last executing test programs:

21.257282081s ago: executing program 2 (id=2107):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x757, 0x0, 0x0, 0xfffffffffffffce1, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
unshare(0x0)
unshare(0x8040080)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x3e}]})
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd00"], 0x70}}, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x5a001, 0x109)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xfffc}, {0x2, 0x0, @rand_addr=0x64010100}, {0x2, 0x0, @remote}})
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0)
open(0x0, 0x0, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2021, 0x0)
unshare(0x6a040000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)

16.907195711s ago: executing program 2 (id=2114):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f00000019c0)}], 0x1, 0x0, 0x0, 0x1ffff000}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, 0x0}}], 0x2, 0x0)

16.613624826s ago: executing program 2 (id=2116):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000500), 0x4)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f00000019c0)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "544e6b24af869c8bcb343306faffffffff155fadb01fcc19dccce863bc600e4d"}, 0x3c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket(0x22, 0x2, 0x3)
close(r5)
socket$xdp(0x2c, 0x3, 0x0)
unshare(0x6020400)
setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4}, 0x57)
ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x0, 0x7, 0x2a44})
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r6, 0x0, 0x12, 0x0, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\b\x00\x00', @ANYRES16, @ANYBLOB="05010000000000000000020000002800018008000700", @ANYRES32=0x0, @ANYBLOB="080006000000000014000400fe80"], 0x3c}}, 0x0)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r8, &(0x7f0000000140)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000054a03397b856c6de5752b1585cb3fd0cb79965fb879492c0efae4c94b296183b3bb93c6000e483246be1ba64293366776822010921ab6c28da0f51a052c2fbbc5bc68445fd663e0967a9a206b7a4b0df6e55384027bf0ac70d1274efc6d7c6e840830ec47dd85f3523050061ee", @ANYRES16, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x2000)
sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)

15.04138189s ago: executing program 2 (id=2122):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000001c0)={@dev, @broadcast, @val={@val, {0x8906}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "c4de57", 0x8, 0x6, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], {0x0, 0x0, 0x8}}}}}}, 0x0)
r0 = openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.swap.events\x00', 0x275a, 0x0)
socket(0x15, 0x5, 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x20)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000040), 0x4)
syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r2=>0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1})
io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x8000, @local}, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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")
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0xa08800, &(0x7f0000000140)=ANY=[], 0x1, 0x680, &(0x7f0000000440)="$eJzs3c1rHOcdB/DvrFay5IKjJLaTlkBFDGmpqS1ZKK16idtD0SGU4B5CoRdhy7HwWgmSUpRQWvX92kP+gPSgQ6GXFno3pNBT21voTfRQAoVectLNZWZnpZX1kl1Z0lrN5yNm55l55nmZ38w8sy+ICfC5NXc1zYcpMnf19bVyeXNjurW5MX2uzm4lKdONpNmepVhKio+Sm2lP+WK5st6+OKidDxZnb3386eYn7aVmPVXbNw4r15v1espEkqF6vtfwkeq7fWB9h5vfThXbe1gG7EoncDBoj/ZY76f4E163wNOgaN839xhPzicZrd8HpB4dGqfbu+PX1ygHAAAAZ9QzW9nKWi4Muh8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwltTP/y/qqdFJT6ToPP9/pF6XOn2rMeA+P4mHg+4AAAAAAAAAAByDL29lK2u5kPrH/UftX/Zfrl4vVq9fyLtZyUKWcy1rmc9qVrOcqSTjXRWNrM2vri5P9VDyxr4lbxyt/388WjEAAAAAAAAA+H/z88y1f/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICnRZEMtWfVdLGTHk+jmWQ0yUi53XryjyTNQfe3D8V+Kx+efj8AAADgiYweocwzW9nKWi50lh8V1Wf+y9Xn5dG8m6WsZjGraWUhd+rP0CNJGpsb063NjekHmxvTVcM/fNTWrufb/+2rG1WNaX/3sH/LL1ZbjOVuFqs113K76sydNKqSpRfr/mxPuxv5WdmnsddqPfbsTj0vG/vtQd8iHIdGvwXGq0LD2xGZrPtWVvTs4ZH4zKPTPLSlqTTa3wIluXhIS51dKvqM+flOuSS/fizmr/379z/osZoTsB2JRqpI3Og6+y4fHvPkK3/+w5v3Wkv3791duXpip9FpefycmO6KxAtnOhL9fqc5WUXi0vbyXL6b7+dqJvJGlrOYH2U+q1lIPTJmvj6fy9fxrigleyJ1c9fSG5/Vk5H6uLRH0V76NJFzVWo+L1dlL2QxRd7OnSzk1ervRqbyjcxkJrNdR/jSgUe42rdqpG30d9Vf+Wp2LvXflCN1b+WSv/a6Yf/at9Qyrs92xbV7zB2v8rrX7ETpuR7uR32Ojc0v1YmyjV8c5bZxYh6PxFRXJJ4/PBK/q66NldbS/eV78+8cUP/6Y8uvDO+kf3WSd+a+lefLcxmtR5LdZ0eZ9/z2KLM7XiP1Ly7tvMaevEtVXlF0rtTv7XOllhGfrba+vG9NN6q8F/bmDdU9/+e/uvJ2vd/K238bTDwB6NP5r50fGfvP2N/HPhz75di9sddHv3Pum+deGsnwX4a/1ZwceqXxUvGnfJif7Hz+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjm7lvffvz7daC8v7JxoHZx1voqgf5HPQNs2M5RS6cZqJIlk/9poz+P3qIdF5iOCT1vPmzadid850YihJveanyc75Ux+iozxcFDgTrq8+eOf6ynvvf33xwfxbC28tLA3PzMxOzs68On397mJrYbL9OuheAidh5/3AoHsCAAAAAAAAAAAA9Oo0/tOgq7mJAe4qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEbNXU1zOEWmJq9NlsubG9Otcuqkd7ZsJmk0kuLHSfFRcjPtKeNd1RUHtfPB4uytjz/d/GSnrmZn+8Zh5XqzXk+ZSDJUz/cYOVp9tw+qr2fF9h6WAbvSCRwM2v8CAAD//wCqBs0=")
r5 = open(&(0x7f0000000800)='./file1\x00', 0x185102, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r6, &(0x7f0000000280), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000240))

12.416744824s ago: executing program 2 (id=2130):
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}}, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080), 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000001740)="cb", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="b7b03bb5f3ef9ebcbe95912a12dd8428e18a6f34c90f843525ceb8c72f276ebe8adca3b04418962d584ad5c64463194127bcf99bb92eb95169dd7b8a79442421597d9432cb0339034187d29514a9f9ed763c22d0c9d8557f1dea7f5c51fd3e9aeba0a25e98efe738cd92b9eb73a10a20ed", 0x71, 0x44084, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)="49bbe4121f35be052595bd4892ad64d5c5d7f7a0c4527f09933c2e0d24eedb4089682bc3ea3a3a7ab2287b19ddcf0a00af4a5e8aceb906108d7808583160bbb357cfb3082802cbdcb5ebe6510c2702cb810cff8832a329248be6b6cbcef4ada8b9ce53db70062896046d3dca0b0079f6fc5be3df6a471d1d31f4f2a9cfd5e780454efac19884ccf5551961a5f3deef651b180cc6c25930ebc384ec6b78b262ed9f33c3aeba5e912c1e058bf02a32baf147db03cab8", 0xb5}], 0x1}}], 0x1, 0x4008095)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x20000)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, '\x00', '\x00', '\x00', 0x7, 0x0, 0x2, 0x0, "b50c091f3906586d529cbd5c6fd78a7b"})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000000", @ANYBLOB="04000d800800"], 0x24}, 0x1, 0x5502000000000000}, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/176, 0xb0}], 0x8, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xffffff13, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}]}}]}, 0x98}}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111, 0x3}}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

10.865652075s ago: executing program 0 (id=2132):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000200)='./file0\x00', 0x811, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES64], 0x4, 0x666, &(0x7f0000000540)="$eJzs3U9sHFcdB/DvrNd2bKTEtEkbUKVajVQQEYkdywVzgIAQyqFCVThwthKnsbJxK9tFboXA/Bc3DuVeDr5xAnGPVM5w69XiVITEpSeLQxfNeHa9jtf/asd20s8nmn3vzZt5895v38zujBVtgM+tW1fTfJSfd8vra1Ot9bWp4brYSlLmG0mzXlUsJMWHyc1sLvlSubJTudtx3p+fuf3RJ+sfb5aa9VJt39hrv4NZrZeMJxmo050GP1N7d3Zt78CKzgjLgF05+njheLR3WN1W/8fy5eVddzeP4RlQbH5u7jCWjNYXgOo7QX11aJxo556A1dPuAAAAAJyACxvZyErOn3Y/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cm0mqSof9+/TIvxFKNJziUZqtelzj/VHhWn3QMAAAAAAAAAOJDmXpUvb2QjKznfKbeL6m/+r5TZdrtdrvpC3slS5rKYa1nJbJaznMVMJhnraWhoZXZ5eXGy2jO5mF33/LTdd88bxz1sAAAAAAAAAHjGfXtb6Ze5tfX3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAuKZGAzqZaLnfxYGs0k55IMldutJv/s5M+Ixp617Qt9Vz96Qp0BAACAs+TCRjaykvNVYSRpF9U9/wvVff+5vJOFLGc+y2llLnerZwGbd/2N9bWp1vra1MNy2dnud/97qG4M1ffvA1Wp35EvV1uM5F7mqzXXcidvpZW7aXTv/C93+tO/X78o+1R8p3bAnt2t03Lkf6jTHW5/eqjRHo+xKiKD3YhMdB7elPaOxCHfncePNJlG98nPxf5Hatf2i/lgv+ON1mkZ69/2xHxb7HsfPf3rUMM5gscjcaNn9r3QicBwle7c+St/+/OP77cWHty/t3S17zR6mowNbo/EVE8kXuzOhyJZ7XN9eKYiMVHNiUvd8q38ID/K1YznjSxmPj/JbJYzl/F8v8rN1vO42P3s6bi5rfTGPo84q1NirHsVPVyfXqn2PZ/5/DBv5W7m8lr170Ym841MZzozPe/wpQNcaRuHu9Je+WqdGUnyuzo9G8q4frEnrr3X3LGqrnfNVpSe2z9KrzcPF6Xml+tMeYxf7fvU+yQ9HonJnkg8v3ck/tQuX5daCw8W78++fcDjvVqn5Xn0m90+mffUPPQeB1POl+e67W+fHWXd833rJqu6i926xo66S926/c7Uofo73M6WblR1L/atm6rqLvfU9fu+dRIRBOBIRr82OjTyn5F/jHww8uuR+yOvn/ve8DeHXxrK4N8Hv9WcGHi18VLxl3yQn9X3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJEsvfveg9nWQBY3M625A2aGc4iND5Ap6h/yObYGz3QmjSOOtPPzeac+nOHkiDPhr7/fHMqpvynHkWmW70k5ms/YThpnYRRVZugUr0rASbi+/PDt60vvvvf1+Yezb869ObcwOD09MzEz/drU9XvzrbmJzdfT7iXwJGx96Pet/veJdwgAAAAAAAAAAADY10n8d4LTHiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwdLt1Nc1HKTI5cW2iLK+vTbXKpZPf2rKZpJGk+GlSfJjczOaSsZ7mit2O8/78zO2PPln/eKutZmf7stH/tY80itV6yXiSgTo9rvbuHLm9ohuZMmBXOoGD0/b/AAAA//9akgyP")
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0xf6ff, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
syz_usb_connect$cdc_ncm(0x2, 0xfffffffffffffdba, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
syz_mount_image$erofs(&(0x7f0000000480), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYRESOCT, @ANYRES32, @ANYRES16=r6, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYRESDEC], 0x1, 0x1d4, &(0x7f0000000640)="$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")
getresgid(&(0x7f0000000040), 0x0, &(0x7f00000000c0))
setresgid(0xee00, 0x0, 0x0)
setfsgid(0x0)
setfsgid(0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc)
stat(0x0, &(0x7f0000000600))
setxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x2}, [], {0x4, 0x3}, [], {}, {0x20, 0xa}}, 0x24, 0x2)
setreuid(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@p, {0x5}, {}, {}, {}, {}, {0x16, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

9.593549264s ago: executing program 2 (id=2136):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @private=0xa010101, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x9, [0x401, 0x1000, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@private=0xa010100}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSFLAGS1(r5, 0x40047459, 0x0)
ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f00000002c0))
write$ppp(r5, &(0x7f00000003c0)='\x00!', 0x100000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0)
r7 = dup(r2)
r8 = memfd_create(&(0x7f0000000fc0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d  \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\x1c#\x1c\xc9\x006U\xf8\x14D\b\x0f\xfd\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-:\xb6\xbc\x00\xa5\xa8\xe58\x00\x9fM\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8\x00\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.ooZ+)\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8\xdbQ\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xa0\xef\xccUxhg\xffY\xe6\x83\xa6r\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\xa0\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.}\x89\xac\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93\x02\xab\t*\xbf\x89\xea\xaf\xd4\xe7)G\xc7\xd2\x81\xccT\xfa\"\xb3\xbe\xa1r\x9a \xd9\tb\xf1\x9aa\xdb\xffp\xc3\x9dFx\x18}\xb0/M\x12\x1a\xc1\xe8\n\x06\xac\xd2\xf1\x00\xcf!\x9274\x18\xc5U\xf7>\x12qsH\xbd\x1f|\x82\xb9\xcb\xe7H_\x95\x9f\xc1P\x16\x8a\xc4nxh\xde)x\xaa8\xe8\x8d\xe3pr\xba\xfeA\x89op\xde\xd4\xe1=\x8b\x9d\x1b\x9c\xe2F\xd0\xe1>\xd2\xe7\r;\x8fcq\xf1\xc0\fWG\xfb\xae\xe9\xa4\x0fAR{\xec\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x96\xa4/\xc6-\x1e\xd9)\xab\xfe\v\rt\xd4p\xe3}\x87\xa7\x9cm2*\x8c\x02\xf3\xc2aJ\x1cQ\xe7]\xc1I\x8d\xc5;\x12k=\xab\xd8i(/\x05\xac\x9f\x13\xb9\x13\x8a\x87C&V\xdb\xc0\x11\xf1Y_\xfcc\xf8\x94D\xefV\xf7\xb6\xfaY4Q\xb6\xbe\xe8\x92\xa8U4\x8d\xf2<-\x05', 0x7)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r8, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "4a8d480f65491adf0fbc0b54d9391fec4647e0a1c2934cfde8e80d7f6e591f6a320847487bfbe55e35015fcc1824cd27189b63760775c5831a0866ee64818b40"}, 0x48, 0xfffffffffffffffd)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000500)={0x1, 0x2, 0x1000, 0xb0, &(0x7f0000000380)="a2ff06c52a0958d2eea4004f0de4f03368a08756e199838ffdd39a009f7acef49a18759c83f525716719b31b2771982617d5f7a4780c577aef1d0cbceff1c72ff1bc585ca78c43984b02a954def82fd787845c1b60159b9990a01aa9c8faa1c065e13ab83044f4c56274ab6be43381778681a4bc946d98b237cbee882389d226ff36e6a35a1f7ee898a46cf991ea815bf6daefcb3715eb35663ff6582aa737237c6e1416529639f6c1327dd66f0b29b1", 0x8a, 0x0, &(0x7f0000000440)="f2394df68df40a9e03e9d7f6c16d2e9e89ac46cec062df19cb4bb3bf70fa82e1a21c720861ecf4b0080ce86a24de65143d2043c8ea82e60d3ef0518b5fbb8d941b93a9aa675db591b73db699c44dc67ca5bc921d0847df35394bc4a8842ed93c060fefa2dd563e3609cb9c292bbf934a17bcd89f71616ce6b2bd05c6ab78bb226d3958df408f9da8d28e"})
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000180), 0x1, 0x1)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x200000, 0x0)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
lseek(r9, 0x289e0cb5, 0x0)

8.845192857s ago: executing program 4 (id=2139):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@prjquota}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@nolazytime}, {@dioread_lock}, {@nobh}]}, 0x1, 0x46a, &(0x7f0000000980)="$eJzs289vFFUcAPDvzLZFQWhFFEFUFI2NP1paUDl40WjiQRMTPeCxtoUACzW0JkKIVmPwaEi8G48m/gWe9GLUk4lXvBsSolxAT2tmd6Zsl93tLpRd6H4+yTbv7bzpe9+deTNv5s0EMLD2Zn+SiPsi4mJEjNayKyp5oazctSvnZv+9cm42iUrl3b+TarmrV87NFmWL9bbkmfE0Iv0iyStZbfHM2RMz5fL86Tw/uXTyw8nFM2dfOHZy5uj80flT04cOHTww9fJL0y+uS5xZfFd3f7KwZ9eb7194e/bwhQ9+/T7Jv4+GODox3EGZvVng/1SqGpc93U1ld4GtdelkqI8NoSuliBjK9+eLMRqluL7xRuONz/vaOOC2ys5Nm1ovXq4AG1gS/W4B0B/FiT67/i0+PRp63BEuv1q7AMrivpZ/akuGIs3LDDdc366nvRFxePm/b7JP3MR9CACAbv2YjX+ebzb+S6N+jLgtnxsai4j7I2J7RDwQETsi4sGIeCgidkbEw51Ve7xINE4N3Tj+SS/daoztZOO/V/K5rdXjv2L0F2OlPLe1Gv9wcuRYeX5//puMx/CmLD/Vpo6fXv/jq1bL6sd/2Ser//CqyaX00lDDDbq5maWZjiagOnD5s4jdQ83iT1ZmApKI2BURu7v719uKxLFnv9vTqlDT+POx8JrWYZ6p8m3EM7XtvxwN8ReS9vOTk/dEeX7/ZLFX3Oi338+/06r+W4p/HWTbf/Pq/b+xyFhSP1+72H0d5//8suU1zdrxN9//R5L3qsejkfy7j2eWlk5PRYwkb9XWqv9++vq6Rb4on8U/vq95/9+er5PF/0hEZDvxoxHxWEQ8nrf9iYh4MiL2tYn/l9eeOt5l/Embf7eusvjnmh7/VprQsP27T5RO/PxDq/o72/4Hq6nx/Jvq8W8NnTbwVn47AAAAuFuk1Wfgk3RiJZ2mExO1Z/h3xOa0vLC49NyRhY9OzdWelR+L4bS40zVadz90KlnOnyaO6tX3dH6vuFh+IL9v/HXp3mp+YnahPNfn2GHQbanr/9t3Xu//mb9Kq8uuzIh4vwM2Dv0ZBldj/0/71A6g95z/YXDp/zC49H8YXM36/6cN+VKP2gL0lvM/DK61+n/P3kYCes75HwaX/g8Dqd278cnNv/Iv0d9ELN/+KtI7ItLblRjpoINs6MSNx4oh4wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAu9H8AAAD//xjg70M=")
lsetxattr$security_ima(0x0, &(0x7f00000006c0), &(0x7f0000000700)=ANY=[@ANYBLOB="0055e00de5afe62c96"], 0x9, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="7eaa0000000000007910a8000000000018090000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00'}, 0x90)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
get_robust_list(r0, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001d00)=ANY=[@ANYBLOB="757403002c6572728472733d6329b7107dc162f6cbe2570db01a6f6e74696e75652c6e616d65636173653d212c757466382c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(&(0x7f0000000440)='.\x00', 0x8000, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x10000003)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r3, 0x0)

8.379428787s ago: executing program 1 (id=2140):
bpf$PROG_LOAD(0x5, 0x0, 0x0)

8.144094627s ago: executing program 3 (id=2141):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000200)={0x1, 0x1000}, 0x4)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20000, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x34325842}})
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x16, 0x0, "535c48cc32f29a6a219f57fb63f29bb57b899ae6a90ec337"})
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8)
r3 = openat$ttynull(0xffffff9c, &(0x7f00000002c0), 0x200000, 0x0)
ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000300))
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$packet(0x11, 0x2, 0x300)
r4 = syz_io_uring_setup(0x2c5d, &(0x7f0000000480)={0x0, 0xe513, 0x0, 0x4}, &(0x7f0000000040)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1})
io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)

8.013662858s ago: executing program 1 (id=2142):
memfd_create(0x0, 0x0)
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e7, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x14, 0x30, 0x0, 0x0, 0x0, {0x9}}, 0x14}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000300)=""/41)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
set_mempolicy(0x4005, &(0x7f0000000040)=0xb24, 0x5)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x1c, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}}]}, 0x158}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup(r5, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
unshare(0x22020400)
write$cgroup_pid(r7, &(0x7f00000001c0), 0x12)
unshare(0x2040400)
keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, 0x0)

7.697272095s ago: executing program 0 (id=2143):
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[])
socket(0x2c, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffe5d)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$pvfs2(&(0x7f0000000100), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x1, &(0x7f0000000900)=ANY=[])
r2 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x15)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
write$binfmt_aout(r3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x3f3)
io_setup(0x7, &(0x7f0000000000)=<r4=>0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x20100000, 0x0, 0x0, 0x0, 0x0)
setxattr$incfs_id(&(0x7f0000000240)='./file1\x00', &(0x7f0000000880), &(0x7f00000008c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x6)
io_submit(r4, 0x1, &(0x7f0000000700)=[0x0])
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000c40)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r7=>0x0})
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
r9 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6}, 0x0, @in=@multicast1}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@local, @in=@broadcast, 0x4e24, 0x0, 0x4e22, 0x0, 0x2, 0x140, 0x20, 0x2b, r7, r10}, {0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x2}, {0x1, 0xffffffffffffffff, 0x3, 0xfffffffffffff800}, 0x2, 0x6eebb6, 0x0, 0x3, 0x0, 0x1}, {{@in6=@private1}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0xe4)
socket$inet_udplite(0x2, 0x2, 0x88)

7.227326975s ago: executing program 3 (id=2144):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@prjquota}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@nolazytime}, {@dioread_lock}, {@nobh}]}, 0x1, 0x46a, &(0x7f0000000980)="$eJzs289vFFUcAPDvzLZFQWhFFEFUFI2NP1paUDl40WjiQRMTPeCxtoUACzW0JkKIVmPwaEi8G48m/gWe9GLUk4lXvBsSolxAT2tmd6Zsl93tLpRd6H4+yTbv7bzpe9+deTNv5s0EMLD2Zn+SiPsi4mJEjNayKyp5oazctSvnZv+9cm42iUrl3b+TarmrV87NFmWL9bbkmfE0Iv0iyStZbfHM2RMz5fL86Tw/uXTyw8nFM2dfOHZy5uj80flT04cOHTww9fJL0y+uS5xZfFd3f7KwZ9eb7194e/bwhQ9+/T7Jv4+GODox3EGZvVng/1SqGpc93U1ld4GtdelkqI8NoSuliBjK9+eLMRqluL7xRuONz/vaOOC2ys5Nm1ovXq4AG1gS/W4B0B/FiT67/i0+PRp63BEuv1q7AMrivpZ/akuGIs3LDDdc366nvRFxePm/b7JP3MR9CACAbv2YjX+ebzb+S6N+jLgtnxsai4j7I2J7RDwQETsi4sGIeCgidkbEw51Ve7xINE4N3Tj+SS/daoztZOO/V/K5rdXjv2L0F2OlPLe1Gv9wcuRYeX5//puMx/CmLD/Vpo6fXv/jq1bL6sd/2Ser//CqyaX00lDDDbq5maWZjiagOnD5s4jdQ83iT1ZmApKI2BURu7v719uKxLFnv9vTqlDT+POx8JrWYZ6p8m3EM7XtvxwN8ReS9vOTk/dEeX7/ZLFX3Oi338+/06r+W4p/HWTbf/Pq/b+xyFhSP1+72H0d5//8suU1zdrxN9//R5L3qsejkfy7j2eWlk5PRYwkb9XWqv9++vq6Rb4on8U/vq95/9+er5PF/0hEZDvxoxHxWEQ8nrf9iYh4MiL2tYn/l9eeOt5l/Embf7eusvjnmh7/VprQsP27T5RO/PxDq/o72/4Hq6nx/Jvq8W8NnTbwVn47AAAAuFuk1Wfgk3RiJZ2mExO1Z/h3xOa0vLC49NyRhY9OzdWelR+L4bS40zVadz90KlnOnyaO6tX3dH6vuFh+IL9v/HXp3mp+YnahPNfn2GHQbanr/9t3Xu//mb9Kq8uuzIh4vwM2Dv0ZBldj/0/71A6g95z/YXDp/zC49H8YXM36/6cN+VKP2gL0lvM/DK61+n/P3kYCes75HwaX/g8Dqd278cnNv/Iv0d9ELN/+KtI7ItLblRjpoINs6MSNx4oh4wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAu9H8AAAD//xjg70M=")
lsetxattr$security_ima(0x0, &(0x7f00000006c0), &(0x7f0000000700)=ANY=[@ANYBLOB="0055e00de5afe62c96"], 0x9, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="7eaa0000000000007910a8000000000018090000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00'}, 0x90)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
get_robust_list(r0, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001d00)=ANY=[@ANYBLOB="757403002c6572728472733d6329b7107dc162f6cbe2570db01a6f6e74696e75652c6e616d65636173653d212c757466382c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(&(0x7f0000000440)='.\x00', 0x8000, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x10000003)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r3, 0x0)

6.640857775s ago: executing program 3 (id=2145):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/fscaps', 0x0, 0x0)
getdents64(r1, 0x0, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"})
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
prlimit64(0x0, 0x0, 0x0, 0x0)
unshare(0x6a040000)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000004c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3})
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x5521, 0x0)
close(0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001114010800000080000000000800010000000000"], 0x18}}, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8f, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0305602, &(0x7f00000002c0)={0x0, 0x300, {0x0, 0x0, 0x1003, 0x0, 0x8, 0x3}})
syz_emit_ethernet(0x0, 0x0, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
dup(r5)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r6, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000080))
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0x1f, 0x40, 0x40, 0xf11, 0x1000, 0xbe42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x87, 0x3e, 0x44}}]}}]}}, 0x0)

6.332666931s ago: executing program 0 (id=2146):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@prjquota}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@nolazytime}, {@dioread_lock}, {@nobh}]}, 0x1, 0x46a, &(0x7f0000000980)="$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")
lsetxattr$security_ima(0x0, &(0x7f00000006c0), &(0x7f0000000700)=ANY=[@ANYBLOB="0055e00de5afe62c96"], 0x9, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="7eaa0000000000007910a8000000000018090000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00'}, 0x90)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
get_robust_list(r0, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001d00)=ANY=[@ANYBLOB="757403002c6572728472733d6329b7107dc162f6cbe2570db01a6f6e74696e75652c6e616d65636173653d212c757466382c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$eJzs3AuYj1XXMPC99t43Y5L+TXIY9trr5p8G2yRJDgk5JEmSJDklJCZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMkjTZKE5BT2d+np/Tzv0/O+fe9X3+e93lm/69qXvdz/tf7rnjXX3Pf9v66Z73uOqtu8Xq2mRCT+FPj7P8lCiBghxDAhxA1CiEAIUTGuYtyV4/kUJP+5N2F/rUfTrnUH7Fri+eduPP/cjeefu/H8czeef+7G88/deP65G8+fsdxs+5yiN/LKvYs//8/N+Pr/P0hOuclfbyx3c6//QgrPP3fj+eduPP/cjeefu/H8czee//98Nf+TYzz/3I3nz1hudq0/f+Z1bde1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaSHEv+2vdV+MMcYYY4wxxhj76/i817oDxhhjjDHGGGOM/b8HQgoltAhEHpFXxIh8IlZcJ/KL60UBcYOIiBtFnLhJFBQ3i0KisCgiiop4UUwUF0agsIJEKEqIkiIqbhGlxK0iQZQWZURZ4UQ5kShuE+XF7aKCuENUFHeKSuIuUVlUEVVFNXG3qC7uETVETVFL3Ctqizqirqgn7hP1xf2igXhANBQPikbiIdFYPCyaiEdEU/GoaCYeE83F46KFeEK0FK1Ea9FGtP2/yn9Z9BWviH6iv0gWA8RA8aoYJAaLIWKoGCZeE8PF62KEeEOkiJFilHhTjBZviTHibTFWjBPjxTtigpgoJonJYoqYKlLFu2KaeE9MF++LGWKmmCVmizQxR8wVH4h5Yr5YID4UC8VHYpFYLJaIpSJdfCwyxDKRKT4Ry8WnIkusECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFdfCZ2iJ1il9gt9oi9Yp/4XOwXX4gD4kuRLb76L+af/af8XiBAgAQJGjTkgTwQAzEQC7GQH/JDASgAEYhAHMRBQSgIhaAQFIEiEA/xUByKAwICAUEJKAFRiEIpKAUJkABloAw4cJAIiVAebocKUAEqQkWoBJWgMlSBKlANqkF1qA41oAbUglpQG2pDXagL98F9cD80gAbQEBpCI2gEjaExNIEm0BSaQjNoBs2hObSAFtASWkJraA1toS20g3bQHtpDR+gInaATdIbOkARJ0BW6QjfoBt2hO/SAHtATekIv6A294WV4GV6BV6A/1JYDYCAMhEEwCIbAUBgKr8FweB1ehzcgBUbCKHgT3oS3YAycgbEwDsbDeKguJ8IkmAwkp0IqpMI0mAbTYTrMgJkwE2ZDGsyBuTAX5sF8mA8fwkL4CD6CxbAYlkI6pEMGLINMyITlcBayYAWshFWwGtbAalgH62EdbIRNsBG2wBbYBtvgM/gMdsJO2A27YS/shc/hc/gCvoAUyIZsOAgH4RAcgsNwGHIgB47AETgKR+EYHIPjcBxOwEk4BSfhNJyGM3AWzsE5uAAX4CK8GP9ts72lN6QIeYWWWuaReWSMjJGxMlbml/llAVlARmRExsk4WVAWlIVkIVlEFpHxMl4Wl8UlSpQkQ1lClogRQshSspRMkAmyjCwjnXQyUSbK8rK8rCAryIryTllJ3iUryyqyg6smq8nqsqOrIWvKWrKWrC3ryLqynqwn68v6soFsIBvKhrKRbCQby4dlEzkAhsCj8spkmsuR0EKOgpaylWwt28i34EnZTo6B9rKD7CifluNgLHSW7VySfFZ2lZOgm3xeToYXZA85FXrKl2Qv2Vv2kS/LvrK96yf7yxkwQA6Us2GQHCyHyKFyHtSRVyZWV74hU+RIOUq+KZfCW3KMfFuOlePkePmOnCAnyklyspwip8pU+a6cJt+T0+X7coacKWfJ2TJNzpFz5QdynpwvF8gP5UL5kVwkF8slcqlMlx/LDLlMZspP5HL5qcySK+RKuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ul5/JHXKn3CV3yz1yr9wnP5f75RfygPxSZsuv5EH5N3lIfi0Py29kjvxWHpHfyaPye3lM/iCPyx/lCXlSnpI/ydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaDyqLwqRuVTseo6lV9drwqoG1RE3aji1E2qoLpZFVKFVRFVVMWrYqq4MgqVVaRCVUKVVFF1iyqlblUJqrQqo8oqp8qpRHWbKq9uVxXUHaqiulNVUnepyqqKqqqqqbtVdXWPqqFqqlrqXlVb1VF1VT11n6qv7lcN1AOqoXpQNVIPqcbqYdVEPaKaqkdVM/WYaq4eVy3UE6qlaqVaqzaqrXpStVNPqfaqg+qonlad1DOqs+qiktSzqqt6TnVTz6vu6gXVQ72oeqqXVC/VW/VRl9Rl5VU/1V8lqwFqoHpVDVKD1RA1VA1Tr6nh6nU1Qr2hUtRINUq9qUart9QY9bYaq8ap8eodNUFNVJPUZDVFTVWp6l01Tb2npqv31Qw1U81Ss1WamqOG/FZpwT/lD/jtqvuP+e/9i/wRv777NrVdfaZ2qJ1ql9qt9qi9ap/ap/ar/eqAOqCyVbY6qA6qQ+qQOqwOqxyVo46oI+qoOqqOqWPquDquTqiT6rz6SZ1WP6sz6qw6q86rC+qCuvjb10Bo0FIrrXWg8+i8Okbn07H6Op1fX68L6Bt0RN+o4/RNuqC+WRfShXURXVTH62K6uDYatdWkQ11Cl9RRfYsupW/VCbq0LqPLaqfL6UR925/O/6P+2uq2up1up9vr9rqj7qg76U66s+6sk3SS7qq76m66m+6uu+seuofuqXvqXrqX7qP76L66r+6n++lknawH6lf1ID1YD9FD9TD9mh6uh+sReoRO0Sl6lB6lR+vReoweo8fqsXq8Hq8n6Al6kp6kp+gpOlWn6ml6mp6up+sZeoaepWfpNJ2m5+q5ep6epxfoBXqhXqgX6UV6iV6i03W6ztAZOlNn6uV6uc7SK/QKvUqv0mv0Gr1Or9Mb9Aa9SW/SW/QWnaW36+16h96hd+ldeo/eo/fpfXq/3q8P6AM6W2frg/qgPqQP6cP6sM7ROfqIPqKP6qP6mD424Lg+rk/oE/qUPqVP69P6jD6jz+lz+oK+oC/qi/qyvnzlti+QgQx0oIM8QZ4gJogJYoPYIH+QPygQFAgiQSSIC+KCgsHNQaGgcFAkKBrEB8WC4oEJMLABBWFQIigZRINbglLBrUFCUDooE5QNXFAuSAxuC8oHtwcVgjuCisGdQaXgrqByUCWoGlQL7g6qB/cENYKaQa3g3qB2UCeoG9QL7gvqB/cHDYIHgobBg0Gj4KGgcfBw0CR4JGgaPBo0Cx4LmgePBy2CJ4KWQaugddAmaPuX1vf+TOGnXD/T3ySbAWagedUMMoPNEDPUDDOvmeHmdTPCvGFSzEgzyrxpRpu3zBjzthlrxpnx5h0zwUw0k8xkM8VMNanmXTPNvGemm/fNDDPTzDKzTZqZY+aaD8w8M98sMB+aheYjs8gsNkvMUpNuPjYZZpnJNJ+Y5eZTk2VWmJVmlVlt1py/UQiz3mwwG80ms9lsMVvNNrPdfGZ2mJ1ml9lt9pi9Zp/53Ow3X5gD5kuTbb4yB83fzCHztTlsvjE55ltzxHxnjprvzTHzgzlufjQnzElzyvxkTpufzRlz1pwz580F84u5aC6Zy8Zfubm/cnlHjRrzYB6MwRiMxVjMj/mxABbACEYwDuOwIBbEQlgIi2ARjMd4LI7F8QpCwhJYAqMYxVJYChMwActgGXToMBETsTyWxwpYAStiRayElbAyVsaqWBXvxrvxHrwHa2JNvBfvxTpYB+thPayP9bEBNsCG2BAbYSNsjI2xCTbBptgUm2EzbI7NsQW2wJbYEltja2yLbbEdtsP22B47YkfshJ2wM3bGJEzCrtgVu2E37I7dsQf2wJ7YE3thL+yDfbAv9sV+2A+TMRkH4kAchINwCA7BYTgMh+NwHIEjMAVTcBSOwtE4GsfgGByL43A8voMTcCJOwsk4BadiKqbiNJyG03E6zsAZOAtnYRqm4Vyci/NwHi7ABbgQF+IiXIRLcAmmYzpmYAZmYiYux+WYhVm4ElfialyNa3Etrsf1uBE34mbcjFtxK27H7bgDd+Au3IV7cA/uw324H/fjATyA2ZiNB/EgHsJDeBgPYw7m4BE8gkfxKB7DY3gcj+MJPIGn8BSextN4Bs/gOTyHF/AXvIiX8DJ6jLFSxNrrbH57vS1gb7AxNp/9x7iILWrjbTFb3BpbyBb+dzFaaxNsaVvGlrXOlrOJ9rbfxZVtFVvVVrN32+r2Hlvjd3F9e79tYB+wDe2Dtp6977c4769xI/uQbWwft03sE7apbWWb2Ta2uX3ctrBP2Ja2lW1t29hO9hnb2XaxSfZZ29U+97s4wy6z6+0Gu9FusvvtF/acPW+P2u/tBfuL7Wf722H2NTvcvm5H2Ddsih35u3i8fcdOsBPtJDvZTrFTfxfPsrNtmp1j59oP7Dw7/3dxuv3YLrSZdpFdbJfYpb/GV3rKtJ/Y5fZTm2VX2JV2lV1t19i1dt3/7nWV3WK32m12n/3c7rA77S672+6xe3+Nr5zHAfulzbZf2SP2O3vIfm0P22M2x377a3zl/I7ZH+xx+6M9YU/aU/Yne9r+bM/Ys7+e/5Vz/8lespett4KAJCnSFFAeyksxlI9i6TrKT9dTAbqBInQjxdFNVJBupkJUmIpQUYqnYlScDCFZIgqpBJWkKN1CpehWSqDSVIbKkqNylEi3UXm6nSrQHVSR7qRKdBdVpipUlarR3VSd7qEaVJNq0b1Um+pQXapH91F9up8a0APUkB6kRvQQNaaHqQk9Qk3pUWpGj1Fzepxa0BPUklpRa2pDbelJakdPUXvqQB3paepEz1Bn6kJJ9Cx1peeoGz1P3ekF6kEvUk96iXpRb+pDL1NfeoX6UX9KpgE0kF6lQTSYhtBQGkav0XB6nUbQG5RCI2kUvUmj6S0aQ2/TWBpH4+kdmkATaRJNpik0lVLpXTqb3qXIlXu9GTSTZtFsSqM5NJc+oHk0nxbQh7SQPqJFtJiW0FJKp48pg5ZRJn1Cy+lTyqIVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttp89oB+2kXbSb9tBe2kef0376gg7Ql5RNX9FB+hsdoq/pMH1DOfQtHaHv6Ch9T8foBzpOP9IJOkmn6Cc6TT/TGTpL5+g8XaBf6CJdosvkSYQQylCFOgzCPGHeMCbMF8aG14X5w+vDAuENYSS8MYwLbwoLhjeHhcLCYZGwaBgfFguLhybE0IYUhmGJsGQYDW8JS4W3hglh6bBMWDZ0YbkwMbwtLB/eHlYI7wgrhneGlcK7wsphlfDxB6uFd4fVw3vCGmHNsFZ4b1g7rBPWDeuF94X1w/vDBuEDYcPwwbBC+FDYOHw4bBI+EjYNHw2bhY+FzcPHwxbhE2HLsFXYOmwTtg2fDNuFT4Xtww5hx/DpsFP4TNg57BImhc+GXcPn/vB4cjggHBi+Gr4aev+AWhJdGk2PfhzNiC6LZkY/iS6PfhrNiq6Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jbo1ui3pfL69w4KRTTrvA5XF5XYzL52LddS6/u94VcDe4iLvRxbmbXEF3syvkCrsirqiLd8VccWccOuvIha6EK+mi7hZXyt3qElxpV8aVdc6Vc4mujWvr2rp27inX3nVwHd3T7mn3jHvGdXFd3LOuq3vOdXPPu+7uBdfDvehedC+5Xq636+Nedn3dK66f6++SXbIb6Aa6QW6QG+KGuGFumBvuhrsRboRLcSlulBvlRrvRbowb48a6sW68G+8muAlukpvkprgpLtWlumlumpvuprsZboab5Wa5NJfm5rq5bp6b5xa4BW5hwkK3yC1yS9wSl+7SXYbLcJku0y13y12Wy3Ir3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1w2S7bHXQH3SF3yB1237gc96074r5zR9337pj7wR13P7oT7qQ75X5yp93P7ow768658+6C+8VddJfcZeddauTdyLTIe5HpkfcjMyIzI7MisyNpkTmRuZEPIvMi8yMLIh9GFkY+iiyKLI4siSyNpEc+jmRElkUyI59Elkc+jWRFVkRWRlZFVkfWRLwvtiP0JXxJH/W3+FL+Vp/gS/syvqx3vpxP9Lf58v52X8Hf4Sv6O30lf5ev7Kv4qv4J39K38q19G9/WP+nb+ad8e9/Bd/RP+07+Gd/Zd/FJ/lnf1T/nu/nnfXf/gu/hX/Q9/Uu+l+/t+/iXfV//iu/n+/tkP8AP9K/6QX6wH+KH+mH+NT/cv+5H+Dd8ih/pR/k3/Wj/lh/j3/Zj/Tg/3r/jJ/iJfpKf7Kf4qT7Vv+un+ff8dP++n+Fn+ll+tk/zc/xc/4Gf5+f7Bf5Dv9B/5Bf5xX6JX+rT/cc+wy/zmf4Tv9x/6rP8Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Wd+h9/pd/ndfo/f6/f5z/1+/4U/4L/02f4rf9D/zR/yX/vD/huf47/1R/x3/qj/3h/zP/jj/kd/wp/0p/xP/rT/2Z/xZ/05f95f8L/4i/6Sv8y/s8YYY4wx9n9E/cHxAf/i/+Rv64qBQojrdxbN+eeamwv9fT9YxneKCCGe7d/z0X9btWsnJyf/9tosJYKSi4UQkav5ecTVeIXoKJ4RSaKDKP8v+xsse1+gP6gfvVOI2KuVfxUr/rn+7f9B/SefHp9RKTwX95/UXyxEQsmrOfnE1fhq/Qr/Qf3C7f6g/3xfpwrR/h9y8our8dX6ieIp8ZxI+nevZIwxxhhjjDHG/m6wrNr9j56frzyfx+urOXnF1fiPns8ZY4wxxhhjjDF27b3Qu0+XJ5OSOnTnzZ/Y1Pjv0QZvePOXba71TybGGGOMMcbYX+3qTf+17oQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/n/8ObFrfY6MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYtfa/AgAA///mJjhh")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x10000003)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r3, 0x0)

5.913598837s ago: executing program 0 (id=2147):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44000)
socket$alg(0x26, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x90)
r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
r4 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r5}, 0x10)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)=0x40000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = creat(&(0x7f00000003c0)='./bus\x00', 0xd6)
lseek(r6, 0x4, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
write$binfmt_elf64(r6, &(0x7f0000000140)=ANY=[], 0xfd14)
read$FUSE(r4, 0x0, 0x0)
sendfile(r4, r4, 0x0, 0x100000000)
pidfd_getfd(r6, r1, 0x0)

5.567782667s ago: executing program 1 (id=2148):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, 0x0, &(0x7f0000000440)='GPL\x00'}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x1})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r4}, 0x10)
r5 = inotify_init1(0x0)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, <r6=>0x0})
r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x200000af, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000008b000000180100002020640500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40305839, &(0x7f0000000240))
write$cgroup_pressure(r2, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7)
timer_gettime(0x0, &(0x7f0000000280))

5.346746595s ago: executing program 4 (id=2149):
prlimit64(0x0, 0x0, 0x0, 0x0)
io_setup(0x8, &(0x7f00000002c0)=<r0=>0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3002, &(0x7f0000000240)=""/9)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(r0, 0x2, &(0x7f0000000580)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x23, r1, &(0x7f00000005c0)="182c1a3b5a93639724b5bc6aa231a17590359a273cdb6e9acd7f493d04e1a467e786fc77bcc34ecae6f315180e80135dbf741787a6ceb682695aed049553d3bc5b03cf5679302ecce76502445fd3aa5daa3f52493f749c6b94541ccce47d9a24f7a7195f3463d67211b627c35931b3bf6240da6a798ce00513140204532ff3a76d0ba22dda43653bb07cc2d1fa40f6f650571f07a57dbd3af02ffa33", 0x9c, 0x7}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x446b, r4, &(0x7f00000004c0)="3f9bd6002d039fc75df8e0b19b0b05763b52220e45fe8bd9856c992f874774feab686d087c6b7835cf66ede1033c907b5cbc787537758b1f24ffd4aa5941d4e58fdcf8af9b594318f4da985ec19d99be190a13ce6944ecb390d3ab40dd9c3742c4957d4d0fd570875a26cc5616f986957f3338", 0x73, 0x8, 0x0, 0x1}])
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000040)={0x2, 0x3, 0x40, 0x0, 'syz1\x00', 0x8})
io_setup(0x36d8, &(0x7f0000000000))
r5 = creat(&(0x7f0000000280)='./file0\x00', 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x6, 0x0, 0xa}, @generic={0x5, 0x0, 0x0, 0x2}, @jmp, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x4c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5}, 0x90)
unshare(0x2c020400)
msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
syz_open_dev$swradio(0x0, 0x1, 0x2)

4.199949323s ago: executing program 4 (id=2150):
write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0xffffffff, @loopback}, 0xffffffffffffff40)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {}, {@jqfmt_vfsold}, {@usrquota}, {@discard}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0xe05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4)
setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000140), 0x4)
sendto$inet(r4, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0)
recvmsg(r4, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/200, 0xc8}, 0x2000)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})

4.102314451s ago: executing program 0 (id=2151):
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000022c0)=""/106)
mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x30ff, 0x8, '9P2000.u'}, 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40edce68512449b8b1ba1a827d68f145d28c"], 0x53)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000007c0)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x3c}}, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000002380)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}})
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, <r7=>0x0}, 0x2092)
llistxattr(&(0x7f0000002280)='./file0\x00', 0x0, 0xfb)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000024c0)={0x50, 0x0, r7, {0x7, 0x9}}, 0x50)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r9, 0x50009405, &(0x7f0000000180))
write$P9_RSETATTR(r9, &(0x7f0000002240)={0x7, 0x1b, 0x2}, 0x7)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})

3.951365024s ago: executing program 3 (id=2152):
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.923110466s ago: executing program 1 (id=2153):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000200)={0x1, 0x1000}, 0x4)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20000, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x34325842}})
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x16, 0x0, "535c48cc32f29a6a219f57fb63f29bb57b899ae6a90ec337"})
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8)
r3 = openat$ttynull(0xffffff9c, &(0x7f00000002c0), 0x200000, 0x0)
ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000300))
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000380)="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", 0x17b}], 0x1}}], 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$packet(0x11, 0x2, 0x300)
r4 = syz_io_uring_setup(0x2c5d, &(0x7f0000000480)={0x0, 0xe513, 0x0, 0x4}, &(0x7f0000000040)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1})
io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)

3.813587356s ago: executing program 3 (id=2154):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
syz_mount_image$erofs(&(0x7f0000000800), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000600)=ANY=[], 0x0, 0x1d3, &(0x7f00000008c0)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/315], 0x1, 0x217, &(0x7f0000000b40)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')

2.792319492s ago: executing program 4 (id=2155):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
syz_mount_image$erofs(&(0x7f0000000800), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000600)=ANY=[], 0x0, 0x1d3, &(0x7f00000008c0)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c64656275672c6572726f72733d72656d6f756e742d726f2c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d72656c617865642c757466383d302c726f6469722c726f6469722c00bd11a3d82e3cc8e94a1ac3169cb253bc51dceb1a3c8675eef705933dac0549813c420584251b8849a95afa9de1a80dcc7f9d4e26116050410b89f88108d551843f6115dded9b54fcb36a3a7bab7fb11d2c7265fa11a3ff2f3ca1c0df2142ff9ce532341817f2bb2fef3428793728d4daa090c5becbb74d00c95f965afa83e5bb562620ea9e99853533ca4ef0702dad548503917329f0f431d87efa28137d3f0e0fa2906cb9e236094a2d7a9ce877c1d8509500"/315], 0x1, 0x217, &(0x7f0000000b40)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='rxrpc_abort\x00'}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')

2.276427436s ago: executing program 1 (id=2156):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@prjquota}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@nolazytime}, {@dioread_lock}, {@nobh}]}, 0x1, 0x46a, &(0x7f0000000980)="$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")
lsetxattr$security_ima(0x0, &(0x7f00000006c0), &(0x7f0000000700)=ANY=[@ANYBLOB="0055e00de5afe62c96"], 0x9, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="7eaa0000000000007910a8000000000018090000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00'}, 0x90)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
get_robust_list(r0, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001d00)=ANY=[@ANYBLOB="757403002c6572728472733d6329b7107dc162f6cbe2570db01a6f6e74696e75652c6e616d65636173653d212c757466382c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$eJzs3AuYj1XXMPC99t43Y5L+TXIY9trr5p8G2yRJDgk5JEmSJDklJCZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMkjTZKE5BT2d+np/Tzv0/O+fe9X3+e93lm/69qXvdz/tf7rnjXX3Pf9v66Z73uOqtu8Xq2mRCT+FPj7P8lCiBghxDAhxA1CiEAIUTGuYtyV4/kUJP+5N2F/rUfTrnUH7Fri+eduPP/cjeefu/H8czeef+7G88/deP65G8+fsdxs+5yiN/LKvYs//8/N+Pr/P0hOuclfbyx3c6//QgrPP3fj+eduPP/cjeefu/H8czee//98Nf+TYzz/3I3nz1hudq0/f+Z1bde1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaSHEv+2vdV+MMcYYY4wxxhj76/i817oDxhhjjDHGGGOM/b8HQgoltAhEHpFXxIh8IlZcJ/KL60UBcYOIiBtFnLhJFBQ3i0KisCgiiop4UUwUF0agsIJEKEqIkiIqbhGlxK0iQZQWZURZ4UQ5kShuE+XF7aKCuENUFHeKSuIuUVlUEVVFNXG3qC7uETVETVFL3Ctqizqirqgn7hP1xf2igXhANBQPikbiIdFYPCyaiEdEU/GoaCYeE83F46KFeEK0FK1Ea9FGtP2/yn9Z9BWviH6iv0gWA8RA8aoYJAaLIWKoGCZeE8PF62KEeEOkiJFilHhTjBZviTHibTFWjBPjxTtigpgoJonJYoqYKlLFu2KaeE9MF++LGWKmmCVmizQxR8wVH4h5Yr5YID4UC8VHYpFYLJaIpSJdfCwyxDKRKT4Ry8WnIkusECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFdfCZ2iJ1il9gt9oi9Yp/4XOwXX4gD4kuRLb76L+af/af8XiBAgAQJGjTkgTwQAzEQC7GQH/JDASgAEYhAHMRBQSgIhaAQFIEiEA/xUByKAwICAUEJKAFRiEIpKAUJkABloAw4cJAIiVAebocKUAEqQkWoBJWgMlSBKlANqkF1qA41oAbUglpQG2pDXagL98F9cD80gAbQEBpCI2gEjaExNIEm0BSaQjNoBs2hObSAFtASWkJraA1toS20g3bQHtpDR+gInaATdIbOkARJ0BW6QjfoBt2hO/SAHtATekIv6A294WV4GV6BV6A/1JYDYCAMhEEwCIbAUBgKr8FweB1ehzcgBUbCKHgT3oS3YAycgbEwDsbDeKguJ8IkmAwkp0IqpMI0mAbTYTrMgJkwE2ZDGsyBuTAX5sF8mA8fwkL4CD6CxbAYlkI6pEMGLINMyITlcBayYAWshFWwGtbAalgH62EdbIRNsBG2wBbYBtvgM/gMdsJO2A27YS/shc/hc/gCvoAUyIZsOAgH4RAcgsNwGHIgB47AETgKR+EYHIPjcBxOwEk4BSfhNJyGM3AWzsE5uAAX4CK8GP9ts72lN6QIeYWWWuaReWSMjJGxMlbml/llAVlARmRExsk4WVAWlIVkIVlEFpHxMl4Wl8UlSpQkQ1lClogRQshSspRMkAmyjCwjnXQyUSbK8rK8rCAryIryTllJ3iUryyqyg6smq8nqsqOrIWvKWrKWrC3ryLqynqwn68v6soFsIBvKhrKRbCQby4dlEzkAhsCj8spkmsuR0EKOgpaylWwt28i34EnZTo6B9rKD7CifluNgLHSW7VySfFZ2lZOgm3xeToYXZA85FXrKl2Qv2Vv2kS/LvrK96yf7yxkwQA6Us2GQHCyHyKFyHtSRVyZWV74hU+RIOUq+KZfCW3KMfFuOlePkePmOnCAnyklyspwip8pU+a6cJt+T0+X7coacKWfJ2TJNzpFz5QdynpwvF8gP5UL5kVwkF8slcqlMlx/LDLlMZspP5HL5qcySK+RKuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ul5/JHXKn3CV3yz1yr9wnP5f75RfygPxSZsuv5EH5N3lIfi0Py29kjvxWHpHfyaPye3lM/iCPyx/lCXlSnpI/ydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaDyqLwqRuVTseo6lV9drwqoG1RE3aji1E2qoLpZFVKFVRFVVMWrYqq4MgqVVaRCVUKVVFF1iyqlblUJqrQqo8oqp8qpRHWbKq9uVxXUHaqiulNVUnepyqqKqqqqqbtVdXWPqqFqqlrqXlVb1VF1VT11n6qv7lcN1AOqoXpQNVIPqcbqYdVEPaKaqkdVM/WYaq4eVy3UE6qlaqVaqzaqrXpStVNPqfaqg+qonlad1DOqs+qiktSzqqt6TnVTz6vu6gXVQ72oeqqXVC/VW/VRl9Rl5VU/1V8lqwFqoHpVDVKD1RA1VA1Tr6nh6nU1Qr2hUtRINUq9qUart9QY9bYaq8ap8eodNUFNVJPUZDVFTVWp6l01Tb2npqv31Qw1U81Ss1WamqOG/FZpwT/lD/jtqvuP+e/9i/wRv777NrVdfaZ2qJ1ql9qt9qi9ap/ap/ar/eqAOqCyVbY6qA6qQ+qQOqwOqxyVo46oI+qoOqqOqWPquDquTqiT6rz6SZ1WP6sz6qw6q86rC+qCuvjb10Bo0FIrrXWg8+i8Okbn07H6Op1fX68L6Bt0RN+o4/RNuqC+WRfShXURXVTH62K6uDYatdWkQ11Cl9RRfYsupW/VCbq0LqPLaqfL6UR925/O/6P+2uq2up1up9vr9rqj7qg76U66s+6sk3SS7qq76m66m+6uu+seuofuqXvqXrqX7qP76L66r+6n++lknawH6lf1ID1YD9FD9TD9mh6uh+sReoRO0Sl6lB6lR+vReoweo8fqsXq8Hq8n6Al6kp6kp+gpOlWn6ml6mp6up+sZeoaepWfpNJ2m5+q5ep6epxfoBXqhXqgX6UV6iV6i03W6ztAZOlNn6uV6uc7SK/QKvUqv0mv0Gr1Or9Mb9Aa9SW/SW/QWnaW36+16h96hd+ldeo/eo/fpfXq/3q8P6AM6W2frg/qgPqQP6cP6sM7ROfqIPqKP6qP6mD424Lg+rk/oE/qUPqVP69P6jD6jz+lz+oK+oC/qi/qyvnzlti+QgQx0oIM8QZ4gJogJYoPYIH+QPygQFAgiQSSIC+KCgsHNQaGgcFAkKBrEB8WC4oEJMLABBWFQIigZRINbglLBrUFCUDooE5QNXFAuSAxuC8oHtwcVgjuCisGdQaXgrqByUCWoGlQL7g6qB/cENYKaQa3g3qB2UCeoG9QL7gvqB/cHDYIHgobBg0Gj4KGgcfBw0CR4JGgaPBo0Cx4LmgePBy2CJ4KWQaugddAmaPuX1vf+TOGnXD/T3ySbAWagedUMMoPNEDPUDDOvmeHmdTPCvGFSzEgzyrxpRpu3zBjzthlrxpnx5h0zwUw0k8xkM8VMNanmXTPNvGemm/fNDDPTzDKzTZqZY+aaD8w8M98sMB+aheYjs8gsNkvMUpNuPjYZZpnJNJ+Y5eZTk2VWmJVmlVlt1py/UQiz3mwwG80ms9lsMVvNNrPdfGZ2mJ1ml9lt9pi9Zp/53Ow3X5gD5kuTbb4yB83fzCHztTlsvjE55ltzxHxnjprvzTHzgzlufjQnzElzyvxkTpufzRlz1pwz580F84u5aC6Zy8Zfubm/cnlHjRrzYB6MwRiMxVjMj/mxABbACEYwDuOwIBbEQlgIi2ARjMd4LI7F8QpCwhJYAqMYxVJYChMwActgGXToMBETsTyWxwpYAStiRayElbAyVsaqWBXvxrvxHrwHa2JNvBfvxTpYB+thPayP9bEBNsCG2BAbYSNsjI2xCTbBptgUm2EzbI7NsQW2wJbYEltja2yLbbEdtsP22B47YkfshJ2wM3bGJEzCrtgVu2E37I7dsQf2wJ7YE3thL+yDfbAv9sV+2A+TMRkH4kAchINwCA7BYTgMh+NwHIEjMAVTcBSOwtE4GsfgGByL43A8voMTcCJOwsk4BadiKqbiNJyG03E6zsAZOAtnYRqm4Vyci/NwHi7ABbgQF+IiXIRLcAmmYzpmYAZmYiYux+WYhVm4ElfialyNa3Etrsf1uBE34mbcjFtxK27H7bgDd+Au3IV7cA/uw324H/fjATyA2ZiNB/EgHsJDeBgPYw7m4BE8gkfxKB7DY3gcj+MJPIGn8BSextN4Bs/gOTyHF/AXvIiX8DJ6jLFSxNrrbH57vS1gb7AxNp/9x7iILWrjbTFb3BpbyBb+dzFaaxNsaVvGlrXOlrOJ9rbfxZVtFVvVVrN32+r2Hlvjd3F9e79tYB+wDe2Dtp6977c4769xI/uQbWwft03sE7apbWWb2Ta2uX3ctrBP2Ja2lW1t29hO9hnb2XaxSfZZ29U+97s4wy6z6+0Gu9FusvvtF/acPW+P2u/tBfuL7Wf722H2NTvcvm5H2Ddsih35u3i8fcdOsBPtJDvZTrFTfxfPsrNtmp1j59oP7Dw7/3dxuv3YLrSZdpFdbJfYpb/GV3rKtJ/Y5fZTm2VX2JV2lV1t19i1dt3/7nWV3WK32m12n/3c7rA77S672+6xe3+Nr5zHAfulzbZf2SP2O3vIfm0P22M2x377a3zl/I7ZH+xx+6M9YU/aU/Yne9r+bM/Ys7+e/5Vz/8lespett4KAJCnSFFAeyksxlI9i6TrKT9dTAbqBInQjxdFNVJBupkJUmIpQUYqnYlScDCFZIgqpBJWkKN1CpehWSqDSVIbKkqNylEi3UXm6nSrQHVSR7qRKdBdVpipUlarR3VSd7qEaVJNq0b1Um+pQXapH91F9up8a0APUkB6kRvQQNaaHqQk9Qk3pUWpGj1Fzepxa0BPUklpRa2pDbelJakdPUXvqQB3paepEz1Bn6kJJ9Cx1peeoGz1P3ekF6kEvUk96iXpRb+pDL1NfeoX6UX9KpgE0kF6lQTSYhtBQGkav0XB6nUbQG5RCI2kUvUmj6S0aQ2/TWBpH4+kdmkATaRJNpik0lVLpXTqb3qXIlXu9GTSTZtFsSqM5NJc+oHk0nxbQh7SQPqJFtJiW0FJKp48pg5ZRJn1Cy+lTyqIVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttp89oB+2kXbSb9tBe2kef0376gg7Ql5RNX9FB+hsdoq/pMH1DOfQtHaHv6Ch9T8foBzpOP9IJOkmn6Cc6TT/TGTpL5+g8XaBf6CJdosvkSYQQylCFOgzCPGHeMCbMF8aG14X5w+vDAuENYSS8MYwLbwoLhjeHhcLCYZGwaBgfFguLhybE0IYUhmGJsGQYDW8JS4W3hglh6bBMWDZ0YbkwMbwtLB/eHlYI7wgrhneGlcK7wsphlfDxB6uFd4fVw3vCGmHNsFZ4b1g7rBPWDeuF94X1w/vDBuEDYcPwwbBC+FDYOHw4bBI+EjYNHw2bhY+FzcPHwxbhE2HLsFXYOmwTtg2fDNuFT4Xtww5hx/DpsFP4TNg57BImhc+GXcPn/vB4cjggHBi+Gr4aev+AWhJdGk2PfhzNiC6LZkY/iS6PfhrNiq6Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jbo1ui3pfL69w4KRTTrvA5XF5XYzL52LddS6/u94VcDe4iLvRxbmbXEF3syvkCrsirqiLd8VccWccOuvIha6EK+mi7hZXyt3qElxpV8aVdc6Vc4mujWvr2rp27inX3nVwHd3T7mn3jHvGdXFd3LOuq3vOdXPPu+7uBdfDvehedC+5Xq636+Nedn3dK66f6++SXbIb6Aa6QW6QG+KGuGFumBvuhrsRboRLcSlulBvlRrvRbowb48a6sW68G+8muAlukpvkprgpLtWlumlumpvuprsZboab5Wa5NJfm5rq5bp6b5xa4BW5hwkK3yC1yS9wSl+7SXYbLcJku0y13y12Wy3Ir3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1w2S7bHXQH3SF3yB1237gc96074r5zR9337pj7wR13P7oT7qQ75X5yp93P7ow768658+6C+8VddJfcZeddauTdyLTIe5HpkfcjMyIzI7MisyNpkTmRuZEPIvMi8yMLIh9GFkY+iiyKLI4siSyNpEc+jmRElkUyI59Elkc+jWRFVkRWRlZFVkfWRLwvtiP0JXxJH/W3+FL+Vp/gS/syvqx3vpxP9Lf58v52X8Hf4Sv6O30lf5ev7Kv4qv4J39K38q19G9/WP+nb+ad8e9/Bd/RP+07+Gd/Zd/FJ/lnf1T/nu/nnfXf/gu/hX/Q9/Uu+l+/t+/iXfV//iu/n+/tkP8AP9K/6QX6wH+KH+mH+NT/cv+5H+Dd8ih/pR/k3/Wj/lh/j3/Zj/Tg/3r/jJ/iJfpKf7Kf4qT7Vv+un+ff8dP++n+Fn+ll+tk/zc/xc/4Gf5+f7Bf5Dv9B/5Bf5xX6JX+rT/cc+wy/zmf4Tv9x/6rP8Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Wd+h9/pd/ndfo/f6/f5z/1+/4U/4L/02f4rf9D/zR/yX/vD/huf47/1R/x3/qj/3h/zP/jj/kd/wp/0p/xP/rT/2Z/xZ/05f95f8L/4i/6Sv8y/s8YYY4wx9n9E/cHxAf/i/+Rv64qBQojrdxbN+eeamwv9fT9YxneKCCGe7d/z0X9btWsnJyf/9tosJYKSi4UQkav5ecTVeIXoKJ4RSaKDKP8v+xsse1+gP6gfvVOI2KuVfxUr/rn+7f9B/SefHp9RKTwX95/UXyxEQsmrOfnE1fhq/Qr/Qf3C7f6g/3xfpwrR/h9y8our8dX6ieIp8ZxI+nevZIwxxhhjjDHG/m6wrNr9j56frzyfx+urOXnF1fiPns8ZY4wxxhhjjDF27b3Qu0+XJ5OSOnTnzZ/Y1Pjv0QZvePOXba71TybGGGOMMcbYX+3qTf+17oQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/n/8ObFrfY6MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYtfa/AgAA///mJjhh")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x10000003)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r3, 0x0)

1.458964056s ago: executing program 4 (id=2157):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7, 0x7fe2, 0x1, 0x0, 0x1}, 0x48)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x4000004)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10)
write$binfmt_misc(r3, &(0x7f00000028c0)=ANY=[@ANYBLOB="3a00030007", @ANYRES32=0x0, @ANYRES32], 0xd)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "a4"}]}], {0x14}}, 0x6c}}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="c99b573818012303000004ae388c09c4ff0f1d0dbd3af3ef0b6cc9ac103dcd2aa9", 0x21)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000001580)={r5, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES16, @ANYRES16=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x90)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000500)={r5, 0x7fff}, 0x8)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {}, {0x1, 0x0, 0x0, 0xfffffffffffffffd}}}, 0xb8}}, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x832, 0xffffffffffffffff, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.376195253s ago: executing program 3 (id=2158):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@prjquota}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@nolazytime}, {@dioread_lock}, {@nobh}]}, 0x1, 0x46a, &(0x7f0000000980)="$eJzs289vFFUcAPDvzLZFQWhFFEFUFI2NP1paUDl40WjiQRMTPeCxtoUACzW0JkKIVmPwaEi8G48m/gWe9GLUk4lXvBsSolxAT2tmd6Zsl93tLpRd6H4+yTbv7bzpe9+deTNv5s0EMLD2Zn+SiPsi4mJEjNayKyp5oazctSvnZv+9cm42iUrl3b+TarmrV87NFmWL9bbkmfE0Iv0iyStZbfHM2RMz5fL86Tw/uXTyw8nFM2dfOHZy5uj80flT04cOHTww9fJL0y+uS5xZfFd3f7KwZ9eb7194e/bwhQ9+/T7Jv4+GODox3EGZvVng/1SqGpc93U1ld4GtdelkqI8NoSuliBjK9+eLMRqluL7xRuONz/vaOOC2ys5Nm1ovXq4AG1gS/W4B0B/FiT67/i0+PRp63BEuv1q7AMrivpZ/akuGIs3LDDdc366nvRFxePm/b7JP3MR9CACAbv2YjX+ebzb+S6N+jLgtnxsai4j7I2J7RDwQETsi4sGIeCgidkbEw51Ve7xINE4N3Tj+SS/daoztZOO/V/K5rdXjv2L0F2OlPLe1Gv9wcuRYeX5//puMx/CmLD/Vpo6fXv/jq1bL6sd/2Ser//CqyaX00lDDDbq5maWZjiagOnD5s4jdQ83iT1ZmApKI2BURu7v719uKxLFnv9vTqlDT+POx8JrWYZ6p8m3EM7XtvxwN8ReS9vOTk/dEeX7/ZLFX3Oi338+/06r+W4p/HWTbf/Pq/b+xyFhSP1+72H0d5//8suU1zdrxN9//R5L3qsejkfy7j2eWlk5PRYwkb9XWqv9++vq6Rb4on8U/vq95/9+er5PF/0hEZDvxoxHxWEQ8nrf9iYh4MiL2tYn/l9eeOt5l/Embf7eusvjnmh7/VprQsP27T5RO/PxDq/o72/4Hq6nx/Jvq8W8NnTbwVn47AAAAuFuk1Wfgk3RiJZ2mExO1Z/h3xOa0vLC49NyRhY9OzdWelR+L4bS40zVadz90KlnOnyaO6tX3dH6vuFh+IL9v/HXp3mp+YnahPNfn2GHQbanr/9t3Xu//mb9Kq8uuzIh4vwM2Dv0ZBldj/0/71A6g95z/YXDp/zC49H8YXM36/6cN+VKP2gL0lvM/DK61+n/P3kYCes75HwaX/g8Dqd278cnNv/Iv0d9ELN/+KtI7ItLblRjpoINs6MSNx4oh4wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAu9H8AAAD//xjg70M=")
lsetxattr$security_ima(0x0, &(0x7f00000006c0), &(0x7f0000000700)=ANY=[@ANYBLOB="0055e00de5afe62c96"], 0x9, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="7eaa0000000000007910a8000000000018090000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00'}, 0x90)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
get_robust_list(r0, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001d00)=ANY=[@ANYBLOB="757403002c6572728472733d6329b7107dc162f6cbe2570db01a6f6e74696e75652c6e616d65636173653d212c757466382c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(&(0x7f0000000440)='.\x00', 0x8000, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x10000003)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r3, 0x0)

1.363879724s ago: executing program 0 (id=2159):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x90)
accept$packet(0xffffffffffffffff, 0x0, 0x0)
symlink(0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$rtc(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000000000000061117800000000009500000000000000d217af8e78dfc144bb894752983abec3c8a661c7fb8a9938125a0f746d13b9f815f57f7304cce6e003eb00366c5b4e0f13ae24a055f71d70f279d237473ea3e9bfd46d73080ee851574a4a1a36485300cf83e39c1c7a52fb44efe58cd233fc075681"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096}, 0x70)
syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x7, 0x13, r5, 0x0)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r6, 0x0)
read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x10c8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()

481.589109ms ago: executing program 1 (id=2160):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt(r1, 0x8001, 0x0, 0x0, &(0x7f0000000080))
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000c020000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200f1ff85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00'}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000200000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='qdisc_create\x00', r2}, 0x28)
syz_emit_ethernet(0x0, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x9, &(0x7f00000000c0)=0x5, 0x4)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

0s ago: executing program 4 (id=2161):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x2c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x6}, 0xfffffffffffffedb)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xf)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x900}}}, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3}, 0x50)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
ioctl$TIOCGPTPEER(r4, 0x80140912, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x11, @loopback, 0x0, 0x0, 'none\x00', 0x1d}, 0x2c)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r6, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
pipe2$9p(&(0x7f0000000180)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x94, &(0x7f0000000040)=""/148}, 0x80)
r9 = dup(r8)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9])
write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r9, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})
syz_usb_connect(0x0, 0x2d, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xbe, 0xe4, 0xf9, 0x0, [], [{{0x9, 0x5, 0x3, 0x0, 0x3ff}}]}}]}}]}}, 0x0)

kernel console output (not intermixed with test programs):

 0x00
[  905.012431][ T3612] usb 1-1: Cannot set MAC address
[  905.020141][ T3612] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71
[  905.031299][ T3612] usb 1-1: USB disconnect, device number 38
[  905.476067][T12575] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1840'.
[  905.505008][T12574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1841'.
[  905.989342][T11064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  906.056119][T11064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  906.062169][T12570] loop4: detected capacity change from 0 to 8192
[  906.106878][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  906.188192][ T3803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  906.253944][ T3803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  906.464869][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  906.805013][T12599] loop2: detected capacity change from 0 to 512
[  907.060470][T12599] EXT4-fs (loop2): Test dummy encryption mode enabled
[  907.351686][T12599] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.1846: inline data xattr refers to an external xattr inode
[  907.823782][T12599] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1846: couldn't read orphan inode 12 (err -117)
[  907.911490][T12599] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,inode_readahead_blks=0x0000000000200000,sb=0x0000000000000001,prjquota,usrquota,usrjquota=,nojournal_checksum,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  907.974773][T12621] loop3: detected capacity change from 0 to 164
[  908.036565][T12625] netlink: 'syz.4.1849': attribute type 11 has an invalid length.
[  908.060630][T12621] isofs_fill_super: bread failed, dev=loop3, iso_blknum=80, block=160
[  908.499664][T12631] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  908.860661][T12642] loop4: detected capacity change from 0 to 16
[  908.899079][T12641] fuse: Bad value for 'fd'
[  908.911420][T12644] virtio-fs: tag <(null)> not found
[  908.955380][T12642] erofs: (device loop4): mounted with root inode @ nid 36.
[  909.106190][T12644] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  909.113746][T12644] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  909.300198][T12644] vhci_hcd vhci_hcd.0: Device attached
[  909.371614][T12660] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  909.408069][ T3661] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[  909.886065][ T7219] vhci_hcd: vhci_device speed not set
[  909.986343][ T7219] usb 15-1: new full-speed USB device number 2 using vhci_hcd
[  910.136251][ T3661] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  910.154405][T12651] vhci_hcd: connection reset by peer
[  910.195544][ T3803] vhci_hcd: stop threads
[  910.200571][ T3661] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  910.219600][ T3803] vhci_hcd: release socket
[  910.244501][ T3803] vhci_hcd: disconnect device
[  910.250195][ T3661] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  910.273501][ T3661] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64
[  910.296874][ T3661] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  910.387485][T12679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1858'.
[  910.410029][   T26] audit: type=1326 audit(2000000026.560:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18eadde79 code=0x7ffc0000
[  910.439646][   T26] audit: type=1326 audit(2000000026.560:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18eadde79 code=0x7ffc0000
[  910.476460][ T3661] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  910.490901][ T3661] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  910.503984][ T3661] usb 2-1: SerialNumber: syz
[  910.546907][T12641] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  910.556338][T12641] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  910.567450][T12681] loop2: detected capacity change from 0 to 512
[  910.587417][ T3661] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  910.602926][ T3661] cdc_acm: probe of 2-1:1.0 failed with error -12
[  910.607568][   T26] audit: type=1326 audit(2000000026.560:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe18eadde79 code=0x7ffc0000
[  910.642423][T12681] EXT4-fs (loop2): Ignoring removed nobh option
[  910.682202][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1860'.
[  910.688851][   T26] audit: type=1326 audit(2000000026.560:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18eadde79 code=0x7ffc0000
[  910.730528][T12681] EXT4-fs (loop2): 1 truncate cleaned up
[  910.744972][T12681] EXT4-fs (loop2): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[  910.766999][   T26] audit: type=1326 audit(2000000026.560:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18eadde79 code=0x7ffc0000
[  910.826904][   T26] audit: type=1326 audit(2000000026.560:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe18eadde79 code=0x7ffc0000
[  910.861967][   T26] audit: type=1326 audit(2000000026.560:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18eadde79 code=0x7ffc0000
[  910.893791][   T26] audit: type=1326 audit(2000000026.560:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18eadde79 code=0x7ffc0000
[  910.928955][   T26] audit: type=1326 audit(2000000026.570:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe18eadde79 code=0x7ffc0000
[  910.956784][T12508] usb 2-1: USB disconnect, device number 27
[  910.971024][   T26] audit: type=1326 audit(2000000026.580:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18eadde79 code=0x7ffc0000
[  912.076744][ T3661] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  915.718641][T12711] loop4: detected capacity change from 0 to 16
[  915.736113][T12508] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  915.757303][ T7219] vhci_hcd: vhci_device speed not set
[  915.777812][T12711] erofs: (device loop4): mounted with root inode @ nid 36.
[  916.039027][ T3661] usb 4-1: device not accepting address 34, error -71
[  916.393719][T12718] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  917.130388][T12727] netlink: 'syz.4.1871': attribute type 9 has an invalid length.
[  917.145793][T12727] netlink: 'syz.4.1871': attribute type 7 has an invalid length.
[  917.176962][T12727] netlink: 'syz.4.1871': attribute type 8 has an invalid length.
[  918.203844][T12740] loop2: detected capacity change from 0 to 512
[  918.236814][T12747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1877'.
[  918.268859][T12740] EXT4-fs (loop2): Ignoring removed nobh option
[  918.321592][T12740] EXT4-fs (loop2): 1 truncate cleaned up
[  918.377298][T12740] EXT4-fs (loop2): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[  918.397135][    C1] vkms_vblank_simulate: vblank timer overrun
[  918.496142][ T3661] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  919.216142][ T3610] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  919.336181][ T3661] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  919.376041][ T3661] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  919.534676][ T3661] usb 2-1: config 0 descriptor??
[  920.042255][T12769] loop2: detected capacity change from 0 to 512
[  920.056654][ T3610] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  920.066425][ T3610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  920.169153][T12769] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  920.189879][T12769] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1880: invalid indirect mapped block 1 (level 1)
[  920.207216][T12769] EXT4-fs (loop2): 1 truncate cleaned up
[  920.213115][T12769] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  920.266644][ T3610] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  920.275887][ T3610] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  920.287010][ T3610] usb 4-1: Manufacturer: syz
[  920.304730][ T3610] usb 4-1: config 0 descriptor??
[  920.506652][ T3610] rc_core: IR keymap rc-hauppauge not found
[  920.519080][ T3610] Registered IR keymap rc-empty
[  920.524689][ T3610] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  920.547839][ T3610] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input46
[  920.555320][T12775] loop2: detected capacity change from 0 to 16
[  920.633314][T12775] erofs: (device loop2): mounted with root inode @ nid 36.
[  920.962457][T12781] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  921.791757][T12783] loop2: detected capacity change from 0 to 16
[  921.807632][T12783] erofs: (device loop2): mounted with root inode @ nid 36.
[  921.896748][ T3661] usb 2-1: Cannot set autoneg
[  921.902901][ T3661] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -32
[  922.449723][ T3612] usb 4-1: USB disconnect, device number 36
[  922.816209][T12792] loop2: detected capacity change from 0 to 16
[  922.858903][T12792] erofs: (device loop2): mounted with root inode @ nid 36.
[  923.136161][ T3661] usb 2-1: USB disconnect, device number 28
[  925.291349][T12811] tipc: Started in network mode
[  925.296517][T12811] tipc: Node identity ac1414aa, cluster identity 4711
[  925.303485][T12811] tipc: New replicast peer: 100.1.1.1
[  925.309269][T12811] tipc: Enabled bearer <udp:syz2>, priority 10
[  926.206528][T12813] loop3: detected capacity change from 0 to 16
[  926.306529][T12813] erofs: (device loop3): mounted with root inode @ nid 36.
[  926.318351][T12509] tipc: Node number set to 2886997162
[  926.619606][T12817] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  927.943512][   T26] kauditd_printk_skb: 11 callbacks suppressed
[  927.943528][   T26] audit: type=1326 audit(2000000044.120:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12831 comm="syz.3.1900" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe18eadde79 code=0x0
[  929.000534][T12850] loop2: detected capacity change from 0 to 16
[  929.688868][T12848] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1903'.
[  929.748404][T12848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1903'.
[  929.793382][T12838] chnl_net:caif_netlink_parms(): no params data found
[  929.807713][T12850] erofs: (device loop2): mounted with root inode @ nid 36.
[  930.196044][ T3612] Bluetooth: hci5: command 0x0409 tx timeout
[  930.344147][T12838] bridge0: port 1(bridge_slave_0) entered blocking state
[  930.406330][T12838] bridge0: port 1(bridge_slave_0) entered disabled state
[  930.414808][T12838] device bridge_slave_0 entered promiscuous mode
[  930.578026][T12838] bridge0: port 2(bridge_slave_1) entered blocking state
[  930.585354][T12838] bridge0: port 2(bridge_slave_1) entered disabled state
[  930.604386][T12838] device bridge_slave_1 entered promiscuous mode
[  930.692141][T12838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  930.798256][T12838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  930.981927][T12838] team0: Port device team_slave_0 added
[  931.047844][T12838] team0: Port device team_slave_1 added
[  931.138447][T12882] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  931.388059][ T1389] ieee802154 phy0 wpan0: encryption failed: -22
[  931.768665][T12838] batman_adv: batadv0: Adding interface: batadv_slave_0
[  931.821924][T12838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  931.969216][T12892] loop2: detected capacity change from 0 to 4096
[  931.976317][T12838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  931.986739][T12899] loop3: detected capacity change from 0 to 512
[  932.013383][T12838] batman_adv: batadv0: Adding interface: batadv_slave_1
[  932.036144][T12838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  932.122144][T12899] EXT4-fs (loop3): Ignoring removed nobh option
[  932.124624][T12838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  932.206475][T12892] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  932.260655][T12866] chnl_net:caif_netlink_parms(): no params data found
[  932.267836][ T3663] Bluetooth: hci5: command 0x041b tx timeout
[  932.274060][T12899] EXT4-fs (loop3): 1 truncate cleaned up
[  932.380819][T12899] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[  932.506146][T12512] Bluetooth: hci6: command 0x0409 tx timeout
[  932.743409][T12838] device hsr_slave_0 entered promiscuous mode
[  932.753678][T12838] device hsr_slave_1 entered promiscuous mode
[  932.763104][T12838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  933.313664][T12838] Cannot create hsr debugfs directory
[  933.605915][T12931] loop1: detected capacity change from 0 to 512
[  933.713280][T12866] bridge0: port 1(bridge_slave_0) entered blocking state
[  933.740736][T12866] bridge0: port 1(bridge_slave_0) entered disabled state
[  933.769354][T12866] device bridge_slave_0 entered promiscuous mode
[  933.789516][T12866] bridge0: port 2(bridge_slave_1) entered blocking state
[  933.809424][T12866] bridge0: port 2(bridge_slave_1) entered disabled state
[  933.882522][T12866] device bridge_slave_1 entered promiscuous mode
[  933.902221][T12931] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  933.926211][T12931] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff)
[  934.022521][T12931] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present
[  934.067288][T12908] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 208: padding at end of block bitmap is not set
[  934.104452][T12931] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  934.236312][T12931] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.1920: Failed to acquire dquot type 0
[  934.254314][T12866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  934.309569][T12866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  934.346048][T12512] Bluetooth: hci5: command 0x040f tx timeout
[  934.442206][  T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  934.479678][T12958] loop2: detected capacity change from 0 to 512
[  934.504791][T12838] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  934.565549][T12958] EXT4-fs (loop2): Ignoring removed nobh option
[  934.644847][ T3612] Bluetooth: hci6: command 0x041b tx timeout
[  934.663991][T12958] EXT4-fs (loop2): 1 truncate cleaned up
[  934.672472][T12866] team0: Port device team_slave_0 added
[  934.690981][T12966] loop1: detected capacity change from 0 to 512
[  934.698237][T12958] EXT4-fs (loop2): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[  934.728969][  T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  934.784277][T12838] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  934.808294][T12966] EXT4-fs (loop1): Ignoring removed nobh option
[  934.853659][T12969] loop3: detected capacity change from 0 to 1024
[  934.914941][T12966] EXT4-fs (loop1): 1 truncate cleaned up
[  934.932304][T12966] EXT4-fs (loop1): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[  935.016440][T12866] team0: Port device team_slave_1 added
[  935.031639][T12969] EXT4-fs (loop3): Mount option "commit=0x0000000000000003" incompatible with ext2
[  935.048768][  T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  936.845679][ T3612] Bluetooth: hci5: command 0x0419 tx timeout
[  936.876861][T12186] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0
[  936.899774][ T3612] Bluetooth: hci6: command 0x040f tx timeout
[  936.927288][T12186] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[  936.976755][T12186] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[  937.238243][T12838] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  937.378201][  T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  937.445087][T12866] batman_adv: batadv0: Adding interface: batadv_slave_0
[  937.472967][T12866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  937.534866][T12866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  937.617598][T12838] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  937.681056][T12866] batman_adv: batadv0: Adding interface: batadv_slave_1
[  937.688395][T12866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  937.784280][T12866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  937.997219][T12866] device hsr_slave_0 entered promiscuous mode
[  938.038187][T12866] device hsr_slave_1 entered promiscuous mode
[  938.064307][T12866] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  938.089925][T12866] Cannot create hsr debugfs directory
[  938.133625][T12984] loop3: detected capacity change from 0 to 32768
[  938.246924][T12984] XFS (loop3): sunit and swidth must be specified together
[  938.632790][  T144] tipc: Disabling bearer <udp:syz1>
[  938.638309][  T144] tipc: Left network mode
[  938.753041][T12838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  938.811318][T12838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  938.967611][T12838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  939.011639][T12509] Bluetooth: hci6: command 0x0419 tx timeout
[  939.029779][T12988] chnl_net:caif_netlink_parms(): no params data found
[  939.045055][T12838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  939.101560][T13014] loop3: detected capacity change from 0 to 512
[  939.170151][T13014] EXT4-fs (loop3): Ignoring removed nobh option
[  939.253589][T13014] EXT4-fs (loop3): 1 truncate cleaned up
[  939.266261][T13014] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[  939.471155][T12988] bridge0: port 1(bridge_slave_0) entered blocking state
[  939.524011][T12988] bridge0: port 1(bridge_slave_0) entered disabled state
[  939.567286][T12988] device bridge_slave_0 entered promiscuous mode
[  939.779051][T12988] bridge0: port 2(bridge_slave_1) entered blocking state
[  939.839698][T12988] bridge0: port 2(bridge_slave_1) entered disabled state
[  939.950151][T12988] device bridge_slave_1 entered promiscuous mode
[  940.144867][T13026] loop2: detected capacity change from 0 to 512
[  940.200177][T12988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  940.203963][T12508] Bluetooth: hci0: command 0x0409 tx timeout
[  940.239628][T12988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  940.296169][T13026] EXT4-fs (loop2): Ignoring removed nobh option
[  940.352924][T12988] team0: Port device team_slave_0 added
[  940.364691][T13032] loop3: detected capacity change from 0 to 16
[  940.375694][T13026] EXT4-fs (loop2): 1 truncate cleaned up
[  940.386077][T13026] EXT4-fs (loop2): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[  940.414480][T12988] team0: Port device team_slave_1 added
[  940.451665][T13032] erofs: (device loop3): mounted with root inode @ nid 36.
[  940.772399][T12838] 8021q: adding VLAN 0 to HW filter on device bond0
[  940.852687][T13046] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  941.854038][T12838] 8021q: adding VLAN 0 to HW filter on device team0
[  941.884200][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  941.929247][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  941.973135][T12988] batman_adv: batadv0: Adding interface: batadv_slave_0
[  941.992883][T12988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  942.022202][T13052] loop2: detected capacity change from 0 to 16
[  942.060868][T12988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  942.084167][T12988] batman_adv: batadv0: Adding interface: batadv_slave_1
[  942.091690][T13052] erofs: (device loop2): mounted with root inode @ nid 36.
[  942.102323][T12988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  942.131962][T13060] Dead loop on virtual device ip6_vti0, fix it urgently!
[  942.199463][T12988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  942.273228][T12508] Bluetooth: hci0: command 0x041b tx timeout
[  942.280031][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  942.304652][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  942.323394][ T4960] bridge0: port 1(bridge_slave_0) entered blocking state
[  942.330548][ T4960] bridge0: port 1(bridge_slave_0) entered forwarding state
[  942.356657][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  942.385526][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  942.395024][ T4960] bridge0: port 2(bridge_slave_1) entered blocking state
[  942.402187][ T4960] bridge0: port 2(bridge_slave_1) entered forwarding state
[  942.456422][T12866] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  942.506614][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  942.528490][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  942.562951][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  942.588892][T12866] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  942.618182][T12866] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  942.640164][T13073] loop3: detected capacity change from 0 to 16
[  942.652003][T12988] device hsr_slave_0 entered promiscuous mode
[  942.662352][T12988] device hsr_slave_1 entered promiscuous mode
[  942.669791][T12988] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  942.677761][T12988] Cannot create hsr debugfs directory
[  942.694746][T12866] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  942.702133][T13073] erofs: (device loop3): mounted with root inode @ nid 36.
[  942.745847][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  942.778039][T13079] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  942.784150][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  942.889715][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  942.911842][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  942.940070][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  942.963625][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  942.995805][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  943.030608][T12838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  943.043738][T12838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  943.064302][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  943.078143][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  943.378266][T12988] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.405291][T12866] 8021q: adding VLAN 0 to HW filter on device bond0
[  943.447993][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  943.465843][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  943.594250][T12838] 8021q: adding VLAN 0 to HW filter on device batadv0
[  943.615201][T12866] 8021q: adding VLAN 0 to HW filter on device team0
[  943.641445][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  943.656256][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  943.663765][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  943.687554][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  943.707276][T11064] bridge0: port 1(bridge_slave_0) entered blocking state
[  943.714393][T11064] bridge0: port 1(bridge_slave_0) entered forwarding state
[  943.748848][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  943.808358][T12988] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.828867][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  943.847004][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  943.858750][ T3692] bridge0: port 2(bridge_slave_1) entered blocking state
[  943.866489][ T3692] bridge0: port 2(bridge_slave_1) entered forwarding state
[  943.917624][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  943.942451][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  943.953212][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  943.998951][T12988] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  944.053166][T13104] loop2: detected capacity change from 0 to 512
[  944.062321][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  944.120568][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  944.135513][T13104] EXT4-fs (loop2): Ignoring removed nobh option
[  944.158124][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  944.173502][T13105] loop3: detected capacity change from 0 to 1024
[  944.181918][T13104] EXT4-fs (loop2): 1 truncate cleaned up
[  944.189452][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  944.197387][T13104] EXT4-fs (loop2): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[  944.227336][T12988] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  944.261154][T12838] device veth0_vlan entered promiscuous mode
[  944.393026][T13105] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none.
[  944.447091][T12509] Bluetooth: hci0: command 0x040f tx timeout
[  944.448697][T13105] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038 (0x7fffffff)
[  944.453908][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  944.494414][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  944.516939][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  946.157314][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  946.189507][T12838] device veth1_vlan entered promiscuous mode
[  946.240312][T12838] device veth0_macvtap entered promiscuous mode
[  946.260269][T12838] device veth1_macvtap entered promiscuous mode
[  946.297412][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  946.317430][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  946.335625][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  946.357749][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  946.374566][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  946.395370][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  946.416657][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  946.427382][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  946.439023][T12838] batman_adv: batadv0: Interface activated: batadv_slave_0
[  946.516319][T12508] Bluetooth: hci0: command 0x0419 tx timeout
[  946.700797][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  946.709796][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  946.718059][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  946.736987][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  946.745849][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  946.773678][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  946.782741][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  946.792298][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  946.801772][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  946.817655][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  946.828496][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  946.837210][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  946.846530][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  946.855436][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  946.874600][T12866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  947.076110][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  947.090891][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  947.121015][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  947.172859][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  947.233217][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  947.638510][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  947.656069][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  947.705522][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  947.742029][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  947.766035][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  947.788888][T12838] batman_adv: batadv0: Interface activated: batadv_slave_1
[  947.860333][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  947.879784][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  947.918197][  T144] device hsr_slave_0 left promiscuous mode
[  947.935178][  T144] device hsr_slave_1 left promiscuous mode
[  947.952369][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  947.964716][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  947.982756][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  947.994872][  T144] device bridge_slave_1 left promiscuous mode
[  948.011783][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  948.024095][  T144] device bridge_slave_0 left promiscuous mode
[  948.030886][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  948.045267][  T144] device hsr_slave_0 left promiscuous mode
[  948.051932][  T144] device hsr_slave_1 left promiscuous mode
[  948.058842][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  948.067469][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  948.075386][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  948.083835][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  948.092934][  T144] device bridge_slave_1 left promiscuous mode
[  948.099618][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  948.108785][  T144] device bridge_slave_0 left promiscuous mode
[  948.115546][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  948.144249][  T144] device veth1_macvtap left promiscuous mode
[  948.160628][  T144] device veth0_macvtap left promiscuous mode
[  948.171772][  T144] device veth1_vlan left promiscuous mode
[  948.182960][  T144] device veth0_vlan left promiscuous mode
[  948.199727][  T144] device veth1_macvtap left promiscuous mode
[  948.205800][  T144] device veth0_macvtap left promiscuous mode
[  948.212611][  T144] device veth1_vlan left promiscuous mode
[  948.218658][  T144] device veth0_vlan left promiscuous mode
[  948.369758][T13134] loop3: detected capacity change from 0 to 16
[  948.453069][T13134] erofs: (device loop3): mounted with root inode @ nid 36.
[  948.632991][  T144] team0 (unregistering): Port device team_slave_1 removed
[  948.663291][  T144] team0 (unregistering): Port device team_slave_0 removed
[  948.694090][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  948.711273][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  948.791407][  T144] bond0 (unregistering): Released all slaves
[  948.844758][  T144] bond1 (unregistering): Released all slaves
[  948.878851][T13136] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  949.081545][  T144] team0 (unregistering): Port device team_slave_1 removed
[  949.100659][  T144] team0 (unregistering): Port device team_slave_0 removed
[  949.118920][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  949.137388][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  949.245860][  T144] bond0 (unregistering): Released all slaves
[  949.297708][T12838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  949.309688][T12838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  949.319182][T12838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  949.330202][T12838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  949.361488][T12988] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  949.391868][T12988] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  949.411594][T12988] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  949.504582][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  949.531562][T13140] 9pnet: p9_errstr2errno: server reported unknown error 
[  949.567489][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  949.575358][T12988] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  949.631359][T12866] 8021q: adding VLAN 0 to HW filter on device batadv0
[  949.671041][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  949.686261][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  949.806650][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  949.837979][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  949.853450][T13146] loop2: detected capacity change from 0 to 256
[  949.891165][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  949.918692][T12988] 8021q: adding VLAN 0 to HW filter on device bond0
[  949.936778][T13146] exfat: Deprecated parameter 'namecase'
[  949.954536][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  949.989417][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  950.004400][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  950.034315][T13146] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  950.059938][T12988] 8021q: adding VLAN 0 to HW filter on device team0
[  950.130441][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  950.163058][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  950.182019][ T3803] bridge0: port 1(bridge_slave_0) entered blocking state
[  950.189181][ T3803] bridge0: port 1(bridge_slave_0) entered forwarding state
[  950.210553][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  950.235666][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  950.252631][ T3803] bridge0: port 2(bridge_slave_1) entered blocking state
[  950.259780][ T3803] bridge0: port 2(bridge_slave_1) entered forwarding state
[  950.316987][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  950.325092][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  950.339798][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  950.350092][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  950.360802][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  950.393360][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  950.456187][T10317] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  950.479715][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  950.493654][T13155] loop3: detected capacity change from 0 to 512
[  950.497128][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  950.539036][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  950.553284][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  950.567213][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  950.582747][T13155] EXT4-fs (loop3): Ignoring removed nobh option
[  950.605874][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  950.631571][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  950.640332][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  950.654409][T12866] device veth0_vlan entered promiscuous mode
[  950.669463][T13155] EXT4-fs (loop3): 1 truncate cleaned up
[  950.675249][T13155] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[  950.716272][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  950.731971][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  950.798900][T12988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  950.935399][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  950.943223][T10317] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  950.953115][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  950.960933][T10317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  950.974356][T12866] device veth1_vlan entered promiscuous mode
[  951.485820][T10317] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  951.506477][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  951.514663][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  951.523527][T10317] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  951.534274][T10317] usb 1-1: Manufacturer: syz
[  951.548268][T10317] usb 1-1: config 0 descriptor??
[  951.600898][T12866] device veth0_macvtap entered promiscuous mode
[  951.648865][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  951.691429][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  951.733489][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  951.756210][T10317] rc_core: IR keymap rc-hauppauge not found
[  951.762308][T10317] Registered IR keymap rc-empty
[  952.444787][T13176] loop3: detected capacity change from 0 to 256
[  952.467369][T10317] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  952.637258][T13176] FAT-fs (loop3): Directory bread(block 64) failed
[  952.644047][T13176] FAT-fs (loop3): Directory bread(block 65) failed
[  952.651218][T13176] FAT-fs (loop3): Directory bread(block 66) failed
[  952.658003][T13176] FAT-fs (loop3): Directory bread(block 67) failed
[  952.665106][T13176] FAT-fs (loop3): Directory bread(block 68) failed
[  952.672018][T13176] FAT-fs (loop3): Directory bread(block 69) failed
[  952.679378][T13176] FAT-fs (loop3): Directory bread(block 70) failed
[  952.686146][T13176] FAT-fs (loop3): Directory bread(block 71) failed
[  952.693128][T13176] FAT-fs (loop3): Directory bread(block 72) failed
[  952.699849][T13176] FAT-fs (loop3): Directory bread(block 73) failed
[  952.808718][T12866] device veth1_macvtap entered promiscuous mode
[  952.872901][T10317] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input49
[  953.190043][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  953.202377][T13186] 9pnet: p9_errstr2errno: server reported unknown error 
[  953.211934][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  953.255872][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  953.265077][T13184] loop3: detected capacity change from 0 to 1024
[  953.285972][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  953.310452][T13184] EXT4-fs (loop3): Ignoring removed oldalloc option
[  953.319235][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  953.376669][T13184] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,abort,lazytime,noload,nojournal_checksum,oldalloc,,errors=continue. Quota mode: none.
[  953.385983][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  953.597791][T13193] loop2: detected capacity change from 0 to 128
[  956.973812][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  957.004978][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  957.048914][T12866] batman_adv: batadv0: Interface activated: batadv_slave_0
[  957.098012][ T3663] usb 1-1: USB disconnect, device number 39
[  957.105573][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  957.116978][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  957.193320][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  957.257598][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  957.268126][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  957.292336][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  957.315302][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  957.345985][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  957.380994][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  957.412180][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  957.449206][T12866] batman_adv: batadv0: Interface activated: batadv_slave_1
[  957.556790][T13202] overlayfs: failed to resolve './file0': -2
[  958.111891][T13200] loop3: detected capacity change from 0 to 512
[  958.186618][T13205] loop2: detected capacity change from 0 to 512
[  958.215064][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  958.236743][T13200] EXT4-fs (loop3): Ignoring removed nobh option
[  958.255332][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  958.297640][T13205] EXT4-fs (loop2): Ignoring removed nobh option
[  958.298599][T13200] EXT4-fs (loop3): 1 truncate cleaned up
[  958.336057][T13200] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[  958.347092][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  958.367164][T13205] EXT4-fs (loop2): 1 truncate cleaned up
[  958.384476][T13205] EXT4-fs (loop2): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[  958.421402][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  958.469360][T12866] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  958.484307][T12866] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  958.672514][T12866] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  959.294844][T11473] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0
[  959.350725][T11473] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[  959.368864][T12866] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  959.412273][T12988] 8021q: adding VLAN 0 to HW filter on device batadv0
[  959.443195][T11473] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[  959.560839][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  959.595518][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  959.665112][ T4960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  959.773266][T12988] device veth0_vlan entered promiscuous mode
[  959.823835][ T3692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  959.832943][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  959.851523][ T4960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  959.866744][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  959.875016][ T3692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  959.909266][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  959.945049][T12988] device veth1_vlan entered promiscuous mode
[  959.979329][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  960.006565][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  960.049879][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  960.086440][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  960.170313][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  960.194584][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  960.231789][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  960.267192][T12988] device veth0_macvtap entered promiscuous mode
[  960.301658][T12988] device veth1_macvtap entered promiscuous mode
[  960.357096][T12509] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  960.368684][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  960.368703][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  960.368713][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  960.368724][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  960.368733][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  960.368743][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  960.368753][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  960.368763][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  960.368773][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  960.368783][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  960.373874][T12988] batman_adv: batadv0: Interface activated: batadv_slave_0
[  960.374009][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  960.374742][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  960.375300][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  960.375811][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  960.388564][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  960.388586][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  960.388598][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  960.388620][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  960.388632][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  960.388645][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  960.388657][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  960.388670][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  960.388681][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  960.388696][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  960.389818][T12988] batman_adv: batadv0: Interface activated: batadv_slave_1
[  960.397930][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  960.398687][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  960.419237][T12988] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  960.419270][T12988] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  960.419292][T12988] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  960.419315][T12988] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  960.539760][T13241] loop3: detected capacity change from 0 to 64
[  960.627914][T13241] hfs: get root inode failed
[  960.762338][T12509] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  960.874472][T11064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  960.976861][T11064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  960.983139][T12509] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  960.998109][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  961.104342][T11064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  961.104460][T11064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  961.197938][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  961.237642][T12509] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  961.237679][T12509] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  961.237704][T12509] usb 1-1: Manufacturer: syz
[  961.244834][T12509] usb 1-1: config 0 descriptor??
[  961.373706][T13247] fuse: Bad value for 'fd'
[  961.579565][T13236] chnl_net:caif_netlink_parms(): no params data found
[  961.796131][T12509] rc_core: IR keymap rc-hauppauge not found
[  961.796155][T12509] Registered IR keymap rc-empty
[  961.796879][T12509] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  961.798057][T12509] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input50
[  963.063653][ T3615] Bluetooth: hci1: command 0x0409 tx timeout
[  964.714022][T13236] bridge0: port 1(bridge_slave_0) entered blocking state
[  964.760153][T13236] bridge0: port 1(bridge_slave_0) entered disabled state
[  964.771116][T13277] loop4: detected capacity change from 0 to 16
[  964.801453][T13236] device bridge_slave_0 entered promiscuous mode
[  964.837485][T13277] erofs: (device loop4): mounted with root inode @ nid 36.
[  964.877497][T13236] bridge0: port 2(bridge_slave_1) entered blocking state
[  964.884602][T13236] bridge0: port 2(bridge_slave_1) entered disabled state
[  964.901573][T13236] device bridge_slave_1 entered promiscuous mode
[  964.913404][T12504] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  965.066768][ T7219] Bluetooth: hci1: command 0x041b tx timeout
[  965.122926][T13282] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  965.816001][T12504] usb 4-1: Using ep0 maxpacket: 8
[  965.823887][T13236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  965.933697][T13236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  965.946755][T12504] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  966.056120][T12504] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  966.065245][T12504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  966.072829][T13287] loop1: detected capacity change from 0 to 256
[  966.094516][T12504] usb 4-1: SerialNumber: syz
[  966.109371][T13236] team0: Port device team_slave_0 added
[  966.113478][T12504] usb 4-1: config 0 descriptor??
[  966.161613][T13236] team0: Port device team_slave_1 added
[  966.201834][T13287] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  966.269502][T13236] batman_adv: batadv0: Adding interface: batadv_slave_0
[  966.301562][T11621] usb 1-1: USB disconnect, device number 40
[  966.307129][T13236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  966.351404][T13236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  966.364464][T13236] batman_adv: batadv0: Adding interface: batadv_slave_1
[  966.373051][T13236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  966.420970][T13236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  966.446187][T12504] usb 4-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  966.457480][T12504] usb 4-1: No valid video chain found.
[  967.326172][T11621] Bluetooth: hci1: command 0x040f tx timeout
[  967.357287][T13272] netlink: 'syz.3.1976': attribute type 8 has an invalid length.
[  967.430590][T13236] device hsr_slave_0 entered promiscuous mode
[  967.438207][T13236] device hsr_slave_1 entered promiscuous mode
[  967.571522][T13301] loop4: detected capacity change from 0 to 512
[  968.276246][T13301] EXT4-fs (loop4): Ignoring removed nobh option
[  968.354204][T13301] EXT4-fs (loop4): 1 truncate cleaned up
[  968.429995][T13301] EXT4-fs (loop4): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[  971.164304][ T7216] Bluetooth: hci1: command 0x0419 tx timeout
[  971.308284][ T3661] usb 4-1: USB disconnect, device number 37
[  973.049366][ T3661] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  973.123671][T13330] loop4: detected capacity change from 0 to 16
[  973.132580][  T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  973.334914][T13330] erofs: (device loop4): mounted with root inode @ nid 36.
[  973.569442][  T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  973.634885][ T3661] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  973.674376][T13341] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  973.809311][ T3661] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  974.022299][ T3661] usb 4-1: config 0 descriptor??
[  974.210965][    C0] eth0: bad gso: type: 1, size: 1408
[  974.235618][  T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  974.246103][ T3661] usb 4-1: string descriptor 0 read error: -71
[  974.332516][  T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  974.346251][ T3661] pegasus: probe of 4-1:0.0 failed with error -71
[  974.367695][ T3661] usb 4-1: USB disconnect, device number 38
[  974.426055][T12504] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  974.526162][T13354] loop4: detected capacity change from 0 to 8192
[  974.816936][T13354] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  974.872987][T12504] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  974.885715][T12504] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  974.948238][T13354] REISERFS (device loop4): using ordered data mode
[  974.957176][T13354] reiserfs: using flush barriers
[  975.016432][T12504] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  975.026517][T12504] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  975.034527][T12504] usb 1-1: Manufacturer: syz
[  975.039995][T13354] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  975.132403][T12504] usb 1-1: config 0 descriptor??
[  975.161555][T13354] REISERFS (device loop4): checking transaction log (loop4)
[  975.290977][T12504] rc_core: IR keymap rc-hauppauge not found
[  975.303645][T12504] Registered IR keymap rc-empty
[  975.316437][T12504] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  975.334878][T12504] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input52
[  975.454006][T13354] REISERFS (device loop4): Using tea hash to sort names
[  975.510594][T13354] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  975.561782][T13380] loop3: detected capacity change from 0 to 512
[  975.632968][T13380] EXT4-fs (loop3): Ignoring removed nobh option
[  975.713244][T13380] EXT4-fs (loop3): 1 truncate cleaned up
[  975.739415][T13380] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[  975.810692][T13355] loop1: detected capacity change from 0 to 32768
[  977.943519][T13236] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  977.978685][T11621] usb 1-1: USB disconnect, device number 41
[  978.021518][T13236] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  978.220097][T13236] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  978.254483][T13236] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  978.659892][T13416] loop3: detected capacity change from 0 to 128
[  979.581396][T13423] loop1: detected capacity change from 0 to 16
[  979.598585][T13236] 8021q: adding VLAN 0 to HW filter on device bond0
[  979.708950][T13424] overlayfs: failed to resolve './file0': -2
[  979.727365][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  979.742712][T13423] erofs: (device loop1): mounted with root inode @ nid 36.
[  979.761974][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  979.876513][T13236] 8021q: adding VLAN 0 to HW filter on device team0
[  980.101503][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  980.122443][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  980.160053][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2004'.
[  980.182895][ T4067] bridge0: port 1(bridge_slave_0) entered blocking state
[  980.190006][ T4067] bridge0: port 1(bridge_slave_0) entered forwarding state
[  980.280462][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  980.303920][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  980.338971][ T4067] bridge0: port 2(bridge_slave_1) entered blocking state
[  980.346166][ T4067] bridge0: port 2(bridge_slave_1) entered forwarding state
[  980.362240][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  980.419864][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  980.476651][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  980.518411][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  980.546738][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  980.585382][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  980.718245][T13236] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  980.764874][T13236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  980.844402][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  980.862825][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  980.904251][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  980.932725][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  980.958885][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  980.981642][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  981.001219][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  981.157024][T13458] loop3: detected capacity change from 0 to 512
[  981.216025][T11621] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  981.263750][T13458] EXT4-fs (loop3): Ignoring removed nobh option
[  981.337512][T13458] EXT4-fs (loop3): 1 truncate cleaned up
[  981.343293][T13458] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[  981.372144][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  981.383678][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  981.420982][T13236] 8021q: adding VLAN 0 to HW filter on device batadv0
[  981.965715][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  982.052684][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  982.406934][T11621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  982.501710][T13236] device veth0_vlan entered promiscuous mode
[  983.381487][T11621] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  983.391002][T11621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  983.401056][T11621] usb 5-1: config 0 descriptor??
[  983.896258][T11621] gspca_main: spca561-2.14.0 probing abcd:cdee
[  984.270314][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  984.281043][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  984.296636][T13236] device veth1_vlan entered promiscuous mode
[  984.334805][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  984.380496][T11621] spca561: probe of 5-1:0.0 failed with error -22
[  984.388073][T11621] usb 5-1: MIDIStreaming interface descriptor not found
[  984.407561][T11621] usb 5-1: USB disconnect, device number 29
[  984.441592][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  984.478612][T13485] overlayfs: failed to resolve './file0': -2
[  984.544735][T10782] udevd[10782]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  985.060496][   T26] audit: type=1326 audit(2000000004.970:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13484 comm="syz.1.2017" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe69d708e79 code=0x0
[  985.411712][T13499] loop4: detected capacity change from 0 to 128
[  990.460990][T13499] EXT4-fs: error -4 creating inode table initialization thread
[  990.470267][T13499] EXT4-fs (loop4): mount failed
[  990.543753][T11072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  990.567456][T11072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  990.676559][T13236] device veth0_macvtap entered promiscuous mode
[  990.717101][T13515] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  990.741065][T13236] device veth1_macvtap entered promiscuous mode
[  990.749403][T13516] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  990.762286][T13514] loop3: detected capacity change from 0 to 8
[  990.788220][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  990.799463][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  990.827170][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  990.844371][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  990.854844][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  990.865598][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  990.879395][T13519] xt_CT: You must specify a L4 protocol and not use inversions on it
[  990.881536][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  990.903814][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  990.915184][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  990.925966][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  990.936524][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  990.949788][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  990.964415][T13236] batman_adv: batadv0: Interface activated: batadv_slave_0
[  990.985724][T11072] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  990.994537][T11072] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  991.004339][T11072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  991.026165][ T1075] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  991.045240][  T144] device hsr_slave_0 left promiscuous mode
[  991.060782][  T144] device hsr_slave_1 left promiscuous mode
[  991.068542][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  991.076519][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  991.084539][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  991.123220][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  991.137524][  T144] device bridge_slave_1 left promiscuous mode
[  991.143755][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  991.153406][  T144] device bridge_slave_0 left promiscuous mode
[  991.160245][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  991.171807][  T144] device hsr_slave_0 left promiscuous mode
[  991.178558][T12509] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  991.187184][  T144] device hsr_slave_1 left promiscuous mode
[  991.193966][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  991.201673][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  991.209641][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  991.217390][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  991.225218][  T144] device bridge_slave_1 left promiscuous mode
[  991.232784][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  991.242419][  T144] device bridge_slave_0 left promiscuous mode
[  991.249403][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  991.265643][  T144] device veth1_macvtap left promiscuous mode
[  991.271787][ T1075] usb 2-1: Using ep0 maxpacket: 32
[  991.277072][  T144] device veth0_macvtap left promiscuous mode
[  991.283150][  T144] device veth1_vlan left promiscuous mode
[  991.289582][  T144] device veth0_vlan left promiscuous mode
[  991.296802][  T144] device veth1_macvtap left promiscuous mode
[  991.302837][  T144] device veth0_macvtap left promiscuous mode
[  991.309984][  T144] device veth1_vlan left promiscuous mode
[  991.315768][  T144] device veth0_vlan left promiscuous mode
[  991.426372][ T1075] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  991.456238][ T1075] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  991.466428][ T1075] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  991.476889][ T1075] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  991.487016][ T1075] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  991.566454][T12509] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=be.42
[  991.580365][T12509] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  991.598550][T12509] usb 1-1: config 0 descriptor??
[  991.647802][T12509] ldusb 1-1:0.0: Interrupt in endpoint not found
[  991.666474][ T1075] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  991.676718][ T1075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.693037][ T1075] usb 2-1: Product: syz
[  991.698449][ T1075] usb 2-1: Manufacturer: syz
[  991.703260][ T1075] usb 2-1: SerialNumber: syz
[  991.730841][  T144] team0 (unregistering): Port device team_slave_1 removed
[  991.750244][  T144] team0 (unregistering): Port device team_slave_0 removed
[  991.762682][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  991.777959][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  991.858251][  T144] bond0 (unregistering): Released all slaves
[  991.990538][  T144] team0 (unregistering): Port device team_slave_1 removed
[  992.006478][  T144] team0 (unregistering): Port device team_slave_0 removed
[  992.020527][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  992.035512][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  992.118315][  T144] bond0 (unregistering): Released all slaves
[  992.195826][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.206678][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.217122][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.227713][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.237698][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.248440][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.258321][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.269516][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.280682][T13236] batman_adv: batadv0: Interface activated: batadv_slave_1
[  992.296354][T13236] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  992.305303][T13236] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  992.322943][T13236] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  992.341968][T13236] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  992.357263][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  992.369233][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  992.384956][T13525] loop3: detected capacity change from 0 to 512
[  992.432877][T13525] EXT4-fs (loop3): Ignoring removed nobh option
[  992.442552][ T1075] cdc_ncm 2-1:1.0: bind() failure
[  992.455603][ T1075] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  992.472815][ T1075] cdc_ncm 2-1:1.1: bind() failure
[  992.500818][T13525] EXT4-fs (loop3): 1 truncate cleaned up
[  992.525390][ T1075] usb 2-1: USB disconnect, device number 29
[  992.546478][T13529] loop4: detected capacity change from 0 to 16
[  992.552764][T13525] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[  992.579178][T13529] erofs: (device loop4): mounted with root inode @ nid 36.
[  992.931338][T13532] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  992.990764][ T1389] ieee802154 phy0 wpan0: encryption failed: -22
[  993.498505][T10571] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0
[  993.520291][T10571] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[  993.539914][T10571] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[  993.659813][ T7216] usb 1-1: USB disconnect, device number 42
[  993.938862][ T4009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  993.988659][ T4009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  994.055723][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  994.073652][T11079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  994.097011][T11079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  994.172927][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  994.230022][T13541] loop4: detected capacity change from 0 to 32768
[  994.294271][T13541] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2030 (13541)
[  994.378491][T13541] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  994.388461][T13541] BTRFS info (device loop4): setting nodatacow, compression disabled
[  994.396699][T13541] BTRFS info (device loop4): enabling ssd optimizations
[  994.403653][T13541] BTRFS info (device loop4): using spread ssd allocation scheme
[  994.411782][T13541] BTRFS info (device loop4): enabling auto defrag
[  994.418355][T13541] BTRFS info (device loop4): max_inline at 0
[  994.424363][T13541] BTRFS info (device loop4): using free space tree
[  994.430985][T13541] BTRFS info (device loop4): has skinny extents
[  994.449837][   T26] audit: type=1326 audit(2000000014.360:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.1.2037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe69d708e79 code=0x0
[  994.508401][T13547] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  994.760493][T13555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1971'.
[  996.634358][T13541] BTRFS info (device loop4): resizing devid 73709551615
[  996.642199][T13541] BTRFS info (device loop4): resizer unable to find device 73709551615
[  996.851312][T10317] Bluetooth: hci2: command 0x0409 tx timeout
[  996.908501][T13579] loop2: detected capacity change from 0 to 512
[  996.948746][T13579] EXT4-fs (loop2): Ignoring removed nobh option
[  996.988674][T13581] Process accounting resumed
[  997.011288][T13579] EXT4-fs (loop2): 1 truncate cleaned up
[  997.037917][T13579] EXT4-fs (loop2): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[  997.355009][T13571] chnl_net:caif_netlink_parms(): no params data found
[  998.928515][ T1075] Bluetooth: hci2: command 0x041b tx timeout
[  999.070356][T13610] loop1: detected capacity change from 0 to 512
[  999.365142][T13614] loop2: detected capacity change from 0 to 256
[  999.405547][T13571] bridge0: port 1(bridge_slave_0) entered blocking state
[  999.455622][T13571] bridge0: port 1(bridge_slave_0) entered disabled state
[  999.525196][T13571] device bridge_slave_0 entered promiscuous mode
[  999.587075][T13571] bridge0: port 2(bridge_slave_1) entered blocking state
[  999.594822][T13571] bridge0: port 2(bridge_slave_1) entered disabled state
[  999.627648][T13571] device bridge_slave_1 entered promiscuous mode
[  999.975758][T13610] EXT4-fs (loop1): Ignoring removed nobh option
[ 1000.035804][T13610] EXT4-fs (loop1): 1 truncate cleaned up
[ 1000.056054][T13610] EXT4-fs (loop1): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[ 1000.390409][T13571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1000.412381][T12988] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0
[ 1000.445169][T13571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1000.489114][T12988] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[ 1000.584115][T12988] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[ 1000.767049][T13633] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 1000.986306][T13571] team0: Port device team_slave_0 added
[ 1000.995508][ T9231] Bluetooth: hci2: command 0x040f tx timeout
[ 1001.165158][T13638] loop2: detected capacity change from 0 to 512
[ 1001.196048][T13571] team0: Port device team_slave_1 added
[ 1001.264271][T13638] EXT4-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value
[ 1001.357423][T13640] loop2: detected capacity change from 0 to 256
[ 1001.367188][T13571] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1001.374406][T13571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1001.457063][T13638] trusted_key: encrypted_key: master key parameter 'defaul˙˙' is invalid
[ 1001.487741][T13571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1001.791463][T13642] loop2: detected capacity change from 0 to 512
[ 1001.865879][T13642] EXT4-fs (loop2): Ignoring removed nobh option
[ 1001.919135][T13571] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1001.941774][T13642] EXT4-fs (loop2): 1 truncate cleaned up
[ 1001.966275][T13571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1002.034342][T13642] EXT4-fs (loop2): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[ 1002.166009][T13571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1002.203852][T13649] fuse: blksize only supported for fuseblk
[ 1002.308694][T13571] device hsr_slave_0 entered promiscuous mode
[ 1002.376555][T13571] device hsr_slave_1 entered promiscuous mode
[ 1002.478905][T13571] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1002.499647][T13571] Cannot create hsr debugfs directory
[ 1002.645753][    C0] eth0: bad gso: type: 1, size: 1408
[ 1003.202145][T13663] 9pnet: Insufficient options for proto=fd
[ 1003.280817][T13663] netlink: 'syz.2.2058': attribute type 10 has an invalid length.
[ 1003.300426][ T9231] Bluetooth: hci2: command 0x0419 tx timeout
[ 1003.308852][T13663] bond0: (slave bond_slave_0): Releasing backup interface
[ 1003.492788][T13571] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1003.530174][T13672] loop2: detected capacity change from 0 to 512
[ 1003.558912][T13651] chnl_net:caif_netlink_parms(): no params data found
[ 1003.658326][T13672] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1003.685295][T13571] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1003.703335][T13672] EXT4-fs (loop2): 1 truncate cleaned up
[ 1003.711812][T13672] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none.
[ 1003.783751][   T26] audit: type=1800 audit(2000000023.690:529): pid=13672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2060" name="bus" dev="loop2" ino=18 res=0 errno=0
[ 1003.809859][T13571] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1003.915647][T13668] tipc: Started in network mode
[ 1003.947788][T13668] tipc: Node identity 0000000000000000ffffffffffffffff, cluster identity 4711
[ 1004.009597][T13571] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1004.043511][T13651] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1004.055645][T13651] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1004.080935][T13651] device bridge_slave_0 entered promiscuous mode
[ 1004.111834][T13651] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1004.159072][T13651] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1004.329262][T13651] device bridge_slave_1 entered promiscuous mode
[ 1004.389280][T13651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1004.561301][ T7216] Bluetooth: hci0: command 0x0409 tx timeout
[ 1004.725780][T13651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1005.310495][T13651] team0: Port device team_slave_0 added
[ 1005.405130][T13651] team0: Port device team_slave_1 added
[ 1005.438222][T13571] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1005.470980][T13571] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1006.266554][T13694] loop4: detected capacity change from 0 to 40427
[ 1006.775514][ T3610] Bluetooth: hci0: command 0x041b tx timeout
[ 1006.870710][T13571] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1006.890868][T13694] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[ 1006.898777][T13694] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1006.920349][T13694] F2FS-fs (loop4): invalid crc value
[ 1006.939727][T13571] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1006.976661][T13694] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 1007.032141][T13694] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 1007.039379][T13694] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1007.051782][T13651] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1007.059053][T13651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1007.087599][T13709] netlink: 'syz.2.2068': attribute type 2 has an invalid length.
[ 1007.095354][T13709] netlink: 'syz.2.2068': attribute type 1 has an invalid length.
[ 1007.116373][T13651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1007.148057][T13651] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1007.155026][T13651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1007.427600][T13651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1008.203795][T13651] device hsr_slave_0 entered promiscuous mode
[ 1008.228154][T13651] device hsr_slave_1 entered promiscuous mode
[ 1008.257304][T13651] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1008.264992][T13651] Cannot create hsr debugfs directory
[ 1008.818447][T13651] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1008.828942][ T7216] Bluetooth: hci0: command 0x040f tx timeout
[ 1008.923391][T13651] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1008.969143][T13571] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1009.016186][T11072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1009.025368][T11072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1009.063308][T13571] 8021q: adding VLAN 0 to HW filter on device team0
[ 1009.118108][T13651] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1009.129155][ T3610] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1009.222646][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1009.248862][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1009.263962][ T4009] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1009.271147][ T4009] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1009.284275][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1009.310407][T13651] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1009.338151][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1009.348854][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1009.366416][ T4009] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1009.373558][ T4009] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1009.386417][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1009.396128][ T3610] usb 5-1: Using ep0 maxpacket: 8
[ 1009.429769][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1009.487764][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1009.519803][ T3610] usb 5-1: config 0 has an invalid interface number: 130 but max is 1
[ 1009.543963][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1009.543968][ T3610] usb 5-1: config 0 has no interface number 1
[ 1009.544016][ T3610] usb 5-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice=51.2c
[ 1009.587139][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1009.606010][ T3610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1009.622222][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1009.627207][ T3610] usb 5-1: config 0 descriptor??
[ 1009.664387][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1009.711788][T13571] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1009.713344][T13738] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2074'.
[ 1009.733924][ T3610] snd-usb-audio: probe of 5-1:0.130 failed with error -22
[ 1009.750112][T11124] udevd[11124]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.130/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1009.752883][T13571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1009.770115][ T3610] usb 5-1: Found UVC 0.00 device <unnamed> (2b73:001e)
[ 1009.796115][ T3610] usb 5-1: No valid video chain found.
[ 1009.804681][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1009.823322][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1009.838393][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1009.856062][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1009.930613][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1010.473947][  T144] tipc: Disabling bearer <udp:syz2>
[ 1010.480021][  T144] tipc: Left network mode
[ 1010.488661][T13651] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1010.536361][T13651] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1010.595816][T13651] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1010.643351][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1010.659487][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1010.684020][T13571] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1010.696700][T13651] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1010.860470][T11072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1010.873918][T11072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1010.920576][T11072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1010.934914][T11072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1010.961021][T13571] device veth0_vlan entered promiscuous mode
[ 1010.982106][T11072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1011.001897][T11072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1011.022451][ T3610] Bluetooth: hci0: command 0x0419 tx timeout
[ 1011.040319][T13571] device veth1_vlan entered promiscuous mode
[ 1011.491871][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1011.519653][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1011.527996][ T3610] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1011.956797][T13726] delete_channel: no stack
[ 1012.020472][ T7216] usb 5-1: USB disconnect, device number 30
[ 1012.153837][T13651] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1012.186315][ T3610] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1012.210517][T13571] device veth0_macvtap entered promiscuous mode
[ 1012.227038][ T3610] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1012.260030][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1012.272933][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1012.326194][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1012.335212][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1012.336195][ T3610] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1012.344370][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1012.375377][ T3610] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1012.377586][T13571] device veth1_macvtap entered promiscuous mode
[ 1012.394020][ T3610] usb 3-1: Manufacturer: syz
[ 1012.401942][T13651] 8021q: adding VLAN 0 to HW filter on device team0
[ 1012.421800][ T3610] usb 3-1: config 0 descriptor??
[ 1012.429810][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1012.461033][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1012.481701][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1012.514307][T11079] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1012.521470][T11079] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1012.562704][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1012.596209][ T3610] rc_core: IR keymap rc-hauppauge not found
[ 1012.597164][T13571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1012.602135][ T3610] Registered IR keymap rc-empty
[ 1012.602839][ T3610] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1012.657951][T13571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1012.680190][T13571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1012.683376][ T3610] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input53
[ 1012.724163][T13571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1012.759171][T13571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1012.841023][T13571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1012.925946][T13571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1012.961926][T13571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1012.988234][T13571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1013.013690][T13571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1013.049257][T13571] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1013.089631][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1013.104871][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1013.127056][ T4067] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1013.134123][ T4067] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1013.168932][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1013.198583][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1013.219771][T13571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1013.241431][T13571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1013.254581][T13571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1013.266570][T13571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1013.278088][T13571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1013.289102][T13571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1013.300609][T13571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1013.321737][T13571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1013.339545][T13571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1013.358702][T13571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1013.384205][T13571] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1013.420411][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1013.429600][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1013.441843][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1013.468110][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1013.485546][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1013.495763][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1013.510684][T13571] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1013.521300][T13571] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1013.530113][T13571] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1013.538919][T13571] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1013.557963][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1013.572645][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1013.592871][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1013.611633][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1013.624162][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1013.680264][T12508] usb 3-1: USB disconnect, device number 31
[ 1013.692996][T13651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1013.763756][T13651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1013.787778][T13778] dlm: dev_write: no op 0 74000000000000
[ 1013.801968][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1013.828647][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1014.040084][ T4009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1014.062812][ T4009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1014.114119][T11072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1014.126853][T11072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1014.224147][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1014.237193][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1014.257271][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1014.266531][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1014.295033][T13651] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1014.372739][T13651] device veth0_vlan entered promiscuous mode
[ 1014.407582][T13651] device veth1_vlan entered promiscuous mode
[ 1014.466784][T13651] device veth0_macvtap entered promiscuous mode
[ 1014.490635][T13651] device veth1_macvtap entered promiscuous mode
[ 1014.527078][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1014.547589][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1014.565410][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1014.606195][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1014.616445][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1014.627167][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1014.637200][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1014.647686][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1014.657632][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1014.688754][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1014.698820][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1014.709893][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1014.853504][T13651] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1015.004710][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1015.026428][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1015.036845][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1015.045509][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1015.079520][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1015.090976][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1015.226683][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1015.252345][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1015.271028][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1015.332451][T13800] overlayfs: failed to resolve './file0': -2
[ 1015.560025][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1015.668621][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1015.765620][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1015.782725][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1015.792393][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1015.807369][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1015.822088][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1015.836392][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1015.858042][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1015.874168][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1015.885283][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1015.898428][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1016.049072][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1016.065362][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1016.080363][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1016.093415][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1016.889564][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1016.943455][T13651] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1016.983498][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1017.124070][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1017.967250][T13651] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1017.985149][T13819] misc userio: Invalid payload size
[ 1017.994928][T13651] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1018.059367][T13651] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1018.085145][T13651] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1018.401719][ T4960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1018.439316][ T4960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1018.521381][T11072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1018.586129][T11072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1018.603772][ T3661] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 1018.622121][T11072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1018.701189][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1018.785994][T11621] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 1018.996386][ T3661] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1019.004789][ T3661] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1019.211254][T13843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2097'.
[ 1019.416182][ T3661] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1019.429914][ T3661] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1019.439623][ T3661] usb 4-1: Manufacturer: syz
[ 1019.456479][ T3661] usb 4-1: config 0 descriptor??
[ 1019.576906][  T144] device hsr_slave_0 left promiscuous mode
[ 1019.589701][  T144] device hsr_slave_1 left promiscuous mode
[ 1019.616280][ T3661] rc_core: IR keymap rc-hauppauge not found
[ 1019.622200][ T3661] Registered IR keymap rc-empty
[ 1019.640686][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1019.656169][T11621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1019.669499][ T3661] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1019.684193][T11621] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1019.695364][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1019.715838][ T3661] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input54
[ 1019.735166][T11621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1019.781062][T11621] usb 1-1: config 0 descriptor??
[ 1019.817255][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1019.905645][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1019.951005][  T144] device bridge_slave_1 left promiscuous mode
[ 1019.974496][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1020.004598][  T144] device bridge_slave_0 left promiscuous mode
[ 1020.015457][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1020.046314][  T144] device hsr_slave_0 left promiscuous mode
[ 1020.054843][  T144] device hsr_slave_1 left promiscuous mode
[ 1020.062995][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1020.073109][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1020.085174][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1020.100810][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1020.118699][  T144] device bridge_slave_1 left promiscuous mode
[ 1020.125817][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1020.166055][  T144] device bridge_slave_0 left promiscuous mode
[ 1020.178872][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1020.207565][  T144] device veth1_macvtap left promiscuous mode
[ 1020.213832][  T144] device veth0_macvtap left promiscuous mode
[ 1020.359323][T11621] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor
[ 1020.376341][  T144] device veth1_vlan left promiscuous mode
[ 1020.392984][T11621] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0010/input/input55
[ 1021.336971][  T144] device veth0_vlan left promiscuous mode
[ 1021.381537][  T144] device veth1_macvtap left promiscuous mode
[ 1021.389628][T11621] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[ 1021.418909][  T144] device veth0_macvtap left promiscuous mode
[ 1021.436461][  T144] device veth1_vlan left promiscuous mode
[ 1021.472847][ T7219] usb 1-1: USB disconnect, device number 43
[ 1021.646321][T11621] usb 4-1: USB disconnect, device number 39
[ 1022.542199][T13888] netlink: 'syz.1.2106': attribute type 11 has an invalid length.
[ 1022.592873][T13889] netlink: 'syz.1.2106': attribute type 11 has an invalid length.
[ 1024.118676][T13890] loop1: detected capacity change from 0 to 32768
[ 1024.172473][T13890] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2106 (13890)
[ 1024.289696][T13890] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[ 1024.321618][T13890] BTRFS info (device loop1): using free space tree
[ 1024.352179][T13890] BTRFS info (device loop1): has skinny extents
[ 1024.379679][  T144] team0 (unregistering): Port device team_slave_1 removed
[ 1024.423232][  T144] team0 (unregistering): Port device team_slave_0 removed
[ 1024.556778][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1024.578062][T13890] BTRFS info (device loop1): enabling ssd optimizations
[ 1024.608246][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1024.756822][  T144] bond0 (unregistering): Released all slaves
[ 1024.894624][  T144] team0 (unregistering): Port device team_slave_1 removed
[ 1024.911593][  T144] team0 (unregistering): Port device team_slave_0 removed
[ 1024.924639][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1024.942526][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1025.014145][  T144] bond0 (unregistering): Released all slaves
[ 1028.787506][T13948] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2117'.
[ 1028.879658][T13952] loop3: detected capacity change from 0 to 256
[ 1028.963884][T13952] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1029.234110][T13960] binder: BINDER_SET_CONTEXT_MGR already set
[ 1029.240865][T13960] binder: 13956:13960 ioctl 4018620d 20000040 returned -16
[ 1030.939213][T13961] loop4: detected capacity change from 0 to 4096
[ 1031.176466][T13974] loop2: detected capacity change from 0 to 1024
[ 1032.096933][T13978] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1032.181598][T13974] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1032.297152][   T26] audit: type=1800 audit(2000000052.210:530): pid=13970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2122" name="file1" dev="loop2" ino=15 res=0 errno=0
[ 1032.351895][T13974] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.2122: Invalid inode table block 14224531095162842338 in block_group 0
[ 1032.419784][T13974] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5800: Corrupt filesystem
[ 1032.431027][T13974] EXT4-fs error (device loop2): ext4_dirty_inode:6004: inode #15: comm syz.2.2122: mark_inode_dirty error
[ 1032.484904][T13974] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.2122: Invalid inode table block 14224531095162842338 in block_group 0
[ 1032.732119][T13236] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1)
[ 1032.763678][T13236] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block
[ 1032.786251][T13236] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 14224531095162842338 in block_group 0
[ 1032.824203][T13236] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5800: Corrupt filesystem
[ 1032.865363][T13236] EXT4-fs error (device loop2): ext4_dirty_inode:6004: inode #2: comm syz-executor: mark_inode_dirty error
[ 1032.889148][ T2642] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm kworker/u4:4: Invalid inode table block 14224531095162842338 in block_group 0
[ 1032.954898][ T2642] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm kworker/u4:4: Invalid inode table block 14224531095162842338 in block_group 0
[ 1033.100892][T13954] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 1034.271478][T13954] usb 5-1: Using ep0 maxpacket: 32
[ 1034.786510][T13954] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72
[ 1034.816106][T11620] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1034.870803][T13954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1034.924935][T13954] usb 5-1: Product: syz
[ 1034.947354][T13954] usb 5-1: Manufacturer: syz
[ 1034.972129][T13954] usb 5-1: SerialNumber: syz
[ 1035.096122][T11620] usb 2-1: Using ep0 maxpacket: 8
[ 1035.180984][T13954] usb 5-1: config 0 descriptor??
[ 1035.227299][T11620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1035.324287][T11620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1035.354904][T11620] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[ 1035.369346][T11620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1035.393460][T11620] usb 2-1: config 0 descriptor??
[ 1035.441264][T14023] loop3: detected capacity change from 0 to 512
[ 1035.525616][T14023] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[ 1035.624289][T13954] snd-usb-audio: probe of 5-1:0.0 failed with error -71
[ 1035.654928][T13954] usb 5-1: USB disconnect, device number 31
[ 1035.877467][T14019] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1035.927113][T11620] logitech 0003:046D:C20E.0011: rdesc size test failed for formula gp
[ 1035.938250][T11620] logitech 0003:046D:C20E.0011: item fetching failed at offset 10/11
[ 1035.950854][T11620] logitech 0003:046D:C20E.0011: parse failed
[ 1035.957217][T11620] logitech: probe of 0003:046D:C20E.0011 failed with error -22
[ 1036.148773][ T5460] usb 2-1: USB disconnect, device number 30
[ 1036.802162][T14034] loop4: detected capacity change from 0 to 512
[ 1036.846912][T14028] chnl_net:caif_netlink_parms(): no params data found
[ 1036.945764][T14034] EXT4-fs (loop4): Ignoring removed nobh option
[ 1037.100127][T14034] EXT4-fs (loop4): 1 truncate cleaned up
[ 1037.137576][T14034] EXT4-fs (loop4): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[ 1037.479064][T14028] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1037.497328][T14028] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1037.527676][T14028] device bridge_slave_0 entered promiscuous mode
[ 1037.540201][T14028] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1037.547709][T14028] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1037.556917][T14028] device bridge_slave_1 entered promiscuous mode
[ 1037.596033][ T5460] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1037.608932][T14028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1037.624056][T14028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1037.678382][T14028] team0: Port device team_slave_0 added
[ 1037.687394][T14028] team0: Port device team_slave_1 added
[ 1037.776614][T14028] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1037.818867][T14028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1037.872916][T14028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1037.912298][T14028] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1037.959184][T14028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1037.996253][ T5460] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1038.024161][T14056] loop3: detected capacity change from 0 to 512
[ 1038.026085][T11620] Bluetooth: hci1: command 0x0409 tx timeout
[ 1038.037941][ T5460] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1038.074213][T14028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1038.136317][ T5460] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1038.155353][T14056] EXT4-fs (loop3): Ignoring removed nobh option
[ 1038.172315][ T5460] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1038.195127][T14056] EXT4-fs (loop3): 1 truncate cleaned up
[ 1038.201421][ T5460] usb 2-1: Manufacturer: syz
[ 1038.216074][T14056] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[ 1038.237798][ T5460] usb 2-1: config 0 descriptor??
[ 1038.523743][T14053] orangefs_mount: mount request failed with -4
[ 1038.538627][T14028] device hsr_slave_0 entered promiscuous mode
[ 1038.556690][T14028] device hsr_slave_1 entered promiscuous mode
[ 1038.579288][T14028] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1038.627299][ T5460] rc_core: IR keymap rc-hauppauge not found
[ 1038.633231][ T5460] Registered IR keymap rc-empty
[ 1038.647011][T14028] Cannot create hsr debugfs directory
[ 1038.662084][ T5460] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1038.735539][ T5460] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input56
[ 1039.213017][T11622] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1039.335656][T14028] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1039.407684][T14028] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1039.527734][T14028] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1039.567097][ T4604] usb 2-1: USB disconnect, device number 31
[ 1039.606139][T11622] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=be.42
[ 1039.622086][T11622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1039.667046][T11622] usb 4-1: config 0 descriptor??
[ 1039.730406][T11622] ldusb 4-1:0.0: Interrupt in endpoint not found
[ 1039.764264][T14028] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1039.975529][T13954] usb 4-1: USB disconnect, device number 40
[ 1040.112631][ T4604] Bluetooth: hci1: command 0x041b tx timeout
[ 1041.024265][T14028] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1041.050031][T14084] loop4: detected capacity change from 0 to 512
[ 1041.087276][T14028] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1041.135717][T14028] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1041.216522][T14028] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1041.279756][T14084] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1041.357127][T14084] ext4 filesystem being mounted at /38/bus supports timestamps until 2038 (0x7fffffff)
[ 1041.419069][T14098] loop3: detected capacity change from 0 to 16
[ 1041.429628][T14028] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1041.624441][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1042.220486][T10317] Bluetooth: hci1: command 0x040f tx timeout
[ 1042.226806][T14098] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1042.403367][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1042.564959][T14096] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1042.706344][T14105] loop4: detected capacity change from 0 to 16
[ 1042.709582][T14028] 8021q: adding VLAN 0 to HW filter on device team0
[ 1042.795775][T14105] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1042.809774][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1042.837195][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1043.021268][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1043.028672][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1043.114378][T14109] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1043.693641][T14108] loop1: detected capacity change from 0 to 512
[ 1043.732230][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1043.740718][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1043.757290][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1043.777572][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1043.784665][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1043.795085][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1043.841927][T14108] EXT4-fs (loop1): Ignoring removed nobh option
[ 1043.845436][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1044.014157][T14108] EXT4-fs (loop1): 1 truncate cleaned up
[ 1044.024681][T14119] loop3: detected capacity change from 0 to 512
[ 1044.032259][T10317] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 1044.042345][T14108] EXT4-fs (loop1): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[ 1044.080843][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1044.089577][T10317] Bluetooth: hci0: Injecting HCI hardware error event
[ 1044.128213][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1044.558160][T13651] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0
[ 1044.951220][T14119] EXT4-fs (loop3): Ignoring removed nobh option
[ 1044.960879][T13651] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[ 1044.980974][T13651] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[ 1045.138879][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1045.152179][T10317] ==================================================================
[ 1045.161407][T10317] BUG: KASAN: use-after-free in hci_recv_frame+0x3c/0x1e0
[ 1045.168549][T10317] Read of size 8 at addr ffff888059a580a8 by task kworker/0:9/10317
[ 1045.176547][T10317] 
[ 1045.178877][T10317] CPU: 0 PID: 10317 Comm: kworker/0:9 Not tainted 5.15.165-syzkaller #0
[ 1045.187305][T10317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1045.197404][T10317] Workqueue: events hci_ncmd_timeout
[ 1045.202716][T10317] Call Trace:
[ 1045.203092][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1045.206006][T10317]  <TASK>
[ 1045.206079][T10317]  dump_stack_lvl+0x1e3/0x2d0
[ 1045.221463][T10317]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 1045.227113][T10317]  ? _printk+0xd1/0x120
[ 1045.228688][T14119] EXT4-fs (loop3): 1 truncate cleaned up
[ 1045.231294][T10317]  ? __wake_up_klogd+0xcc/0x100
[ 1045.241770][T10317]  ? panic+0x860/0x860
[ 1045.245851][T10317]  ? _raw_spin_lock_irqsave+0xdd/0x120
[ 1045.246791][T14119] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback.
[ 1045.251323][T10317]  ? bt_err+0x123/0x170
[ 1045.251359][T10317]  print_address_description+0x63/0x3b0
[ 1045.280472][T10317]  ? hci_recv_frame+0x3c/0x1e0
[ 1045.283375][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1045.285246][T10317]  kasan_report+0x16b/0x1c0
[ 1045.297528][T10317]  ? hci_recv_frame+0x3c/0x1e0
[ 1045.302320][T10317]  kasan_check_range+0x27e/0x290
[ 1045.307278][T10317]  hci_recv_frame+0x3c/0x1e0
[ 1045.311895][T10317]  process_one_work+0x8a1/0x10c0
[ 1045.314838][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1045.316869][T10317]  ? worker_detach_from_pool+0x260/0x260
[ 1045.316904][T10317]  ? _raw_spin_lock_irqsave+0x120/0x120
[ 1045.316930][T10317]  ? kthread_data+0x4e/0xc0
[ 1045.316954][T10317]  ? wq_worker_running+0x97/0x170
[ 1045.316997][T10317]  worker_thread+0xaca/0x1280
[ 1045.317046][T10317]  kthread+0x3f6/0x4f0
[ 1045.354105][T10317]  ? rcu_lock_release+0x20/0x20
[ 1045.358974][T10317]  ? kthread_blkcg+0xd0/0xd0
[ 1045.363611][T10317]  ret_from_fork+0x1f/0x30
[ 1045.368071][T10317]  </TASK>
[ 1045.371113][T10317] 
[ 1045.373455][T10317] Allocated by task 13651:
[ 1045.377872][T10317]  ____kasan_kmalloc+0xba/0xf0
[ 1045.381993][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1045.382661][T10317]  __kmalloc+0x168/0x300
[ 1045.394698][T10317]  hci_alloc_dev_priv+0x23/0x1d60
[ 1045.399741][T10317]  vhci_create_device+0x120/0x590
[ 1045.404777][T10317]  vhci_write+0x382/0x430
[ 1045.409123][T10317]  vfs_write+0xacd/0xe50
[ 1045.413397][T10317]  ksys_write+0x1a2/0x2c0
[ 1045.417743][T10317]  do_syscall_64+0x3b/0xb0
[ 1045.422175][T10317]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1045.428081][T10317] 
[ 1045.430407][T10317] Freed by task 13651:
[ 1045.434478][T10317]  kasan_set_track+0x4b/0x80
[ 1045.439088][T10317]  kasan_set_free_info+0x1f/0x40
[ 1045.444046][T10317]  ____kasan_slab_free+0xd8/0x120
[ 1045.445487][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1045.449081][T10317]  slab_free_freelist_hook+0xdd/0x160
[ 1045.449109][T10317]  kfree+0xf1/0x270
[ 1045.449128][T10317]  hci_release_dev+0x149e/0x1620
[ 1045.449149][T10317]  bt_host_release+0x7f/0x90
[ 1045.449167][T10317]  device_release+0x91/0x1c0
[ 1045.449186][T10317]  kobject_put+0x224/0x460
[ 1045.449205][T10317]  vhci_release+0x7b/0xc0
[ 1045.488877][T10317]  __fput+0x3fe/0x8e0
[ 1045.492884][T10317]  task_work_run+0x129/0x1a0
[ 1045.497493][T10317]  do_exit+0x6a3/0x2480
[ 1045.501667][T10317]  do_group_exit+0x144/0x310
[ 1045.506269][T10317]  __x64_sys_exit_group+0x3b/0x40
[ 1045.511313][T10317]  do_syscall_64+0x3b/0xb0
[ 1045.515741][T10317]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1045.521641][T10317] 
[ 1045.523963][T10317] Last potentially related work creation:
[ 1045.529673][T10317]  kasan_save_stack+0x36/0x60
[ 1045.534365][T10317]  kasan_record_aux_stack+0xba/0x100
[ 1045.539659][T10317]  insert_work+0x54/0x3e0
[ 1045.543998][T10317]  __queue_work+0x963/0xd00
[ 1045.548505][T10317]  call_timer_fn+0x16d/0x560
[ 1045.553311][T10317]  __run_timers+0x6a8/0x890
[ 1045.557820][T10317]  run_timer_softirq+0x63/0xf0
[ 1045.562855][T10317]  handle_softirqs+0x3a7/0x930
[ 1045.567758][T10317]  __irq_exit_rcu+0x157/0x240
[ 1045.572529][T10317]  irq_exit_rcu+0x5/0x20
[ 1045.576776][T10317]  sysvec_apic_timer_interrupt+0x91/0xb0
[ 1045.582416][T10317]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1045.588404][T10317] 
[ 1045.590733][T10317] Second to last potentially related work creation:
[ 1045.597317][T10317]  kasan_save_stack+0x36/0x60
[ 1045.602009][T10317]  kasan_record_aux_stack+0xba/0x100
[ 1045.607302][T10317]  insert_work+0x54/0x3e0
[ 1045.611643][T10317]  __queue_work+0x963/0xd00
[ 1045.616160][T10317]  queue_work_on+0x14b/0x250
[ 1045.620844][T10317]  hci_recv_frame+0x18a/0x1e0
[ 1045.625529][T10317]  vhci_write+0x31a/0x430
[ 1045.629870][T10317]  vfs_write+0xacd/0xe50
[ 1045.634127][T10317]  ksys_write+0x1a2/0x2c0
[ 1045.638466][T10317]  do_syscall_64+0x3b/0xb0
[ 1045.642884][T10317]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1045.648784][T10317] 
[ 1045.651106][T10317] The buggy address belongs to the object at ffff888059a58000
[ 1045.651106][T10317]  which belongs to the cache kmalloc-8k of size 8192
[ 1045.665199][T10317] The buggy address is located 168 bytes inside of
[ 1045.665199][T10317]  8192-byte region [ffff888059a58000, ffff888059a5a000)
[ 1045.678906][T10317] The buggy address belongs to the page:
[ 1045.684551][T10317] page:ffffea0001669600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59a58
[ 1045.694693][T10317] head:ffffea0001669600 order:3 compound_mapcount:0 compound_pincount:0
[ 1045.703003][T10317] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1045.711180][T10317] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888011c42280
[ 1045.719757][T10317] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[ 1045.728329][T10317] page dumped because: kasan: bad access detected
[ 1045.734726][T10317] page_owner tracks the page as allocated
[ 1045.740427][T10317] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3239, ts 815156926076, free_ts 815027800555
[ 1045.762123][T10317]  get_page_from_freelist+0x322a/0x33c0
[ 1045.767671][T10317]  __alloc_pages+0x272/0x700
[ 1045.772264][T10317]  new_slab+0xbb/0x4b0
[ 1045.776343][T10317]  ___slab_alloc+0x6f6/0xe10
[ 1045.780923][T10317]  __kmalloc_node_track_caller+0x1f6/0x390
[ 1045.786722][T10317]  __alloc_skb+0x12c/0x590
[ 1045.791144][T10317]  netlink_dump+0x1ef/0xc40
[ 1045.795659][T10317]  netlink_recvmsg+0x69d/0x1190
[ 1045.800502][T10317]  ____sys_recvmsg+0x286/0x530
[ 1045.805256][T10317]  ___sys_recvmsg+0x1ec/0x690
[ 1045.809930][T10317]  __x64_sys_recvmsg+0x1dc/0x2b0
[ 1045.814861][T10317]  do_syscall_64+0x3b/0xb0
[ 1045.819457][T10317]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1045.825396][T10317] page last free stack trace:
[ 1045.830062][T10317]  free_unref_page_prepare+0xc34/0xcf0
[ 1045.835521][T10317]  free_unref_page+0x95/0x2d0
[ 1045.840194][T10317]  __unfreeze_partials+0x1b7/0x210
[ 1045.845323][T10317]  put_cpu_partial+0x132/0x1a0
[ 1045.850089][T10317]  ___cache_free+0xe3/0x100
[ 1045.854766][T10317]  qlist_free_all+0x36/0x90
[ 1045.859266][T10317]  kasan_quarantine_reduce+0x162/0x180
[ 1045.864721][T10317]  __kasan_slab_alloc+0x2f/0xc0
[ 1045.869564][T10317]  slab_post_alloc_hook+0x53/0x380
[ 1045.874671][T10317]  __kmalloc+0x120/0x300
[ 1045.878904][T10317]  tomoyo_encode+0x26b/0x530
[ 1045.883486][T10317]  tomoyo_realpath_from_path+0x5a2/0x5e0
[ 1045.889213][T10317]  tomoyo_path_perm+0x273/0x6b0
[ 1045.894084][T10317]  security_inode_getattr+0xcf/0x120
[ 1045.899370][T10317]  vfs_getattr+0x26/0x360
[ 1045.903725][T10317]  vfs_statx+0x18f/0x3b0
[ 1045.907966][T10317] 
[ 1045.910310][T10317] Memory state around the buggy address:
[ 1045.915952][T10317]  ffff888059a57f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1045.924096][T10317]  ffff888059a58000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1045.932152][T10317] >ffff888059a58080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1045.940204][T10317]                                   ^
[ 1045.945562][T10317]  ffff888059a58100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1045.953623][T10317]  ffff888059a58180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1045.961723][T10317] ==================================================================
[ 1045.969773][T10317] Disabling lock debugging due to kernel taint
[ 1045.993271][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1046.007292][T10317] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1046.014513][T10317] CPU: 0 PID: 10317 Comm: kworker/0:9 Tainted: G    B             5.15.165-syzkaller #0
[ 1046.024248][T10317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1046.034315][T10317] Workqueue: events hci_ncmd_timeout
[ 1046.039620][T10317] Call Trace:
[ 1046.042903][T10317]  <TASK>
[ 1046.045847][T10317]  dump_stack_lvl+0x1e3/0x2d0
[ 1046.050539][T10317]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 1046.056181][T10317]  ? panic+0x860/0x860
[ 1046.060252][T10317]  ? rcu_is_watching+0x11/0xa0
[ 1046.065038][T10317]  ? preempt_schedule_common+0xa6/0xd0
[ 1046.070510][T10317]  panic+0x318/0x860
[ 1046.074412][T10317]  ? asm_common_interrupt+0x22/0x40
[ 1046.079629][T10317]  ? check_panic_on_warn+0x1d/0xa0
[ 1046.084750][T10317]  ? fb_is_primary_device+0xd0/0xd0
[ 1046.089962][T10317]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 1046.095966][T10317]  ? _raw_spin_unlock+0x40/0x40
[ 1046.100830][T10317]  check_panic_on_warn+0x7e/0xa0
[ 1046.106041][T10317]  ? hci_recv_frame+0x3c/0x1e0
[ 1046.110828][T10317]  end_report+0x6d/0xf0
[ 1046.115248][T10317]  kasan_report+0x18e/0x1c0
[ 1046.119750][T10317]  ? hci_recv_frame+0x3c/0x1e0
[ 1046.124512][T10317]  kasan_check_range+0x27e/0x290
[ 1046.129446][T10317]  hci_recv_frame+0x3c/0x1e0
[ 1046.134036][T10317]  process_one_work+0x8a1/0x10c0
[ 1046.138977][T10317]  ? worker_detach_from_pool+0x260/0x260
[ 1046.144622][T10317]  ? _raw_spin_lock_irqsave+0x120/0x120
[ 1046.150163][T10317]  ? kthread_data+0x4e/0xc0
[ 1046.154660][T10317]  ? wq_worker_running+0x97/0x170
[ 1046.159881][T10317]  worker_thread+0xaca/0x1280
[ 1046.164564][T10317]  kthread+0x3f6/0x4f0
[ 1046.168623][T10317]  ? rcu_lock_release+0x20/0x20
[ 1046.173474][T10317]  ? kthread_blkcg+0xd0/0xd0
[ 1046.178053][T10317]  ret_from_fork+0x1f/0x30
[ 1046.182471][T10317]  </TASK>
[ 1046.185774][T10317] Kernel Offset: disabled
[ 1046.191067][T10317] Rebooting in 86400 seconds..