last executing test programs:

7m36.603098143s ago: executing program 0 (id=16):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])
sync()
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)

7m35.13145864s ago: executing program 5 (id=6):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20d42, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$vivid(0x0, 0x0, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe20}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94)

7m32.136739643s ago: executing program 5 (id=25):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
close(r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r5, r0, 0x2, 0x0, 0x4000, @void, @value}, 0x10)

7m31.116665672s ago: executing program 0 (id=28):
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$dri(0x0, 0x1ff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102376, 0x18fe8)
sendfile(r0, r1, 0x0, 0x80006)

7m31.09871001s ago: executing program 5 (id=29):
syz_init_net_socket$rose(0xb, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TCSETS(0xffffffffffffffff, 0xc0384707, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r1, 0xffffffffffffffff, 0x0)

7m29.262750946s ago: executing program 0 (id=33):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ftruncate(r3, 0x796c)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xb7b7, 0x2)

7m28.71358792s ago: executing program 5 (id=34):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10)
io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, 0x0, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10)
io_setup(0x3, &(0x7f0000000340))

7m25.506306161s ago: executing program 0 (id=37):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000980)='./file0/../file0\x00', 0x200000, &(0x7f00000009c0)={[{@noinit_itable}, {@usrquota}, {@dioread_lock}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x32}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@nombcache}]}, 0xfe, 0x54c, &(0x7f0000000400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020)

7m23.712761825s ago: executing program 0 (id=44):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x807, 0x200020000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x1)

7m22.265033782s ago: executing program 0 (id=49):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)

7m22.210687416s ago: executing program 2 (id=51):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000009"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_exit\x00', r2, 0x0, 0x4000000000000004}, 0x18)

7m20.551480267s ago: executing program 32 (id=49):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)

7m20.54402593s ago: executing program 2 (id=53):
modify_ldt$write2(0x11, &(0x7f0000000400)={0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10)
modify_ldt$read(0x0, &(0x7f0000000840)=""/4096, 0x810)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000051c0)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x3f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xff}}}, 0xb)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x3, 0x0, 0x6, 0xa, 0xa, 0xfffffffffffffffc, 0x10}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000ba00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)

7m19.622933785s ago: executing program 2 (id=60):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x995e1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

7m16.376185895s ago: executing program 2 (id=64):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_continue}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000300)='./bus\x00')
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000002100210100000000fcdbdf250a00000001000008000000000c001400", @ANYRES32, @ANYRES32], 0x28}}, 0x0)
creat(&(0x7f0000000080)='./file1\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./bus\x00', 0x1000008, &(0x7f0000000480)=ANY=[], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
creat(&(0x7f0000000100)='./bus\x00', 0x0)

7m13.46944005s ago: executing program 2 (id=76):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x2c2)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

7m4.496983766s ago: executing program 2 (id=93):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x10, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2, r1}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="79b2115b68bf6a141f9c372787947b4c6b7ec4c95073f5424c64b76c058f0500000000000000ea8a5021d477f1b5d2a8a1b3d6250f92674fde450b4254c81869a5687058016661e34d74fdf4ac028f3dead8ec561b2e507df76c56ad670ec14eaf64a47c22efa30fcb379c1a31bd28eec277639db4de2d0f78f94505dfc88cfef6ccb02d32f53533fb031447ab821aed72b7a795c4321003c909fd098c8c1c1191a335e6390b4734b0140100000000000000b6c28a908b40abfd32cef06c74346a1fe334083e906c76b34752000000"], 0x1, 0x2c4, &(0x7f00000003c0)="$eJzs3T1rW1ccBvBT1bWLi1+mQrv00C7tcnHdL1ARbDARJDhWSDIErvF1IqRIRlcQyWTwniVzxowmY7ZAyBfwB8iezUvw5CkKlhy/xSFDkC/Gvx+I88CD4BzEFf/lcnbvPHtUX8+T9bQTSv/HUAohlPZDmB2koR8O19Igj4eTtsI/7148f3rr7r3r5UplYTnGxfLKf/Mxxuk/3jx+8vLPt51fbr+afj0Rdmbv736Yf7/z685vux9XHtbyWMtjs9WJaVxttTrpaiOLa7W8nsR4s5GleRZrzTxrn+rXG62NjV5Mm2tTkxvtLM9j2uzFetaLnVbstHsxfZDWmjFJkjg1GfiW6vbycloueheMVrtdTg+e4Ykvmup2IRsCAApl/r/KzP9XwcH8P374/J5m/gcAAAAAAAAAAAAAgMtgv9+f6ff7M5/Xs5+i98do+f2vthMv7v0cwt5Wt9qtDtdhv7hUWZiLA7PH39rrdqs/HvX/Dvt4uv8pTB728+f24+Hvv4b9QXftRuVMPxHWRn98AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhI4pFz7/dPkq/1w7S4VFmYO/d+/7Hw+9iFHQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvkve26ynjUbWFgRBOApF/zMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxTu+9LvonQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCkvLdZTxuNrD3CUPQZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpNPAQAA///JXtD+")
syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100200009040000ff02020000052406800005240004000d240f010900000000000000000424020a090581032000037fff090582020000000100090503"], 0x0)

7m3.903907986s ago: executing program 33 (id=93):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x10, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2, r1}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="79b2115b68bf6a141f9c372787947b4c6b7ec4c95073f5424c64b76c058f0500000000000000ea8a5021d477f1b5d2a8a1b3d6250f92674fde450b4254c81869a5687058016661e34d74fdf4ac028f3dead8ec561b2e507df76c56ad670ec14eaf64a47c22efa30fcb379c1a31bd28eec277639db4de2d0f78f94505dfc88cfef6ccb02d32f53533fb031447ab821aed72b7a795c4321003c909fd098c8c1c1191a335e6390b4734b0140100000000000000b6c28a908b40abfd32cef06c74346a1fe334083e906c76b34752000000"], 0x1, 0x2c4, &(0x7f00000003c0)="$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")
syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100200009040000ff02020000052406800005240004000d240f010900000000000000000424020a090581032000037fff090582020000000100090503"], 0x0)

5m55.721276682s ago: executing program 3 (id=234):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x30000009})
epoll_pwait2(r2, &(0x7f0000000380)=[{}], 0x1, 0x0, 0x0, 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x7e, 0x0)
writev(r3, &(0x7f0000000280)=[{&(0x7f0000000300)="e7", 0x1}], 0x1)

5m55.47241044s ago: executing program 3 (id=235):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a40)={0x44, 0x0, &(0x7f0000000840)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000980)='u'})

5m55.244992057s ago: executing program 3 (id=236):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
recvfrom(r2, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0)
connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)

5m54.908636163s ago: executing program 3 (id=238):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@discard}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@dioread_lock}, {@norecovery}, {@nombcache}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}, {@resuid}, {@init_itable_val}, {@jqfmt_vfsv1}]}, 0x1, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy")
madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x3)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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")
getpid()
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x10000, 0x0)
mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0)
renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2)

5m54.461461032s ago: executing program 3 (id=239):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x18, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0)

5m51.496946208s ago: executing program 3 (id=248):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x10400, 0x0, 0xfb, 0x0, &(0x7f0000000000))
mount(&(0x7f0000002140)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,\xfc\xb5%o\x85\x9b\xe1F\xe8*X\xe7\x84\xcc\xfd\xec\xcd\xbe\x9d3\x1a\x00\v_\xcf\xb7\xb5\xe1\xf9\x1eC')

5m50.38719688s ago: executing program 34 (id=248):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x10400, 0x0, 0xfb, 0x0, &(0x7f0000000000))
mount(&(0x7f0000002140)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,\xfc\xb5%o\x85\x9b\xe1F\xe8*X\xe7\x84\xcc\xfd\xec\xcd\xbe\x9d3\x1a\x00\v_\xcf\xb7\xb5\xe1\xf9\x1eC')

5m26.570585455s ago: executing program 5 (id=34):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10)
io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, 0x0, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10)
io_setup(0x3, &(0x7f0000000340))

17.135710959s ago: executing program 6 (id=1021):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r2, &(0x7f00000001c0)=ANY=[@ANYRES64=r1], 0xc)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180))
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@empty, @in6=@remote}}, {{@in=@initdev}, 0x0, @in=@loopback}}, 0x0)
sendmsg$nl_netfilter(r0, 0x0, 0x10)
syz_emit_ethernet(0x3e, 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)

14.215390637s ago: executing program 6 (id=1026):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x6, @mcast1, 0xff}, {0xa, 0x4e24, 0x3, @empty, 0x8}, 0x0, {[0x80000000, 0x4, 0x1, 0xffff, 0x800, 0x24, 0x1ff, 0xeb0c]}}, 0x5c)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_mount_image$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {}, [{}]}, 0x14, 0x0)
r3 = socket(0x2, 0x80802, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000000c40))
mq_open(0x0, 0x800, 0xc2, 0x0)

9.492847619s ago: executing program 1 (id=1035):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440))
r3 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0)
fallocate(r3, 0x0, 0x400000000000000, 0x2)

8.14865713s ago: executing program 1 (id=1037):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000200))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f030000000000000000"], 0x24}], 0x1}, 0x0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f000001f8c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000008cfbb2928303abbbe00000640001000006020202020202010882848b960c12182456539ef3c5dd41cb189aff587463f8e4cfb86edf01c073c0b2812dd36b46720dfe24805e1b7e763f22ff5485a703b125e699f7d98171b1d6d28dd997374571f625424c1de0412d4c93cdc1"], 0x36)

7.80092649s ago: executing program 4 (id=1038):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$key(0xf, 0x3, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0)

6.503108478s ago: executing program 6 (id=1040):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0xfffffffe, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, r1, 0x0, 0x8, 'syz1\x00', 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1)

6.493830078s ago: executing program 4 (id=1041):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setxattr$trusted_overlay_origin(0x0, &(0x7f0000000440), 0x0, 0x0, 0x2)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r0, &(0x7f0000000440)=[{0x84, 0x77, 0x0, 0x0, @tick=0xe, {0x9}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x0, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @time={0x1, 0xd93}, {0xba, 0x3}, {0xdb}, @note={0xfc, 0x10, 0x7, 0x6, 0x73ec}}], 0x70)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
lseek(r1, 0x8, 0x3)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r4, 0x3, 0x0, @val=@iter={0x0}}, 0x20)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r5, r2, 0x4, r2}, 0x10)

6.225626462s ago: executing program 4 (id=1043):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r4, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x20000000)

6.201864503s ago: executing program 8 (id=1044):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x2d, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78ef670efff3f7311209fb"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xb0}}, 0x0)

6.060823475s ago: executing program 1 (id=1045):
socket$inet6(0xa, 0x3, 0x84)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_getevents(0x0, 0x3, 0x0, 0x0, 0x0)

5.875134497s ago: executing program 6 (id=1046):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80, &(0x7f0000000200)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@nombcache}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x534, &(0x7f00000011c0)="$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")
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
flock(0xffffffffffffffff, 0x2)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r1, 0x1)
socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014001901000008000000000028bc1edcc9"], 0x28}}, 0x0)
readv(r2, &(0x7f0000000500)=[{&(0x7f0000004780)=""/175, 0xaf}], 0x1)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "cf892a410f72c538", "785abc1ae53fc6d64b2ee0573d94a12a", "2144c875", "face6b942f52b208"}, 0x28)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=@tcp}, 0x20)

4.946343915s ago: executing program 8 (id=1047):
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071120a000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2568, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)={[&(0x7f0000000300)='GPL\x00', &(0x7f0000000340)='/dev/cpu/#/msr\x00']}, &(0x7f0000000680)={[&(0x7f0000000440)='.\x00', &(0x7f0000000480)='[@-\\{{.\x00', &(0x7f00000004c0)='#!:**\x00', &(0x7f0000000500)='/dev/cpu/#/msr\x00', &(0x7f0000000640)='\x1b:^{$*\x00']})
fchmod(0xffffffffffffffff, 0x32)

4.028397021s ago: executing program 6 (id=1048):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000340))
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0)

3.743481092s ago: executing program 6 (id=1049):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect$cdc_ecm(0x6, 0x56, &(0x7f0000000300)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r3, 0x550c, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x2, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void}, 0x32)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010000100000000200bb00"], 0x1e)
mknod$loop(0x0, 0x800, 0x1)

3.743073769s ago: executing program 8 (id=1050):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
socket(0x1e, 0x5, 0x0)
mbind(&(0x7f0000bda000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
r1 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100})

2.668447451s ago: executing program 8 (id=1051):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0x400000, 0x0)

2.557229812s ago: executing program 1 (id=1052):
mq_open(0x0, 0x42, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f0000000200)={0x0, 0x9, 0x6, 0x1636, 0x0, 0xfffffffffffffffc, 0x2, 0xfffffffffffffffe}, 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0x9, 0x0, 0x80}, 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

2.496631785s ago: executing program 4 (id=1053):
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x1000, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xe0)

1.213118925s ago: executing program 8 (id=1054):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$packet(0x11, 0x2, 0x300)
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$tipc(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000800)="7deb", 0x5dc}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x24048801)

1.042725981s ago: executing program 1 (id=1055):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
connect$inet6(r1, 0x0, 0x0)
writev(r1, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix'])
close_range(r0, 0xffffffffffffffff, 0x0)

247.257817ms ago: executing program 4 (id=1056):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0)
syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f000000a200)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x3, {0x2000000008, 0xfffffffffffffffc, 0x4, 0x0, 0x8, 0x0, {0x4, 0x80, 0x8000000000000001, 0xfffffffffffffffd, 0x2000, 0x4, 0x0, 0x2, 0x5, 0x6000, 0xfffffffd, r4, 0x0, 0x0, 0x533c48f0}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x1)
read$char_usb(r5, &(0x7f0000000380)=""/205, 0xcd)

28.066067ms ago: executing program 1 (id=1057):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000080000009500"], 0x0, 0x4, 0xc0, &(0x7f0000000140)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20)

1.216473ms ago: executing program 4 (id=1058):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000410, &(0x7f0000000440)={[{@oldalloc}, {@delalloc}]}, 0x4, 0x513, &(0x7f0000000f40)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
setpriority(0x0, 0x0, 0x8)
socket$l2tp6(0xa, 0x2, 0x73)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe28, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
fcntl$setsig(r1, 0xa, 0x13)
fcntl$setlease(r1, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

0s ago: executing program 8 (id=1059):
syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000280)=ANY=[], 0xf, 0x2ff, &(0x7f0000000680)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x101000, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x1c7b43, 0x109)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
creat(&(0x7f00000016c0)='./file1\x00', 0x14)

kernel console output (not intermixed with test programs):

039][ T7018] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.031195][ T7018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.058150][ T7018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.272222][ T6855] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  227.293584][ T6855] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  227.333408][ T7018] hsr_slave_0: entered promiscuous mode
[  227.358388][ T7018] hsr_slave_1: entered promiscuous mode
[  227.365506][ T7018] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.396955][ T7018] Cannot create hsr debugfs directory
[  227.415585][ T6855] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  227.528624][ T6855] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  227.881662][ T6722] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.990811][ T6722] 8021q: adding VLAN 0 to HW filter on device team0
[  228.175193][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.182593][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.234214][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.241461][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.501493][ T6653] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.575699][ T7243] binder: 7242:7243 ioctl c0306201 2000000003c0 returned -14
[  228.585839][ T7018] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  228.646612][ T7018] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  228.711353][ T7018] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  228.793777][ T7018] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  229.225937][ T6855] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.472060][ T6855] 8021q: adding VLAN 0 to HW filter on device team0
[  229.545175][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.552450][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.625167][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.632423][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.844246][ T6722] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.935112][ T6653] veth0_vlan: entered promiscuous mode
[  230.017436][ T7018] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.063576][ T6653] veth1_vlan: entered promiscuous mode
[  230.155750][ T7018] 8021q: adding VLAN 0 to HW filter on device team0
[  230.336065][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.343293][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.369480][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.376769][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.479377][ T7018] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  230.495848][ T7018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  230.527047][ T5893] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  231.418475][ T5893] usb 5-1: Using ep0 maxpacket: 32
[  231.437531][ T5893] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  231.446570][ T5893] usb 5-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  231.564386][ T6653] veth0_macvtap: entered promiscuous mode
[  231.571931][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.638040][ T5893] usb 5-1: config 0 descriptor??
[  231.650206][ T6653] veth1_macvtap: entered promiscuous mode
[  231.820751][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.857222][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.878795][ T1203] usb 5-1: USB disconnect, device number 6
[  231.884677][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.927149][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.942175][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.957145][   T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  232.030255][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.052559][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.066272][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.080660][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.093071][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.135061][ T6653] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.149189][ T6653] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.159096][ T6653] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.168747][ T6653] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.168936][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.178762][   T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  232.201034][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.225212][   T24] usb 2-1: config 0 descriptor??
[  232.330129][ T7018] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.385469][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.408461][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.458672][ T6855] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.500637][   T24] usbhid 2-1:0.0: can't add hid device: -71
[  232.526154][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  232.544054][ T6722] veth0_vlan: entered promiscuous mode
[  232.559111][   T24] usb 2-1: USB disconnect, device number 5
[  232.643224][ T5944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.678554][ T5944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.701673][ T6722] veth1_vlan: entered promiscuous mode
[  232.867132][ T6722] veth0_macvtap: entered promiscuous mode
[  232.902010][ T6722] veth1_macvtap: entered promiscuous mode
[  232.979534][ T6722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.015292][ T6722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.041802][ T6722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.083298][ T6722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.116991][ T6722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.172680][ T6722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.198497][ T6722] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.251291][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'.
[  233.503902][ T6722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.516609][ T6722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.536838][ T6722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.552630][ T6722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.563014][ T6722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.578164][ T6722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.591630][ T6722] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.661351][ T5944] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.711956][ T6722] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.756763][ T6722] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.765547][ T6722] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.779569][ T6722] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.935886][ T5944] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.063599][ T5944] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.135179][ T7018] veth0_vlan: entered promiscuous mode
[  234.181544][ T7018] veth1_vlan: entered promiscuous mode
[  234.233676][ T6855] veth0_vlan: entered promiscuous mode
[  234.321655][ T5944] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.480616][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  234.495071][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  234.504967][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  234.519839][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  234.539506][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  234.605408][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.637195][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.499851][ T6855] veth1_vlan: entered promiscuous mode
[  235.887211][ T5833] Bluetooth: hci1: unexpected event for opcode 0x0c7b
[  235.989226][ T7337] mmap: syz.1.308 (7337) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  236.595536][ T5833] Bluetooth: hci0: command tx timeout
[  236.686848][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.694747][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.954994][ T7018] veth0_macvtap: entered promiscuous mode
[  237.435223][ T6855] veth0_macvtap: entered promiscuous mode
[  237.714773][ T7018] veth1_macvtap: entered promiscuous mode
[  237.748357][ T5944] bridge_slave_1: left allmulticast mode
[  237.754080][ T5944] bridge_slave_1: left promiscuous mode
[  237.790945][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.936438][ T5944] bridge_slave_0: left allmulticast mode
[  237.944015][ T5944] bridge_slave_0: left promiscuous mode
[  237.954717][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.181593][ T7360] loop4: detected capacity change from 0 to 64
[  238.828721][ T5833] Bluetooth: hci0: command tx timeout
[  239.389390][ T7360] syz.4.313: attempt to access beyond end of device
[  239.389390][ T7360] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  239.403649][ T7360] buffer_io_error: 38 callbacks suppressed
[  239.403680][ T7360] Buffer I/O error on dev loop4, logical block 134217734, async page read
[  240.293354][ T7363] ubi31: attaching mtd0
[  240.377695][ T7363] ubi31: scanning is finished
[  240.382691][ T7363] ubi31: empty MTD device detected
[  240.869695][ T7363] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  240.877979][ T7363] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  240.907097][ T7363] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  240.923886][ T5833] Bluetooth: hci0: command tx timeout
[  240.932123][ T7363] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  240.978839][ T7363] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  241.074722][ T7363] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  241.109975][ T7363] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2992986867
[  241.156860][ T7363] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  241.282437][ T7364] ubi31: background thread "ubi_bgt31d" started, PID 7364
[  241.550574][ T7369] loop1: detected capacity change from 0 to 16
[  241.629223][ T7369] erofs: DAX unsupported by block device. Turning off DAX.
[  241.682808][ T7369] erofs (device loop1): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  241.763010][ T7369] erofs (device loop1): mounted with root inode @ nid 36.
[  242.492178][ T5944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.513794][ T5944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.547043][ T5944] bond0 (unregistering): Released all slaves
[  242.564139][ T6855] veth1_macvtap: entered promiscuous mode
[  242.581028][ T7356] warning: `syz.6.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  242.948269][ T7380] : entered promiscuous mode
[  242.993988][ T5833] Bluetooth: hci0: command tx timeout
[  243.570613][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.610070][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.621181][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.633430][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.652558][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.678107][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.707298][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.732366][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.759071][ T7018] batman_adv: batadv0: Interface activated: batadv_slave_0
[  243.788306][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.809186][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.825975][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.853568][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.885027][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.918306][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.937072][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.959456][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.971669][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.983480][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.000304][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.147762][ T5930] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  244.159855][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.171031][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.181460][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.193223][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.203936][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.215012][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.225817][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.238592][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.255079][ T7018] batman_adv: batadv0: Interface activated: batadv_slave_1
[  244.296928][ T5930] usb 2-1: Using ep0 maxpacket: 8
[  244.361955][ T5930] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  244.375692][ T5930] usb 2-1: config 179 has no interface number 0
[  244.396072][ T5930] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  244.432761][ T5930] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  244.473240][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.499382][ T5930] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  244.515101][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.550914][ T5930] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  244.554082][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.562632][ T5930] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  244.590460][ T5930] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  244.926861][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.022366][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.317882][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.346743][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.360696][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.400561][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.413614][ T7394] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  245.723259][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.142443][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.471237][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.541098][ T7018] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.604555][ T7018] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.665798][ T7018] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.695860][ T7018] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.764688][   T10] usb 2-1: USB disconnect, device number 6
[  246.764769][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  246.779120][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  246.897855][ T7329] chnl_net:caif_netlink_parms(): no params data found
[  246.985270][ T5944] hsr_slave_0: left promiscuous mode
[  246.997023][ T5944] hsr_slave_1: left promiscuous mode
[  247.016041][ T5944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.036781][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.058070][ T5944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.078234][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.099159][ T7422] netlink: 156 bytes leftover after parsing attributes in process `syz.4.334'.
[  247.133295][ T5944] veth1_macvtap: left promiscuous mode
[  247.146702][ T5944] veth0_macvtap: left promiscuous mode
[  247.152513][ T5944] veth1_vlan: left promiscuous mode
[  247.162767][ T5944] veth0_vlan: left promiscuous mode
[  248.013048][ T7429] loop6: detected capacity change from 0 to 256
[  248.109323][ T7429] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  250.911867][ T5944] team0 (unregistering): Port device team_slave_1 removed
[  251.363167][ T5944] team0 (unregistering): Port device team_slave_0 removed
[  252.975346][ T7453] syz.6.342 (7453) used greatest stack depth: 19704 bytes left
[  253.082786][ T6855] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.096644][ T6855] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.115599][ T6855] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.126607][ T6855] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.985206][ T7461] loop1: detected capacity change from 0 to 512
[  254.032450][ T7465] loop6: detected capacity change from 0 to 512
[  254.043049][ T7461] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  254.081006][ T7465] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  254.096487][ T7465] EXT4-fs (loop6): invalid journal inode
[  254.101746][ T7461] EXT4-fs (loop1): 1 truncate cleaned up
[  254.102524][ T7465] EXT4-fs (loop6): can't get journal size
[  254.137752][ T7465] EXT4-fs (loop6): 1 truncate cleaned up
[  254.156039][ T7465] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.163034][ T7461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.228098][ T7329] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.230105][ T7465] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  254.262182][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.293568][ T7329] bridge_slave_0: entered allmulticast mode
[  254.351182][ T7329] bridge_slave_0: entered promiscuous mode
[  254.548488][ T7329] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.604883][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.658089][ T7329] bridge_slave_1: entered allmulticast mode
[  254.691165][ T7329] bridge_slave_1: entered promiscuous mode
[  254.993007][ T6722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.165109][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  255.175329][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  255.196228][ T7329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.212423][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.225511][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.231337][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.275873][   T30] audit: type=1800 audit(1746909869.079:31): pid=7475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.347" name="/" dev="9p" ino=2 res=0 errno=0
[  255.279881][ T7475] syz.6.347 (7475) used greatest stack depth: 19304 bytes left
[  255.333859][ T7329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.449496][ T7479] x_tables: unsorted underflow at hook 2
[  255.586357][ T7329] team0: Port device team_slave_0 added
[  255.648100][ T7329] team0: Port device team_slave_1 added
[  255.704904][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.742337][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.187675][ T7329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.194710][ T7329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.264177][ T7492] loop4: detected capacity change from 0 to 256
[  257.298240][ T7329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.357801][ T7492] FAT-fs (loop4): Directory bread(block 64) failed
[  257.372750][ T7493] loop1: detected capacity change from 0 to 1024
[  257.382033][ T7492] FAT-fs (loop4): Directory bread(block 65) failed
[  257.417178][ T7492] FAT-fs (loop4): Directory bread(block 66) failed
[  257.423815][ T7492] FAT-fs (loop4): Directory bread(block 67) failed
[  257.464909][ T7329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  257.487058][ T7329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.513314][ T7329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  257.541006][ T7493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.568239][ T7492] FAT-fs (loop4): Directory bread(block 68) failed
[  257.620978][ T7492] FAT-fs (loop4): Directory bread(block 69) failed
[  257.636987][ T7492] FAT-fs (loop4): Directory bread(block 70) failed
[  257.643577][ T7492] FAT-fs (loop4): Directory bread(block 71) failed
[  257.663939][ T7492] FAT-fs (loop4): Directory bread(block 72) failed
[  257.674824][ T7492] FAT-fs (loop4): Directory bread(block 73) failed
[  257.791943][ T7329] hsr_slave_0: entered promiscuous mode
[  257.819839][ T7329] hsr_slave_1: entered promiscuous mode
[  257.847310][ T7329] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  257.894153][ T7329] Cannot create hsr debugfs directory
[  257.916170][ T5944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.935807][ T5944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.000428][ T7501] syz.4.354: attempt to access beyond end of device
[  258.000428][ T7501] loop4: rw=2049, sector=1344, nr_sectors = 8 limit=256
[  258.049736][   T30] audit: type=1804 audit(1746909871.869:32): pid=7501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.354" name="/newroot/128/bus/file1" dev="loop4" ino=1048613 res=1 errno=0
[  258.123856][ T7501] syz.4.354: attempt to access beyond end of device
[  258.123856][ T7501] loop4: rw=2051, sector=1224, nr_sectors = 128 limit=256
[  258.194861][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.432729][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  258.444329][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  258.453953][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  258.490642][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  258.504835][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  259.737287][ T7526] use of bytesused == 0 is deprecated and will be removed in the future,
[  259.748540][ T7526] use the actual size instead.
[  260.327288][ T5944] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.596967][ T5833] Bluetooth: hci2: command tx timeout
[  261.417406][ T5944] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.312197][   T30] audit: type=1326 audit(1746909876.129:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.6.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7fc00000
[  262.369918][   T30] audit: type=1326 audit(1746909876.139:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.6.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f91b978e969 code=0x7fc00000
[  262.485905][ T5944] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.667659][ T5833] Bluetooth: hci2: command tx timeout
[  262.878030][ T7551] syz.4.368: attempt to access beyond end of device
[  262.878030][ T7551] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0
[  262.893597][ T7551] XFS (nbd4): SB validate failed with error -5.
[  263.153350][ T7550] sctp: failed to load transform for md5: -2
[  263.327778][ T7560] loop1: detected capacity change from 0 to 40427
[  263.383761][ T7560] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  263.392382][ T7560] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  263.414989][ T7560] F2FS-fs (loop1): invalid crc value
[  263.595820][ T7560] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  263.603253][ T7560] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  264.372802][ T5944] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.747348][ T5833] Bluetooth: hci2: command tx timeout
[  265.756435][   T30] audit: type=1326 audit(1746909879.579:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.6.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7fc00000
[  266.837182][ T5833] Bluetooth: hci2: command tx timeout
[  270.619580][ T7604] netlink: 'syz.6.379': attribute type 5 has an invalid length.
[  270.673146][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.379'.
[  270.756608][ T5944] bridge_slave_1: left allmulticast mode
[  270.762424][ T5944] bridge_slave_1: left promiscuous mode
[  270.832769][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.878964][ T5944] bridge_slave_0: left allmulticast mode
[  270.906473][ T5944] bridge_slave_0: left promiscuous mode
[  270.919741][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.189931][   T30] audit: type=1804 audit(1746909885.019:36): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.385" name="/newroot/11/file1" dev="fuse" ino=1 res=1 errno=0
[  271.247077][   T30] audit: type=1800 audit(1746909885.039:37): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.385" name="/" dev="fuse" ino=1 res=0 errno=0
[  271.269303][ T7624] vivid-002: disconnect
[  271.278550][   T30] audit: type=1800 audit(1746909885.099:38): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.385" name="/" dev="fuse" ino=1 res=0 errno=0
[  271.936795][   T30] audit: type=1326 audit(1746909885.759:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.6.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7fc00000
[  271.977117][ T7615] vivid-002: reconnect
[  271.981426][   T30] audit: type=1326 audit(1746909885.759:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.6.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f91b978e969 code=0x7fc00000
[  272.054802][   T30] audit: type=1326 audit(1746909885.759:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.6.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7fc00000
[  272.253729][ T5944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  272.285527][   T30] audit: type=1326 audit(1746909885.759:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.6.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7fc00000
[  272.314087][   T30] audit: type=1326 audit(1746909885.759:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.6.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7fc00000
[  272.351672][   T30] audit: type=1326 audit(1746909885.759:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.6.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7fc00000
[  272.382885][ T5944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  272.437253][   T30] audit: type=1326 audit(1746909885.759:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.6.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7fc00000
[  272.658062][ T7634] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  273.047545][ T5944] bond0 (unregistering): Released all slaves
[  273.162446][ T7509] chnl_net:caif_netlink_parms(): no params data found
[  273.542846][ T7645] Cache volume key already in use (9p,(null),)
[  273.846802][ T7509] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.865333][ T7509] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.874115][ T7509] bridge_slave_0: entered allmulticast mode
[  273.889433][ T7509] bridge_slave_0: entered promiscuous mode
[  274.587844][ T7329] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  274.630911][ T7329] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  274.692373][ T7509] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.759924][ T7509] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.794362][ T7509] bridge_slave_1: entered allmulticast mode
[  274.828700][ T7509] bridge_slave_1: entered promiscuous mode
[  276.569298][ T7329] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  276.606634][ T7329] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  277.972114][ T7509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.049387][ T7509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.589140][ T5944] hsr_slave_0: left promiscuous mode
[  278.677375][ T7692] binder: 7691:7692 ioctl c0306201 2000000003c0 returned -14
[  278.684911][ T5944] hsr_slave_1: left promiscuous mode
[  278.703141][ T5944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  278.753805][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_0
[  278.779950][ T7697] netlink: 'syz.8.408': attribute type 1 has an invalid length.
[  278.869247][ T7697] netlink: 'syz.8.408': attribute type 4 has an invalid length.
[  278.887256][ T5944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  278.894746][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_1
[  278.925404][ T7697] netlink: 15334 bytes leftover after parsing attributes in process `syz.8.408'.
[  279.823554][ T5944] veth1_macvtap: left promiscuous mode
[  279.841675][ T5944] veth0_macvtap: left promiscuous mode
[  279.881256][ T5944] veth1_vlan: left promiscuous mode
[  279.910024][ T5944] veth0_vlan: left promiscuous mode
[  279.963531][ T7712] Bluetooth: MGMT ver 1.23
[  281.908496][ T7729] loop1: detected capacity change from 0 to 64
[  283.175694][ T7727] syz.1.415: attempt to access beyond end of device
[  283.175694][ T7727] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  283.190144][ T7727] Buffer I/O error on dev loop1, logical block 134217734, async page read
[  283.230913][ T7727] Trying to free block not in datazone
[  286.227339][ T7752] loop6: detected capacity change from 0 to 128
[  286.257125][   T30] kauditd_printk_skb: 60 callbacks suppressed
[  286.257140][   T30] audit: type=1326 audit(1746909900.079:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.8.423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fa398e969 code=0x0
[  286.324811][ T7752] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  286.389251][ T7752] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  286.701172][ T7761] loop8: detected capacity change from 0 to 32768
[  286.995368][ T7761] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.423 (7761)
[  287.016154][ T7752] ext2 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  287.240716][ T7761] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  287.251406][ T7761] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm
[  287.409621][ T7761] BTRFS info (device loop8): rebuilding free space tree
[  287.499084][ T7761] BTRFS info (device loop8): disabling free space tree
[  287.507208][ T7761] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  287.518698][ T7761] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  287.697152][ T7780] loop1: detected capacity change from 0 to 2048
[  287.756299][ T6722] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  287.811780][ T7780] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  287.849484][ T7780] UDF-fs: Scanning with blocksize 512 failed
[  287.979019][ T7780] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  288.898699][ T7787] loop4: detected capacity change from 0 to 1764
[  288.961413][ T7018] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  289.033980][ T7777] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 818: i_size: 134308390 lbcount: 134310912 extent 65+57344
[  289.457009][ T5991] kworker/u8:11: attempt to access beyond end of device
[  289.457009][ T5991] loop1: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  289.522827][ T5991] Buffer I/O error on dev loop1, logical block 1024, lost async page write
[  289.581882][ T5991] kworker/u8:11: attempt to access beyond end of device
[  289.581882][ T5991] loop1: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  289.741168][ T5991] Buffer I/O error on dev loop1, logical block 1024, lost async page write
[  289.863906][ T5991] kworker/u8:11: attempt to access beyond end of device
[  289.863906][ T5991] loop1: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  290.072126][ T5991] Buffer I/O error on dev loop1, logical block 1025, lost async page write
[  290.223257][ T5991] kworker/u8:11: attempt to access beyond end of device
[  290.223257][ T5991] loop1: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  290.406037][ T5991] Buffer I/O error on dev loop1, logical block 1025, lost async page write
[  290.486235][ T5991] kworker/u8:11: attempt to access beyond end of device
[  290.486235][ T5991] loop1: rw=1, sector=2052, nr_sectors = 2 limit=2048
[  290.548000][ T5991] Buffer I/O error on dev loop1, logical block 1026, lost async page write
[  290.603465][ T5991] kworker/u8:11: attempt to access beyond end of device
[  290.603465][ T5991] loop1: rw=1, sector=2052, nr_sectors = 2 limit=2048
[  290.638310][ T5991] Buffer I/O error on dev loop1, logical block 1026, lost async page write
[  290.649196][ T5991] kworker/u8:11: attempt to access beyond end of device
[  290.649196][ T5991] loop1: rw=1, sector=2054, nr_sectors = 2 limit=2048
[  290.665464][ T5991] Buffer I/O error on dev loop1, logical block 1027, lost async page write
[  290.676765][ T5991] kworker/u8:11: attempt to access beyond end of device
[  290.676765][ T5991] loop1: rw=1, sector=2054, nr_sectors = 2 limit=2048
[  290.690723][ T5991] Buffer I/O error on dev loop1, logical block 1027, lost async page write
[  290.700615][ T5991] kworker/u8:11: attempt to access beyond end of device
[  290.700615][ T5991] loop1: rw=1, sector=2056, nr_sectors = 2 limit=2048
[  290.715626][ T5991] Buffer I/O error on dev loop1, logical block 1028, lost async page write
[  290.761575][ T5991] kworker/u8:11: attempt to access beyond end of device
[  290.761575][ T5991] loop1: rw=1, sector=2056, nr_sectors = 2 limit=2048
[  290.791682][ T5991] Buffer I/O error on dev loop1, logical block 1028, lost async page write
[  290.818488][ T5944] team0 (unregistering): Port device team_slave_1 removed
[  290.853194][ T5822] UDF-fs: warning (device loop1): udf_evict_inode: Inode 818 (mode 100755) has inode size 134308390 different from extent length 134310912. Filesystem need not be standards compliant.
[  291.329372][ T7805] loop8: detected capacity change from 0 to 256
[  291.342835][ T7805] exfat: Deprecated parameter 'utf8'
[  291.458714][ T7805] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  292.045207][ T5944] team0 (unregistering): Port device team_slave_0 removed
[  292.173018][ T5827] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  292.356997][ T5827] usb 2-1: Using ep0 maxpacket: 8
[  293.153666][ T5827] usb 2-1: unable to get BOS descriptor or descriptor too short
[  293.196732][ T5827] usb 2-1: config 8 has an invalid interface number: 24 but max is 1
[  293.223914][ T5827] usb 2-1: config 8 has an invalid interface number: 242 but max is 1
[  293.250327][ T5827] usb 2-1: config 8 has no interface number 0
[  293.287056][ T5827] usb 2-1: config 8 has no interface number 1
[  293.337005][ T5827] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024
[  293.368660][ T5827] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11
[  293.396903][ T5827] usb 2-1: config 8 interface 24 has no altsetting 0
[  293.413261][ T5827] usb 2-1: config 8 interface 242 has no altsetting 0
[  293.455345][ T7814] binder: BINDER_SET_CONTEXT_MGR already set
[  293.456552][ T5827] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  293.482114][ T7814] binder: 7813:7814 ioctl 4018620d 200000000040 returned -16
[  293.501566][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.540274][ T5827] usb 2-1: Product: syz
[  293.559939][ T7814] binder: 7813:7814 ioctl c0306201 200000000240 returned -11
[  293.588376][ T5827] usb 2-1: Manufacturer: syz
[  293.593071][ T5827] usb 2-1: SerialNumber: syz
[  293.649549][ T7806] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  293.797304][ T5833] Bluetooth: hci6: unexpected cc 0x0c1b length: 1 < 5
[  293.906118][ T5827] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'.
[  293.996169][ T5827] vmk80xx 2-1:8.242: driver 'vmk80xx' failed to auto-configure device.
[  294.076269][ T5827] usb 2-1: USB disconnect, device number 7
[  295.107611][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.439'.
[  297.164656][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  297.176356][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  297.197314][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  297.216380][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  297.228422][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  298.264060][ T5846] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[  298.277185][ T5846] Bluetooth: hci6: Injecting HCI hardware error event
[  298.286030][ T5846] Bluetooth: hci6: hardware error 0x00
[  298.510620][ T7509] team0: Port device team_slave_0 added
[  298.662209][ T7509] team0: Port device team_slave_1 added
[  299.419417][ T7509] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.426451][ T7509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.476922][ T5833] Bluetooth: hci5: command tx timeout
[  299.535785][ T7509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.554094][ T7509] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.567406][ T7509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.594909][ T7509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.069854][ T7870] Invalid source name
[  300.427711][ T5846] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  300.530625][ T7868] loop4: detected capacity change from 0 to 1024
[  300.824937][ T7868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.207585][ T7880] trusted_key: syz.8.453 sent an empty control message without MSG_MORE.
[  301.353202][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.582564][ T5846] Bluetooth: hci5: command tx timeout
[  301.666743][ T5992] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  301.968406][ T7509] hsr_slave_0: entered promiscuous mode
[  301.975904][ T7509] hsr_slave_1: entered promiscuous mode
[  301.999978][ T7509] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  302.056867][ T5992] usb 7-1: Using ep0 maxpacket: 32
[  302.072381][ T7509] Cannot create hsr debugfs directory
[  302.076015][ T5992] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  302.087171][ T5992] usb 7-1: config 0 has no interface number 0
[  302.096374][ T5992] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  302.126938][ T5992] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  302.157901][ T5992] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  302.167818][ T5992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.651775][ T5992] usb 7-1: config 0 descriptor??
[  303.637792][ T5846] Bluetooth: hci5: command tx timeout
[  304.099651][ T5992] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0094.0004/input/input6
[  304.330535][ T5992] uclogic 0003:28BD:0094.0004: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.6-1/input1
[  304.366285][ T5992] usb 7-1: USB disconnect, device number 2
[  304.726848][   T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  304.907449][   T10] usb 2-1: Using ep0 maxpacket: 16
[  304.957732][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  305.056812][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  305.080931][ T7904] loop4: detected capacity change from 0 to 1024
[  305.139083][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  305.165045][ T7904] ext4: Unknown parameter 'nouser_xattr'
[  305.201043][ T7902] fido_id[7902]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  305.272633][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  305.316477][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.427044][   T10] usb 2-1: Product: syz
[  305.466722][   T10] usb 2-1: Manufacturer: syz
[  305.466760][   T10] usb 2-1: SerialNumber: syz
[  305.516220][   T10] usb 2-1: config 0 descriptor??
[  305.581876][   T10] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  305.581968][   T10] gspca_stv06xx: st6422 sensor detected
[  305.706891][ T5846] Bluetooth: hci5: command tx timeout
[  305.843664][   T10] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71
[  305.854250][   T10] usb 2-1: USB disconnect, device number 8
[  306.220814][ T7844] chnl_net:caif_netlink_parms(): no params data found
[  310.664838][ T7952] loop6: detected capacity change from 0 to 2048
[  310.750914][ T7952] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  311.444272][ T7844] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.501510][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.524293][ T7844] bridge_slave_0: entered allmulticast mode
[  311.713891][ T7844] bridge_slave_0: entered promiscuous mode
[  313.345356][ T7844] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.902149][ T7969] loop6: detected capacity change from 0 to 512
[  314.181686][ T7844] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.246103][ T7844] bridge_slave_1: entered allmulticast mode
[  314.436572][ T7844] bridge_slave_1: entered promiscuous mode
[  314.694096][ T7969] EXT4-fs (loop6): 1 orphan inode deleted
[  314.709736][ T7705] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  314.737594][ T7705] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:14: Failed to release dquot type 1
[  314.751636][ T7969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.819418][ T7969] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  314.900159][ T7844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  314.950772][ T7969] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  314.968180][ T7844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  314.971202][ T7969] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.345607][ T7844] team0: Port device team_slave_0 added
[  315.366093][ T7844] team0: Port device team_slave_1 added
[  315.419071][   T30] audit: type=1800 audit(1746909929.249:107): pid=7989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.483" name="/" dev="9p" ino=2 res=0 errno=0
[  315.511852][   T30] audit: type=1326 audit(1746909929.289:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.6.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91b972ab39 code=0x7ffc0000
[  315.597408][   T30] audit: type=1326 audit(1746909929.289:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.6.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91b972ab39 code=0x7ffc0000
[  315.620249][ T5944] bridge_slave_1: left allmulticast mode
[  315.630886][ T5944] bridge_slave_1: left promiscuous mode
[  315.677359][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.752931][   T30] audit: type=1326 audit(1746909929.289:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.6.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91b972ab39 code=0x7ffc0000
[  315.780121][   T30] audit: type=1326 audit(1746909929.289:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.6.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91b972ab39 code=0x7ffc0000
[  315.803160][   T30] audit: type=1326 audit(1746909929.289:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.6.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91b972ab39 code=0x7ffc0000
[  315.843698][ T5944] bridge_slave_0: left allmulticast mode
[  315.865558][ T5944] bridge_slave_0: left promiscuous mode
[  315.952134][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.968859][   T30] audit: type=1326 audit(1746909929.289:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.6.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91b972ab39 code=0x7ffc0000
[  315.991907][   T30] audit: type=1326 audit(1746909929.289:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.6.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91b972ab39 code=0x7ffc0000
[  316.015988][   T30] audit: type=1326 audit(1746909929.289:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.6.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91b972ab39 code=0x7ffc0000
[  316.607948][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  316.616960][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  318.227452][ T5944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  318.411267][ T5944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  318.568812][ T8014] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  319.642527][ T5944] bond0 (unregistering): Released all slaves
[  321.404037][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  321.435247][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  321.438975][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  321.444126][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  321.446026][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  321.632061][ T5944] hsr_slave_0: left promiscuous mode
[  321.668097][ T5944] hsr_slave_1: left promiscuous mode
[  321.698075][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.731217][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_1
[  322.773680][ T5944] team0 (unregistering): Port device team_slave_1 removed
[  322.834200][ T5944] team0 (unregistering): Port device team_slave_0 removed
[  322.935200][ T8047] loop8: detected capacity change from 0 to 128
[  322.964689][ T8047] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  323.209632][ T7844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.219878][ T7844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.255197][ T7844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.268284][ T7844] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.275258][ T7844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.302729][ T7844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  323.330255][ T8035] veth1_macvtap: left promiscuous mode
[  323.336005][ T8035] macsec0: entered promiscuous mode
[  323.353461][ T8039] sch_tbf: burst 4398 is lower than device lo mtu (39799) !
[  323.569894][ T5846] Bluetooth: hci0: command tx timeout
[  324.039782][ T8049] FAT-fs (loop8): FAT read failed (blocknr 128)
[  325.627415][ T5846] Bluetooth: hci0: command tx timeout
[  325.849241][ T8066] netlink: 'syz.6.507': attribute type 10 has an invalid length.
[  326.041762][ T8066] team0: Device ipvlan1 failed to register rx_handler
[  326.147629][ T7844] hsr_slave_0: entered promiscuous mode
[  326.154431][ T7844] hsr_slave_1: entered promiscuous mode
[  326.179938][ T7844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  326.198850][ T7844] Cannot create hsr debugfs directory
[  327.710126][ T5846] Bluetooth: hci0: command tx timeout
[  329.786826][ T5846] Bluetooth: hci0: command tx timeout
[  330.063662][ T8120] loop8: detected capacity change from 0 to 512
[  330.120843][ T8120] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  330.201764][ T8120] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.223621][ T8120] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.378034][ T7018] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.488878][ T8030] chnl_net:caif_netlink_parms(): no params data found
[  331.463644][ T8137] No such timeout policy "syz1"
[  331.691733][ T5944] bridge_slave_1: left allmulticast mode
[  331.765601][ T5944] bridge_slave_1: left promiscuous mode
[  331.831605][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.014603][ T5944] bridge_slave_0: left allmulticast mode
[  332.047488][ T8148] loop4: detected capacity change from 0 to 128
[  332.065315][ T5944] bridge_slave_0: left promiscuous mode
[  332.112423][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.127830][ T8148] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  332.299236][ T8148] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  333.621647][   T30] kauditd_printk_skb: 349 callbacks suppressed
[  333.621668][   T30] audit: type=1326 audit(1746909947.439:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  333.806896][   T30] audit: type=1326 audit(1746909947.439:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  333.919979][   T30] audit: type=1326 audit(1746909947.439:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  334.005972][ T8159] loop1: detected capacity change from 0 to 128
[  334.012740][   T30] audit: type=1326 audit(1746909947.459:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  334.041586][ T8159] EXT4-fs: Ignoring removed nobh option
[  334.117871][ T8159] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  334.139789][   T30] audit: type=1326 audit(1746909947.459:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  334.169204][ T5833] Bluetooth: hci3: command 0x0406 tx timeout
[  334.258126][ T5944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.330816][   T30] audit: type=1326 audit(1746909947.509:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  334.499061][ T8159] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  334.802911][   T30] audit: type=1326 audit(1746909947.509:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  334.905591][   T30] audit: type=1326 audit(1746909947.509:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  335.014030][ T5944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  335.056897][   T30] audit: type=1326 audit(1746909947.509:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  335.087549][   T30] audit: type=1326 audit(1746909947.509:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  335.116046][ T5944] bond0 (unregistering): Released all slaves
[  336.722788][ T5822] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  337.611631][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.637373][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.666996][ T8030] bridge_slave_0: entered allmulticast mode
[  337.699284][ T8030] bridge_slave_0: entered promiscuous mode
[  338.796820][ T5944] hsr_slave_0: left promiscuous mode
[  338.840061][ T5944] hsr_slave_1: left promiscuous mode
[  338.854790][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.897686][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_1
[  339.363177][ T8205] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  339.563690][ T5944] team0 (unregistering): Port device team_slave_1 removed
[  339.658337][ T5944] team0 (unregistering): Port device team_slave_0 removed
[  340.942616][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.8.550'.
[  341.191110][    C1] vcan0: j1939_tp_rxtimer: 0xffff88803435fc00: rx timeout, send abort
[  341.242363][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.257034][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.264676][ T8030] bridge_slave_1: entered allmulticast mode
[  341.276952][ T8030] bridge_slave_1: entered promiscuous mode
[  341.327559][ T8204] : entered promiscuous mode
[  341.592372][ T8030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  341.939627][ T8030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.055861][ T8231] loop8: detected capacity change from 0 to 512
[  343.147179][ T8231] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  343.279093][ T8231] EXT4-fs (loop8): 1 truncate cleaned up
[  343.302688][ T8030] team0: Port device team_slave_0 added
[  343.338811][ T8231] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  343.375300][ T8030] team0: Port device team_slave_1 added
[  343.675977][ T7844] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  343.807044][ T7018] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.956589][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_0
[  344.006905][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  344.416760][ T8030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  344.439885][ T7844] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  344.470832][ T7844] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  345.263681][ T7844] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  345.363968][ T8258] loop1: detected capacity change from 0 to 512
[  345.446103][ T8258] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  345.453610][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_1
[  345.476473][ T8258] EXT4-fs (loop1): invalid journal inode
[  345.540959][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.556763][ T8258] EXT4-fs (loop1): can't get journal size
[  345.638785][ T8030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  345.681013][ T8258] EXT4-fs (loop1): 1 truncate cleaned up
[  345.690148][ T8258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  345.798483][ T8258] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  346.752711][ T8030] hsr_slave_0: entered promiscuous mode
[  346.775395][ T8030] hsr_slave_1: entered promiscuous mode
[  346.795331][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.825364][ T8030] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  346.860393][ T8030] Cannot create hsr debugfs directory
[  348.013018][ T8282] loop1: detected capacity change from 0 to 1024
[  348.038412][ T8282] EXT4-fs: Ignoring removed orlov option
[  348.239276][ T8282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.507160][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  348.507182][   T30] audit: type=1326 audit(1746909962.329:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5279d8e969 code=0x7ffc0000
[  349.259940][   T30] audit: type=1326 audit(1746909962.329:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5279d8e969 code=0x7ffc0000
[  349.282487][   T30] audit: type=1326 audit(1746909962.329:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5279d8e969 code=0x7ffc0000
[  349.308381][   T30] audit: type=1326 audit(1746909962.329:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5279d8e969 code=0x7ffc0000
[  349.336698][   T30] audit: type=1326 audit(1746909962.329:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5279d8e969 code=0x7ffc0000
[  349.377124][   T30] audit: type=1326 audit(1746909962.369:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5279d8e969 code=0x7ffc0000
[  349.506698][   T30] audit: type=1326 audit(1746909962.369:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5279d8e969 code=0x7ffc0000
[  349.619852][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.734043][   T30] audit: type=1326 audit(1746909962.369:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5279d8e969 code=0x7ffc0000
[  349.787460][   T30] audit: type=1326 audit(1746909962.369:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5279d8e969 code=0x7ffc0000
[  350.565124][   T30] audit: type=1326 audit(1746909962.379:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5279d8e969 code=0x7ffc0000
[  350.871995][ T8318] loop1: detected capacity change from 0 to 256
[  351.846901][ T8318] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  351.914400][ T7844] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.110937][ T7844] 8021q: adding VLAN 0 to HW filter on device team0
[  354.226994][ T5992] IPVS: starting estimator thread 0...
[  354.345008][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.352280][ T5991] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.448081][ T8335] IPVS: using max 27 ests per chain, 64800 per kthread
[  354.521296][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.528581][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  357.108804][ T8030] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  357.221415][ T8030] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  357.444144][ T8030] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  358.366796][ T8030] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  358.445749][ T8376] loop8: detected capacity change from 0 to 512
[  358.564431][ T8376] ext4: Unknown parameter 'seclabel'
[  358.981879][ T8387] netlink: 'syz.1.592': attribute type 4 has an invalid length.
[  359.040992][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  359.052703][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  359.061703][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  359.069916][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  359.077783][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  360.271887][ T8408] loop8: detected capacity change from 0 to 2048
[  360.305895][ T8408] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  360.367305][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  360.367327][   T30] audit: type=1800 audit(1746909974.189:508): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.599" name="file1" dev="loop8" ino=1415 res=0 errno=0
[  360.443578][   T30] audit: type=1800 audit(1746909974.229:509): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.599" name="file1" dev="loop8" ino=1415 res=0 errno=0
[  361.148335][ T5846] Bluetooth: hci2: command tx timeout
[  361.204425][ T8030] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.363647][ T8030] 8021q: adding VLAN 0 to HW filter on device team0
[  362.158223][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.165558][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.325899][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.333138][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.433960][ T8422] ip6gretap0: entered promiscuous mode
[  362.443061][ T8422] vlan2: entered promiscuous mode
[  362.875705][ T8439] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.227014][ T5846] Bluetooth: hci2: command tx timeout
[  363.350159][ T8451] loop8: detected capacity change from 0 to 1024
[  363.433244][ T8451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  363.995771][ T8462] netlink: 788 bytes leftover after parsing attributes in process `syz.1.610'.
[  364.082053][ T1025] bridge_slave_1: left allmulticast mode
[  364.117269][ T1025] bridge_slave_1: left promiscuous mode
[  364.149867][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.212532][ T1025] bridge_slave_0: left allmulticast mode
[  364.246789][ T1025] bridge_slave_0: left promiscuous mode
[  364.258527][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.917397][ T8482] netlink: 'syz.6.608': attribute type 16 has an invalid length.
[  364.925199][ T8482] netlink: 'syz.6.608': attribute type 17 has an invalid length.
[  365.306838][ T5846] Bluetooth: hci2: command tx timeout
[  366.334855][ T1025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  366.364830][ T1025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  366.384697][ T1025] bond0 (unregistering): Released all slaves
[  366.463567][ T8389] chnl_net:caif_netlink_parms(): no params data found
[  366.570366][ T8458] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.611813][ T8458] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.774663][ T8482] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.784240][ T8482] bridge0: port 1(bridge_slave_0) entered forwarding state
[  366.995422][ T8482] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.002718][ T8482] bridge0: port 2(bridge_slave_1) entered forwarding state
[  367.716948][ T5846] Bluetooth: hci2: command tx timeout
[  368.043826][ T1025] hsr_slave_0: left promiscuous mode
[  368.076567][ T1025] hsr_slave_1: left promiscuous mode
[  368.095339][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_0
[  368.154059][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_1
[  372.887141][ T5894] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  372.915123][ T1025] team0 (unregistering): Port device team_slave_1 removed
[  373.145869][ T5894] usb 9-1: Using ep0 maxpacket: 16
[  373.159634][ T5894] usb 9-1: config 0 has an invalid interface number: 96 but max is 0
[  373.179634][ T5894] usb 9-1: config 0 has no interface number 0
[  373.202845][ T1025] team0 (unregistering): Port device team_slave_0 removed
[  373.223156][ T5894] usb 9-1: config 0 interface 96 has no altsetting 0
[  373.390848][ T5894] usb 9-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=21.e3
[  373.400577][ T5894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.409451][ T5894] usb 9-1: Product: syz
[  373.414169][ T5894] usb 9-1: Manufacturer: syz
[  373.420637][ T5894] usb 9-1: SerialNumber: syz
[  373.484397][ T5894] usb 9-1: config 0 descriptor??
[  373.600755][ T5894] rtl8150 9-1:0.96: couldn't find required endpoints
[  373.611338][ T5894] rtl8150 9-1:0.96: probe with driver rtl8150 failed with error -5
[  375.241595][   T24] usb 9-1: USB disconnect, device number 2
[  378.207654][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  378.214187][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  378.389035][ T8598] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  379.076488][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.145240][ T8389] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.207242][ T8389] bridge_slave_0: entered allmulticast mode
[  379.255358][ T8389] bridge_slave_0: entered promiscuous mode
[  379.306364][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.338402][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.8.641'.
[  379.355770][ T8389] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.384273][ T8389] bridge_slave_1: entered allmulticast mode
[  379.497037][ T8389] bridge_slave_1: entered promiscuous mode
[  379.639994][ T8606] Zero length message leads to an empty skb
[  379.823270][ T8389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  379.893532][ T8389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  380.093637][ T8613] loop8: detected capacity change from 0 to 1764
[  382.317959][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  382.334671][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  382.347035][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  382.366055][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  382.376336][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  382.635216][ T8389] team0: Port device team_slave_0 added
[  382.821510][ T8389] team0: Port device team_slave_1 added
[  383.223754][ T8639] netlink: 116 bytes leftover after parsing attributes in process `syz.4.649'.
[  383.845034][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_0
[  384.427032][ T5846] Bluetooth: hci0: command tx timeout
[  384.750686][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  384.828957][ T8389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  384.908406][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_1
[  384.927881][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.020369][ T8389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.076742][ T5894] IPVS: starting estimator thread 0...
[  386.166869][ T8658] IPVS: using max 26 ests per chain, 62400 per kthread
[  386.519801][ T5846] Bluetooth: hci0: command tx timeout
[  389.381468][ T5846] Bluetooth: hci0: command tx timeout
[  391.556864][ T5846] Bluetooth: hci0: command tx timeout
[  391.864039][ T8389] hsr_slave_0: entered promiscuous mode
[  391.898968][ T8389] hsr_slave_1: entered promiscuous mode
[  391.916921][ T8389] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  392.876712][ T8389] Cannot create hsr debugfs directory
[  393.063433][   T30] audit: type=1326 audit(1746910006.889:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.8.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  393.173688][   T30] audit: type=1326 audit(1746910006.919:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.8.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  393.234218][   T30] audit: type=1326 audit(1746910006.919:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.8.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  393.604245][   T30] audit: type=1326 audit(1746910006.919:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.8.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  394.313280][   T30] audit: type=1326 audit(1746910006.919:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.8.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  394.385677][   T30] audit: type=1326 audit(1746910006.919:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.8.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  394.487494][   T30] audit: type=1326 audit(1746910006.919:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.8.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  394.616166][   T30] audit: type=1326 audit(1746910006.919:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.8.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  394.981700][   T30] audit: type=1326 audit(1746910006.919:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.8.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  395.005788][   T30] audit: type=1326 audit(1746910006.919:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.8.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  396.380285][ T5894] IPVS: starting estimator thread 0...
[  396.481214][ T8723] IPVS: using max 25 ests per chain, 60000 per kthread
[  397.401011][ T8738] loop1: detected capacity change from 0 to 512
[  397.537968][ T8728] delete_channel: no stack
[  398.268379][ T5986] bridge_slave_1: left allmulticast mode
[  398.303798][ T5986] bridge_slave_1: left promiscuous mode
[  398.337033][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.377606][ T5986] bridge_slave_0: left allmulticast mode
[  398.388031][ T5986] bridge_slave_0: left promiscuous mode
[  398.413731][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.943783][ T8762] overlayfs: failed to clone upperpath
[  400.737191][ T8774] xt_nfacct: accounting object `syz1' does not exists
[  403.485216][ T8790] loop8: detected capacity change from 0 to 512
[  403.620852][ T8790] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  403.641571][ T8790] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  403.664519][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  403.664543][   T30] audit: type=1800 audit(1746910017.489:541): pid=8790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.684" name="file2" dev="loop8" ino=16 res=0 errno=0
[  403.729736][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'.
[  403.936039][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'.
[  403.946501][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'.
[  403.995195][ T8790] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.007270][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'.
[  404.016091][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'.
[  405.955312][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  406.011788][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  406.063583][ T5986] bond0 (unregistering): Released all slaves
[  407.739538][ T5986] hsr_slave_0: left promiscuous mode
[  407.775691][ T5986] hsr_slave_1: left promiscuous mode
[  407.795399][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0
[  407.826182][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1
[  409.805652][ T8859] loop1: detected capacity change from 0 to 2048
[  409.902838][ T8859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  410.364780][ T8859] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.703: bg 0: block 234: padding at end of block bitmap is not set
[  410.381506][ T8859] EXT4-fs (loop1): Remounting filesystem read-only
[  410.729702][ T5986] team0 (unregistering): Port device team_slave_1 removed
[  412.781354][ T5986] team0 (unregistering): Port device team_slave_0 removed
[  413.909584][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.290110][ T8628] chnl_net:caif_netlink_parms(): no params data found
[  418.766815][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.8.711'.
[  422.174788][ T8933] loop1: detected capacity change from 0 to 512
[  422.201778][ T5194] udevd[5194]: worker [8889] terminated by signal 33 (Unknown signal 33)
[  422.210494][ T5194] udevd[5194]: worker [8889] failed while handling '/devices/virtual/block/loop1'
[  422.323017][ T8940] netlink: 24 bytes leftover after parsing attributes in process `syz.4.721'.
[  422.330137][ T8933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  422.398834][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  422.408661][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  422.418435][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  422.427270][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  422.434995][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  422.682181][ T8952] syz.6.722 uses obsolete (PF_INET,SOCK_PACKET)
[  422.722446][ T8628] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.741452][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.791578][ T8628] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.814194][ T8628] bridge_slave_0: entered allmulticast mode
[  422.890194][ T8628] bridge_slave_0: entered promiscuous mode
[  422.923381][ T8628] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.944748][ T8628] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.971850][ T8628] bridge_slave_1: entered allmulticast mode
[  423.016075][ T8628] bridge_slave_1: entered promiscuous mode
[  423.129891][ T8963] loop1: detected capacity change from 0 to 512
[  423.198207][ T8963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  423.239590][ T8963] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  423.370684][ T8628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  423.457858][ T8628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.264711][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.489633][ T8628] team0: Port device team_slave_0 added
[  424.515561][ T5833] Bluetooth: hci5: command tx timeout
[  424.561795][ T8628] team0: Port device team_slave_1 added
[  424.617977][   T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  424.810020][   T24] usb 9-1: Using ep0 maxpacket: 16
[  424.834846][   T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  424.869850][   T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  424.922750][   T24] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  424.965935][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.735671][   T24] usb 9-1: Product: syz
[  425.757515][   T24] usb 9-1: Manufacturer: syz
[  425.762230][   T24] usb 9-1: SerialNumber: syz
[  425.846325][ T8628] batman_adv: batadv0: Adding interface: batadv_slave_0
[  425.900142][ T8628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.006323][ T8628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  426.036978][   T24] usb 9-1: 0:2 : does not exist
[  426.060006][   T24] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  426.067983][ T8628] batman_adv: batadv0: Adding interface: batadv_slave_1
[  426.125157][ T8628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.170438][ T8628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  426.213816][ T6816] bridge_slave_1: left allmulticast mode
[  426.222585][ T6816] bridge_slave_1: left promiscuous mode
[  426.374249][   T24] usb 9-1: USB disconnect, device number 3
[  426.400766][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.429089][ T6816] bridge_slave_0: left allmulticast mode
[  426.564929][ T6816] bridge_slave_0: left promiscuous mode
[  426.601565][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.102128][ T5833] Bluetooth: hci5: command tx timeout
[  427.131542][ T8891] udevd[8891]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  427.258826][   T30] audit: type=1326 audit(1746910554.093:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9007 comm="syz.1.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5279d8e969 code=0x7fc00000
[  428.677308][ T6816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  428.807409][ T6816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  428.832502][ T9033] Bluetooth: MGMT ver 1.23
[  429.147003][ T5833] Bluetooth: hci5: command tx timeout
[  429.189738][ T6816] bond0 (unregistering): Released all slaves
[  430.672699][ T9046] overlayfs: failed to clone upperpath
[  431.443230][ T5833] Bluetooth: hci5: command tx timeout
[  433.410541][ T8628] hsr_slave_0: entered promiscuous mode
[  433.454524][ T8628] hsr_slave_1: entered promiscuous mode
[  433.491139][ T8628] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  433.516820][ T8628] Cannot create hsr debugfs directory
[  433.571174][ T9061] sp0: Synchronizing with TNC
[  433.655591][ T6816] hsr_slave_0: left promiscuous mode
[  433.671894][ T6816] hsr_slave_1: left promiscuous mode
[  433.694960][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_0
[  433.715078][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_1
[  434.717628][ T6816] team0 (unregistering): Port device team_slave_1 removed
[  434.791125][ T9086] Cache volume key already in use (9p,(null),)
[  434.853721][ T6816] team0 (unregistering): Port device team_slave_0 removed
[  437.043892][ T9110] bio_check_eod: 7 callbacks suppressed
[  437.043946][ T9110] syz.8.766: attempt to access beyond end of device
[  437.043946][ T9110] loop8: rw=0, sector=64, nr_sectors = 1 limit=0
[  437.066228][ T9110] syz.8.766: attempt to access beyond end of device
[  437.066228][ T9110] loop8: rw=0, sector=256, nr_sectors = 1 limit=0
[  437.080412][ T9110] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  437.093129][ T9110] syz.8.766: attempt to access beyond end of device
[  437.093129][ T9110] loop8: rw=0, sector=512, nr_sectors = 1 limit=0
[  437.107191][ T9110] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512
[  437.116938][ T9110] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  437.124679][ T9110] UDF-fs: Scanning with blocksize 512 failed
[  437.140021][ T9110] syz.8.766: attempt to access beyond end of device
[  437.140021][ T9110] loop8: rw=0, sector=64, nr_sectors = 2 limit=0
[  437.155746][ T9110] syz.8.766: attempt to access beyond end of device
[  437.155746][ T9110] loop8: rw=0, sector=512, nr_sectors = 2 limit=0
[  437.169724][ T9110] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  437.181320][ T9110] syz.8.766: attempt to access beyond end of device
[  437.181320][ T9110] loop8: rw=0, sector=1024, nr_sectors = 2 limit=0
[  437.195416][ T9110] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512
[  437.205283][ T9110] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  437.213049][ T9110] UDF-fs: Scanning with blocksize 1024 failed
[  437.225307][ T9110] syz.8.766: attempt to access beyond end of device
[  437.225307][ T9110] loop8: rw=0, sector=64, nr_sectors = 4 limit=0
[  437.240291][ T9110] syz.8.766: attempt to access beyond end of device
[  437.240291][ T9110] loop8: rw=0, sector=1024, nr_sectors = 4 limit=0
[  437.254155][ T9110] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  437.265457][ T9110] syz.8.766: attempt to access beyond end of device
[  437.265457][ T9110] loop8: rw=0, sector=2048, nr_sectors = 4 limit=0
[  437.279326][ T9110] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512
[  437.289629][ T9110] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  437.297727][ T9110] UDF-fs: Scanning with blocksize 2048 failed
[  437.309289][ T9110] syz.8.766: attempt to access beyond end of device
[  437.309289][ T9110] loop8: rw=0, sector=64, nr_sectors = 8 limit=0
[  437.324412][ T9110] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  437.335378][ T9110] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512
[  437.345133][ T9110] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  437.353084][ T9110] UDF-fs: Scanning with blocksize 4096 failed
[  437.359313][ T9110] UDF-fs: warning (device loop8): udf_fill_super: No partition found (1)
[  438.196893][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.770'.
[  439.471872][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  439.481315][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  439.685532][ T8941] chnl_net:caif_netlink_parms(): no params data found
[  441.920076][ T8941] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.931243][ T8941] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.953569][ T8941] bridge_slave_0: entered allmulticast mode
[  442.023166][ T8941] bridge_slave_0: entered promiscuous mode
[  442.066006][ T8941] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.073984][ T8941] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.084358][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  442.190566][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  442.205418][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  442.213838][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  442.221931][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  442.280938][ T8941] bridge_slave_1: entered allmulticast mode
[  442.487187][ T8941] bridge_slave_1: entered promiscuous mode
[  442.812115][ T1025] bridge_slave_1: left allmulticast mode
[  442.831534][ T1025] bridge_slave_1: left promiscuous mode
[  443.547136][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.662075][ T1025] bridge_slave_0: left allmulticast mode
[  443.668178][ T1025] bridge_slave_0: left promiscuous mode
[  443.677111][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.269065][ T5846] Bluetooth: hci0: command tx timeout
[  444.679483][ T9197] overlayfs: failed to clone upperpath
[  446.356739][ T5846] Bluetooth: hci0: command tx timeout
[  446.379175][ T1025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  446.517302][ T1025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  446.545684][ T1025] bond0 (unregistering): Released all slaves
[  447.645270][ T1025] hsr_slave_0: left promiscuous mode
[  447.689046][ T1025] hsr_slave_1: left promiscuous mode
[  447.843924][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_0
[  447.886331][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_1
[  448.726822][ T5846] Bluetooth: hci0: command tx timeout
[  450.488035][ T1025] team0 (unregistering): Port device team_slave_1 removed
[  450.624165][ T1025] team0 (unregistering): Port device team_slave_0 removed
[  450.761296][ T5833] Bluetooth: hci0: command tx timeout
[  452.250323][ T9269] xt_hashlimit: size too large, truncated to 1048576
[  453.554350][ T8941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.569049][ T8941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.715851][ T8941] team0: Port device team_slave_0 added
[  454.813745][ T8941] team0: Port device team_slave_1 added
[  458.775001][ T8941] batman_adv: batadv0: Adding interface: batadv_slave_0
[  458.820863][ T8941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  459.075808][ T8941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  460.491035][ T8941] batman_adv: batadv0: Adding interface: batadv_slave_1
[  460.545794][ T8941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  460.594000][ T8941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  461.508010][ T9332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.818'.
[  464.802518][ T8941] hsr_slave_0: entered promiscuous mode
[  464.847616][ T8941] hsr_slave_1: entered promiscuous mode
[  464.854063][ T8941] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  464.876984][ T8941] Cannot create hsr debugfs directory
[  465.238912][ T9370] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received
[  465.616389][ T9183] chnl_net:caif_netlink_parms(): no params data found
[  467.057800][ T9397] overlayfs: failed to clone upperpath
[  468.253912][ T8941] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  468.376205][ T8941] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  468.448839][ T9183] bridge0: port 1(bridge_slave_0) entered blocking state
[  468.456376][ T9183] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.465093][ T9183] bridge_slave_0: entered allmulticast mode
[  468.474924][ T9183] bridge_slave_0: entered promiscuous mode
[  468.493948][ T8941] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  468.543205][ T8941] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  468.647890][ T9183] bridge0: port 2(bridge_slave_1) entered blocking state
[  468.663057][ T9416] loop8: detected capacity change from 0 to 512
[  468.687350][ T9183] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.706920][ T9183] bridge_slave_1: entered allmulticast mode
[  468.714976][ T9183] bridge_slave_1: entered promiscuous mode
[  468.739599][ T9418] netlink: 32 bytes leftover after parsing attributes in process `syz.6.843'.
[  469.012530][ T9416] EXT4-fs error (device loop8): ext4_ext_check_inode:524: inode #4: comm syz.8.842: pblk 30 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  469.060561][ T9416] EXT4-fs error (device loop8): ext4_quota_enable:7129: comm syz.8.842: Bad quota inode: 4, type: 1
[  469.379281][ T9416] EXT4-fs warning (device loop8): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  469.720504][ T9416] EXT4-fs (loop8): mount failed
[  469.895509][ T9183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  469.963131][ T9183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  472.800619][ T9183] team0: Port device team_slave_0 added
[  472.830317][ T9183] team0: Port device team_slave_1 added
[  473.016473][ T9459] binder: 9458:9459 ioctl c0306201 0 returned -14
[  473.121452][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  473.137292][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  473.224702][ T9183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  473.334273][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  473.364804][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  473.447117][ T9183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  473.464605][ T9467] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  475.519898][ T9183] hsr_slave_0: entered promiscuous mode
[  475.532701][ T9183] hsr_slave_1: entered promiscuous mode
[  475.553684][ T9183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  475.592324][ T9183] Cannot create hsr debugfs directory
[  477.025349][ T8941] 8021q: adding VLAN 0 to HW filter on device bond0
[  478.190559][   T30] audit: type=1804 audit(1746910604.093:543): pid=9489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.863" name="file0" dev="tmpfs" ino=1364 res=1 errno=0
[  483.325042][ T9183] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  483.428397][ T9183] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  483.900907][ T9183] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  484.927206][ T9183] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  484.951813][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  484.981480][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  484.989800][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  484.998229][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  485.007887][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  486.511806][ T9559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  487.078852][ T5846] Bluetooth: hci2: command tx timeout
[  487.195671][ T9551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  487.301945][ T9569] overlayfs: failed to clone upperpath
[  487.728060][ T9183] 8021q: adding VLAN 0 to HW filter on device bond0
[  488.945844][ T9183] 8021q: adding VLAN 0 to HW filter on device team0
[  489.061586][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.068857][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  489.277044][ T5846] Bluetooth: hci2: command tx timeout
[  490.258913][ T9541] chnl_net:caif_netlink_parms(): no params data found
[  490.542566][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.549830][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  491.316915][ T5846] Bluetooth: hci2: command tx timeout
[  491.561882][ T1025] bridge_slave_1: left allmulticast mode
[  491.596806][ T1025] bridge_slave_1: left promiscuous mode
[  491.612641][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.628927][ T1025] bridge_slave_0: left allmulticast mode
[  492.656269][ T1025] bridge_slave_0: left promiscuous mode
[  492.686122][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.931303][ T9621] netlink: 'syz.6.904': attribute type 10 has an invalid length.
[  492.992761][ T9623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.902'.
[  493.175313][ T9625] fuse: Bad value for 'fd'
[  493.387024][ T5846] Bluetooth: hci2: command tx timeout
[  495.788005][ T9638] loop8: detected capacity change from 0 to 512
[  495.846630][ T9638] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  495.907409][ T9638] EXT4-fs (loop8): 1 truncate cleaned up
[  495.915742][ T9638] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  496.054888][ T9638] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  496.103685][ T9638] EXT4-fs (loop8): Remounting filesystem read-only
[  496.214557][ T7018] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  497.439510][ T1025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  497.449423][ T9649] loop8: detected capacity change from 0 to 2048
[  497.466376][ T1025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  497.494788][ T1025] bond0 (unregistering): Released all slaves
[  497.511182][ T9649] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  497.523685][ T9649] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  497.571283][ T9621] bridge0: port 3(team0) entered blocking state
[  497.571603][ T9649] futex_wake_op: syz.8.912 tries to shift op by 32; fix this program
[  497.584431][ T9621] bridge0: port 3(team0) entered disabled state
[  497.599956][ T9621] team0: entered allmulticast mode
[  497.613505][ T9621] team_slave_0: entered allmulticast mode
[  497.624847][ T9649] fs-verity: sha512 using implementation "sha512-avx2"
[  497.625764][   T30] audit: type=1800 audit(1746910624.453:544): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.912" name="file0" dev="loop8" ino=13 res=0 errno=0
[  497.662857][ T9621] team_slave_1: entered allmulticast mode
[  497.672262][ T9621] team0: entered promiscuous mode
[  497.697141][ T9621] team_slave_0: entered promiscuous mode
[  497.704477][ T9621] team_slave_1: entered promiscuous mode
[  497.846339][ T9621] bridge0: port 3(team0) entered blocking state
[  497.852857][ T9621] bridge0: port 3(team0) entered forwarding state
[  498.020745][ T9649] fs-verity (loop8, inode 13): Error -28 writing Merkle tree block 18
[  498.030041][ T9649] fs-verity (loop8, inode 13): Error -28 building Merkle tree
[  498.149681][ T7018] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.600786][ T1025] hsr_slave_0: left promiscuous mode
[  500.047454][ T1025] hsr_slave_1: left promiscuous mode
[  500.791405][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_0
[  501.017445][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  501.024211][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  501.087895][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_1
[  504.759328][ T9707] loop8: detected capacity change from 0 to 512
[  504.824908][ T9707] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  504.926061][ T9707] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  505.897122][ T9719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.930'.
[  505.913787][ T7018] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  506.392120][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  506.403997][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  506.415419][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  506.424304][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  506.438567][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  506.526223][ T1025] team0 (unregistering): Port device team_slave_1 removed
[  506.594503][ T1025] team0 (unregistering): Port device team_slave_0 removed
[  507.000923][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.039730][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.076917][ T9541] bridge_slave_0: entered allmulticast mode
[  507.085121][ T9541] bridge_slave_0: entered promiscuous mode
[  507.153232][ T9719] vlan2: entered promiscuous mode
[  507.214891][ T9719] syz_tun: entered promiscuous mode
[  507.416359][ T9541] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.433270][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.416055][ T9541] bridge_slave_1: entered allmulticast mode
[  508.439216][ T9541] bridge_slave_1: entered promiscuous mode
[  509.191092][ T5833] Bluetooth: hci5: command tx timeout
[  509.403934][   T30] audit: type=1326 audit(1746910636.233:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  509.517564][   T30] audit: type=1326 audit(1746910636.263:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  509.638518][   T30] audit: type=1326 audit(1746910636.293:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  510.111205][   T30] audit: type=1326 audit(1746910636.293:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  511.038090][ T5834] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  511.061051][ T9541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  511.080337][   T30] audit: type=1326 audit(1746910636.303:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  511.103848][   T30] audit: type=1326 audit(1746910636.303:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  511.127191][   T30] audit: type=1326 audit(1746910636.303:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  511.236878][ T5833] Bluetooth: hci5: command tx timeout
[  511.274313][   T30] audit: type=1326 audit(1746910636.303:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  511.297500][ T5834] usb 9-1: device descriptor read/64, error -71
[  511.405722][   T30] audit: type=1326 audit(1746910636.343:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  511.463132][   T30] audit: type=1326 audit(1746910636.373:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa398e969 code=0x7ffc0000
[  511.750195][ T9541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  512.419999][ T5834] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  512.657917][ T5834] usb 9-1: device descriptor read/64, error -71
[  512.961290][ T5834] usb usb9-port1: attempt power cycle
[  513.060274][ T9541] team0: Port device team_slave_0 added
[  513.751029][ T5846] Bluetooth: hci5: command tx timeout
[  513.768796][ T9541] team0: Port device team_slave_1 added
[  514.554712][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  514.554736][   T30] audit: type=1326 audit(1746910641.383:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.6.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  514.634106][   T30] audit: type=1326 audit(1746910641.433:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.6.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  514.693724][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_0
[  514.710400][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  514.756740][   T30] audit: type=1326 audit(1746910641.433:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.6.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  514.786239][ T9541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  514.824083][   T30] audit: type=1326 audit(1746910641.433:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.6.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  514.900373][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_1
[  514.939667][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  514.969171][   T30] audit: type=1326 audit(1746910641.433:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.6.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  515.196713][ T9541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  515.208336][   T30] audit: type=1326 audit(1746910641.443:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.6.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  515.304151][   T30] audit: type=1326 audit(1746910641.443:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.6.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  515.974948][   T30] audit: type=1326 audit(1746910641.443:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.6.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  516.068943][ T5846] Bluetooth: hci5: command tx timeout
[  516.124996][   T30] audit: type=1326 audit(1746910641.443:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.6.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  516.154490][   T30] audit: type=1326 audit(1746910641.443:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.6.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  516.509392][ T9541] hsr_slave_0: entered promiscuous mode
[  516.543050][ T9541] hsr_slave_1: entered promiscuous mode
[  517.337835][ T9541] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  517.345520][ T9541] Cannot create hsr debugfs directory
[  517.796526][ T9807] xt_TPROXY: Can be used only with -p tcp or -p udp
[  525.862612][ T9728] chnl_net:caif_netlink_parms(): no params data found
[  526.896106][ T9865] sch_tbf: burst 4398 is lower than device lo mtu (39799) !
[  527.239870][ T9875] overlayfs: failed to clone upperpath
[  530.657039][ T9728] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.664267][ T9728] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.715439][ T9728] bridge_slave_0: entered allmulticast mode
[  530.740354][ T9728] bridge_slave_0: entered promiscuous mode
[  530.778722][ T9728] bridge0: port 2(bridge_slave_1) entered blocking state
[  530.785945][ T9728] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.826211][ T9728] bridge_slave_1: entered allmulticast mode
[  530.834959][ T9728] bridge_slave_1: entered promiscuous mode
[  530.982091][ T1025] bridge_slave_1: left allmulticast mode
[  530.999029][ T1025] bridge_slave_1: left promiscuous mode
[  531.015989][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.079611][ T1025] bridge_slave_0: left allmulticast mode
[  531.101471][ T1025] bridge_slave_0: left promiscuous mode
[  531.163259][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.108943][ T9932] netlink: 28 bytes leftover after parsing attributes in process `syz.6.984'.
[  532.159131][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.984'.
[  533.624448][ T5846] Bluetooth: hci4: SCO packet for unknown connection handle 200
[  533.731832][ T1025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  533.754973][ T1025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  533.767585][ T1025] bond0 (unregistering): Released all slaves
[  533.819557][ T9728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  533.863031][ T9956] lo speed is unknown, defaulting to 1000
[  533.886211][ T9728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  533.953859][ T9956] lo speed is unknown, defaulting to 1000
[  534.004179][ T1025] hsr_slave_0: left promiscuous mode
[  534.014273][ T1025] hsr_slave_1: left promiscuous mode
[  534.025762][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_0
[  534.041244][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_1
[  534.966043][ T1025] team0 (unregistering): Port device team_slave_1 removed
[  535.113732][ T1025] team0 (unregistering): Port device team_slave_0 removed
[  535.786023][ T9956] lo speed is unknown, defaulting to 1000
[  535.795304][ T9728] team0: Port device team_slave_0 added
[  535.807050][ T9956] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  535.829732][ T9728] team0: Port device team_slave_1 added
[  535.885564][ T9956] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  536.142193][ T9956] lo speed is unknown, defaulting to 1000
[  536.157783][ T9728] batman_adv: batadv0: Adding interface: batadv_slave_0
[  536.179095][ T9728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.237836][ T9728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  536.319125][ T9728] batman_adv: batadv0: Adding interface: batadv_slave_1
[  536.326401][ T9728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.356830][ T9728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  536.657647][ T9956] lo speed is unknown, defaulting to 1000
[  536.961227][ T9956] lo speed is unknown, defaulting to 1000
[  536.969348][ T9956] lo speed is unknown, defaulting to 1000
[  536.977173][ T9956] lo speed is unknown, defaulting to 1000
[  537.775699][ T9956] lo speed is unknown, defaulting to 1000
[  537.784478][ T9728] hsr_slave_0: entered promiscuous mode
[  537.792122][ T9728] hsr_slave_1: entered promiscuous mode
[  538.025360][ T9728] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  538.033431][ T9728] Cannot create hsr debugfs directory
[  539.624949][   T30] kauditd_printk_skb: 25 callbacks suppressed
[  539.624973][   T30] audit: type=1326 audit(1746910666.453:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.6.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  539.781355][   T30] audit: type=1326 audit(1746910666.453:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.6.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  539.819191][   T30] audit: type=1326 audit(1746910666.453:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.6.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  539.886718][   T30] audit: type=1326 audit(1746910666.453:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.6.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  539.937403][   T30] audit: type=1326 audit(1746910666.453:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.6.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  539.978062][   T30] audit: type=1326 audit(1746910666.483:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.6.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  540.002271][   T30] audit: type=1326 audit(1746910666.483:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.6.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  540.031865][   T30] audit: type=1326 audit(1746910666.483:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.6.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  540.066977][   T30] audit: type=1326 audit(1746910666.483:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.6.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  540.117593][   T30] audit: type=1326 audit(1746910666.483:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.6.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978e969 code=0x7ffc0000
[  543.931740][ T9728] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  543.977653][ T9728] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  545.532634][ T9728] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  545.660746][ T9728] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  545.821292][T10073] loop8: detected capacity change from 0 to 128
[  545.872103][T10073] EXT4-fs (loop8): Test dummy encryption mode enabled
[  545.911201][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  545.925266][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  545.936214][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  545.951972][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  545.962517][T10073] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  545.962730][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  546.063833][T10073] ext4 filesystem being mounted at /166/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  546.250689][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1025'.
[  546.337530][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1025'.
[  547.232269][ T7018] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  547.360024][T10074] lo speed is unknown, defaulting to 1000
[  548.356766][ T5833] Bluetooth: hci0: command tx timeout
[  549.296951][ T5892] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  549.422879][T10107] loop8: detected capacity change from 0 to 1024
[  549.490579][T10107] ext2: Bad value for 'commit'
[  549.554992][ T5892] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  550.432077][ T5833] Bluetooth: hci0: command tx timeout
[  550.452352][ T9728] 8021q: adding VLAN 0 to HW filter on device bond0
[  550.524464][T10120] netlink: 'syz.4.1034': attribute type 15 has an invalid length.
[  550.626461][T10116] fido_id[10116]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  551.259959][   T30] kauditd_printk_skb: 46 callbacks suppressed
[  551.260010][   T30] audit: type=1326 audit(1746910677.813:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5279d8e969 code=0x7ffc0000
[  551.906682][   T30] audit: type=1326 audit(1746910677.813:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5279d8e969 code=0x7ffc0000
[  551.929785][   T30] audit: type=1326 audit(1746910677.813:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5279d8e969 code=0x7ffc0000
[  551.992435][   T30] audit: type=1326 audit(1746910677.813:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5279d8e969 code=0x7ffc0000
[  552.072627][   T30] audit: type=1326 audit(1746910677.823:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5279d8e969 code=0x7ffc0000
[  552.277390][   T30] audit: type=1326 audit(1746910677.823:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5279d8e969 code=0x7ffc0000
[  552.323489][T10136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  552.442170][T10136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  552.564949][ T5833] Bluetooth: hci0: command tx timeout
[  552.573520][   T30] audit: type=1326 audit(1746910677.823:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5279d8e969 code=0x7ffc0000
[  552.597017][   T30] audit: type=1326 audit(1746910677.823:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5279d8e969 code=0x7ffc0000
[  552.619950][   T30] audit: type=1326 audit(1746910677.833:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f5279d8e969 code=0x7ffc0000
[  552.644285][   T30] audit: type=1326 audit(1746910677.833:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  553.398892][T10142] TCP: out of memory -- consider tuning tcp_mem
[  553.550736][ T9728] 8021q: adding VLAN 0 to HW filter on device team0
[  553.592623][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  553.599922][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  553.657411][ T6001] bridge_slave_1: left allmulticast mode
[  553.663202][ T6001] bridge_slave_1: left promiscuous mode
[  553.679397][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.740058][ T6001] bridge_slave_0: left allmulticast mode
[  553.749095][ T6001] bridge_slave_0: left promiscuous mode
[  553.759415][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.705123][ T5833] Bluetooth: hci0: command tx timeout
[  555.907996][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  555.993880][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  556.032703][ T6001] bond0 (unregistering): Released all slaves
[  556.092995][T10074] chnl_net:caif_netlink_parms(): no params data found
[  556.140146][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.147479][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  556.317213][ T6001] hsr_slave_0: left promiscuous mode
[  556.374667][ T6001] hsr_slave_1: left promiscuous mode
[  556.399595][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0
[  556.457103][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1
[  556.708310][T10180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  556.838506][T10180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  558.732676][ T6001] team0 (unregistering): Port device team_slave_1 removed
[  558.921183][ T6001] team0 (unregistering): Port device team_slave_0 removed
[  560.176173][T10221] loop8: detected capacity change from 0 to 64
[  561.001191][T10221] 
[  561.003587][T10221] ======================================================
[  561.010734][T10221] WARNING: possible circular locking dependency detected
[  561.017766][T10221] 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 Not tainted
[  561.024918][T10221] ------------------------------------------------------
[  561.031943][T10221] syz.8.1059/10221 is trying to acquire lock:
[  561.038014][T10221] ffff888063c020b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x165/0x1e0
[  561.047659][T10221] 
[  561.047659][T10221] but task is already holding lock:
[  561.055024][T10221] ffff888057d100f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x1230
[  561.065871][T10221] 
[  561.065871][T10221] which lock already depends on the new lock.
[  561.065871][T10221] 
[  561.076362][T10221] 
[  561.076362][T10221] the existing dependency chain (in reverse order) is:
[  561.085384][T10221] 
[  561.085384][T10221] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}:
[  561.094708][T10221]        lock_acquire+0x120/0x360
[  561.099768][T10221]        __mutex_lock+0x182/0xe80
[  561.104898][T10221]        hfs_extend_file+0xda/0x1230
[  561.110206][T10221]        hfs_bmap_reserve+0x107/0x430
[  561.115641][T10221]        __hfs_ext_write_extent+0x1fa/0x470
[  561.121541][T10221]        __hfs_ext_cache_extent+0x6b/0x9b0
[  561.127355][T10221]        hfs_extend_file+0x316/0x1230
[  561.132729][T10221]        hfs_get_block+0x3d7/0xbd0
[  561.137837][T10221]        __block_write_begin_int+0x6b5/0x1900
[  561.143916][T10221]        cont_write_begin+0x789/0xb50
[  561.149304][T10221]        hfs_write_begin+0x66/0xb0
[  561.154416][T10221]        generic_perform_write+0x2c7/0x910
[  561.160230][T10221]        generic_file_write_iter+0x10f/0x540
[  561.166223][T10221]        vfs_write+0x54b/0xa90
[  561.170992][T10221]        ksys_write+0x145/0x250
[  561.175858][T10221]        do_syscall_64+0xf6/0x210
[  561.180897][T10221]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.187317][T10221] 
[  561.187317][T10221] -> #0 (&tree->tree_lock/1){+.+.}-{4:4}:
[  561.195377][T10221]        validate_chain+0xb9b/0x2140
[  561.200674][T10221]        __lock_acquire+0xaac/0xd20
[  561.205899][T10221]        lock_acquire+0x120/0x360
[  561.210945][T10221]        __mutex_lock+0x182/0xe80
[  561.215994][T10221]        hfs_find_init+0x165/0x1e0
[  561.221348][T10221]        hfs_extend_file+0x2ee/0x1230
[  561.226724][T10221]        hfs_bmap_reserve+0x107/0x430
[  561.232230][T10221]        hfs_cat_create+0x1b3/0x640
[  561.237441][T10221]        hfs_create+0x66/0xe0
[  561.242122][T10221]        path_openat+0x14f4/0x3830
[  561.247239][T10221]        do_filp_open+0x1fa/0x410
[  561.252282][T10221]        do_sys_openat2+0x121/0x1c0
[  561.257491][T10221]        __x64_sys_openat+0x138/0x170
[  561.262877][T10221]        do_syscall_64+0xf6/0x210
[  561.267904][T10221]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.274317][T10221] 
[  561.274317][T10221] other info that might help us debug this:
[  561.274317][T10221] 
[  561.284539][T10221]  Possible unsafe locking scenario:
[  561.284539][T10221] 
[  561.292009][T10221]        CPU0                    CPU1
[  561.297368][T10221]        ----                    ----
[  561.302719][T10221]   lock(&HFS_I(tree->inode)->extents_lock);
[  561.308707][T10221]                                lock(&tree->tree_lock/1);
[  561.315919][T10221]                                lock(&HFS_I(tree->inode)->extents_lock);
[  561.324511][T10221]   lock(&tree->tree_lock/1);
[  561.329230][T10221] 
[  561.329230][T10221]  *** DEADLOCK ***
[  561.329230][T10221] 
[  561.337365][T10221] 4 locks held by syz.8.1059/10221:
[  561.342558][T10221]  #0: ffff888051b0c420 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  561.351846][T10221]  #1: ffff888057d11620 (&type->i_mutex_dir_key#9){+.+.}-{4:4}, at: path_openat+0x8da/0x3830
[  561.362090][T10221]  #2: ffff888063c040b0 (&tree->tree_lock){+.+.}-{4:4}, at: hfs_find_init+0x165/0x1e0
[  561.371739][T10221]  #3: ffff888057d100f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x1230
[  561.383038][T10221] 
[  561.383038][T10221] stack backtrace:
[  561.388931][T10221] CPU: 1 UID: 0 PID: 10221 Comm: syz.8.1059 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(full) 
[  561.388959][T10221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  561.388974][T10221] Call Trace:
[  561.388986][T10221]  <TASK>
[  561.388998][T10221]  dump_stack_lvl+0x189/0x250
[  561.389039][T10221]  ? __pfx_dump_stack_lvl+0x10/0x10
[  561.389076][T10221]  ? __pfx__printk+0x10/0x10
[  561.389101][T10221]  ? print_lock_name+0xde/0x100
[  561.389140][T10221]  print_circular_bug+0x2ee/0x310
[  561.389166][T10221]  check_noncircular+0x134/0x160
[  561.389192][T10221]  validate_chain+0xb9b/0x2140
[  561.389213][T10221]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  561.389243][T10221]  ? srso_alias_return_thunk+0x5/0xfbef5
[  561.389270][T10221]  ? look_up_lock_class+0x74/0x170
[  561.389298][T10221]  ? srso_alias_return_thunk+0x5/0xfbef5
[  561.389324][T10221]  ? register_lock_class+0x51/0x320
[  561.389353][T10221]  ? srso_alias_return_thunk+0x5/0xfbef5
[  561.389383][T10221]  __lock_acquire+0xaac/0xd20
[  561.389417][T10221]  ? hfs_find_init+0x165/0x1e0
[  561.389446][T10221]  lock_acquire+0x120/0x360
[  561.389476][T10221]  ? hfs_find_init+0x165/0x1e0
[  561.389513][T10221]  __mutex_lock+0x182/0xe80
[  561.389539][T10221]  ? hfs_find_init+0x165/0x1e0
[  561.389574][T10221]  ? hfs_find_init+0x165/0x1e0
[  561.389605][T10221]  ? __pfx___mutex_lock+0x10/0x10
[  561.389637][T10221]  ? srso_alias_return_thunk+0x5/0xfbef5
[  561.389672][T10221]  ? rcu_is_watching+0x15/0xb0
[  561.389708][T10221]  ? srso_alias_return_thunk+0x5/0xfbef5
[  561.389734][T10221]  ? __kmalloc_noprof+0x29b/0x4f0
[  561.389762][T10221]  ? hfs_find_init+0x8b/0x1e0
[  561.389793][T10221]  hfs_find_init+0x165/0x1e0
[  561.389824][T10221]  hfs_extend_file+0x2ee/0x1230
[  561.389846][T10221]  ? __pfx___mutex_trylock_common+0x10/0x10
[  561.389874][T10221]  ? __pfx_hfs_extend_file+0x10/0x10
[  561.389894][T10221]  ? trace_contention_end+0x39/0x120
[  561.389916][T10221]  ? srso_alias_return_thunk+0x5/0xfbef5
[  561.389942][T10221]  ? __mutex_lock+0x330/0xe80
[  561.389975][T10221]  ? hfs_find_init+0x165/0x1e0
[  561.390005][T10221]  ? __pfx___mutex_lock+0x10/0x10
[  561.390038][T10221]  hfs_bmap_reserve+0x107/0x430
[  561.390081][T10221]  hfs_cat_create+0x1b3/0x640
[  561.390118][T10221]  ? do_raw_spin_lock+0x121/0x290
[  561.390143][T10221]  ? __pfx_hfs_cat_create+0x10/0x10
[  561.390189][T10221]  ? srso_alias_return_thunk+0x5/0xfbef5
[  561.390215][T10221]  ? _raw_spin_unlock+0x28/0x50
[  561.390235][T10221]  ? srso_alias_return_thunk+0x5/0xfbef5
[  561.390260][T10221]  ? hfs_new_inode+0x7c9/0xba0
[  561.390289][T10221]  hfs_create+0x66/0xe0
[  561.390308][T10221]  ? __pfx_hfs_create+0x10/0x10
[  561.390328][T10221]  path_openat+0x14f4/0x3830
[  561.390349][T10221]  ? arch_stack_walk+0xfc/0x150
[  561.390399][T10221]  ? __pfx_path_openat+0x10/0x10
[  561.390419][T10221]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.390453][T10221]  do_filp_open+0x1fa/0x410
[  561.390476][T10221]  ? __pfx_do_filp_open+0x10/0x10
[  561.390510][T10221]  ? _raw_spin_unlock+0x28/0x50
[  561.390530][T10221]  ? srso_alias_return_thunk+0x5/0xfbef5
[  561.390555][T10221]  ? alloc_fd+0x64c/0x6c0
[  561.390590][T10221]  do_sys_openat2+0x121/0x1c0
[  561.390626][T10221]  ? __pfx_do_sys_openat2+0x10/0x10
[  561.390668][T10221]  ? rcu_is_watching+0x15/0xb0
[  561.390706][T10221]  __x64_sys_openat+0x138/0x170
[  561.390744][T10221]  do_syscall_64+0xf6/0x210
[  561.390773][T10221]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  561.390798][T10221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.390820][T10221] RIP: 0033:0x7f2fa398e969
[  561.390840][T10221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  561.390860][T10221] RSP: 002b:00007f2fa4816038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  561.390882][T10221] RAX: ffffffffffffffda RBX: 00007f2fa3bb5fa0 RCX: 00007f2fa398e969
[  561.390899][T10221] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c
[  561.390915][T10221] RBP: 00007f2fa3a10ab1 R08: 0000000000000000 R09: 0000000000000000
[  561.390930][T10221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  561.390944][T10221] R13: 0000000000000000 R14: 00007f2fa3bb5fa0 R15: 00007ffd9f6d7ab8
[  561.390969][T10221]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  562.387554][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  562.394031][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  563.691806][ T6001] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  563.767534][ T6001] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  563.852897][ T6001] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  563.912938][ T6001] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.221748][ T6001] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.263949][ T6001] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.312151][ T6001] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.392685][ T6001] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.555784][ T6001] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.614387][ T6001] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.662712][ T6001] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.702121][ T6001] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.803727][ T6001] bridge_slave_1: left allmulticast mode
[  564.809867][ T6001] bridge_slave_1: left promiscuous mode
[  564.815609][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.831624][ T6001] bridge_slave_0: left allmulticast mode
[  564.837967][ T6001] bridge_slave_0: left promiscuous mode
[  564.843664][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.857570][ T6001] bridge_slave_1: left allmulticast mode
[  564.863235][ T6001] bridge_slave_1: left promiscuous mode
[  564.871030][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.880893][ T6001] bridge_slave_0: left allmulticast mode
[  564.888698][ T6001] bridge_slave_0: left promiscuous mode
[  564.894398][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.905645][ T6001] team0: left allmulticast mode
[  564.916234][ T6001] team_slave_0: left allmulticast mode
[  564.923812][ T6001] team_slave_1: left allmulticast mode
[  564.931336][ T6001] team0: left promiscuous mode
[  564.936201][ T6001] team_slave_0: left promiscuous mode
[  564.944428][ T6001] team_slave_1: left promiscuous mode
[  564.953214][ T6001] bridge0: port 3(team0) entered disabled state
[  564.961594][ T6001] bridge_slave_1: left allmulticast mode
[  564.969212][ T6001] bridge_slave_1: left promiscuous mode
[  564.974911][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.984860][ T6001] bridge_slave_0: left allmulticast mode
[  564.993406][ T6001] bridge_slave_0: left promiscuous mode
[  565.000573][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.012524][ T6001] bridge_slave_1: left allmulticast mode
[  565.018849][ T6001] bridge_slave_1: left promiscuous mode
[  565.025024][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.037074][ T6001] bridge_slave_0: left allmulticast mode
[  565.042805][ T6001] bridge_slave_0: left promiscuous mode
[  565.053845][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.742926][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  565.753074][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  565.762951][ T6001] bond0 (unregistering): Released all slaves
[  565.773061][ T6001] bond0 (unregistering): Released all slaves
[  565.786195][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  565.796795][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  565.808769][ T6001] bond0 (unregistering): Released all slaves
[  565.822942][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  565.834832][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  565.848061][ T6001] bond0 (unregistering): Released all slaves
[  565.861726][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  565.872050][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  565.882222][ T6001] bond0 (unregistering): Released all slaves
[  566.010656][ T6001] : left promiscuous mode
[  566.442027][ T6001] hsr_slave_0: left promiscuous mode
[  566.450299][ T6001] hsr_slave_1: left promiscuous mode
[  566.456103][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  566.469385][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0
[  566.477756][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  566.485181][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1
[  566.502764][ T6001] hsr_slave_0: left promiscuous mode
[  566.509007][ T6001] hsr_slave_1: left promiscuous mode
[  566.515110][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0
[  566.523103][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1
[  566.534322][ T6001] hsr_slave_0: left promiscuous mode
[  566.540488][ T6001] hsr_slave_1: left promiscuous mode
[  566.546378][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  566.554347][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0
[  566.565132][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  566.572839][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1
[  566.585272][ T6001] hsr_slave_0: left promiscuous mode
[  566.591475][ T6001] hsr_slave_1: left promiscuous mode
[  566.599969][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  566.607876][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0
[  566.619099][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  566.626941][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1
[  566.645412][ T6001] veth1_macvtap: left promiscuous mode
[  566.651084][ T6001] veth0_macvtap: left promiscuous mode
[  566.657166][ T6001] veth1_vlan: left promiscuous mode
[  566.662549][ T6001] veth0_vlan: left promiscuous mode
[  566.669199][ T6001] veth0_macvtap: left promiscuous mode
[  566.674791][ T6001] veth1_vlan: left promiscuous mode
[  566.680709][ T6001] veth0_vlan: left promiscuous mode
[  566.692021][ T6001] veth1_vlan: left promiscuous mode
[  566.697685][ T6001] veth0_vlan: left promiscuous mode
[  567.010031][ T6001] team0 (unregistering): Port device team_slave_1 removed
[  567.026663][ T6001] team0 (unregistering): Port device team_slave_0 removed
[  567.304084][ T6001] team0 (unregistering): Port device team_slave_1 removed
[  567.334493][ T6001] team0 (unregistering): Port device team_slave_0 removed
[  567.563645][ T6001] team0 (unregistering): Port device team_slave_1 removed
[  567.597609][ T6001] team0 (unregistering): Port device team_slave_0 removed
[  567.795130][ T6001] team0 (unregistering): Port device team_slave_1 removed
[  567.835646][ T6001] team0 (unregistering): Port device team_slave_0 removed
[  568.761253][ T6001] IPVS: stop unused estimator thread 0...
[  568.771732][ T6001] IPVS: stop unused estimator thread 0...
[  568.779418][ T6001] IPVS: stop unused estimator thread 0...