyJTI2kRKZFpkfejcyIzIzMirwXmR15PzInMjcyLzI/khr5ILIgsjCSFvkwsijyUSQ9sjiyJLI0siyyPOJ9wS2hL+yL+Ki/3hf1N/hivrgv4Ut650v50v5GX8bf5Mv6m305f4sv72/1FXxFX8k/4pv6Zr65b+Fb+kd9K/+Yb+3b+La+nW/vH/cd/BM+wT/pO/qnfCf/D9/ZP+27+Gd8V/+s7+a7+x7+Od/TP+97+d4+0ffxff0Lvp/v7wf4F/1A/5If5F/2g/0rPskP8UP9q36Yf80P96/7EX6kHxXzhh996RIZxvtkP8FP9G/5Sf5tP9m/46f4qT7FT/PT/bt+hp/pZ/n3/Gz/vp/j5/p5fr5P9R/4BX6hT/Mf+kX+I5/uF1+6qexX+JV+lV/t1/i1fp1f7zf4jX6T3+y3+K1+m9/ud/iP/U7/id/ld/s9/lO/13/m9/nP/X7/hT/gv/QZ/it/0H/tD/lv/GH/rT/iv/NH/TF/3H/vT/gf/El/yp/2Z/xZ/6M/53/y5/l/1hhjjDHG/pQJl5vil2su3M7v8xs54p827gsAV28tkPHP6zNnlOvyXmj3F/HtIwDwZO+uD15aqldPTEy8uG26hKDIXIBLvwnKFAOX48XQFh6HBGgDZX5z/P1F97P0B/1HbwHI8U85sXA5vtz/5wCY+Bv9P9pu1ILy4em4/0//cwGKFbmckx0ux4uh7c/3V9pA2d8Zf75WfzD+7F8kA7T+p5yccCk+ePHbGjLHXxoeg6cg4RdbMsYYY4wxxhhjF/QXlTpfuv689Befv3V9Hq8u52SDy/EfXZ8zxhhjjDHGGGPsynu6e48nHk1IaNP5v96o+t/K+tONJvA/1TM3frPhPcClRxQA/MUOATIb8t95FJv/LftKuvjS+ddVy874AP53lPLvaFzhNybGGGOMMcbY3+7ypP+Xj6srNSDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+nd8ndiVPkbGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsSvt/AQAA///BeAKt")
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00')
pread64(r0, &(0x7f0000002380)=""/253, 0xfd, 0x4eb)

1m27.503822247s ago: executing program 3 (id=1691):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
fcntl$addseals(r1, 0x409, 0x3)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000})

1m27.326510229s ago: executing program 43 (id=1691):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
fcntl$addseals(r1, 0x409, 0x3)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000})

10.217732242s ago: executing program 5 (id=2098):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0383080053e015000d006610000013983aff"], 0x13ca)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)

6.537787845s ago: executing program 9 (id=2116):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
listen(r1, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)

5.064159562s ago: executing program 0 (id=2118):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xc800)
socket$alg(0x26, 0x5, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="100000002d000100"], 0x10}], 0x1, 0x0, 0x0, 0x40040}, 0x8016)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)

4.692018036s ago: executing program 5 (id=2123):
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000002000/0x4000)=nil, 0x4000}, 0x1})
syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), 0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
read$FUSE(r0, &(0x7f0000004240)={0x2020}, 0x2020)
read$FUSE(r1, 0x0, 0x0)

4.633840427s ago: executing program 0 (id=2124):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x74, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0xc0, 0x2}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="e1"]}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="cf"]}]}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x24}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

4.608713647s ago: executing program 0 (id=2125):
r0 = syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

3.713697747s ago: executing program 5 (id=2127):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a03", 0x2c}], 0x1)

3.713265087s ago: executing program 0 (id=2128):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2218448, &(0x7f00000003c0)=ANY=[], 0x1, 0x1eb, &(0x7f0000000640)="$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")
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2)
openat(0xffffffffffffff9c, 0x0, 0x143142, 0x40)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000900)={[{@errors_remount}, {@noblock_validity}, {@nobh}, {@nodioread_nolock}, {@data_err_ignore}, {@usrjquota, 0x2e}, {@resuid}, {@quota}, {@jqfmt_vfsv0}, {@nodiscard}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10)
syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
syz_open_pts(0xffffffffffffffff, 0x709c00)
syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f50a0102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2, 0xc8080)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000280)={0x0, 0xa883, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000001404000000ffffffdc04000040000000b704000010000020620700fe00000000850000002f000000b70000000a00000095"], &(0x7f0000000280)='GPL\x00'}, 0x94)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)

3.107241174s ago: executing program 9 (id=2130):
socket$inet(0x2, 0x1, 0x7fffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)

2.752561178s ago: executing program 5 (id=2131):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16], 0x5, 0x236, &(0x7f00000027c0)="$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")
llistxattr(&(0x7f0000000000)='./file2\x00', 0x0, 0x0)

2.63767352s ago: executing program 5 (id=2132):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
setrlimit(0x6, &(0x7f0000000540)={0x6})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="13d9887cfd24", @val={@val={0x88a8, 0x5, 0x1, 0x3}, {0x8100, 0x5}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xe, @remote, @multicast2, @broadcast, @multicast2}}}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x10022, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x80000)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x80044100, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xc, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x290, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xe, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3, 0x20}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1}, {0x2, 0x0, 0x7}, {0x1, 0x5, 0x4}, 0x0, 0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510)

2.161842215s ago: executing program 4 (id=2134):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xc800)
socket$alg(0x26, 0x5, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="100000002d000100"], 0x10}], 0x1, 0x0, 0x0, 0x40040}, 0x8016)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)

2.001669567s ago: executing program 4 (id=2136):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x18, &(0x7f0000000800)={@flat=@handle={0x73682a85, 0x105}, @flat=@weak_binder={0x77622a85, 0x1101, 0x2}, @fd}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

1.833986349s ago: executing program 4 (id=2137):
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000002000/0x4000)=nil, 0x4000}, 0x1})
syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), 0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
read$FUSE(r0, &(0x7f0000004240)={0x2020}, 0x2020)
read$FUSE(r1, 0x0, 0x0)

1.70156005s ago: executing program 7 (id=2138):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x800810, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ")
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
close(0x3)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_setup(0x3, &(0x7f0000000600)=<r1=>0x0)
r2 = inotify_init1(0x80000)
inotify_add_watch(r2, &(0x7f00000001c0)='./file1\x00', 0x20000508)
io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r0, 0x0, 0x0, 0x100000000, 0x0, 0x2, r0}])

1.294427765s ago: executing program 9 (id=2139):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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")
mount$overlay(0x0, 0x0, 0x0, 0x200000, &(0x7f0000000100)={[{@userxattr}]})
lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)

1.147390316s ago: executing program 9 (id=2140):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000880)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]})

1.146279836s ago: executing program 5 (id=2141):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a03", 0x2c}], 0x1)

1.025766028s ago: executing program 9 (id=2142):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, 0x0, 0x0, 0x5}, 0x94)
syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a240101000000000008240505"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]})

1.025204088s ago: executing program 7 (id=2143):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000002c0)={0x3, 0x162342a, 0x6, 0x2})

920.80815ms ago: executing program 4 (id=2144):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$cgroup_pid(r1, 0x0, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4)
recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}, 0xfffffff9}], 0x1, 0x10003, 0x0)
read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020)

896.846499ms ago: executing program 7 (id=2145):
open$dir(0x0, 0x454841, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000080))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/81, 0x0, 0xdddd0000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)

749.852041ms ago: executing program 4 (id=2146):
r0 = socket$inet6(0xa, 0x2, 0x3a)
recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0)
shutdown(r0, 0x0)

678.019552ms ago: executing program 4 (id=2147):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xc800)
socket$alg(0x26, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="100000002d000100"], 0x10}], 0x1, 0x0, 0x0, 0x40040}, 0x8016)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)

658.859612ms ago: executing program 0 (id=2148):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000640)={[{@fat=@sys_immutable}, {@shortname_lower}, {@rodir}, {@utf8}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_win95}, {@rodir}, {@shortname_mixed}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@utf8no}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_lower}, {@numtail}]}, 0x4, 0x371, &(0x7f0000000140)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0)

545.794194ms ago: executing program 7 (id=2149):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
mount$fuseblk(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x488, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}})
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

545.597994ms ago: executing program 0 (id=2150):
socket$inet(0x2, 0x1, 0x7fffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)

545.433703ms ago: executing program 7 (id=2151):
prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0)
mlockall(0x7)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340))
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

541.370464ms ago: executing program 9 (id=2152):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
setrlimit(0x6, &(0x7f0000000540)={0x6})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="13d9887cfd24", @val={@val={0x88a8, 0x5, 0x1, 0x3}, {0x8100, 0x5}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xe, @remote, @multicast2, @broadcast, @multicast2}}}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x10022, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x80000)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x80044100, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xc, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x290, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xe, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3, 0x20}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1}, {0x2, 0x0, 0x7}, {0x1, 0x5, 0x4}, 0x0, 0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510)

0s ago: executing program 7 (id=2153):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2800404, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x555e, &(0x7f0000005f80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x32142, 0x19)
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {@nogc_merge}, {@four_active_logs}, {@alloc_mode_reuse}, {@checkpoint_diasble}, {@disable_roll_forward}, {@usrjquota={'usrjquota', 0x3d, '\x00-'}}, {@fsync_mode_strict}, {@fsync_mode_posix}, {@user_xattr}, {@data_flush}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004810)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x2e, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

0s ago: executing program 5 (id=2155):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x192, &(0x7f0000009480)="$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")
socket(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
read(r0, &(0x7f0000000ac0)=""/204, 0xfffffe85)

kernel console output (not intermixed with test programs):

device bridge_slave_0 entered promiscuous mode
[  474.106684][T11333] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.107926][T11333] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.109662][T11333] device bridge_slave_1 entered promiscuous mode
[  474.136953][T11333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  474.139566][T11333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  474.167185][T11333] team0: Port device team_slave_0 added
[  474.189928][T11333] team0: Port device team_slave_1 added
[  474.228398][T11333] batman_adv: batadv0: Adding interface: batadv_slave_0
[  474.231903][T11333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.255524][T11333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  474.269628][T11333] batman_adv: batadv0: Adding interface: batadv_slave_1
[  474.275088][T11333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.295690][T11333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.302675][ T4328] Bluetooth: hci2: command 0x0409 tx timeout
[  474.908162][T11452] loop5: detected capacity change from 0 to 256
[  474.922291][T11452] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3959c44b, utbl_chksum : 0xe619d30d)
[  474.931380][T11452] syz.5.1380: attempt to access beyond end of device
[  474.931380][T11452] loop5: rw=524288, sector=440, nr_sectors = 256 limit=256
[  474.940919][T11452] syz.5.1380: attempt to access beyond end of device
[  474.940919][T11452] loop5: rw=524288, sector=696, nr_sectors = 256 limit=256
[  474.950892][T11452] syz.5.1380: attempt to access beyond end of device
[  474.950892][T11452] loop5: rw=0, sector=440, nr_sectors = 8 limit=256
[  474.958835][T11452] syz.5.1380: attempt to access beyond end of device
[  474.958835][T11452] loop5: rw=0, sector=440, nr_sectors = 8 limit=256
[  474.966405][T11452] syz.5.1380: attempt to access beyond end of device
[  474.966405][T11452] loop5: rw=0, sector=440, nr_sectors = 8 limit=256
[  474.972857][T11452] syz.5.1380: attempt to access beyond end of device
[  474.972857][T11452] loop5: rw=0, sector=440, nr_sectors = 8 limit=256
[  474.979327][T11452] syz.5.1380: attempt to access beyond end of device
[  474.979327][T11452] loop5: rw=0, sector=440, nr_sectors = 8 limit=256
[  474.985867][T11452] syz.5.1380: attempt to access beyond end of device
[  474.985867][T11452] loop5: rw=0, sector=440, nr_sectors = 8 limit=256
[  474.988131][T11452] syz.5.1380: attempt to access beyond end of device
[  474.988131][T11452] loop5: rw=0, sector=440, nr_sectors = 8 limit=256
[  474.990354][T11452] syz.5.1380: attempt to access beyond end of device
[  474.990354][T11452] loop5: rw=0, sector=440, nr_sectors = 8 limit=256
[  475.043665][T11333] device hsr_slave_0 entered promiscuous mode
[  475.085753][T11333] device hsr_slave_1 entered promiscuous mode
[  475.102748][ T4342] Bluetooth: hci3: command 0x041b tx timeout
[  475.112130][T11333] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  475.113564][T11333] Cannot create hsr debugfs directory
[  475.828164][ T9880] device hsr_slave_0 left promiscuous mode
[  475.876158][ T9880] device hsr_slave_1 left promiscuous mode
[  475.982213][ T9880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  475.985089][ T9880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  475.996095][ T9880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  475.998159][ T9880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  476.096151][ T9880] device bridge_slave_1 left promiscuous mode
[  476.125070][ T9880] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.222286][ T9880] device bridge_slave_0 left promiscuous mode
[  476.223532][ T9880] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.352052][ T9880] device veth1_macvtap left promiscuous mode
[  476.353266][ T9880] device veth0_macvtap left promiscuous mode
[  476.354406][ T9880] device veth1_vlan left promiscuous mode
[  476.355448][ T9880] device veth0_vlan left promiscuous mode
[  476.381528][ T4328] Bluetooth: hci2: command 0x041b tx timeout
[  476.488740][ T9880] bond2 (unregistering): (slave bridge2): Releasing active interface
[  476.559057][T11505] loop9: detected capacity change from 0 to 1024
[  476.591952][T10192] hfsplus: b-tree write err: -5, ino 25
[  476.593147][T10192] hfsplus: b-tree write err: -5, ino 4
[  476.594085][T10192] hfsplus: b-tree write err: -5, ino 2
[  476.595171][T10192] hfsplus: b-tree write err: -5, ino 20
[  476.607958][ T9880] bond2 (unregistering): Released all slaves
[  476.673608][ T9880] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  476.776456][ T9880] bond1 (unregistering): Released all slaves
[  476.829241][T11519] loop5: detected capacity change from 0 to 4096
[  476.864459][T11519] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  476.889110][ T7481] EXT4-fs (loop5): unmounting filesystem.
[  477.044269][T11525] loop5: detected capacity change from 0 to 4096
[  477.058474][T11525] EXT4-fs: inline encryption not supported
[  477.068457][T11525] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  477.070069][T11525] EXT4-fs (loop5): Test dummy encryption mode enabled
[  477.085245][T11525] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  477.086748][T11525] System zones: 0-5
[  477.088130][T11525] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  477.164287][ T7481] EXT4-fs (loop5): unmounting filesystem.
[  477.181105][ T4342] Bluetooth: hci3: command 0x040f tx timeout
[  477.422492][T11530] xt_hashlimit: size too large, truncated to 1048576
[  477.449994][T11530] Cannot find del_set index 2 as target
[  477.579586][T11532] loop9: detected capacity change from 0 to 512
[  477.586708][T11532] EXT4-fs: Ignoring removed mblk_io_submit option
[  477.599588][T11532] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13
[  477.602611][T11532] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #13: comm syz.9.1396: attempt to clear invalid blocks 2 len 1
[  477.604795][T11532] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  477.615468][T11532] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1396: invalid indirect mapped block 1819239214 (level 0)
[  477.619565][T11532] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1396: invalid indirect mapped block 1819239214 (level 1)
[  477.634558][T11532] EXT4-fs (loop9): 1 truncate cleaned up
[  477.635685][T11532] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  477.663098][T11532] EXT4-fs (loop9): re-mounted. Quota mode: writeback.
[  477.690496][ T6091] EXT4-fs (loop9): unmounting filesystem.
[  478.460433][ T4328] Bluetooth: hci2: command 0x040f tx timeout
[  479.022452][ T9880] team0 (unregistering): Port device team_slave_1 removed
[  479.181476][ T9880] team0 (unregistering): Port device team_slave_0 removed
[  479.188164][T11544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  479.190985][T11544] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  479.260159][ T4342] Bluetooth: hci3: command 0x0419 tx timeout
[  479.380531][ T9880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  479.580743][ T9880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  479.741548][T11548] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  479.742923][T11548] vhci_hcd: invalid port number 96
[  479.743780][T11548] vhci_hcd: default hub control req: 0006 v000d i0060 l0
[  479.769013][T11550] loop5: detected capacity change from 0 to 1024
[  479.776532][T11550] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block
[  479.776532][T11550] 
[  480.539417][ T4328] Bluetooth: hci2: command 0x0419 tx timeout
[  481.051685][ T9880] bond0 (unregistering): Released all slaves
[  481.446339][T11488] netlink: 'syz.0.1385': attribute type 1 has an invalid length.
[  481.562355][T11552] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  482.508148][T11589] loop9: detected capacity change from 0 to 2048
[  482.527595][T11589] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  482.611874][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'.
[  482.654377][T11603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  482.655901][T11603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  482.749222][T11611] loop5: detected capacity change from 0 to 1024
[  482.775720][T11609] netlink: 'syz.0.1415': attribute type 1 has an invalid length.
[  482.785118][T11611] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  482.793561][T11611] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.1423: lblock 0 mapped to illegal pblock 0 (length 1)
[  482.796464][T11611] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  482.799173][T11611] EXT4-fs (loop5): This should not happen!! Data will be lost
[  482.799173][T11611] 
[  482.806909][T11609] bond3: (slave bridge3): making interface the new active one
[  482.814919][ T7481] EXT4-fs (loop5): unmounting filesystem.
[  482.819328][T11609] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  482.927149][T11609] device macvlan2 entered promiscuous mode
[  482.932752][T11609] device bond3 entered promiscuous mode
[  482.933652][T11609] device bridge3 entered promiscuous mode
[  482.934907][T11609] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  482.936562][T11609] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  482.939512][T11609] device bond3 left promiscuous mode
[  482.940375][T11609] device bridge3 left promiscuous mode
[  483.107145][T11622] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  484.206669][T11658] loop5: detected capacity change from 0 to 512
[  484.227057][T11658] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  484.229801][T11658] EXT4-fs error (device loop5): ext4_get_journal_inode:5762: comm syz.5.1427: inode #458752: comm syz.5.1427: iget: illegal inode #
[  484.466012][T11658] EXT4-fs (loop5): no journal found
[  484.466989][T11658] EXT4-fs (loop5): can't get journal size
[  484.471319][T11658] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  484.473218][T11658] EXT4-fs (loop5): failed to initialize system zone (-22)
[  484.474576][T11658] EXT4-fs (loop5): mount failed
[  484.619658][ T9880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.631435][T11653] netlink: 'syz.0.1426': attribute type 1 has an invalid length.
[  484.666751][T11662] bond4: (slave bridge4): making interface the new active one
[  484.673855][T11662] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  484.679526][T11663] device macvlan2 entered promiscuous mode
[  484.681149][T11663] device bond4 entered promiscuous mode
[  484.682133][T11663] device bridge4 entered promiscuous mode
[  484.683316][T11663] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  484.684988][T11663] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  484.691914][T11663] device bond4 left promiscuous mode
[  484.692825][T11663] device bridge4 left promiscuous mode
[  484.832146][T11674] xt_hashlimit: size too large, truncated to 1048576
[  484.839361][T11674] Cannot find del_set index 2 as target
[  484.852300][ T9880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.132367][ T9880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.178560][T11333] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  485.380828][ T9880] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.385208][T11333] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  485.418358][T11333] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  485.458981][T11264] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  485.500532][T11333] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  485.542712][T11264] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  485.578037][T11264] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  485.618477][T11264] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  485.740198][T11264] 8021q: adding VLAN 0 to HW filter on device bond0
[  485.760995][T11264] 8021q: adding VLAN 0 to HW filter on device team0
[  485.768749][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  485.770347][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  485.794776][T11333] 8021q: adding VLAN 0 to HW filter on device bond0
[  485.798827][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  485.800560][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  485.802120][T10584] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.803458][T10584] bridge0: port 1(bridge_slave_0) entered forwarding state
[  485.805148][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  485.834266][T11686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  485.840388][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  485.842390][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  485.843787][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.844876][ T6873] bridge0: port 2(bridge_slave_1) entered forwarding state
[  485.846264][T11686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  485.846296][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  485.854331][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  485.857810][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  485.859502][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  485.872791][T11333] 8021q: adding VLAN 0 to HW filter on device team0
[  485.881645][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  485.883783][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  486.077112][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  486.078798][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  486.080700][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  486.083211][T10192] bridge0: port 1(bridge_slave_0) entered blocking state
[  486.084380][T10192] bridge0: port 1(bridge_slave_0) entered forwarding state
[  486.085808][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  486.088732][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  486.090344][T10192] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.091537][T10192] bridge0: port 2(bridge_slave_1) entered forwarding state
[  486.092941][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  486.094526][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  486.096269][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  486.100904][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  486.102499][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  486.104179][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  486.105741][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  486.107968][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  486.115982][T11264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  486.121231][T11264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  486.182021][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  486.185260][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  486.186937][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  486.188690][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  486.190309][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  486.191889][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  486.193648][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  486.195231][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  486.199171][T11333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  486.201299][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  486.212693][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  486.215277][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  486.220745][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  486.376503][ T4328] Bluetooth: hci4: command 0x0406 tx timeout
[  486.384149][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  486.385531][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  486.396814][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  486.398157][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  486.419875][T11333] 8021q: adding VLAN 0 to HW filter on device batadv0
[  486.423168][T11698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  486.429879][T11264] 8021q: adding VLAN 0 to HW filter on device batadv0
[  486.431973][T11698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  486.548721][T11264] device veth0_vlan entered promiscuous mode
[  486.551930][T11264] device veth1_vlan entered promiscuous mode
[  486.556440][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  486.558293][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  486.567044][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  486.571646][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  486.574732][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  486.585646][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  486.596991][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  486.598549][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  486.603590][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  486.605128][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  486.644244][T11264] device veth0_macvtap entered promiscuous mode
[  486.647577][T11264] device veth1_macvtap entered promiscuous mode
[  486.658156][T11264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  486.659968][T11264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.667873][T11264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  486.669682][T11264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.671272][T11264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  486.683601][T11264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.690970][T11264] batman_adv: batadv0: Interface activated: batadv_slave_0
[  486.695856][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  486.703732][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  486.705260][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  486.711685][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  486.714572][T11264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.717120][T11264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.718812][T11264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.720371][T11264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.722095][T11264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.734588][T11264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.741844][T11264] batman_adv: batadv0: Interface activated: batadv_slave_1
[  486.791323][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  486.793132][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  486.799315][  T211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  486.801225][  T211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  486.907332][ T9880] bond1: (slave gretap1): Releasing active interface
[  486.908490][ T9880] bond1: (slave gretap1): the permanent HWaddr of slave - 16:24:be:02:c4:84 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  486.949343][T11264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  486.950946][T11264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  486.952512][T11264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  486.954010][T11264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  486.990243][T11713] netlink: 'syz.0.1440': attribute type 1 has an invalid length.
[  487.082361][T11715] bond5: (slave bridge5): making interface the new active one
[  487.084368][T11715] bond5: (slave bridge5): Enslaving as an active interface with an up link
[  487.090757][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  487.092415][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  487.160882][ T7290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.162579][T10192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.163974][ T7290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.165284][T10192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.294831][T11713] device macvlan2 entered promiscuous mode
[  487.297634][T11713] device bond5 entered promiscuous mode
[  487.298747][T11713] device bridge5 entered promiscuous mode
[  487.301132][T11713] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  487.303241][T11713] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  487.310625][T11713] device bond5 left promiscuous mode
[  487.311831][T11713] device bridge5 left promiscuous mode
[  487.389422][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  487.391071][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  487.393814][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  487.395548][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  487.397467][T11333] device veth0_vlan entered promiscuous mode
[  487.805405][T11333] device veth1_vlan entered promiscuous mode
[  487.868726][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  487.870302][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  487.871742][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  487.873348][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  487.887506][T11333] device veth0_macvtap entered promiscuous mode
[  487.891273][T11333] device veth1_macvtap entered promiscuous mode
[  487.909841][T11333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  487.923443][T11333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.931727][T11333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  487.936931][T11333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.939747][T11333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  487.944208][T11333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.949189][T11333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  487.950907][T11333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.956831][T11333] batman_adv: batadv0: Interface activated: batadv_slave_0
[  488.282493][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  488.284194][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  488.287962][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  488.289917][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  488.296005][T11333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  488.298213][T11333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.299880][T11333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  488.301485][T11333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.303277][T11333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  488.305001][T11333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.311420][T11333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  488.314782][T11333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.323193][T11333] batman_adv: batadv0: Interface activated: batadv_slave_1
[  488.338375][T11333] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  488.350475][T11333] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  488.356844][T11333] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  488.361437][T11333] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  488.389441][T11768] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.399078][T11768] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.442892][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  488.444699][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  488.470033][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1450'.
[  488.492957][ T9880] device hsr_slave_0 left promiscuous mode
[  488.521087][ T9880] device hsr_slave_1 left promiscuous mode
[  488.599062][ T9880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  488.600294][ T9880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  488.602023][ T9880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  488.603253][ T9880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  488.622564][ T9880] device bridge_slave_1 left promiscuous mode
[  488.623872][ T9880] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.679174][ T9880] device bridge_slave_0 left promiscuous mode
[  488.680311][ T9880] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.825409][ T9880] device veth1_macvtap left promiscuous mode
[  488.826464][ T9880] device veth0_macvtap left promiscuous mode
[  488.827565][ T9880] device veth1_vlan left promiscuous mode
[  488.829714][ T9880] device veth0_vlan left promiscuous mode
[  488.874220][T11798] xt_hashlimit: size too large, truncated to 1048576
[  488.912786][T11798] Cannot find del_set index 2 as target
[  489.022623][ T9880] bond1 (unregistering): (slave bridge1): Releasing active interface
[  489.089529][T11802] 9pnet: p9_errstr2errno: server reported unknown error 18446744
[  489.156742][ T9880] bond1 (unregistering): Released all slaves
[  491.406838][ T9880] team0 (unregistering): Port device team_slave_1 removed
[  491.494227][ T4328] Bluetooth: hci1: command 0x0406 tx timeout
[  491.545991][ T9880] team0 (unregistering): Port device team_slave_0 removed
[  491.704391][ T9880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  491.904385][ T9880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  493.364532][ T9880] bond0 (unregistering): Released all slaves
[  493.648122][T11791] netlink: 'syz.9.1452': attribute type 1 has an invalid length.
[  493.843448][  T211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.844817][  T211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  493.846125][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  493.905258][  T211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.906636][  T211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  493.908051][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  494.045790][T11853] loop5: detected capacity change from 0 to 2048
[  494.069181][T11863] loop3: detected capacity change from 0 to 1024
[  494.070680][T11863] EXT4-fs: Ignoring removed nomblk_io_submit option
[  494.072727][T11853] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  494.106950][T11853] EXT4-fs (loop5): unmounting filesystem.
[  494.147049][T11863] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  494.183906][T11264] EXT4-fs (loop3): unmounting filesystem.
[  494.504261][T11890] xt_hashlimit: size too large, truncated to 1048576
[  494.511155][T11890] Cannot find del_set index 2 as target
[  494.531600][T11887] loop3: detected capacity change from 0 to 4096
[  494.554612][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  494.559079][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  494.595635][T11887] EXT2-fs (loop3): error: couldn't mount because of unsupported optional features (142c0)
[  495.145476][T11907] netlink: 'syz.7.1475': attribute type 1 has an invalid length.
[  495.147275][T11907] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1475'.
[  495.422053][T11914] loop3: detected capacity change from 0 to 4096
[  495.757303][T11914] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  496.026623][T11264] EXT4-fs (loop3): unmounting filesystem.
[  496.085253][T11932] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1476'.
[  496.193809][T11942] binder: 11941:11942 tried to acquire reference to desc 0, got 1 instead
[  496.206340][ T4374] binder: undelivered TRANSACTION_COMPLETE
[  496.225800][T11946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  496.227419][T11946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  496.234749][ T4374] binder: undelivered transaction 7, process died.
[  496.250713][T11949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  496.265022][T11949] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  496.277276][T11953] loop9: detected capacity change from 0 to 256
[  496.278778][T11953] exfat: Deprecated parameter 'namecase'
[  496.302241][T11953] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  496.360093][   T27] audit: type=1326 audit(752.367:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.0.1485" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa7789e8 code=0x0
[  496.469978][T11971] netlink: 'syz.5.1487': attribute type 1 has an invalid length.
[  496.477736][T11971] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1487'.
[  496.511325][T11971] bond4: (slave bridge5): making interface the new active one
[  496.513599][T11971] bond4: (slave bridge5): Enslaving as an active interface with an up link
[  496.521179][T11971] device macvlan2 entered promiscuous mode
[  496.522839][T11971] device bond4 entered promiscuous mode
[  496.523938][T11971] device bridge5 entered promiscuous mode
[  496.525366][T11971] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  496.527156][T11971] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  496.530150][T11971] device bond4 left promiscuous mode
[  496.531077][T11971] device bridge5 left promiscuous mode
[  496.744373][T11995] loop9: detected capacity change from 0 to 512
[  497.140784][T11995] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  497.149811][T12009] loop3: detected capacity change from 0 to 256
[  497.154098][T12009] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  497.199703][ T6091] EXT4-fs (loop9): unmounting filesystem.
[  497.262108][T12017] loop9: detected capacity change from 0 to 1024
[  497.352556][ T5481] hfsplus: b-tree write err: -5, ino 25
[  497.353727][ T5481] hfsplus: b-tree write err: -5, ino 4
[  497.354823][ T5481] hfsplus: b-tree write err: -5, ino 2
[  497.355884][ T5481] hfsplus: b-tree write err: -5, ino 26
[  497.525279][T12038] netlink: 'syz.0.1502': attribute type 1 has an invalid length.
[  497.550134][T12038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1502'.
[  497.562577][T12038] bond6: (slave bridge6): making interface the new active one
[  497.565129][T12038] bond6: (slave bridge6): Enslaving as an active interface with an up link
[  497.588009][T12038] device macvlan2 entered promiscuous mode
[  497.589616][T12038] device bond6 entered promiscuous mode
[  497.590626][T12038] device bridge6 entered promiscuous mode
[  497.592102][T12038] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  497.594499][T12038] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  497.619265][T12045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.620798][T12045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.631157][T12038] device bond6 left promiscuous mode
[  497.632098][T12038] device bridge6 left promiscuous mode
[  497.685071][T12049] xt_hashlimit: size too large, truncated to 1048576
[  497.692175][T12049] Cannot find del_set index 2 as target
[  497.737204][T12050] binder: 12042:12050 BC_FREE_BUFFER u0000000000000000 no match
[  498.906454][T12056] loop5: detected capacity change from 0 to 128
[  499.085520][T12070] loop5: detected capacity change from 0 to 512
[  499.112869][T12070] ext4: Unknown parameter 'func'
[  499.173486][T12076] loop5: detected capacity change from 0 to 1024
[  499.536899][T10924] hfsplus: b-tree write err: -5, ino 25
[  499.538160][T10924] hfsplus: b-tree write err: -5, ino 4
[  499.539211][T10924] hfsplus: b-tree write err: -5, ino 2
[  499.615153][T12092] loop7: detected capacity change from 0 to 16
[  499.633632][T12092] erofs: (device loop7): mounted with root inode @ nid 36.
[  500.058458][T12103] netlink: 'syz.7.1519': attribute type 1 has an invalid length.
[  500.070313][T12103] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1519'.
[  500.197555][T12115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.206578][T12115] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.274576][T12121] loop7: detected capacity change from 0 to 1024
[  500.288933][T12121] hfsplus: walked past end of dir
[  500.402107][T12130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.409180][T12130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.474618][T12134] loop3: detected capacity change from 0 to 1024
[  500.501782][T12134] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block
[  500.501782][T12134] 
[  500.604919][T12147] netlink: 'syz.9.1532': attribute type 32 has an invalid length.
[  500.740188][T12161] netlink: 'syz.3.1536': attribute type 1 has an invalid length.
[  500.742237][T12161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1536'.
[  500.952202][T12181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.969394][T12181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.061865][T12184] xt_hashlimit: size too large, truncated to 1048576
[  501.103069][T12184] Cannot find del_set index 2 as target
[  501.589433][T12194] loop7: detected capacity change from 0 to 1024
[  501.680325][T12194] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  501.696234][T12194] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: comm syz.7.1543: lblock 0 mapped to illegal pblock 0 (length 1)
[  501.807715][T12194] EXT4-fs (loop7): Remounting filesystem read-only
[  501.926001][T12209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.927528][T12209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.932881][T11333] EXT4-fs (loop7): unmounting filesystem.
[  502.284513][T12225] netlink: 'syz.0.1553': attribute type 1 has an invalid length.
[  502.317253][T12225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1553'.
[  502.365818][T12225] bond7: (slave bridge7): making interface the new active one
[  502.392368][T12225] bond7: (slave bridge7): Enslaving as an active interface with an up link
[  502.430776][T12237] loop5: detected capacity change from 0 to 1024
[  502.445237][T12234] device macvlan2 entered promiscuous mode
[  502.449189][T12234] device bond7 entered promiscuous mode
[  502.450218][T12234] device bridge7 entered promiscuous mode
[  502.451380][T12234] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  502.455529][T12234] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  502.460050][T12234] device bond7 left promiscuous mode
[  502.460901][T12234] device bridge7 left promiscuous mode
[  502.481956][  T211] hfsplus: b-tree write err: -5, ino 25
[  502.483066][  T211] hfsplus: b-tree write err: -5, ino 4
[  502.483994][  T211] hfsplus: b-tree write err: -5, ino 2
[  502.600664][T12254] loop3: detected capacity change from 0 to 1024
[  502.605829][T12254] hfsplus: unable to change nls mapping
[  502.607013][T12254] hfsplus: unable to parse mount options
[  502.614506][T12255] loop5: detected capacity change from 0 to 1024
[  502.638027][T12255] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  502.643162][T10390] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  502.644422][T12255] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.1560: inode has both inline data and extents flags
[  502.647309][T12255] EXT4-fs (loop5): Remounting filesystem read-only
[  502.664359][ T7481] EXT4-fs (loop5): unmounting filesystem.
[  503.595989][T12310] loop5: detected capacity change from 0 to 256
[  503.599697][T12310] FAT-fs (loop5): Unrecognized mount option "shortname=win9" or missing value
[  503.660089][ T8842] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  503.781388][T12323] netlink: 'syz.3.1573': attribute type 1 has an invalid length.
[  503.783204][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1573'.
[  503.784615][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1573'.
[  503.956607][T12337] xt_hashlimit: size too large, truncated to 1048576
[  503.963893][T12337] Cannot find del_set index 2 as target
[  504.048190][T12327] device macvlan2 entered promiscuous mode
[  504.650065][T12352] loop5: detected capacity change from 0 to 8
[  504.653707][T12352] squashfs: Unknown parameter 'ʡ�'
[  504.741456][T12352] Bluetooth: MGMT ver 1.22
[  505.562910][T12390] netlink: 140 bytes leftover after parsing attributes in process `syz.9.1592'.
[  505.564414][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1592'.
[  505.653679][T12396] netlink: 'syz.9.1593': attribute type 1 has an invalid length.
[  505.670582][T12399] loop3: detected capacity change from 0 to 512
[  505.681876][T12398] loop7: detected capacity change from 0 to 2048
[  505.687893][T12398] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  505.694635][T12398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  505.710607][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1593'.
[  505.712045][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1593'.
[  505.719887][T12399] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.1594: inode has both inline data and extents flags
[  505.722005][T12399] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1594: couldn't read orphan inode 15 (err -117)
[  505.725080][T12399] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  505.802595][T12396] bond2: (slave bridge2): making interface the new active one
[  505.830880][T12396] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  505.867718][T12419] device macvlan2 entered promiscuous mode
[  505.878025][T12419] device bond2 entered promiscuous mode
[  505.879082][T12419] device bridge2 entered promiscuous mode
[  505.894928][T12419] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  505.915528][T12419] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  505.920325][T11264] EXT4-fs (loop3): unmounting filesystem.
[  505.949750][T12419] device bond2 left promiscuous mode
[  505.950725][T12419] device bridge2 left promiscuous mode
[  506.129117][T12441] loop3: detected capacity change from 0 to 1024
[  506.134149][T12441] EXT4-fs (loop3): barriers disabled
[  506.135660][T12441] JBD2: no valid journal superblock found
[  506.136705][T12441] EXT4-fs (loop3): error loading journal
[  506.521169][T12457] loop9: detected capacity change from 0 to 512
[  506.538769][T12457] ext4: Unknown parameter 'fsuuid'
[  506.590882][T12457] loop9: detected capacity change from 0 to 1024
[  506.997936][T12488] loop5: detected capacity change from 0 to 1024
[  507.031857][T12493] loop3: detected capacity change from 0 to 512
[  507.037135][T12493] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  507.043011][T12493] EXT4-fs (loop3): 1 truncate cleaned up
[  507.044097][T12493] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  507.050116][T12488] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  507.062284][T12488] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.1612: lblock 0 mapped to illegal pblock 0 (length 1)
[  507.070903][T12488] EXT4-fs (loop5): Remounting filesystem read-only
[  507.093705][ T7481] EXT4-fs (loop5): unmounting filesystem.
[  507.121174][T11264] EXT4-fs (loop3): unmounting filesystem.
[  507.149068][T12504] netlink: 'syz.3.1615': attribute type 1 has an invalid length.
[  507.169645][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1615'.
[  507.171302][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1615'.
[  507.217446][T12504] bond1: (slave gretap1): making interface the new active one
[  507.219972][T12504] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  507.239690][T12504] bond1: (slave bridge1): Enslaving as an active interface with a down link
[  507.290918][T12504] device macvlan2 entered promiscuous mode
[  507.300448][T12504] device bond1 entered promiscuous mode
[  507.305448][T12504] device gretap1 entered promiscuous mode
[  507.317523][T12504] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  507.329412][T12504] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  507.341829][T12504] device bond1 left promiscuous mode
[  507.342781][T12504] device gretap1 left promiscuous mode
[  507.395424][T12527] loop9: detected capacity change from 0 to 8
[  507.547877][T12544] loop7: detected capacity change from 0 to 164
[  508.015858][T12586] ipt_CLUSTERIP: Please specify destination IP
[  508.188126][T12604] netlink: 'syz.5.1632': attribute type 1 has an invalid length.
[  508.197352][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1632'.
[  508.198933][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1632'.
[  508.209601][T12604] bond5: (slave bridge6): making interface the new active one
[  508.211962][T12604] bond5: (slave bridge6): Enslaving as an active interface with an up link
[  508.217316][T12604] device macvlan2 entered promiscuous mode
[  508.218963][T12604] device bond5 entered promiscuous mode
[  508.220060][T12604] device bridge6 entered promiscuous mode
[  508.221326][T12604] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  508.223274][T12604] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  508.226544][T12604] device bond5 left promiscuous mode
[  508.227672][T12604] device bridge6 left promiscuous mode
[  509.038157][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'.
[  509.526801][T12662] netlink: 'syz.3.1645': attribute type 1 has an invalid length.
[  509.548216][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1645'.
[  509.549979][T12662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1645'.
[  509.578145][T12662] bond2: (slave bridge2): making interface the new active one
[  509.581604][T12662] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  509.586978][T12662] device macvlan2 entered promiscuous mode
[  509.588546][T12662] device bond2 entered promiscuous mode
[  509.589576][T12662] device bridge2 entered promiscuous mode
[  509.591166][T12662] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  509.592999][T12662] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  509.599574][T12662] device bond2 left promiscuous mode
[  509.600587][T12662] device bridge2 left promiscuous mode
[  509.834275][T12685] set_capacity_and_notify: 1 callbacks suppressed
[  509.834285][T12685] loop5: detected capacity change from 0 to 512
[  509.839552][T12685] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  509.873054][T12690] loop3: detected capacity change from 0 to 256
[  509.875754][ T8842] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  509.880506][T12685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.882119][T12685] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  509.968878][T12694] x_tables: ip6_tables: REJECT.0 target: invalid size 8 (kernel) != (user) 0
[  510.002078][T12699] loop9: detected capacity change from 0 to 512
[  510.008551][T12699] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  510.040767][T12699] EXT4-fs (loop9): 1 truncate cleaned up
[  510.041966][T12699] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  510.101018][ T6091] EXT4-fs (loop9): unmounting filesystem.
[  510.155844][T12711] loop9: detected capacity change from 0 to 256
[  511.098070][T12765] netlink: 'syz.9.1660': attribute type 1 has an invalid length.
[  511.137309][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1660'.
[  511.165810][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1660'.
[  511.187028][T12771] loop3: detected capacity change from 0 to 128
[  511.188735][T12771] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4613: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  511.191024][T12771] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  511.283257][T12765] bond3: (slave bridge3): making interface the new active one
[  511.286020][T12765] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  511.289164][T12774] device macvlan2 entered promiscuous mode
[  511.290951][T12774] device bond3 entered promiscuous mode
[  511.292180][T12774] device bridge3 entered promiscuous mode
[  511.293516][T12774] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  511.298602][T12774] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  511.324320][T12774] device bond3 left promiscuous mode
[  511.326382][T12774] device bridge3 left promiscuous mode
[  511.510346][T12776] binder: 12770:12776 got transaction to context manager from process owning it
[  511.512055][T12776] binder: 12770:12776 transaction call to 12770:0 failed 11/29201/-22, size 88-24 line 3034
[  511.966927][T12795] loop5: detected capacity change from 0 to 1024
[  511.989965][T12795] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  512.042322][ T4372] binder: undelivered TRANSACTION_ERROR: 29201
[  512.137662][ T4372] kernel write not supported for file /uinput (pid: 4372 comm: kworker/1:3)
[  512.140288][T12795] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.1666: Invalid inode table block 0 in block_group 0
[  512.199722][ T7481] EXT4-fs (loop5): unmounting filesystem.
[  512.437427][T12823] loop7: detected capacity change from 0 to 1024
[  512.439951][T12823] EXT4-fs (loop7): barriers disabled
[  512.440994][T12823] JBD2: no valid journal superblock found
[  512.442023][T12823] EXT4-fs (loop7): error loading journal
[  512.475556][T10390] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  512.596987][T12834] netlink: 'syz.0.1676': attribute type 1 has an invalid length.
[  512.979098][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1676'.
[  513.020008][T12834] bond8: (slave bridge8): making interface the new active one
[  513.022266][T12834] bond8: (slave bridge8): Enslaving as an active interface with an up link
[  513.034419][T12834] device macvlan2 entered promiscuous mode
[  513.037996][T12834] device bond8 entered promiscuous mode
[  513.040078][T12834] device bridge8 entered promiscuous mode
[  513.041635][T12834] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  513.045189][T12834] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  513.048522][T12834] device bond8 left promiscuous mode
[  513.049478][T12834] device bridge8 left promiscuous mode
[  513.106943][T12849] loop3: detected capacity change from 0 to 8
[  513.168464][T11264] SQUASHFS error: Unable to read directory block [249:c]
[  513.172436][T12853] loop9: detected capacity change from 0 to 128
[  513.174225][T12853] EXT4-fs warning (device loop9): ext4_init_metadata_csum:4613: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  513.176468][T12853] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  513.187064][T11264] SQUASHFS error: Failed to read block 0x97: -5
[  513.191300][T11264] SQUASHFS error: Unable to read metadata cache entry [95]
[  513.201417][T11264] SQUASHFS error: Unable to read inode 0x60000
[  513.205954][ T8842] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  513.267686][T11264] SQUASHFS error: Unable to read metadata cache entry [95]
[  513.269486][T11264] SQUASHFS error: Unable to read inode 0x60000
[  513.469100][T12865] binder: 12851:12865 got transaction to context manager from process owning it
[  513.470819][T12865] binder: 12851:12865 transaction call to 12851:0 failed 13/29201/-22, size 88-24 line 3034
[  513.754718][T12871] xt_hashlimit: size too large, truncated to 1048576
[  513.761380][T12871] Cannot find del_set index 2 as target
[  514.003974][ T3899] binder: undelivered TRANSACTION_ERROR: 29201
[  514.855325][T12911] loop5: detected capacity change from 0 to 1024
[  514.860484][T12911] EXT4-fs (loop5): barriers disabled
[  514.861576][T12911] JBD2: no valid journal superblock found
[  514.862696][T12911] EXT4-fs (loop5): error loading journal
[  514.934375][ T4328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  514.937676][ T4328] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  514.940097][ T4328] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  514.945125][ T4328] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  514.947023][ T4328] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  514.949522][ T4328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  515.030210][ T4649] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.047532][T12920] netlink: 'syz.0.1694': attribute type 1 has an invalid length.
[  515.068444][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1694'.
[  515.088892][T12920] bond9: (slave bridge9): making interface the new active one
[  515.091176][T12920] bond9: (slave bridge9): Enslaving as an active interface with an up link
[  515.135306][ T4649] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.139629][T12920] device macvlan2 entered promiscuous mode
[  515.141182][T12920] device bond9 entered promiscuous mode
[  515.142016][T12920] device bridge9 entered promiscuous mode
[  515.152911][T12920] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  515.167960][T12920] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  515.170892][T12920] device bond9 left promiscuous mode
[  515.171740][T12920] device bridge9 left promiscuous mode
[  515.314682][ T4649] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.423282][ T4649] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.428085][T12915] chnl_net:caif_netlink_parms(): no params data found
[  515.445093][T12915] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.446875][T12915] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.449317][T12915] device bridge_slave_0 entered promiscuous mode
[  515.455314][T12915] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.456710][T12915] bridge0: port 2(bridge_slave_1) entered disabled state
[  515.458703][T12915] device bridge_slave_1 entered promiscuous mode
[  515.469296][T12915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  515.474898][T12915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  515.489616][T12915] team0: Port device team_slave_0 added
[  515.495849][T12915] team0: Port device team_slave_1 added
[  515.505366][T12915] batman_adv: batadv0: Adding interface: batadv_slave_0
[  515.506604][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  515.510889][T12915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  515.513967][T12915] batman_adv: batadv0: Adding interface: batadv_slave_1
[  515.516013][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  515.520492][T12915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  515.594672][T12915] device hsr_slave_0 entered promiscuous mode
[  515.607163][T12915] device hsr_slave_1 entered promiscuous mode
[  515.629511][T12976] loop5: detected capacity change from 0 to 2048
[  515.634041][T12976] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  515.636041][T12976] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  515.639807][T12976] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  515.645921][T12976] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  516.088151][T13003] loop5: detected capacity change from 0 to 1024
[  516.115504][T13003] EXT4-fs (loop5): barriers disabled
[  516.119540][T13003] JBD2: no valid journal superblock found
[  516.120709][T13003] EXT4-fs (loop5): error loading journal
[  516.329269][ T8842] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  516.517123][T13017] xt_hashlimit: size too large, truncated to 1048576
[  516.643127][T13017] Cannot find del_set index 2 as target
[  516.817941][   T27] audit: type=1326 audit(772.607:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.9.1701" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f789e8 code=0x0
[  517.004479][ T4328] Bluetooth: hci3: command 0x0409 tx timeout
[  517.283882][T13040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  517.286740][T13040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  517.655679][T13043] netlink: 'syz.0.1708': attribute type 1 has an invalid length.
[  517.676851][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'.
[  517.717375][T13043] bond10: (slave bridge10): making interface the new active one
[  517.727510][T13043] bond10: (slave bridge10): Enslaving as an active interface with an up link
[  517.789319][T13046] device macvlan2 entered promiscuous mode
[  517.793171][T13046] device bond10 entered promiscuous mode
[  517.794158][T13046] device bridge10 entered promiscuous mode
[  517.795313][T13046] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  517.803047][T13046] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  517.847407][T13046] device bond10 left promiscuous mode
[  517.848501][T13046] device bridge10 left promiscuous mode
[  517.884346][T13055] loop9: detected capacity change from 0 to 512
[  517.933354][T13055] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  517.943735][T13055] EXT4-fs (loop9): 1 truncate cleaned up
[  517.944848][T13055] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  518.051827][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1712'.
[  518.094476][ T4649] bond1: (slave gretap1): Releasing active interface
[  518.096266][ T4649] bond1: (slave gretap1): the permanent HWaddr of slave - c2:1a:bb:22:71:9f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  518.096592][ T6091] EXT4-fs (loop9): unmounting filesystem.
[  518.670124][T13086] loop5: detected capacity change from 0 to 1024
[  518.703636][T13086] EXT4-fs (loop5): barriers disabled
[  518.704919][T13086] JBD2: no valid journal superblock found
[  518.705930][T13086] EXT4-fs (loop5): error loading journal
[  518.752763][ T8842] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  518.814269][T13092] loop9: detected capacity change from 0 to 4096
[  518.831920][T13096] loop5: detected capacity change from 0 to 4096
[  518.833433][T13096] EXT4-fs: Ignoring removed nomblk_io_submit option
[  518.834699][T13092] ext4: Unknown parameter 'seclabel'
[  518.848405][T13096] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  518.888553][ T7481] EXT4-fs (loop5): unmounting filesystem.
[  519.130730][ T4328] Bluetooth: hci3: command 0x041b tx timeout
[  519.732144][T13137] loop9: detected capacity change from 0 to 16
[  519.738076][T13137] erofs: (device loop9): mounted with root inode @ nid 36.
[  519.829676][T13137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  519.831431][T13137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  519.849195][T13142] loop5: detected capacity change from 0 to 1024
[  519.884563][T13142] EXT4-fs (loop5): barriers disabled
[  519.885956][T13142] JBD2: no valid journal superblock found
[  519.886923][T13142] EXT4-fs (loop5): error loading journal
[  520.843066][T13155] loop5: detected capacity change from 0 to 256
[  520.844609][T13155] FAT-fs (loop5): Unrecognized mount option "nonumtal=0" or missing value
[  520.881417][ T8842] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  520.886917][T13155] loop5: detected capacity change from 0 to 1024
[  520.887163][ T8842] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  520.922845][T13155] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  520.925818][T13155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  520.927344][T13155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  521.145033][T13183] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1739'.
[  521.169145][ T4342] Bluetooth: hci3: command 0x040f tx timeout
[  521.341576][T13192] loop7: detected capacity change from 0 to 1024
[  521.343806][T13192] EXT4-fs (loop7): barriers disabled
[  521.344812][T13192] JBD2: no valid journal superblock found
[  521.345764][T13192] EXT4-fs (loop7): error loading journal
[  521.458349][ T7481] EXT4-fs (loop5): unmounting filesystem.
[  521.460494][T13206] loop7: detected capacity change from 0 to 1024
[  521.474689][T13206] hfsplus: failed to load extents file
[  521.513592][T13208] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1744'.
[  521.523061][T13210] loop7: detected capacity change from 0 to 1024
[  521.548280][T13210] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  521.555653][ T4649] device hsr_slave_0 left promiscuous mode
[  521.590281][ T4649] device hsr_slave_1 left promiscuous mode
[  521.594358][T13214] loop5: detected capacity change from 0 to 1024
[  521.626465][T13214] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5
[  521.635787][T13214] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  521.640589][T13214] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1746: Failed to acquire dquot type 0
[  521.653173][T13214] EXT4-fs error (device loop5): mb_free_blocks:1839: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  521.656057][T13214] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #13: comm syz.5.1746: corrupted inode contents
[  521.658520][T13214] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #13: comm syz.5.1746: mark_inode_dirty error
[  521.661614][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  521.663027][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_0
[  521.668561][T13214] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #13: comm syz.5.1746: corrupted inode contents
[  521.672936][T13214] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #13: comm syz.5.1746: mark_inode_dirty error
[  521.675345][T13214] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #13: comm syz.5.1746: corrupted inode contents
[  521.679520][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  521.680966][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_1
[  521.682359][ T4649] device bridge_slave_1 left promiscuous mode
[  521.683398][T13210] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.1745: Invalid inode table block 0 in block_group 0
[  521.683505][ T4649] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.695935][T13214] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  521.699470][T13214] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #13: comm syz.5.1746: corrupted inode contents
[  521.707413][T13214] EXT4-fs error (device loop5): ext4_truncate:4325: inode #13: comm syz.5.1746: mark_inode_dirty error
[  521.714605][T13214] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  521.716814][T13214] EXT4-fs (loop5): 1 truncate cleaned up
[  521.717898][T13214] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  521.734474][T11333] EXT4-fs (loop7): unmounting filesystem.
[  521.735807][ T4649] device bridge_slave_0 left promiscuous mode
[  521.736936][ T4649] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.760589][T13214] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5
[  521.762256][T13214] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  521.763802][T13214] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1746: Failed to acquire dquot type 0
[  521.785480][T13225] netlink: 'syz.7.1748': attribute type 1 has an invalid length.
[  521.836979][ T7481] EXT4-fs (loop5): unmounting filesystem.
[  521.848931][ T4649] device veth1_macvtap left promiscuous mode
[  521.849999][ T4649] device veth0_macvtap left promiscuous mode
[  521.851167][ T4649] device veth1_vlan left promiscuous mode
[  521.852184][ T4649] device veth0_vlan left promiscuous mode
[  522.042443][T13241] loop5: detected capacity change from 0 to 1024
[  522.052439][T13241] EXT4-fs (loop5): barriers disabled
[  522.053598][T13241] JBD2: no valid journal superblock found
[  522.054748][T13241] EXT4-fs (loop5): error loading journal
[  522.074435][ T4649] bond2 (unregistering): (slave bridge2): Releasing active interface
[  522.212235][ T4649] bond2 (unregistering): Released all slaves
[  522.279440][ T4649] bond1 (unregistering): (slave bridge1): Releasing active interface
[  522.405611][ T4649] bond1 (unregistering): Released all slaves
[  522.805791][T13249] loop9: detected capacity change from 0 to 1024
[  522.865453][T13249] hfsplus: failed to load extents file
[  523.222317][T13255] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1757'.
[  523.242273][T13257] loop7: detected capacity change from 0 to 512
[  523.248092][ T4328] Bluetooth: hci3: command 0x0419 tx timeout
[  523.252601][T13257] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  523.274233][T11333] EXT4-fs (loop7): unmounting filesystem.
[  523.297483][T13262] loop7: detected capacity change from 0 to 512
[  523.299037][T13262] EXT4-fs: Ignoring removed mblk_io_submit option
[  523.300662][T13262] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  523.311598][T13262] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6).
[  523.314976][T13262] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  523.322532][T13262] EXT4-fs (loop7): mount failed
[  524.573340][T13274] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  524.576318][T13274] EXT4-fs (loop5): 1 truncate cleaned up
[  524.577297][T13274] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  524.597520][T13274] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  524.600511][T13274] EXT4-fs (loop5): Remounting filesystem read-only
[  524.601634][T13274] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #18: comm syz.5.1763: mark_inode_dirty error
[  524.606752][T13274] EXT4-fs (loop5): Remounting filesystem read-only
[  524.616109][T13274] EXT4-fs error (device loop5): ext4_get_max_inline_size:116: inode #18: comm syz.5.1763: can't get inode location 18
[  524.622630][T13274] EXT4-fs (loop5): Remounting filesystem read-only
[  524.623859][T13274] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  524.627026][T13274] EXT4-fs (loop5): Remounting filesystem read-only
[  524.631127][T13274] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #18: comm syz.5.1763: mark_inode_dirty error
[  524.633314][T13274] EXT4-fs (loop5): Remounting filesystem read-only
[  524.634943][T13274] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  524.636653][T13274] EXT4-fs (loop5): Remounting filesystem read-only
[  524.638238][T13274] EXT4-fs error (device loop5): ext4_splice_branch:479: inode #18: comm syz.5.1763: mark_inode_dirty error
[  524.640326][T13274] EXT4-fs (loop5): Remounting filesystem read-only
[  524.641572][T13274] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  524.643376][T13274] EXT4-fs (loop5): Remounting filesystem read-only
[  524.644497][T13274] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #18: comm syz.5.1763: mark_inode_dirty error
[  524.646576][T13274] EXT4-fs (loop5): Remounting filesystem read-only
[  524.650863][T13274] EXT4-fs error (device loop5): mb_free_blocks:1839: group 0, inode 18: block 37:freeing already freed block (bit 36); block bitmap corrupt.
[  524.665207][T13276] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  524.673083][T13274] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  524.852740][ T4649] team0 (unregistering): Port device team_slave_1 removed
[  525.075875][ T4649] team0 (unregistering): Port device team_slave_0 removed
[  525.225555][T13282] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  525.260500][ T7481] EXT4-fs (loop5): unmounting filesystem.
[  525.288144][ T4649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  525.450058][T13287] xt_hashlimit: size too large, truncated to 1048576
[  525.457127][T13287] Cannot find del_set index 2 as target
[  525.619049][ T4649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  526.580819][T13289] set_capacity_and_notify: 2 callbacks suppressed
[  526.580829][T13289] loop5: detected capacity change from 0 to 128
[  526.603117][T13289] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4613: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  526.605508][T13289] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  526.609121][T10390] udevd[10390]: incorrect ext4 checksum on /dev/loop5
[  527.287858][ T4649] bond0 (unregistering): Released all slaves
[  527.587394][T12915] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  527.620956][T12915] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  527.640387][T13301] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1770'.
[  527.667121][T12915] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  527.692482][T12915] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  527.698943][T13307] binder: 13306:13307 ERROR: BC_REGISTER_LOOPER called without request
[  527.703838][ T4372] binder: undelivered death notification, 0000000000000000
[  527.823329][T12915] 8021q: adding VLAN 0 to HW filter on device bond0
[  527.828590][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  527.830202][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  527.845519][T12915] 8021q: adding VLAN 0 to HW filter on device team0
[  527.863166][ T9880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  527.864825][ T9880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  527.866626][ T9880] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.867810][ T9880] bridge0: port 1(bridge_slave_0) entered forwarding state
[  527.876959][ T9880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  527.944531][T13332] loop7: detected capacity change from 0 to 128
[  527.959520][T13332] EXT4-fs warning (device loop7): ext4_init_metadata_csum:4613: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  527.970415][T13332] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  527.982020][T13335] loop9: detected capacity change from 0 to 512
[  527.983926][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  527.985584][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  527.990904][ T7290] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.991965][ T7290] bridge0: port 2(bridge_slave_1) entered forwarding state
[  527.993481][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  527.995273][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  528.002358][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  528.007025][T13335] EXT4-fs: Ignoring removed nobh option
[  528.010002][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  528.012062][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  528.032270][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  528.043638][T13340] xt_hashlimit: size too large, truncated to 1048576
[  528.050836][T13340] Cannot find del_set index 2 as target
[  528.202611][T13335] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  528.223052][T12915] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  528.225333][T12915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  528.257775][T13335] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #2: comm syz.9.1779: corrupted inode contents
[  528.284751][T13335] EXT4-fs error (device loop9): ext4_dirty_inode:6156: inode #2: comm syz.9.1779: mark_inode_dirty error
[  528.303772][T13335] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #2: comm syz.9.1779: corrupted inode contents
[  528.319768][T13335] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #2: comm syz.9.1779: mark_inode_dirty error
[  528.421027][ T6091] EXT4-fs (loop9): unmounting filesystem.
[  528.531894][T12915] 8021q: adding VLAN 0 to HW filter on device batadv0
[  528.600710][T13362] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  528.620835][T13362] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  528.845390][ T8842] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  529.170969][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  529.172733][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  529.174318][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  529.176854][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  529.180905][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  529.182508][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  529.183763][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  529.185377][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  529.196033][T13385] loop5: detected capacity change from 0 to 16
[  529.198444][T13381] loop7: detected capacity change from 0 to 16
[  529.200059][T13381] erofs: (device loop7): mounted with root inode @ nid 36.
[  529.235229][T13385] erofs: (device loop5): mounted with root inode @ nid 36.
[  529.249016][ T6204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  529.250949][ T6204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  529.271926][T12915] device veth0_vlan entered promiscuous mode
[  529.290832][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  529.292609][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  529.294139][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  529.299072][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  529.336188][T12915] device veth1_vlan entered promiscuous mode
[  529.339290][T13381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  529.340934][T13381] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  529.360026][ T6204] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  529.361740][ T6204] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  529.363310][ T6204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  529.364931][ T6204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  529.370444][T12915] device veth0_macvtap entered promiscuous mode
[  529.378610][T12915] device veth1_macvtap entered promiscuous mode
[  529.431309][T13398] loop9: detected capacity change from 0 to 2048
[  529.435460][T12915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  529.455649][T12915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  529.461963][T13398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  529.565045][T12915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  529.566884][T12915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  529.568831][T12915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  529.570572][T12915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  529.580068][T12915] batman_adv: batadv0: Interface activated: batadv_slave_0
[  529.638033][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  529.643351][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  529.654047][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  529.749721][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  529.763673][T12915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  529.767867][T12915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  529.770271][T12915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  529.774122][T12915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  529.778345][T12915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  529.782294][T12915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  529.788139][T12915] batman_adv: batadv0: Interface activated: batadv_slave_1
[  529.790125][ T6204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  529.791827][ T6204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  529.795344][T12915] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  529.797137][T12915] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  529.799657][T12915] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  529.805198][T12915] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  529.874543][ T6204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.880471][ T6204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.882358][ T6204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  529.901225][ T6204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.902706][ T6204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.904138][T10924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  530.023730][T13416] loop4: detected capacity change from 0 to 512
[  530.031901][T13416] EXT4-fs: Ignoring removed nobh option
[  530.096381][T13416] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  530.127696][T13420] loop9: detected capacity change from 0 to 1024
[  530.130580][T13420] EXT4-fs (loop9): barriers disabled
[  530.131722][T13420] JBD2: no valid journal superblock found
[  530.132714][T13420] EXT4-fs (loop9): error loading journal
[  530.150934][T13416] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.1792: corrupted inode contents
[  530.157238][T13416] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #2: comm syz.4.1792: mark_inode_dirty error
[  530.213416][T13416] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.1792: corrupted inode contents
[  530.220748][T13416] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.1792: mark_inode_dirty error
[  530.271924][T12915] EXT4-fs (loop4): unmounting filesystem.
[  530.503483][T13444] xt_hashlimit: size too large, truncated to 1048576
[  530.531784][T13444] Cannot find del_set index 2 as target
[  531.054582][T13455] loop4: detected capacity change from 0 to 2048
[  531.124879][T13455] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  531.323790][T13468] loop5: detected capacity change from 0 to 128
[  531.342255][T13468] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  531.360067][T13468] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  531.558999][T13476] xt_hashlimit: size too large, truncated to 1048576
[  532.081449][T13492] loop5: detected capacity change from 0 to 2048
[  532.137569][T13492] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  532.140711][T13492] EXT4-fs (loop5): unmounting filesystem.
[  532.248161][T13516] loop7: detected capacity change from 0 to 256
[  532.283032][T13516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  532.290100][T13516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.453842][T13527] loop9: detected capacity change from 0 to 1024
[  532.458197][T13527] EXT4-fs (loop9): barriers disabled
[  532.459227][T13527] JBD2: no valid journal superblock found
[  532.460186][T13527] EXT4-fs (loop9): error loading journal
[  532.505837][T10390] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  532.808086][T13546] xt_hashlimit: size too large, truncated to 1048576
[  532.832288][T13546] Cannot find del_set index 2 as target
[  533.321536][T13550] device syzkaller0 entered promiscuous mode
[  533.339943][T13554] netlink: 'syz.9.1825': attribute type 1 has an invalid length.
[  534.499833][T13584] loop4: detected capacity change from 0 to 512
[  534.505593][T13584] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  534.507414][T13584] EXT4-fs (loop4): orphan cleanup on readonly fs
[  534.508827][T13584] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  534.511579][T13584] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  534.513500][T13584] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.1832: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  534.516575][T13584] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1832: couldn't read orphan inode 13 (err -117)
[  534.518712][T13584] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  534.538308][T12915] EXT4-fs (loop4): unmounting filesystem.
[  534.956367][T13592] loop4: detected capacity change from 0 to 1024
[  534.992802][T13592] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  545.497573][T13554] bond4: (slave bridge4): making interface the new active one
[  545.499525][T13554] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  545.502338][T13567] device macvlan2 entered promiscuous mode
[  545.503896][T13567] device bond4 entered promiscuous mode
[  545.504807][T13567] device bridge4 entered promiscuous mode
[  545.505924][T13567] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  545.507794][T13567] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  545.510658][T13567] device bond4 left promiscuous mode
[  545.511487][T13567] device bridge4 left promiscuous mode
[  545.650874][T12915] EXT4-fs (loop4): unmounting filesystem.
[  545.705398][T13616] loop4: detected capacity change from 0 to 1024
[  545.723533][T13616] EXT4-fs (loop4): barriers disabled
[  545.725636][T13616] JBD2: no valid journal superblock found
[  545.726629][T13616] EXT4-fs (loop4): error loading journal
[  545.741721][T13622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  545.743327][T13622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  545.943134][T13645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  545.956288][T13645] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  547.080346][T13658] loop5: detected capacity change from 0 to 8
[  547.120692][T13658] SQUASHFS error: Failed to read block 0x2d7: -5
[  547.121911][T13658] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  547.188074][T13660] device syzkaller0 entered promiscuous mode
[  547.277337][T13665] netlink: 'syz.0.1852': attribute type 1 has an invalid length.
[  547.538886][T13690] loop4: detected capacity change from 0 to 1024
[  547.545392][T13690] EXT4-fs (loop4): barriers disabled
[  547.546693][T13690] JBD2: no valid journal superblock found
[  547.547650][T13690] EXT4-fs (loop4): error loading journal
[  547.580863][T13598] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  555.946764][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  555.947939][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  558.025401][T13682] bond11: (slave bridge11): making interface the new active one
[  558.027444][T13682] bond11: (slave bridge11): Enslaving as an active interface with an up link
[  558.030466][T13691] device macvlan2 entered promiscuous mode
[  558.032276][T13691] device bond11 entered promiscuous mode
[  558.033238][T13691] device bridge11 entered promiscuous mode
[  558.034463][T13691] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  558.036044][T13691] bond11: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  558.039362][T13691] device bond11 left promiscuous mode
[  558.040296][T13691] device bridge11 left promiscuous mode
[  558.182056][T13722] loop7: detected capacity change from 0 to 8
[  558.231963][T13722] SQUASHFS error: Failed to read block 0x2d7: -5
[  558.233059][T13722] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  558.370625][T13743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.377140][T13742] loop4: detected capacity change from 0 to 1024
[  558.378568][T13743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  558.409817][T13741] xt_hashlimit: size too large, truncated to 1048576
[  558.416733][T13741] Cannot find del_set index 2 as target
[  558.556081][T13751] loop7: detected capacity change from 0 to 1024
[  558.559150][T13751] EXT4-fs (loop7): barriers disabled
[  558.560359][T13751] JBD2: no valid journal superblock found
[  558.561371][T13751] EXT4-fs (loop7): error loading journal
[  558.597152][T13753] loop5: detected capacity change from 0 to 8
[  558.613659][T13753] SQUASHFS error: lzo decompression failed, data probably corrupt
[  558.623883][T13753] SQUASHFS error: Failed to read block 0x91: -5
[  558.625096][T13753] SQUASHFS error: Unable to read metadata cache entry [8f]
[  558.631190][T13753] SQUASHFS error: Unable to read inode 0x7
[  558.649197][T13723] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  559.173323][T13759] device syzkaller0 entered promiscuous mode
[  559.213693][T13782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  559.235776][T13782] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  560.453485][T13819] loop7: detected capacity change from 0 to 1024
[  560.458451][T13819] EXT4-fs (loop7): barriers disabled
[  560.459504][T13819] JBD2: no valid journal superblock found
[  560.460452][T13819] EXT4-fs (loop7): error loading journal
[  560.704045][T13821] loop4: detected capacity change from 0 to 512
[  560.714275][T13821] EXT4-fs (loop4): Test dummy encryption mode enabled
[  560.717012][T13821] EXT4-fs error (device loop4): __ext4_iget:5102: inode #11: block 1: comm syz.4.1888: invalid block
[  560.719146][T13821] EXT4-fs (loop4): Remounting filesystem read-only
[  560.723626][T13821] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1888: couldn't read orphan inode 11 (err -117)
[  560.725902][T13821] EXT4-fs (loop4): Remounting filesystem read-only
[  560.726996][T13821] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  560.745594][T12915] EXT4-fs (loop4): unmounting filesystem.
[  560.958371][T13829] xt_hashlimit: size too large, truncated to 1048576
[  560.965536][T13829] Cannot find del_set index 2 as target
[  561.913823][T13836] loop7: detected capacity change from 0 to 1024
[  562.098150][T13841] loop4: detected capacity change from 0 to 512
[  562.103234][T13841] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  562.106549][T13841] EXT4-fs (loop4): 1 truncate cleaned up
[  562.107561][T13841] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  562.123941][T13841] EXT4-fs error (device loop4): ext4_get_max_inline_size:116: inode #18: comm syz.4.1895: can't get inode location 18
[  562.126598][T13841] EXT4-fs (loop4): Remounting filesystem read-only
[  562.127834][T13841] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  562.131460][T13841] EXT4-fs (loop4): Remounting filesystem read-only
[  562.132657][T13841] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #18: comm syz.4.1895: mark_inode_dirty error
[  562.134800][T13841] EXT4-fs (loop4): Remounting filesystem read-only
[  562.136148][T13841] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  562.138039][T13841] EXT4-fs (loop4): Remounting filesystem read-only
[  562.139226][T13841] EXT4-fs error (device loop4): ext4_splice_branch:479: inode #18: comm syz.4.1895: mark_inode_dirty error
[  562.141795][T13841] EXT4-fs (loop4): Remounting filesystem read-only
[  562.142956][T13841] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  562.144903][T13841] EXT4-fs (loop4): Remounting filesystem read-only
[  562.146010][T13841] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #18: comm syz.4.1895: mark_inode_dirty error
[  562.148054][T13841] EXT4-fs (loop4): Remounting filesystem read-only
[  562.149477][T13841] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 18: block 37:freeing already freed block (bit 36); block bitmap corrupt.
[  562.152286][T13841] EXT4-fs (loop4): Remounting filesystem read-only
[  562.153497][T13841] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  562.155273][T13841] EXT4-fs (loop4): Remounting filesystem read-only
[  562.156463][T13841] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #18: comm syz.4.1895: mark_inode_dirty error
[  562.773193][T13847] loop4: detected capacity change from 0 to 512
[  562.788197][T13847] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  562.797092][T13847] EXT4-fs (loop4): 1 truncate cleaned up
[  562.798533][T13847] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  562.837459][T12915] EXT4-fs (loop4): unmounting filesystem.
[  570.898733][T13787] netlink: 'syz.9.1875': attribute type 1 has an invalid length.
[  571.311428][T13922] xt_hashlimit: size too large, truncated to 1048576
[  571.336348][T13922] Cannot find del_set index 2 as target
[  571.399980][T13923] loop5: detected capacity change from 0 to 1024
[  571.558393][T13923] EXT4-fs (loop5): barriers disabled
[  571.559563][T13923] JBD2: no valid journal superblock found
[  571.560713][T13923] EXT4-fs (loop5): error loading journal
[  571.659171][T13886] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  572.138012][T13942] loop7: detected capacity change from 0 to 16
[  572.140824][T13942] erofs: (device loop7): mounted with root inode @ nid 36.
[  572.194157][T13942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  572.195695][T13942] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  573.116172][T13974] netlink: 'syz.9.1930': attribute type 1 has an invalid length.
[  573.155679][T13974] bond5: (slave bridge5): making interface the new active one
[  573.157751][T13974] bond5: (slave bridge5): Enslaving as an active interface with an up link
[  573.172165][T13974] device macvlan2 entered promiscuous mode
[  573.177093][T13974] device bond5 entered promiscuous mode
[  573.178192][T13974] device bridge5 entered promiscuous mode
[  573.181594][T13974] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  573.184219][T13974] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  573.187604][T13974] device bond5 left promiscuous mode
[  573.193869][T13974] device bridge5 left promiscuous mode
[  573.260065][T13997] loop4: detected capacity change from 0 to 1024
[  573.261868][T13997] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  573.266624][T13997] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  573.268669][T13997] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  573.377005][T14001] loop9: detected capacity change from 0 to 256
[  573.390008][T14001] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  573.455110][T14007] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779264)
[  573.457021][T14007] FAT-fs (loop9): Filesystem has been set read-only
[  573.824756][T14007] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008)
[  573.828472][T14007] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008)
[  573.837892][T13997] loop4: detected capacity change from 0 to 40427
[  573.856974][T13997] F2FS-fs (loop4): Unrecognized mount option "whint_mode=fs-based" or missing value
[  573.873548][T14009] can: request_module (can-proto-0) failed.
[  573.986375][T14021] loop4: detected capacity change from 0 to 512
[  574.002368][T14021] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  574.033386][T14021] EXT4-fs (loop4): 1 truncate cleaned up
[  574.034460][T14021] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  574.126379][T12915] EXT4-fs (loop4): unmounting filesystem.
[  574.401524][T14048] xt_hashlimit: size too large, truncated to 1048576
[  574.429567][T14048] Cannot find del_set index 2 as target
[  575.116441][T14067] xt_hashlimit: size too large, truncated to 1048576
[  575.542497][T14076] netlink: 'syz.5.1945': attribute type 1 has an invalid length.
[  575.643140][T14085] loop7: detected capacity change from 0 to 256
[  575.649868][T14079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1945'.
[  575.742449][T14083] bond6: (slave bridge7): making interface the new active one
[  575.744501][T14083] bond6: (slave bridge7): Enslaving as an active interface with an up link
[  575.748973][T14088] device macvlan2 entered promiscuous mode
[  575.755802][T14088] device bond6 entered promiscuous mode
[  575.760499][T14088] device bridge7 entered promiscuous mode
[  575.764968][T14088] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  575.771115][T14096] loop7: detected capacity change from 0 to 16
[  575.782444][T14088] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  575.785899][T14096] erofs: (device loop7): mounted with root inode @ nid 36.
[  575.815148][T14088] device bond6 left promiscuous mode
[  575.816205][T14088] device bridge7 left promiscuous mode
[  575.860024][T14099] loop4: detected capacity change from 0 to 256
[  575.885415][T14099] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  575.902316][T14103] loop7: detected capacity change from 0 to 512
[  575.921295][T14103] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  575.970615][T14106] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779264)
[  575.973674][T14103] EXT4-fs (loop7): 1 truncate cleaned up
[  575.974720][T14103] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  575.983278][T14106] FAT-fs (loop4): Filesystem has been set read-only
[  575.984543][T14106] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008)
[  575.988559][T14106] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008)
[  576.133506][T11333] EXT4-fs (loop7): unmounting filesystem.
[  576.179313][T14113] EXT4-fs: quotafile must be on filesystem root
[  576.290126][T14126] exfat: Deprecated parameter 'namecase'
[  576.298490][T14126] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[  576.521166][T14149] set_capacity_and_notify: 2 callbacks suppressed
[  576.521177][T14149] loop4: detected capacity change from 0 to 1024
[  576.536515][T14149] EXT4-fs: Ignoring removed nomblk_io_submit option
[  576.539314][T14154] netlink: 'syz.0.1962': attribute type 1 has an invalid length.
[  576.561073][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1962'.
[  576.581817][T14154] bond12: (slave bridge12): making interface the new active one
[  576.584186][T14154] bond12: (slave bridge12): Enslaving as an active interface with an up link
[  576.590143][T14149] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  576.595121][T14149] EXT4-fs (loop4): Online resizing not supported with bigalloc
[  576.599520][T14154] device macvlan2 entered promiscuous mode
[  576.604535][T14154] device bond12 entered promiscuous mode
[  576.605428][T14154] device bridge12 entered promiscuous mode
[  576.606582][T14154] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  576.608388][T14154] bond12: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  576.659206][T12915] EXT4-fs (loop4): unmounting filesystem.
[  576.669101][T14154] device bond12 left promiscuous mode
[  576.676986][T14154] device bridge12 left promiscuous mode
[  576.977906][T14148] loop5: detected capacity change from 0 to 40427
[  576.984086][T14148] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  576.986575][T14148] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  576.998367][T14148] F2FS-fs (loop5): invalid crc value
[  577.046792][T14148] F2FS-fs (loop5): Found nat_bits in checkpoint
[  577.095875][T14148] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  577.097400][T14148] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  577.494159][T14208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  577.500483][T14208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  577.698601][T14217] xt_hashlimit: size too large, truncated to 1048576
[  578.197067][T14243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  578.201981][T14243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  578.234945][T14246] netlink: 'syz.5.1977': attribute type 1 has an invalid length.
[  578.253078][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1977'.
[  578.268629][T14246] bond7: (slave bridge8): making interface the new active one
[  578.272543][T14246] bond7: (slave bridge8): Enslaving as an active interface with an up link
[  578.278862][T14246] device macvlan2 entered promiscuous mode
[  578.280345][T14246] device bond7 entered promiscuous mode
[  578.296820][T14246] device bridge8 entered promiscuous mode
[  578.298121][T14246] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  578.307354][T14246] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  578.317312][T14246] device bond7 left promiscuous mode
[  578.318222][T14246] device bridge8 left promiscuous mode
[  578.514145][T14260] netlink: 'syz.5.1978': attribute type 32 has an invalid length.
[  578.643874][T14267] loop5: detected capacity change from 0 to 128
[  578.645305][T14267] EXT4-fs: Ignoring removed nobh option
[  578.666960][T14267] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  578.687669][T14267] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  578.697623][T14267] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (30846!=65535)
[  578.793488][ T7481] EXT4-fs (loop5): unmounting filesystem.
[  579.893724][T14332] netlink: 'syz.4.1989': attribute type 1 has an invalid length.
[  579.934441][T14332] bond1: (slave gretap1): making interface the new active one
[  579.936531][T14332] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  579.991305][T14332] bond1: (slave bridge1): Enslaving as an active interface with a down link
[  580.026639][T14332] device macvlan2 entered promiscuous mode
[  580.030805][T14332] device bond1 entered promiscuous mode
[  580.046822][T14332] device gretap1 entered promiscuous mode
[  580.048084][T14332] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  580.057460][T14332] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  580.088673][T14332] device bond1 left promiscuous mode
[  580.090599][T14332] device gretap1 left promiscuous mode
[  580.200481][T14351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  580.203411][T14351] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  580.623890][T14359] support for the xor transformation has been removed.
[  581.452511][T14408] loop7: detected capacity change from 0 to 40427
[  581.485460][T14408] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288)
[  581.493921][T14408] F2FS-fs (loop7): invalid crc value
[  581.508290][T14408] F2FS-fs (loop7): Found nat_bits in checkpoint
[  581.547319][T14408] F2FS-fs (loop7): recover fsync data on readonly fs
[  581.554115][T14408] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1
[  581.555570][T14408] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2
[  581.571501][T14408] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  581.762676][T14433] loop4: detected capacity change from 0 to 1024
[  581.764133][T14433] EXT4-fs: Ignoring removed nomblk_io_submit option
[  581.788932][T14433] EXT4-fs: inline encryption not supported
[  581.806406][T14437] netlink: 'syz.7.2007': attribute type 1 has an invalid length.
[  581.836521][T14433] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  581.871446][T14437] bond1: (slave gretap1): making interface the new active one
[  581.892102][T14437] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  581.920475][T12915] EXT4-fs (loop4): unmounting filesystem.
[  581.921735][T14442] bond1: (slave bridge1): Enslaving as an active interface with a down link
[  581.960880][T14437] device macvlan2 entered promiscuous mode
[  581.962639][T14437] device bond1 entered promiscuous mode
[  581.963688][T14437] device gretap1 entered promiscuous mode
[  581.964831][T14437] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  581.966418][T14437] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  581.979135][T14437] device bond1 left promiscuous mode
[  581.980232][T14437] device gretap1 left promiscuous mode
[  582.126883][T14457] netlink: 'syz.9.2011': attribute type 8 has an invalid length.
[  582.143031][T14457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  582.213158][T14459] overlayfs: failed to verify origin (90/file1, ino=500, err=-116)
[  582.214571][T14459] overlayfs: failed to verify upper root origin
[  582.296029][T14469] loop4: detected capacity change from 0 to 1024
[  582.300264][T14469] EXT4-fs (loop4): barriers disabled
[  582.302610][T14469] JBD2: no valid journal superblock found
[  582.303639][T14469] EXT4-fs (loop4): error loading journal
[  582.375834][T14481] loop7: detected capacity change from 0 to 2048
[  582.416838][T14485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  582.425455][T14485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  582.428832][T14481] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  582.453179][T14481] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  582.472580][T14481] EXT4-fs (loop7): Remounting filesystem read-only
[  582.512549][T11333] EXT4-fs (loop7): unmounting filesystem.
[  582.599515][T14465] loop9: detected capacity change from 0 to 40427
[  582.615268][T14465] F2FS-fs (loop9): invalid crc value
[  582.658225][T14465] F2FS-fs (loop9): Found nat_bits in checkpoint
[  582.668762][T14465] F2FS-fs (loop9): Cannot turn on quotas: -2 on 1
[  582.677223][T14465] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  582.747240][T14517] netlink: 'syz.9.2023': attribute type 1 has an invalid length.
[  582.780560][T14517] bond6: (slave bridge6): making interface the new active one
[  582.785656][T14517] bond6: (slave bridge6): Enslaving as an active interface with an up link
[  582.799028][T14517] device macvlan2 entered promiscuous mode
[  582.802735][T14517] device bond6 entered promiscuous mode
[  582.804863][T14517] device bridge6 entered promiscuous mode
[  582.807321][T14517] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  582.815740][T14517] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  582.822000][T14517] device bond6 left promiscuous mode
[  582.824181][T14517] device bridge6 left promiscuous mode
[  583.075100][T14530] netlink: 'syz.5.2026': attribute type 27 has an invalid length.
[  583.401918][T14530] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.403416][T14530] bridge0: port 1(bridge_slave_0) entered disabled state
[  583.745104][T14501] loop7: detected capacity change from 0 to 131072
[  583.754088][T14501] F2FS-fs (loop7): Test dummy encryption mode enabled
[  583.763525][T14501] F2FS-fs (loop7): invalid crc value
[  583.781513][T14501] F2FS-fs (loop7): Found nat_bits in checkpoint
[  583.792229][T14501] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  583.822723][T14501] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0
[  583.829907][T14501] F2FS-fs (loop7): Start checkpoint disabled!
[  583.855975][T14501] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  583.923833][ T4393] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  584.003690][T14530] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  584.044006][T14530] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  584.255442][T14565] binder: 14564:14565 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  584.258309][T14565] binder: 14565 RLIMIT_NICE not set
[  584.259405][T14565] binder: 14564:14565 ioctl c0306201 20000480 returned -14
[  584.261109][ T4372] binder: undelivered death notification, 0000000000000000
[  584.294286][T14568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  584.298392][T14568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  584.438240][T14530] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  584.439839][T14530] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  584.441273][T14530] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  584.443083][T14530] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  584.538002][T14535] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  584.539873][T14535] 8021q: adding VLAN 0 to HW filter on device bond0
[  584.541640][T14535] 8021q: adding VLAN 0 to HW filter on device team0
[  584.570392][T14535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  584.750260][T14586] netlink: 'syz.0.2038': attribute type 1 has an invalid length.
[  584.800104][T14586] bond13: (slave bridge13): making interface the new active one
[  584.827963][T14586] bond13: (slave bridge13): Enslaving as an active interface with an up link
[  584.853099][T14586] device macvlan2 entered promiscuous mode
[  584.854552][T14586] device bond13 entered promiscuous mode
[  584.855431][T14586] device bridge13 entered promiscuous mode
[  584.856574][T14586] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  584.874393][T14586] bond13: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  584.887443][T14586] device bond13 left promiscuous mode
[  584.892125][T14586] device bridge13 left promiscuous mode
[  584.913537][T14596] loop5: detected capacity change from 0 to 1024
[  584.940552][T14596] EXT4-fs (loop5): barriers disabled
[  584.967362][T14596] JBD2: no valid journal superblock found
[  584.968413][T14596] EXT4-fs (loop5): error loading journal
[  585.270593][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2042'.
[  585.538384][T14630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  585.556611][T14630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  585.914188][T14649] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  586.053833][T14659] netlink: 'syz.5.2052': attribute type 1 has an invalid length.
[  586.137953][T14659] bond8: (slave bridge9): making interface the new active one
[  586.141516][T14659] bond8: (slave bridge9): Enslaving as an active interface with an up link
[  586.162338][T14659] device macvlan2 entered promiscuous mode
[  586.172037][T14659] device bond8 entered promiscuous mode
[  586.172943][T14659] device bridge9 entered promiscuous mode
[  586.181887][T14659] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  586.189512][T14659] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  586.233742][T14659] device bond8 left promiscuous mode
[  586.234713][T14659] device bridge9 left promiscuous mode
[  586.553626][T14682] loop4: detected capacity change from 0 to 40427
[  586.572550][T14682] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  586.573824][T14682] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  586.587244][T14703] loop5: detected capacity change from 0 to 256
[  586.588174][T14682] F2FS-fs (loop4): invalid crc value
[  586.605626][T14682] F2FS-fs (loop4): Found nat_bits in checkpoint
[  586.630889][T14699] loop9: detected capacity change from 0 to 1024
[  586.644188][T14682] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  586.645438][T14682] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  586.651840][T14699] EXT4-fs (loop9): barriers disabled
[  586.652968][T14699] JBD2: no valid journal superblock found
[  586.653938][T14699] EXT4-fs (loop9): error loading journal
[  586.692738][T14682] bio_check_eod: 20731 callbacks suppressed
[  586.692753][T14682] syz.4.2056: attempt to access beyond end of device
[  586.692753][T14682] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  586.714737][T14711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  586.716527][T14711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  586.727339][T13951] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  587.131851][T12915] syz-executor: attempt to access beyond end of device
[  587.131851][T12915] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  587.262094][T14722] loop4: detected capacity change from 0 to 16
[  587.273704][T14722] erofs: (device loop4): mounted with root inode @ nid 36.
[  587.313796][T14727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  587.315322][T14727] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  587.643017][T14752] loop7: detected capacity change from 0 to 256
[  587.647229][T14751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2069'.
[  587.649009][T14751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2069'.
[  587.747007][T14757] netlink: 'syz.7.2070': attribute type 1 has an invalid length.
[  587.808050][T14757] bond2: (slave bridge2): making interface the new active one
[  587.820919][T14757] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  587.854215][T14761] device macvlan2 entered promiscuous mode
[  587.856171][T14761] device bond2 entered promiscuous mode
[  587.857125][T14761] device bridge2 entered promiscuous mode
[  587.858447][T14761] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  587.863395][T14761] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  587.872391][T14761] device bond2 left promiscuous mode
[  587.873560][T14761] device bridge2 left promiscuous mode
[  588.250562][T14782] loop9: detected capacity change from 0 to 512
[  588.263502][T14781] loop7: detected capacity change from 0 to 1024
[  588.273113][T14782] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  588.291842][T14782] EXT4-fs (loop9): invalid journal inode
[  588.294025][T14782] EXT4-fs (loop9): can't get journal size
[  588.330687][T14781] EXT4-fs (loop7): barriers disabled
[  588.332991][T14781] JBD2: no valid journal superblock found
[  588.334436][T14781] EXT4-fs (loop7): error loading journal
[  588.762225][T14782] EXT4-fs (loop9): 1 truncate cleaned up
[  588.763393][T14782] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  588.780975][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2073'.
[  588.782594][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2073'.
[  588.784149][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2073'.
[  588.788793][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2073'.
[  588.790474][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2073'.
[  588.793012][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2073'.
[  588.794495][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2073'.
[  588.803203][T14782] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  588.811133][T14782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  588.813086][T14782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  589.229736][T13886] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  589.242802][ T6091] EXT4-fs (loop9): unmounting filesystem.
[  589.611483][T14825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  589.613074][T14825] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  589.730661][T14829] loop7: detected capacity change from 0 to 512
[  589.938984][T14829] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  590.005365][ T4328] Bluetooth: hci5: command 0x1003 tx timeout
[  590.007442][ T4342] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  590.102582][T14836] loop5: detected capacity change from 0 to 512
[  590.109477][T14836] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  590.128126][T14836] EXT4-fs (loop5): 1 truncate cleaned up
[  590.129309][T14836] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  590.210262][ T7481] EXT4-fs (loop5): unmounting filesystem.
[  590.367856][T14864] __nla_validate_parse: 188 callbacks suppressed
[  590.367868][T14864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2084'.
[  590.374809][T14864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2084'.
[  590.409159][T11333] EXT4-fs (loop7): unmounting filesystem.
[  590.561266][T14878] loop4: detected capacity change from 0 to 1024
[  590.585685][T14878] EXT4-fs (loop4): barriers disabled
[  590.586801][T14878] JBD2: no valid journal superblock found
[  590.587834][T14878] EXT4-fs (loop4): error loading journal
[  590.627037][T13955] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  590.733143][T14898] loop7: detected capacity change from 0 to 512
[  590.740327][T14898] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  590.752801][T14898] EXT4-fs (loop7): 1 truncate cleaned up
[  590.754047][T14898] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  590.939963][T11333] EXT4-fs (loop7): unmounting filesystem.
[  591.324820][T14920] input: syz0 as /devices/virtual/input/input13
[  591.424851][T14930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  591.440421][T14930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  591.559016][T14937] xt_hashlimit: size too large, truncated to 1048576
[  591.611504][T14941] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  591.634971][T14941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  591.662418][T14943] syz.9.2099 (14943) used obsolete PPPIOCDETACH ioctl
[  591.933091][T14955] xt_hashlimit: size too large, truncated to 1048576
[  591.958031][T14955] Cannot find del_set index 2 as target
[  593.460465][T14990] loop9: detected capacity change from 0 to 1024
[  593.468304][T14990] EXT4-fs (loop9): barriers disabled
[  593.469456][T14990] JBD2: no valid journal superblock found
[  593.470396][T14990] EXT4-fs (loop9): error loading journal
[  593.924004][T14965] loop4: detected capacity change from 0 to 131072
[  593.935953][T14965] F2FS-fs (loop4): Test dummy encryption mode enabled
[  593.937659][T14965] F2FS-fs (loop4): invalid crc value
[  593.946252][T14965] F2FS-fs (loop4): Found nat_bits in checkpoint
[  593.956041][T14965] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  593.961617][T14965] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  593.964259][T14965] F2FS-fs (loop4): Start checkpoint disabled!
[  593.980352][T14965] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  594.061317][T15036] input: syz0 as /devices/virtual/input/input14
[  594.457884][T15053] loop9: detected capacity change from 0 to 512
[  594.659705][T15053] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  595.118954][ T6091] EXT4-fs (loop9): unmounting filesystem.
[  595.255762][T15084] ipt_CLUSTERIP: Please specify destination IP
[  595.667242][T15101] xt_hashlimit: size too large, truncated to 1048576
[  595.692482][T15101] Cannot find del_set index 2 as target
[  596.858276][T15109] loop7: detected capacity change from 0 to 256
[  596.913004][T15109] FAT-fs (loop7): Directory bread(block 64) failed
[  596.914153][T15109] FAT-fs (loop7): Directory bread(block 65) failed
[  596.922856][T15109] FAT-fs (loop7): Directory bread(block 66) failed
[  596.923965][T15109] FAT-fs (loop7): Directory bread(block 67) failed
[  596.925111][T15109] FAT-fs (loop7): Directory bread(block 68) failed
[  596.942657][T15109] FAT-fs (loop7): Directory bread(block 69) failed
[  596.943833][T15109] FAT-fs (loop7): Directory bread(block 70) failed
[  596.944909][T15109] FAT-fs (loop7): Directory bread(block 71) failed
[  596.945977][T15109] FAT-fs (loop7): Directory bread(block 72) failed
[  596.960663][T15109] FAT-fs (loop7): Directory bread(block 73) failed
[  597.034849][ T4375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  597.038873][ T4375] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  597.198722][ T6204] Bluetooth: hci5: Frame reassembly failed (-84)
[  597.774600][T15163] loop4: detected capacity change from 0 to 512
[  597.992886][T15163] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  598.424153][T12915] EXT4-fs (loop4): unmounting filesystem.
[  598.960214][T14833] Bluetooth: hci2: command 0x0406 tx timeout
[  599.043699][T15218] loop5: detected capacity change from 0 to 16
[  599.053595][T15218] erofs: (device loop5): mounted with root inode @ nid 36.
[  599.200629][ T4328] Bluetooth: hci5: command 0x1003 tx timeout
[  599.203120][ T4337] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  599.287773][T15232] xt_hashlimit: size too large, truncated to 1048576
[  599.312667][T15232] Cannot find del_set index 2 as target
[  599.846973][T15242] binder: 15241:15242 tried to acquire reference to desc 0, got 1 instead
[  599.858418][T15242] binder: 15241:15242 got transaction with invalid offset (0, min 0 max 14) or object.
[  599.867173][T15242] binder: 15241:15242 transaction call to 15241:0 failed 22/29201/-22, size 14-24 line 3346
[  599.880980][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[  600.117385][T15251] loop7: detected capacity change from 0 to 512
[  600.151316][T15251] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  600.203115][T15251] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  600.531980][T15268] loop9: detected capacity change from 0 to 512
[  600.684685][T15274] overlayfs: missing 'lowerdir'
[  600.717987][T15276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  600.723277][T15276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  600.745598][T11333] EXT4-fs (loop7): unmounting filesystem.
[  600.786677][T15280] loop7: detected capacity change from 0 to 4096
[  600.790298][T15280] EXT4-fs: inline encryption not supported
[  600.794267][T15280] EXT4-fs (loop7): Test dummy encryption mode enabled
[  600.796351][T15280] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  600.797819][T15280] System zones: 0-5
[  600.800489][T15280] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  600.892338][T11333] EXT4-fs (loop7): unmounting filesystem.
[  601.134471][T15303] loop4: detected capacity change from 0 to 512
[  601.143825][T15303] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  601.152911][T15303] EXT4-fs (loop4): 1 truncate cleaned up
[  601.154208][T15303] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  601.161409][T15303] EXT4-fs error (device loop4): ext4_get_max_inline_size:116: inode #18: comm syz.4.2147: can't get inode location 18
[  601.166211][T15303] EXT4-fs (loop4): Remounting filesystem read-only
[  601.167666][T15303] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  601.170912][T15303] EXT4-fs (loop4): Remounting filesystem read-only
[  601.172205][T15303] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #18: comm syz.4.2147: mark_inode_dirty error
[  601.174384][T15303] EXT4-fs (loop4): Remounting filesystem read-only
[  601.175893][T15303] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  601.177924][T15303] EXT4-fs (loop4): Remounting filesystem read-only
[  601.179017][T15303] EXT4-fs error (device loop4): ext4_splice_branch:479: inode #18: comm syz.4.2147: mark_inode_dirty error
[  601.222513][T15303] EXT4-fs (loop4): Remounting filesystem read-only
[  601.223772][T15303] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  601.306528][T15303] EXT4-fs (loop4): Remounting filesystem read-only
[  601.307704][T15303] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #18: comm syz.4.2147: mark_inode_dirty error
[  601.312135][T15303] EXT4-fs (loop4): Remounting filesystem read-only
[  601.315400][T15303] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 18: block 37:freeing already freed block (bit 36); block bitmap corrupt.
[  601.328613][T15303] EXT4-fs (loop4): Remounting filesystem read-only
[  601.334511][T15303] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  601.338563][T15303] EXT4-fs (loop4): Remounting filesystem read-only
[  601.344406][T15303] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #18: comm syz.4.2147: mark_inode_dirty error
[  601.413359][T15319] xt_hashlimit: size too large, truncated to 1048576
[  601.439665][T15319] Cannot find del_set index 2 as target
[  602.436877][T15322] loop7: detected capacity change from 0 to 40427
[  602.453332][T15322] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  602.464334][T15322] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  602.485164][T15322] F2FS-fs (loop7): invalid crc value
[  602.594288][T15322] F2FS-fs (loop7): Found nat_bits in checkpoint
[  602.615037][T15345] loop5: detected capacity change from 0 to 16
[  602.619803][T15322] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  602.621079][T15322] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  602.630234][T15345] erofs: (device loop5): mounted with root inode @ nid 36.
[  602.665223][T15345] syz.5.2155: attempt to access beyond end of device
[  602.665223][T15345] loop5: rw=524288, sector=24, nr_sectors = 112 limit=16
[  602.682746][T15345] syz.5.2155: attempt to access beyond end of device
[  602.682746][T15345] loop5: rw=524288, sector=16, nr_sectors = 8 limit=16
[  602.732827][T15345] ==================================================================
[  602.734197][T15345] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x3a4/0x490
[  602.735670][T15345] Read of size 4096 at addr ffff0000f55e7000 by task syz.5.2155/15345
[  602.737151][T15345] 
[  602.737582][T15345] CPU: 0 PID: 15345 Comm: syz.5.2155 Not tainted syzkaller #0
[  602.738909][T15345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  602.740589][T15345] Call trace:
[  602.741182][T15345]  dump_backtrace+0x1c0/0x1ec
[  602.742046][T15345]  show_stack+0x2c/0x3c
[  602.742757][T15345]  __dump_stack+0x30/0x40
[  602.743510][T15345]  dump_stack_lvl+0xf4/0x15c
[  602.744265][T15345]  print_address_description+0x88/0x218
[  602.745189][T15345]  print_report+0x50/0x68
[  602.745959][T15345]  kasan_report+0xa8/0xfc
[  602.746770][T15345]  kasan_check_range+0x258/0x290
[  602.747559][T15345]  memcpy+0x48/0x90
[  602.748162][T15345]  z_erofs_transform_plain+0x3a4/0x490
[  602.749213][T15345]  z_erofs_decompress+0x9c/0xd4
[  602.750068][T15345]  z_erofs_decompress_queue+0x100c/0x1b40
[  602.751091][T15345]  z_erofs_runqueue+0x152c/0x16cc
[  602.751923][T15345]  z_erofs_read_folio+0x2d8/0x5c8
[  602.752743][T15345]  filemap_read_folio+0x134/0x384
[  602.753629][T15345]  filemap_read+0x12cc/0x2104
[  602.754518][T15345]  generic_file_read_iter+0xf8/0x5c4
[  602.755388][T15345]  vfs_read+0x3d4/0x7f0
[  602.756026][T15345]  ksys_read+0x12c/0x224
[  602.756689][T15345]  __arm64_sys_read+0x7c/0x90
[  602.757487][T15345]  invoke_syscall+0x98/0x2b4
[  602.758288][T15345]  el0_svc_common+0x138/0x258
[  602.759091][T15345]  do_el0_svc+0x58/0x130
[  602.759862][T15345]  el0_svc+0x58/0x128
[  602.760549][T15345]  el0t_64_sync_handler+0x84/0xf0
[  602.761413][T15345]  el0t_64_sync+0x18c/0x190
[  602.762254][T15345] 
[  602.762683][T15345] The buggy address belongs to the physical page:
[  602.763792][T15345] page:00000000d83ea1a1 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1355e7
[  602.765645][T15345] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff)
[  602.766839][T15345] raw: 05ffc00000000000 fffffc0004053fc8 fffffc0003ce8b08 0000000000000000
[  602.768241][T15345] raw: 0000000000000000 fffffc0003ce8b00 00000000ffffffff 0000000000000000
[  602.769661][T15345] page dumped because: kasan: bad access detected
[  602.770852][T15345] 
[  602.771266][T15345] Memory state around the buggy address:
[  602.772339][T15345]  ffff0000f55e6f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  602.773772][T15345]  ffff0000f55e6f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  602.775157][T15345] >ffff0000f55e7000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  602.776564][T15345]                    ^
[  602.777334][T15345]  ffff0000f55e7080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  602.778787][T15345]  ffff0000f55e7100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  602.780126][T15345] ==================================================================
SYZFAIL: failed to send rpc
fd=3 want=10328 sent=0 n=-1 (errno 32: Broken pipe)
[  602.958268][T15345] Disabling lock debugging due to kernel taint
[  603.648593][T10192] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.758927][T10192] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.858815][T10192] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.940103][T10192] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.187529][T10192] bond1: (slave gretap1): Releasing backup interface
[  605.992520][T10192] device hsr_slave_0 left promiscuous mode
[  606.036781][T10192] device hsr_slave_1 left promiscuous mode
[  606.216625][T10192] device veth1_macvtap left promiscuous mode
[  606.217698][T10192] device veth0_macvtap left promiscuous mode
[  606.218847][T10192] device veth1_vlan left promiscuous mode
[  606.219830][T10192] device veth0_vlan left promiscuous mode
[  606.321715][T10192] bond6 (unregistering): (slave bridge6): Releasing active interface
[  606.447653][T10192] bond6 (unregistering): Released all slaves
[  606.487405][T10192] bond5 (unregistering): (slave bridge5): Releasing active interface
[  606.628255][T10192] bond5 (unregistering): Released all slaves
[  606.666906][T10192] bond4 (unregistering): (slave bridge4): Releasing active interface
[  606.788718][T10192] bond4 (unregistering): Released all slaves
[  606.826969][T10192] bond3 (unregistering): (slave bridge3): Releasing active interface
[  606.949236][T10192] bond3 (unregistering): Released all slaves
[  606.986684][T10192] bond2 (unregistering): (slave bridge2): Releasing active interface
[  607.107521][T10192] bond2 (unregistering): Released all slaves
[  607.147047][T10192] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  607.277434][T10192] bond1 (unregistering): Released all slaves
[  611.354656][T10192] bond0 (unregistering): Released all slaves