last executing test programs:

6m20.227835206s ago: executing program 0 (id=124):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
socket(0x10, 0x803, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1])
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, 0x0)

6m19.92145853s ago: executing program 0 (id=126):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000080)="65be87527b788cdd256e008b66bfaa2d", 0x20)

6m18.925114744s ago: executing program 0 (id=127):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@private, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500"}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000240)=0xa, 0x4)

6m17.749013501s ago: executing program 0 (id=136):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x12f451, 0x0)
umount2(0x0, 0x1)

6m17.451923595s ago: executing program 0 (id=140):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x2, 0x3}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0)

6m16.617949316s ago: executing program 0 (id=142):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10)
r5 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}})

6m16.204835392s ago: executing program 32 (id=142):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10)
r5 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}})

6m7.02403269s ago: executing program 4 (id=186):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "00000000faffffff", "cb83a84cbae76006000000192b90d142", '\f_\x00', "e449990e9977d061"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
shutdown(r0, 0x1)

6m5.777476517s ago: executing program 4 (id=190):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@discard}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@dioread_lock}, {@norecovery}, {@nombcache}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}, {@resuid}, {@init_itable_val}, {@jqfmt_vfsv1}]}, 0x1, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy")
madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x3)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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")
getpid()
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x10000, 0x0)
mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0)
renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2)

6m4.731217672s ago: executing program 4 (id=196):
r0 = socket$inet6(0xa, 0x80001, 0x0)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000800)={0x0, {{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000800)={0xc, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000010540)=[{&(0x7f0000010680)=""/222, 0xde}, {&(0x7f00000105c0)=""/192, 0xc0}], 0x2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x0)

6m4.227869309s ago: executing program 4 (id=198):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x80, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, 0x0)
close(0x3)
r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x5, 0xf, 0x7, 0x80, 0x2, 0x3, 0x107f, 0x20000006, 0x4d, 0x6, 0x5f, 0x6, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x245, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000412f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x4, 0xfffffffe, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x8, 0x1, 0xea4, 0x1ff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0xfffffffe, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x6, 0x9, 0x7, 0x47, 0x8000, 0x0, 0x6d5a, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x418, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d1, 0xa, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x0, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x35, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x400001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0xffffff76, 0x80a2ed, 0x4, 0x2], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x8005, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x3, 0xa620, 0x7ba9, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x1, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x7f, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x805, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
mknod(&(0x7f00000002c0)='./file0\x00', 0x8000, 0xdf5)

6m2.311986535s ago: executing program 4 (id=206):
setgroups(0x0, 0x0)
getgroups(0x1, &(0x7f0000000100)=[<r0=>0xee00])
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
setregid(0x0, r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, 0x0)

6m1.310058549s ago: executing program 4 (id=213):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0)

6m0.834874216s ago: executing program 33 (id=213):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0)

2m27.394348957s ago: executing program 2 (id=959):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
landlock_create_ruleset(0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x407f}]}, 0x28}}, 0x0)

2m26.394042772s ago: executing program 2 (id=962):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef)
r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x1f91, 0x0, 0x0, 0x288}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r6, 0x400, 0x1)
open$dir(&(0x7f0000000080)='./file1\x00', 0x8000, 0x20)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x59)
close(r6)

2m24.734005115s ago: executing program 2 (id=970):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r4, 0x400, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

2m22.099011471s ago: executing program 2 (id=983):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200410, &(0x7f0000000a40)={[{@init_itable_val={'init_itable', 0x3d, 0xc0}}, {}, {@acl}, {@min_batch_time={'min_batch_time', 0x3d, 0xb044}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nomblk_io_submit}, {@nodelalloc}, {@auto_da_alloc}, {@norecovery}]}, 0x1, 0x591, &(0x7f0000000f80)="$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")
chdir(&(0x7f0000000380)='./file0\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x841c00, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0)
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0xfe, 0x19c, &(0x7f0000000440)="$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")
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_buf(r2, 0x1, 0x22, &(0x7f0000000400)=""/120, &(0x7f0000000480)=0x78)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xb, 0x1, 0xffffffef, 0x9})

2m20.267267167s ago: executing program 2 (id=986):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

2m18.153081746s ago: executing program 2 (id=993):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ptrace$setregs(0xf, r0, 0x401, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r3})
ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2)

2m17.018660732s ago: executing program 34 (id=993):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ptrace$setregs(0xf, r0, 0x401, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r3})
ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2)

1m31.794045731s ago: executing program 7 (id=1143):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000008900)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000020000"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
fanotify_mark(0xffffffffffffffff, 0x201, 0x48001003, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00')
read$FUSE(r1, &(0x7f00000051c0)={0x2020}, 0x2020)

1m26.852715441s ago: executing program 7 (id=1157):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file2\x00', 0x90, &(0x7f0000003280)=ANY=[], 0x4, 0xd9c, &(0x7f0000001dc0)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x64000}], 0x1, 0x7c00, 0x0, 0x3)

1m22.749396617s ago: executing program 7 (id=1165):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x536, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0x0, 0x0)
pread64(r3, 0x0, 0x0, 0x100008)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

1m21.433852046s ago: executing program 7 (id=1170):
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xfd, 0x24b, &(0x7f00000010c0)="$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")
chdir(&(0x7f0000004340)='./file0\x00')
creat(&(0x7f0000000080)='./bus\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f0000004000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x58, &(0x7f0000000180)={[{@orlov}, {@acl}, {@nomblk_io_submit}, {@barrier}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x100}}, {@usrquota}, {@sysvgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0xffff}}]}, 0x0, 0x7ac, &(0x7f0000001640)="$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")
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfd14)
mknod(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x505002, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x4d0101, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000002fc0)=""/4108, 0x100c)
ioctl$PPPIOCGDEBUG(r1, 0x80047441, 0x0)

1m20.303724372s ago: executing program 7 (id=1175):
r0 = fanotify_init(0x4, 0x101000)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x641, 0x1019, r1, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
setresuid(0x0, 0xee01, 0xee00)
r2 = msgget$private(0x0, 0x790)
msgsnd(r2, 0x0, 0x401, 0x0)
msgctl$IPC_SET(r2, 0x1, 0x0)
msgget$private(0x0, 0x509)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040a"], 0xd)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0403"], 0x14)

1m17.110091146s ago: executing program 7 (id=1181):
socket$nl_rdma(0x10, 0x3, 0x14)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, &(0x7f0000000200)='L', 0x1)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x181001, 0x0)
r1 = userfaultfd(0x801)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000002100))

1m16.84473711s ago: executing program 35 (id=1181):
socket$nl_rdma(0x10, 0x3, 0x14)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, &(0x7f0000000200)='L', 0x1)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x181001, 0x0)
r1 = userfaultfd(0x801)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000002100))

11.362344841s ago: executing program 3 (id=1423):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000400)={0x2, 0x1, 0x10, 0x0, 0x2}, 0xc)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

11.075269645s ago: executing program 5 (id=1425):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_mount_image$xfs(&(0x7f0000009800), &(0x7f00000004c0)='./bus\x00', 0x1810c80, &(0x7f00000000c0)={[{@pqnoenforce}, {@noquota}, {@nouuid}, {@usrquota}, {@swalloc}, {@bsdgroups}, {@nodiscard}]}, 0x1, 0x98d8, &(0x7f0000013100)="$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")
r1 = open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x0)
fallocate(r1, 0x0, 0x0, 0x1001f0)
fallocate(r1, 0x3, 0x1001, 0x10000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x6, 0x11, r2, 0x0)
symlink(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000)
close_range(r0, 0xffffffffffffffff, 0x0)

10.674641901s ago: executing program 8 (id=1433):
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, &(0x7f0000001800))
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4000000000000a12, 0x2)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
brk(0x400000ffc000)
brk(0x400000ffc020)

10.447048734s ago: executing program 8 (id=1435):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)

9.025184774s ago: executing program 3 (id=1437):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x6, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[], 0x4, 0x661, &(0x7f0000000dc0)="$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")
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0xfffffdfd, 0x8, 0x12, 0x300, 0x0})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r0, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x10, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000540), &(0x7f0000000000)=""/7, 0x2}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0)

8.681400769s ago: executing program 5 (id=1438):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000003c0)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r2 = dup3(r1, r0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18)
recvmmsg$unix(r2, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0)

8.526922201s ago: executing program 6 (id=1439):
unshare(0x2040400)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r2, 0x400, 0x1)
ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000080)={0x3, 0x3, 0x8000})
execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

7.449581466s ago: executing program 6 (id=1441):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

7.303950398s ago: executing program 5 (id=1442):
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x40004840)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x5}, 0x1c)
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

7.303351978s ago: executing program 8 (id=1443):
io_setup(0x6, 0x0)
syz_open_procfs(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002252e000180080001000000000008000200ac1e00010c000280050001000000000008000740000000014400108008000240000000070800034000000009080001"], 0xa8}}, 0x0)

7.253273838s ago: executing program 1 (id=1444):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r0 = gettid()
ioperm(0x7, 0x2, 0x3)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, 0x0, 0x0)
listen(r1, 0x0)
accept4(r1, 0x0, 0x0, 0x80000)
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

7.238498429s ago: executing program 3 (id=1445):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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")
lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

7.189963119s ago: executing program 6 (id=1447):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
socket$inet_udplite(0x2, 0x2, 0x88)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x0, 0x9, 0xfffffffffffffffd, 0x81, 0x7fffffff, 0x100000000}, 0x0, 0x0)
recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)

6.553601679s ago: executing program 8 (id=1448):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020)

6.393463951s ago: executing program 1 (id=1449):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

5.811677379s ago: executing program 3 (id=1450):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_read_part_table(0x632, &(0x7f0000000000)="$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")
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006)

5.810695409s ago: executing program 6 (id=1451):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0xc0d4, &(0x7f0000002700)=ANY=[], 0x1, 0x270, &(0x7f00000008c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000200), 0xfea7)
ftruncate(r0, 0x6)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{0x0, 0x2}, 'syz0\x00'})
ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xee)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0)

3.500296621s ago: executing program 1 (id=1452):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x2, 0x6ee, &(0x7f0000032440)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)

3.281400814s ago: executing program 5 (id=1453):
socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x458000, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0)

2.759500021s ago: executing program 6 (id=1454):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8000)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'})
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

2.444088805s ago: executing program 1 (id=1455):
syz_io_uring_setup(0x4a5c, &(0x7f0000000000)={0x0, 0x3911, 0x8000, 0x1, 0x28a}, &(0x7f0000000080), &(0x7f00000000c0))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@remote, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x7fffffe}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x20}}, 0xf0}, 0x1, 0xe}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

2.429802556s ago: executing program 8 (id=1456):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20008801, &(0x7f0000000100)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

2.193475359s ago: executing program 1 (id=1457):
r0 = socket$netlink(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0xd9623000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)

2.186499789s ago: executing program 5 (id=1467):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000002c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0)
landlock_restrict_self(r0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

1.968390982s ago: executing program 3 (id=1458):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, 0x3, 0x3, 0x301, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)

1.890625763s ago: executing program 5 (id=1459):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xce)
bind$ax25(r4, &(0x7f0000000380)={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48)
connect$rose(r3, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c)

1.118310334s ago: executing program 8 (id=1460):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)={0x1, 0x0, [{0x0, 0xf3, &(0x7f0000000500)=""/243}]})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x100000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94)

1.103821324s ago: executing program 1 (id=1461):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xa04ce000)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0)

1.027817425s ago: executing program 6 (id=1462):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2a, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)

0s ago: executing program 3 (id=1463):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$eJzs3U9oFFccB/DfzO42TbKUtL0USv9AKaUNhPRW6CW9tBAoIZRSaAsppfSiJEJM8JZ48uJBj6KSk5cg3oweJZfgRRE8Rc0hXgQNHgweVFjZnQTyTxOzmx1xPh+YzEzy5v3eMPN9ExaGDaCweiJiICJKEdEbEZWISDY2+DJbetZ2ZzoXRiJqtd8eJ4122X5m/bjuiJiOiB8iYj5N4lA5YnLur+Wni798c3Ki8vWFuT8723qSa1aWl35dPT904vLg95M3bz8cSmIgqpvOq/WSHX5XTiI+Oohib4mknPcI2IvhY5fu1HP/cUR81ch/JdLILt6p8ffmK/HduVcde/rRrU/bOVag9Wq1Sv0ZOF0DCieNiGokaV9EZNtp2teX/Q9/t9SVHh4bP9r7/9jE6H95z1RAq1Qjln6+2nGle0v+H5Sy/APvqOxDqaXfh2fv1TdWS3kPCGiLz7JV/fnf+8/UtyH/UDjyD8Ul/1Bc8g/FJf9QXPIPxSX/UFzyD8Ul/1Bc+87/mRcHNyigLTbmHwAollrHvt4abv2LyEDb5T3/AAAAAAAAAAAAAAAAAAAA2810LoysL63psbxri+tnI1Z+yppur19qfB9xxPuNn11Pkk09Jnuq8Hp/f9FkB026mPPb1x/cz7f+jc/zrT81GjF9PCL6y+Xt91+ydv/t34e7/L3yb5MF3lCyZf/HP9pbf6vns/nWH1yMuFaff/p3mn/S+KSx3nn+qdavX5P1jzxrsgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa5mUAAAD//7FLbdg=")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000100), 0x1001)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x0, 0x8, 0x12, r2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x0)
pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

kernel console output (not intermixed with test programs):

 req 02 val 2400
[  160.013099][   T22] pwc: recv_control_msg error -71 req 02 val 2600
[  160.038416][   T22] pwc: recv_control_msg error -71 req 02 val 2900
[  160.065637][   T22] pwc: recv_control_msg error -71 req 02 val 2800
[  160.078231][   T22] pwc: recv_control_msg error -71 req 04 val 1100
[  160.103352][   T22] pwc: recv_control_msg error -71 req 04 val 1200
[  160.125968][   T22] pwc: Registered as video103.
[  160.134156][   T22] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5
[  160.162508][   T22] usb 3-1: USB disconnect, device number 3
[  160.189554][ T5410] loop1: detected capacity change from 0 to 512
[  160.220096][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  160.229352][ T5410] ext2: Unknown parameter 'appraise_type'
[  160.265585][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  160.320491][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  160.330639][ T4336] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  160.363325][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  160.395029][ T5173] device veth0_vlan entered promiscuous mode
[  160.493286][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  160.514119][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  160.543328][ T5173] device veth1_vlan entered promiscuous mode
[  160.700370][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  160.732391][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  160.756426][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  160.768414][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  160.782562][ T5173] device veth0_macvtap entered promiscuous mode
[  161.030674][ T5173] device veth1_macvtap entered promiscuous mode
[  161.060797][ T5427] loop2: detected capacity change from 0 to 164
[  162.003301][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  162.015608][ T5427] isofs_fill_super: root inode is not a directory. Corrupted media?
[  162.042747][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  162.082054][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.095109][ T5430] loop1: detected capacity change from 0 to 128
[  162.159435][ T5431] ptrace attach of "./syz-executor exec"[4256] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  162.604657][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.616804][ T5430] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  162.736666][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.763876][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.798645][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.842820][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.901496][ T5173] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.986790][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  162.994730][ T5430] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  163.015739][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  163.053792][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.072746][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.145792][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.174668][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.194469][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.216402][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.276355][ T5173] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.329568][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  163.347693][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  163.413561][ T5173] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.450540][ T5173] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.479978][ T5173] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.522492][ T5173] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.622174][ T5442] loop2: detected capacity change from 0 to 16
[  163.632088][ T5442] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  165.708859][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.772681][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.781307][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.842742][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.860849][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  165.889409][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  166.646247][ T5455] loop1: detected capacity change from 0 to 131072
[  166.687121][ T5455] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(1024)
[  166.695812][ T5455] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  166.799899][ T5455] F2FS-fs (loop1): Found nat_bits in checkpoint
[  166.878680][ T5455] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  166.886181][ T5455] F2FS-fs (loop1): Mounted with checkpoint version = 1b41e955
[  167.076199][   T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  167.334483][   T27] usb 4-1: Using ep0 maxpacket: 16
[  167.352174][   T27] usb 4-1: config 0 has no interfaces?
[  167.368041][   T27] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  167.395844][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.414294][   T27] usb 4-1: Product: syz
[  167.418591][   T27] usb 4-1: Manufacturer: syz
[  167.423438][   T27] usb 4-1: SerialNumber: syz
[  167.437701][   T27] usb 4-1: config 0 descriptor??
[  167.534258][ T5484] loop2: detected capacity change from 0 to 8192
[  167.681527][ T5490] __nla_validate_parse: 45 callbacks suppressed
[  167.681543][ T5490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.283'.
[  167.813210][ T5494] netlink: 36 bytes leftover after parsing attributes in process `syz.5.282'.
[  168.243994][ T4303] usb 4-1: USB disconnect, device number 2
[  168.536862][ T5501] binder: 5499:5501 ioctl c0306201 0 returned -14
[  169.944276][ T5515] xt_CT: No such helper "snmp_trap"
[  173.804047][ T5535] loop5: detected capacity change from 0 to 32768
[  173.977020][ T5535] XFS (loop5): Mounting V5 Filesystem
[  174.788423][ T5535] XFS (loop5): log mount failed
[  174.948905][ T5575] loop2: detected capacity change from 0 to 512
[  175.164328][ T5575] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  175.173601][ T5575] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  175.348881][ T5575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'.
[  176.418366][ T4256] EXT4-fs (loop2): unmounting filesystem.
[  176.584845][ T5593] xt_hashlimit: size too large, truncated to 1048576
[  177.433264][ T5599] loop2: detected capacity change from 0 to 2048
[  177.545954][ T5599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  178.460568][ T5609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'.
[  178.559445][ T5614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'.
[  179.625585][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  179.711737][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  179.782620][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  179.834170][ T5630] device bridge_slave_0 left promiscuous mode
[  179.842228][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.885813][ T5630] device bridge_slave_1 left promiscuous mode
[  179.893747][ T5638] loop3: detected capacity change from 0 to 512
[  179.922560][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.976280][ T5638] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  179.987823][ T5630] bond0: (slave bond_slave_0): Releasing backup interface
[  180.041158][ T5638] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  180.052689][ T5630] bond0: (slave bond_slave_1): Releasing backup interface
[  180.451328][ T5638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.321'.
[  180.707992][ T5630] team0: Port device team_slave_0 removed
[  180.818509][ T4261] EXT4-fs (loop3): unmounting filesystem.
[  180.827400][ T5630] team0: Port device team_slave_1 removed
[  180.833881][ T5630] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.849760][ T5630] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.859153][ T5630] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.867177][ T5630] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.913463][ T5631] team0: Mode changed to "loadbalance"
[  180.981092][ T5634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.317'.
[  181.133741][ T5653] loop3: detected capacity change from 0 to 4096
[  181.166278][ T5653] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  181.970427][ T5660] xt_hashlimit: size too large, truncated to 1048576
[  182.578693][ T5661] 7BՍ֕: renamed from syzkaller0
[  182.865613][ T5671] Zero length message leads to an empty skb
[  182.903711][ T5671] netlink: 'syz.1.329': attribute type 10 has an invalid length.
[  184.218279][ T5671] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  184.280086][ T5690] syz.2.332 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  185.498274][   T27] libceph: connect (1)[c::]:6789 error -101
[  185.515491][   T27] libceph: mon0 (1)[c::]:6789 connect error
[  185.660974][ T5708] ceph: No mds server is up or the cluster is laggy
[  185.822288][ T4304] libceph: connect (1)[c::]:6789 error -101
[  185.862202][ T4304] libceph: mon0 (1)[c::]:6789 connect error
[  186.676968][ T5726] loop2: detected capacity change from 0 to 128
[  186.684351][ T5726] FAT-fs (loop2): Unrecognized mount option "¼
[  186.684351][ T5726] " or missing value
[  186.829160][   T26] audit: type=1804 audit(1747085507.366:33): pid=5725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.343" name="/newroot/74/file1" dev="fuse" ino=1 res=1 errno=0
[  187.017388][   T26] audit: type=1800 audit(1747085507.416:34): pid=5725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.343" name="/" dev="fuse" ino=1 res=0 errno=0
[  187.713196][ T5734] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  187.728550][ T5734] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  188.279056][ T5740] infiniband syz2: set down
[  188.284072][ T5740] infiniband syz2: added ipvlan1
[  188.484962][ T5740] RDS/IB: syz2: added
[  188.492592][ T5740] smc: adding ib device syz2 with port count 1
[  188.499731][ T5740] smc:    ib device syz2 port 1 has pnetid 
[  191.122023][   T26] audit: type=1804 audit(1747085511.666:35): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.357" name="/newroot/23/file1" dev="fuse" ino=1 res=1 errno=0
[  191.161950][   T26] audit: type=1800 audit(1747085511.666:36): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.357" name="/" dev="fuse" ino=1 res=0 errno=0
[  191.353207][ T5778] loop5: detected capacity change from 0 to 256
[  191.387302][ T5778] FAT-fs (loop5): Directory bread(block 64) failed
[  191.393917][ T5778] FAT-fs (loop5): Directory bread(block 65) failed
[  191.400686][ T5778] FAT-fs (loop5): Directory bread(block 66) failed
[  191.407281][ T5778] FAT-fs (loop5): Directory bread(block 67) failed
[  191.413879][ T5778] FAT-fs (loop5): Directory bread(block 68) failed
[  191.420482][ T5778] FAT-fs (loop5): Directory bread(block 69) failed
[  191.427267][ T5778] FAT-fs (loop5): Directory bread(block 70) failed
[  191.433966][ T5778] FAT-fs (loop5): Directory bread(block 71) failed
[  191.441124][ T5778] FAT-fs (loop5): Directory bread(block 72) failed
[  191.447754][ T5778] FAT-fs (loop5): Directory bread(block 73) failed
[  191.972960][   T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  192.182224][   T22] usb 3-1: config 0 has no interfaces?
[  192.188776][   T22] usb 3-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00
[  192.333249][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.407377][   T22] usb 3-1: config 0 descriptor??
[  192.753406][ T5805] netlink: 'syz.6.368': attribute type 10 has an invalid length.
[  192.907864][ T5805] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  192.977098][ T5807] xt_nat: multiple ranges no longer supported
[  193.018192][ T4299] usb 3-1: USB disconnect, device number 4
[  194.150207][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.156781][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.763277][ T5830] netlink: 56 bytes leftover after parsing attributes in process `syz.2.375'.
[  196.233523][ T4264] Bluetooth: hci1: command 0x0406 tx timeout
[  196.257398][ T4264] Bluetooth: hci2: command 0x0406 tx timeout
[  196.258378][ T4269] Bluetooth: hci4: command 0x0406 tx timeout
[  196.441529][ T5843] netlink: 'syz.2.382': attribute type 10 has an invalid length.
[  196.537518][ T5843] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  197.585386][ T5858] loop5: detected capacity change from 0 to 256
[  197.592377][ T5858] exfat: Deprecated parameter 'utf8'
[  197.613360][ T5858] exfat: Deprecated parameter 'namecase'
[  197.622082][ T5860] netlink: 24 bytes leftover after parsing attributes in process `syz.6.391'.
[  197.638207][ T5858] exfat: Deprecated parameter 'utf8'
[  197.663763][ T5858] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  197.693477][ T5864] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[  197.718373][ T5858] bio_check_eod: 1 callbacks suppressed
[  197.718385][ T5858] syz.5.388: attempt to access beyond end of device
[  197.718385][ T5858] loop5: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[  197.805432][ T5858] syz.5.388: attempt to access beyond end of device
[  197.805432][ T5858] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  197.853171][   T26] audit: type=1800 audit(1747085518.396:37): pid=5858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.388" name="file1" dev="loop5" ino=1048616 res=0 errno=0
[  198.025661][ T5875] loop1: detected capacity change from 0 to 256
[  198.246916][ T4283] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  198.924690][ T4283] usb 4-1: Using ep0 maxpacket: 16
[  198.942441][ T4283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11
[  199.031701][ T4283] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  199.450305][ T4283] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  199.473058][ T4283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.510882][ T4283] usb 4-1: config 0 descriptor??
[  199.863872][ T5899] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  199.979605][ T4283] usbhid 4-1:0.0: can't add hid device: -71
[  199.990523][ T4283] usbhid: probe of 4-1:0.0 failed with error -71
[  200.013575][ T4283] usb 4-1: USB disconnect, device number 3
[  200.411192][ T5912] syz.6.407 uses obsolete (PF_INET,SOCK_PACKET)
[  202.072161][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.410'.
[  202.091472][ T5928] loop2: detected capacity change from 0 to 16
[  202.108745][ T5928] erofs: (device loop2): mounted with root inode @ nid 36.
[  202.286149][ T5925] device bond3 entered promiscuous mode
[  202.297102][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.410'.
[  203.206765][ T5932] device bond3 left promiscuous mode
[  203.212270][ T5932] 8021q: adding VLAN 0 to HW filter on device bond3
[  208.887869][    T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  209.095671][    T7] usb 3-1: config 9 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.131052][    T7] usb 3-1: config 9 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.167747][    T7] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  209.184442][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.459060][ T5984] loop2: detected capacity change from 0 to 512
[  209.567264][ T5984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  209.584939][ T5984] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  209.819617][    T7] usbhid 3-1:9.0: can't add hid device: -71
[  209.834507][    T7] usbhid: probe of 3-1:9.0 failed with error -71
[  209.844891][    T7] usb 3-1: USB disconnect, device number 5
[  210.961621][ T4256] EXT4-fs (loop2): unmounting filesystem.
[  211.892363][ T6019] loop1: detected capacity change from 0 to 2048
[  212.270682][ T6019]  loop1: p2 < > p3 p4
[  212.281927][ T6019] loop1: p3 start 65535 is beyond EOD, truncated
[  212.292231][ T6019] loop1: p4 size 8192 extends beyond EOD, truncated
[  212.728214][ T6035] loop1: detected capacity change from 0 to 512
[  213.178478][ T6035] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  213.191712][ T6035] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.274990][   T26] audit: type=1804 audit(1747085533.816:38): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.440" name="/newroot/100/file1/file2" dev="loop1" ino=16 res=1 errno=0
[  213.361300][ T6035] EXT4-fs (loop1): unmounting filesystem.
[  213.580287][ T6047] loop1: detected capacity change from 0 to 512
[  215.747796][    T7] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  215.849035][ T6075] loop5: detected capacity change from 0 to 1024
[  215.869857][ T6075] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  215.936931][    T7] usb 3-1: config 1 interface 0 has no altsetting 0
[  215.977974][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  215.978195][    T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  216.011036][   T14] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  216.016064][ T6075] loop5: detected capacity change from 0 to 1024
[  216.027369][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.027409][    T7] usb 3-1: Product: syz
[  216.027425][    T7] usb 3-1: Manufacturer: syz
[  216.027440][    T7] usb 3-1: SerialNumber: syz
[  216.093640][ T6075] EXT4-fs: Ignoring removed i_version option
[  216.113662][ T6075] EXT4-fs: Ignoring removed nomblk_io_submit option
[  216.140789][ T6075] EXT4-fs: Ignoring removed oldalloc option
[  216.155546][ T6075] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  216.301956][ T6075] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  216.340219][ T6075] hid-generic 0000:0000:0000.0001: pid 6075 passed too short report
[  216.493385][    T7] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  216.594988][ T4875] EXT4-fs (loop5): unmounting filesystem.
[  217.085739][   T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  217.289655][   T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  217.304744][   T27] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  217.332956][   T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  217.348851][   T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  217.361248][   T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  217.388648][   T27] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  217.416629][   T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  217.437460][   T27] usb 2-1: Product: syz
[  217.447135][   T27] usb 2-1: Manufacturer: syz
[  217.470869][   T27] cdc_wdm 2-1:1.0: skipping garbage
[  217.481543][   T27] cdc_wdm 2-1:1.0: skipping garbage
[  217.500994][   T27] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device
[  217.516896][   T27] cdc_wdm 2-1:1.0: Unknown control protocol
[  218.545999][    T7] usb 3-1: USB disconnect, device number 6
[  218.559273][    T7] usblp0: removed
[  218.727521][ T6113] loop3: detected capacity change from 0 to 8192
[  218.751787][ T6113] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  218.770819][ T6113] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  218.782012][ T6113] REISERFS (device loop3): using ordered data mode
[  218.789094][ T6113] reiserfs: using flush barriers
[  218.801915][ T6113] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  218.855231][ T6119] bridge_slave_0: default FDB implementation only supports local addresses
[  218.873065][ T6113] REISERFS (device loop3): checking transaction log (loop3)
[  218.882461][   T26] audit: type=1326 audit(1747085539.426:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.5.468" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3b278e969 code=0x0
[  219.705914][   T14] usb 2-1: USB disconnect, device number 3
[  219.874905][ T6113] REISERFS (device loop3): Using tea hash to sort names
[  219.933808][ T6113] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  220.173523][ T6134] loop1: detected capacity change from 0 to 4096
[  220.207845][ T6134] NILFS (loop1): invalid segment: Checksum error in segment payload
[  220.227447][ T6134] NILFS (loop1): trying rollback from an earlier position
[  220.283902][ T6134] NILFS (loop1): recovery complete
[  220.327005][ T6138] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  220.429232][   T26] audit: type=1800 audit(1747085540.976:40): pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.471" name="bus" dev="loop1" ino=12 res=0 errno=0
[  220.553798][ T6141] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  220.606155][ T6141] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  223.040752][ T6164] loop3: detected capacity change from 0 to 512
[  224.713201][ T6164] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  224.764580][ T6164] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.581940][ T4261] EXT4-fs (loop3): unmounting filesystem.
[  226.835761][ T6192] device gtp0 entered promiscuous mode
[  227.126863][ T6194] loop2: detected capacity change from 0 to 40427
[  227.136025][ T6194] F2FS-fs (loop2): build fault injection attr: rate: 693, type: 0x3ffff
[  227.147049][ T6194] F2FS-fs (loop2): invalid crc value
[  227.198366][ T6194] F2FS-fs (loop2): Found nat_bits in checkpoint
[  227.333399][ T6194] F2FS-fs (loop2): Start checkpoint disabled!
[  227.393716][ T6194] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  227.530642][ T6206] F2FS-fs (loop2) : inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x9ca/0x1980
[  227.543816][ T6206] syz.2.490: attempt to access beyond end of device
[  227.543816][ T6206] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  228.430175][   T75] kworker/u4:4: attempt to access beyond end of device
[  228.430175][   T75] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  228.892118][ T6218] loop5: detected capacity change from 0 to 2048
[  228.933792][ T6218] UDF-fs: bad mount option "lastblock=0000000000Îü~4\|"06" or missing value
[  231.024535][ T3639] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  231.085172][ T6258] loop2: detected capacity change from 0 to 4096
[  231.103317][ T6258] NILFS (loop2): invalid segment: Checksum error in segment payload
[  231.112086][ T6258] NILFS (loop2): trying rollback from an earlier position
[  231.133704][ T6258] NILFS (loop2): recovery complete
[  231.141577][ T6259] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  231.175771][   T26] audit: type=1800 audit(1747085551.726:41): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.507" name="bus" dev="loop2" ino=12 res=0 errno=0
[  231.210400][ T6258] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  231.216288][ T3639] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  231.220807][ T6258] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  231.232907][ T3639] usb 6-1: config 0 has no interfaces?
[  231.249505][ T3639] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  231.259008][ T3639] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.269767][ T3639] usb 6-1: config 0 descriptor??
[  231.565746][ T6262] netlink: 40 bytes leftover after parsing attributes in process `syz.5.504'.
[  231.591070][ T4299] usb 6-1: USB disconnect, device number 2
[  234.166010][ T6279] netlink: 'syz.3.512': attribute type 16 has an invalid length.
[  234.184037][ T6279] netlink: 'syz.3.512': attribute type 17 has an invalid length.
[  234.249808][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  234.274640][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  234.291099][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  234.373349][ T6279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  234.871581][ T6308] loop3: detected capacity change from 0 to 2048
[  234.928518][ T6308] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  235.819794][ T4261] EXT4-fs (loop3): unmounting filesystem.
[  237.379058][ T6350] loop1: detected capacity change from 0 to 32768
[  237.480040][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.529'.
[  237.708609][ T6350] XFS (loop1): Mounting V5 Filesystem
[  237.772103][ T6348] loop3: detected capacity change from 0 to 4096
[  237.929409][ T6348] NILFS (loop3): invalid segment: Checksum error in segment payload
[  237.944599][ T6348] NILFS (loop3): trying rollback from an earlier position
[  237.951775][ T6350] XFS (loop1): Ending clean mount
[  238.219792][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  238.229505][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  238.237021][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  238.664550][ T6348] NILFS (loop3): recovery complete
[  238.674550][ T6368] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  238.675690][ T4266] XFS (loop1): Unmounting Filesystem
[  238.889937][   T26] audit: type=1800 audit(1747085559.436:42): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.525" name="bus" dev="loop3" ino=12 res=0 errno=0
[  238.940338][ T6348] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  239.733066][ T6348] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  240.395085][ T6374] loop2: detected capacity change from 0 to 32768
[  240.451340][ T6374] XFS (loop2): Mounting V5 Filesystem
[  240.623829][ T6374] XFS (loop2): Ending clean mount
[  240.664478][ T6374] XFS (loop2): Quotacheck needed: Please wait.
[  240.815798][ T6374] XFS (loop2): Quotacheck: Done.
[  241.357967][ T4256] XFS (loop2): Unmounting Filesystem
[  241.432846][ T6414] loop3: detected capacity change from 0 to 1024
[  241.440344][ T6414] EXT4-fs: Ignoring removed nobh option
[  241.446685][ T6414] EXT4-fs: Ignoring removed bh option
[  241.537401][ T6414] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  241.570872][   T26] audit: type=1800 audit(1747085562.116:43): pid=6414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.543" name="bus" dev="loop3" ino=18 res=0 errno=0
[  241.609954][ T6414] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.543: Allocating blocks 385-513 which overlap fs metadata
[  241.677703][ T6414] EXT4-fs (loop3): pa ffff8880728438c0: logic 16, phys. 129, len 24
[  241.686237][ T6414] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8
[  241.908021][ T4261] Trying to write to read-only block-device loop3
[  241.939159][ T4261] Trying to write to read-only block-device loop3
[  241.980061][ T4261] Trying to write to read-only block-device loop3
[  242.005311][ T4261] Trying to write to read-only block-device loop3
[  242.025457][ T4261] Trying to write to read-only block-device loop3
[  242.043513][ T6425] loop1: detected capacity change from 0 to 64
[  242.050089][ T4261] Trying to write to read-only block-device loop3
[  242.083739][ T4261] Trying to write to read-only block-device loop3
[  242.103422][ T4261] Trying to write to read-only block-device loop3
[  242.120873][ T4261] Trying to write to read-only block-device loop3
[  242.174815][ T4261] Trying to write to read-only block-device loop3
[  242.191284][ T6425] hfs: request for non-existent node 237 in B*Tree
[  242.200679][ T4261] EXT4-fs (loop3): unmounting filesystem.
[  242.215672][ T6425] hfs: request for non-existent node 237 in B*Tree
[  242.251374][ T6425] hfs: request for non-existent node 237 in B*Tree
[  242.288170][ T6425] hfs: request for non-existent node 237 in B*Tree
[  242.359568][ T6425] hfs: request for non-existent node 237 in B*Tree
[  244.151995][ T6425] hfs: request for non-existent node 237 in B*Tree
[  244.952524][ T6444] loop2: detected capacity change from 0 to 2048
[  244.962899][ T6447] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  245.008272][ T6444]  loop2: p1 < > p3
[  245.013832][ T6444] loop2: p3 size 134217728 extends beyond EOD, truncated
[  245.028473][ T6442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  245.042362][ T6442] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  246.211804][ T6462] netlink: 24 bytes leftover after parsing attributes in process `syz.5.556'.
[  246.744715][ T4303] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  246.966135][ T4303] usb 4-1: Using ep0 maxpacket: 8
[  247.096121][ T4303] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  247.121349][ T6469] team0: Port device team_slave_1 removed
[  247.128083][ T4303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.175623][ T4303] usb 4-1: Product: syz
[  247.179816][ T4303] usb 4-1: Manufacturer: syz
[  247.194608][ T4303] usb 4-1: SerialNumber: syz
[  247.212597][ T4303] usb 4-1: config 0 descriptor??
[  247.233505][ T4303] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  247.286835][ T6476] loop1: detected capacity change from 0 to 128
[  247.337254][ T6476] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  247.365567][ T6476] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.589991][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  248.707728][ T6500] loop2: detected capacity change from 0 to 1024
[  249.172935][   T11] hfsplus: b-tree write err: -5, ino 4
[  249.193824][   T26] audit: type=1326 audit(1747085569.736:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  249.236833][   T26] audit: type=1326 audit(1747085569.746:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  249.246995][ T6505] loop1: detected capacity change from 0 to 128
[  249.266997][   T26] audit: type=1326 audit(1747085569.746:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  249.293821][   T26] audit: type=1326 audit(1747085569.746:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  249.318138][   T26] audit: type=1326 audit(1747085569.746:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  249.342101][   T26] audit: type=1326 audit(1747085569.746:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  249.366924][   T26] audit: type=1326 audit(1747085569.746:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  249.390868][ T6507] syz.1.569: attempt to access beyond end of device
[  249.390868][ T6507] loop1: rw=2049, sector=145, nr_sectors = 552 limit=128
[  249.402844][   T26] audit: type=1326 audit(1747085569.746:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  249.615202][   T26] audit: type=1326 audit(1747085569.746:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  250.398420][ T6505] syz.1.569: attempt to access beyond end of device
[  250.398420][ T6505] loop1: rw=524288, sector=145, nr_sectors = 552 limit=128
[  250.427368][   T26] audit: type=1326 audit(1747085569.746:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  250.491093][ T6514] loop5: detected capacity change from 0 to 4096
[  250.553012][ T6514] NILFS (loop5): invalid segment: Checksum error in segment payload
[  250.609315][ T6514] NILFS (loop5): trying rollback from an earlier position
[  250.637696][ T6514] NILFS (loop5): recovery complete
[  250.767976][ T4303] gspca_sonixj: reg_w1 err -71
[  250.773599][ T6522] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  251.842349][ T4303] sonixj: probe of 4-1:0.0 failed with error -71
[  251.851675][ T4303] usb 4-1: USB disconnect, device number 4
[  252.075525][ T6514] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  252.086166][ T6514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  252.093744][ T6514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  252.121098][ T6514] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  252.564510][ T4270] Bluetooth: hci0: command 0x0406 tx timeout
[  252.964668][ T4283] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  254.094744][ T4283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  254.126453][ T4283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  255.924925][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  255.931262][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  255.979816][ T4283] usb 2-1: string descriptor 0 read error: -71
[  256.024432][ T4283] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  256.075391][ T4283] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  256.120600][ T4283] usb 2-1: config 0 descriptor??
[  256.133061][ T6561] netlink: 'syz.2.587': attribute type 1 has an invalid length.
[  256.149541][ T4283] usb 2-1: can't set config #0, error -71
[  256.187459][ T6561] 8021q: adding VLAN 0 to HW filter on device bond1
[  256.210511][ T4283] usb 2-1: USB disconnect, device number 4
[  256.388120][ T6569] bond1: (slave veth3): Enslaving as an active interface with a down link
[  257.012821][ T6561] device veth1 entered promiscuous mode
[  257.061066][ T6561] device veth1 left promiscuous mode
[  257.069385][ T6561] bond1: (slave vlan3): making interface the new active one
[  257.078110][ T6561] device veth1 entered promiscuous mode
[  257.086085][ T6561] device vlan3 entered promiscuous mode
[  257.094862][ T6561] bond1: (slave vlan3): Enslaving as an active interface with an up link
[  257.112427][ T6298] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  259.779989][ T6612] loop2: detected capacity change from 0 to 1024
[  259.823999][ T6612] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  259.913744][ T6624] overlayfs: failed to clone upperpath
[  261.564827][ T4256] EXT4-fs (loop2): unmounting filesystem.
[  261.704323][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'.
[  263.404484][ T4283] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  263.614594][ T4283] usb 3-1: Using ep0 maxpacket: 32
[  263.638587][ T4283] usb 3-1: config 0 has no interfaces?
[  263.662198][ T4283] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  263.681758][ T4283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.702423][ T4283] usb 3-1: Product: syz
[  263.717643][ T4283] usb 3-1: Manufacturer: syz
[  263.732482][ T4283] usb 3-1: SerialNumber: syz
[  263.758312][ T4283] usb 3-1: config 0 descriptor??
[  263.994224][ T6651] capability: warning: `syz.6.612' uses deprecated v2 capabilities in a way that may be insecure
[  264.569241][ T4387] usb 3-1: USB disconnect, device number 7
[  264.593663][ T6668] sg_write: data in/out 1633771837/64 bytes for SCSI command 0x61-- guessing data in;
[  264.593663][ T6668]    program syz.5.617 not setting count and/or reply_len properly
[  264.614011][ T6668] sg_write: data in/out 1818846731/36 bytes for SCSI command 0x61-- guessing data in;
[  264.614011][ T6668]    program syz.5.617 not setting count and/or reply_len properly
[  264.647364][ T6668] sg_write: data in/out 1633771837/120 bytes for SCSI command 0x61-- guessing data in;
[  264.647364][ T6668]    program syz.5.617 not setting count and/or reply_len properly
[  264.667672][ T6668] sg_write: data in/out 1633771837/36 bytes for SCSI command 0x61-- guessing data in;
[  264.667672][ T6668]    program syz.5.617 not setting count and/or reply_len properly
[  264.805743][ T6677] netlink: 'syz.5.620': attribute type 4 has an invalid length.
[  264.951404][ T6680] netlink: 'syz.5.620': attribute type 4 has an invalid length.
[  266.026508][ T6698] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  266.059980][ T6698] overlayfs: failed to set xattr on upper
[  266.086750][ T6698] overlayfs: ...falling back to index=off,metacopy=off.
[  266.098189][ T6698] overlayfs: failed to resolve './file0': -2
[  266.170688][ T6704] loop2: detected capacity change from 0 to 256
[  266.558738][ T6704] exFAT-fs (loop2): error, invalid dentry access beyond EOF (clu : 5, eidx : 129)
[  266.562831][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.6.633'.
[  266.596908][ T6704] exFAT-fs (loop2): Filesystem has been set read-only
[  267.904469][ T4269] Bluetooth: hci3: command 0x0406 tx timeout
[  268.081306][ T6742] loop3: detected capacity change from 0 to 2048
[  268.171495][ T6742]  loop3: p1 < > p3
[  268.190857][ T6742] loop3: p3 size 134217728 extends beyond EOD, truncated
[  268.323196][ T6742] loop3: detected capacity change from 0 to 1024
[  269.499756][ T6770] netlink: 'syz.3.648': attribute type 1 has an invalid length.
[  269.558780][ T6770] device bond4 entered promiscuous mode
[  269.581815][ T6773] bond4: (slave ip6gretap1): making interface the new active one
[  269.650742][ T6773] device ip6gretap1 entered promiscuous mode
[  269.667087][ T6776] IPVS: length: 32 != 8
[  269.686228][ T6773] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  269.695525][ T6770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.648'.
[  269.736320][ T6770] device bond4 left promiscuous mode
[  269.743421][ T6770] device ip6gretap1 left promiscuous mode
[  269.752807][ T6770] 8021q: adding VLAN 0 to HW filter on device bond4
[  269.975950][ T6786] loop3: detected capacity change from 0 to 1024
[  269.989530][ T6789] netlink: 24 bytes leftover after parsing attributes in process `syz.6.655'.
[  270.003075][ T6786] ext2: Unknown parameter 'defcontext'
[  270.030822][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.6.655'.
[  271.151935][ T6810] netlink: 108 bytes leftover after parsing attributes in process `syz.5.662'.
[  271.526678][ T6818] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  271.888276][ T6827] netlink: set zone limit has 8 unknown bytes
[  273.633685][ T6839] random: crng reseeded on system resumption
[  274.016808][ T6839] Restarting kernel threads ... done.
[  274.545874][ T6305] device vlan3 left promiscuous mode
[  275.931706][ T6869] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  276.037756][ T6869] bond4: (slave ip6gretap1): Releasing active interface
[  276.290681][ T6876] loop3: detected capacity change from 0 to 128
[  278.494566][ T4303] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  278.694764][ T4303] usb 4-1: Using ep0 maxpacket: 32
[  278.702223][ T4303] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  278.721041][ T4303] usb 4-1: config 0 has no interface number 0
[  278.741284][ T4303] usb 4-1: config 0 interface 184 has no altsetting 0
[  278.763140][ T4303] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  278.782549][ T4303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.792049][ T4303] usb 4-1: Product: syz
[  278.806478][ T4303] usb 4-1: Manufacturer: syz
[  278.811307][ T4303] usb 4-1: SerialNumber: syz
[  278.996515][ T4303] usb 4-1: config 0 descriptor??
[  279.015614][ T4303] smsc75xx v1.0.0
[  279.019311][ T4303] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  279.030438][ T4303] smsc75xx: probe of 4-1:0.184 failed with error -22
[  281.664432][    T7] usb 4-1: USB disconnect, device number 5
[  281.905399][ T6940] loop1: detected capacity change from 0 to 1024
[  282.009673][ T6940] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  283.556804][ T6959] netlink: 104 bytes leftover after parsing attributes in process `syz.3.707'.
[  283.694941][ T6962] device team0 entered promiscuous mode
[  283.751247][ T6962] device team_slave_0 entered promiscuous mode
[  283.814716][ T6962] device team_slave_1 entered promiscuous mode
[  283.868037][ T6960] device team0 left promiscuous mode
[  283.912672][ T6960] device team_slave_0 left promiscuous mode
[  283.948435][ T6960] device team_slave_1 left promiscuous mode
[  284.471508][ T6972] loop1: detected capacity change from 0 to 1024
[  284.516274][ T6972] EXT4-fs: Ignoring removed orlov option
[  284.534486][ T6972] EXT4-fs: Ignoring removed nomblk_io_submit option
[  284.635389][ T6972] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  285.534975][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  287.537328][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.718'.
[  288.429117][ T7012] loop3: detected capacity change from 0 to 1024
[  288.439397][ T7012] journal_path: Lookup failure for './file1'
[  288.445544][ T7012] EXT4-fs: error: could not find journal device path
[  288.836120][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.722'.
[  288.849907][ T7013] device syz_tun entered promiscuous mode
[  289.074990][ T7013] device macvtap1 entered promiscuous mode
[  289.405330][ T7019] device syz_tun left promiscuous mode
[  291.717732][ T4299] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  292.448848][ T7055] loop3: detected capacity change from 0 to 1024
[  292.485485][ T7055] EXT4-fs: Ignoring removed orlov option
[  292.491248][ T7055] /dev/loop3: Can't open blockdev
[  292.522601][ T7056] loop1: detected capacity change from 0 to 2048
[  292.555720][ T7058] loop2: detected capacity change from 0 to 512
[  292.675961][ T7058] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #3: comm syz.2.736: corrupted inode contents
[  292.701834][ T4299] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  292.718691][ T4299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.722547][ T7056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  292.734999][ T7058] EXT4-fs error (device loop2): ext4_dirty_inode:6118: inode #3: comm syz.2.736: mark_inode_dirty error
[  292.751060][ T7056] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  292.753674][ T4299] usb 6-1: config 0 descriptor??
[  292.771722][ T7056] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28
[  292.781135][ T7058] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #3: comm syz.2.736: corrupted inode contents
[  292.786824][ T4299] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  292.992654][ T7056] EXT4-fs (loop1): This should not happen!! Data will be lost
[  292.992654][ T7056] 
[  293.075724][ T7058] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.736: mark_inode_dirty error
[  293.241304][ T7058] __quota_error: 12 callbacks suppressed
[  293.241444][ T7058] Quota error (device loop2): write_blk: dquota write failed
[  293.420220][ T7058] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  293.432455][ T7056] EXT4-fs (loop1): Total free blocks count 0
[  293.459805][ T7056] EXT4-fs (loop1): Free/Dirty block details
[  293.466187][ T7058] EXT4-fs error (device loop2): ext4_acquire_dquot:6802: comm syz.2.736: Failed to acquire dquot type 0
[  293.474595][ T7056] EXT4-fs (loop1): free_blocks=2415919104
[  293.504580][ T7056] EXT4-fs (loop1): dirty_blocks=48
[  293.507345][ T7058] EXT4-fs (loop2): 1 orphan inode deleted
[  293.509801][ T7056] EXT4-fs (loop1): Block reservation details
[  293.537308][ T6305] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  293.551489][ T7058] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  293.564548][ T7056] EXT4-fs (loop1): i_reserved_data_blocks=3
[  293.574764][ T6305] EXT4-fs error (device loop2): ext4_release_dquot:6838: comm kworker/u4:25: Failed to release dquot type 1
[  293.577465][ T7058] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.713979][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  293.907709][ T4256] EXT4-fs (loop2): unmounting filesystem.
[  293.920531][ T7076] loop1: detected capacity change from 0 to 512
[  294.269841][ T7076] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  294.674991][ T7076] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  294.772792][ T7076] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.740: Failed to acquire dquot type 0
[  294.980492][ T7076] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  295.002738][ T7076] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  295.013150][ T7076] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.740: Failed to acquire dquot type 0
[  295.308493][    T7] usb 6-1: USB disconnect, device number 3
[  295.345957][ T7076] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  295.363320][ T7076] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  295.384624][ T7076] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.740: Failed to acquire dquot type 0
[  295.428281][ T7076] EXT4-fs (loop1): 1 orphan inode deleted
[  295.434050][ T7076] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  295.453849][ T7076] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  295.551411][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  296.348536][ T7103] netlink: 'syz.1.747': attribute type 25 has an invalid length.
[  296.368342][ T7103] netlink: 'syz.1.747': attribute type 7 has an invalid length.
[  297.292992][ T7121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.752'.
[  298.587814][ T7131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.757'.
[  301.408391][ T7154] loop5: detected capacity change from 0 to 256
[  301.433801][ T7154] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  301.451904][ T7154] kvm: pic: single mode not supported
[  301.452013][ T7154] kvm: pic: level sensitive irq not supported
[  301.462933][ T7154] kvm: pic: single mode not supported
[  301.491398][ T7157] kernel profiling enabled (shift: 17)
[  301.607634][ T7159] kvm [7158]: vcpu0, guest rIP: 0x223 disabled perfctr wrmsr: 0xc1 data 0x8000
[  302.587030][ T7165] netlink: 'syz.5.766': attribute type 5 has an invalid length.
[  302.864822][ T7174] loop2: detected capacity change from 0 to 512
[  302.871900][ T7174] EXT4-fs: quotafile must be on filesystem root
[  303.235126][ T7176] ªªªªªª: renamed from vlan0
[  305.953996][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.996144][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.267204][   T26] audit: type=1326 audit(1747085628.816:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000
[  308.333504][   T26] audit: type=1326 audit(1747085628.816:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000
[  308.493292][   T26] audit: type=1326 audit(1747085628.816:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000
[  308.525841][   T26] audit: type=1326 audit(1747085628.816:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000
[  308.565711][   T26] audit: type=1326 audit(1747085628.826:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000
[  309.486906][   T26] audit: type=1326 audit(1747085628.826:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b86590887 code=0x7ffc0000
[  310.377786][   T26] audit: type=1326 audit(1747085628.826:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9b865907fc code=0x7ffc0000
[  310.494398][   T26] audit: type=1326 audit(1747085628.826:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9b86590734 code=0x7ffc0000
[  310.541171][   T26] audit: type=1326 audit(1747085628.826:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9b86590734 code=0x7ffc0000
[  310.587178][   T26] audit: type=1326 audit(1747085628.826:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b8658d5ca code=0x7ffc0000
[  310.944631][ T7258] tipc: Started in network mode
[  310.949802][ T7258] tipc: Node identity aaaaaaaaaa41, cluster identity 4711
[  311.002964][ T7258] tipc: Enabled bearer <eth:geneve1>, priority 10
[  312.042139][ T4387] tipc: Node number set to 15444650
[  312.482965][ T7282] netlink: 'syz.5.803': attribute type 1 has an invalid length.
[  312.588998][ T7282] device bond2 entered promiscuous mode
[  312.632352][ T7282] 8021q: adding VLAN 0 to HW filter on device bond2
[  312.667545][ T7282] bond1: (slave bond2): making interface the new active one
[  312.695264][ T7282] bond1: (slave bond2): Enslaving as an active interface with an up link
[  312.757314][ T7286] device macsec1 entered promiscuous mode
[  312.773782][ T7286] device bond1 entered promiscuous mode
[  314.698924][ T7308] loop3: detected capacity change from 0 to 1024
[  314.730378][ T7308] ext4: Unknown parameter 'euid<00000000000000000000'
[  316.699585][ T4387] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  317.190764][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  317.197873][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  317.976227][ T4387] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  317.995234][ T4387] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  318.004719][ T4387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.025240][ T4387] usb 6-1: config 0 descriptor??
[  318.033089][ T4387] pwc: Askey VC010 type 2 USB webcam detected.
[  319.055154][ T4269] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  319.063979][ T4269] Bluetooth: hci0: Injecting HCI hardware error event
[  319.071089][ T4387] pwc: recv_control_msg error -32 req 02 val 2b00
[  319.080860][ T4269] Bluetooth: hci0: hardware error 0x00
[  319.105915][ T4387] pwc: recv_control_msg error -32 req 02 val 2700
[  319.123201][ T4387] pwc: recv_control_msg error -32 req 02 val 2c00
[  319.138761][ T4387] pwc: recv_control_msg error -32 req 04 val 1000
[  319.149241][ T4387] pwc: recv_control_msg error -32 req 04 val 1300
[  319.162155][ T4387] pwc: recv_control_msg error -32 req 04 val 1400
[  319.179630][ T4387] pwc: recv_control_msg error -32 req 02 val 2000
[  319.187029][ T4387] pwc: recv_control_msg error -32 req 02 val 2100
[  319.204038][ T4387] pwc: recv_control_msg error -32 req 04 val 1500
[  319.227421][ T4387] pwc: recv_control_msg error -32 req 02 val 2500
[  319.340885][ T7353] loop2: detected capacity change from 0 to 8192
[  319.381409][ T7353] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  319.414458][ T7353] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  319.461969][ T7353] REISERFS (device loop2): using ordered data mode
[  319.464275][ T4387] pwc: recv_control_msg error -71 req 02 val 2600
[  319.468729][ T7353] reiserfs: using flush barriers
[  319.484488][ T7353] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  319.514755][ T4387] pwc: recv_control_msg error -71 req 02 val 2900
[  319.543314][ T4387] pwc: recv_control_msg error -71 req 02 val 2800
[  319.551562][ T7353] REISERFS (device loop2): checking transaction log (loop2)
[  319.552119][ T7358] netlink: 'syz.6.827': attribute type 1 has an invalid length.
[  319.712878][ T7353] REISERFS (device loop2): Using tea hash to sort names
[  319.742942][ T7353] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  319.752715][ T4387] pwc: recv_control_msg error -71 req 04 val 1100
[  319.759712][ T4387] pwc: recv_control_msg error -71 req 04 val 1200
[  319.768295][ T4387] pwc: Registered as video103.
[  319.774759][ T4387] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input6
[  319.779964][ T7362] 8021q: adding VLAN 0 to HW filter on device bond1
[  319.797228][ T4387] usb 6-1: USB disconnect, device number 4
[  320.484933][ T7367] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  320.507100][ T7363] device veth5 entered promiscuous mode
[  320.533956][ T7363] bond1: (slave veth5): Enslaving as a backup interface with a down link
[  320.633916][ T7353] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 4)
[  320.660558][ T7353] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 4)
[  320.732688][ T7353] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 4)
[  320.786074][ T7373] Cannot find add_set index 0 as target
[  321.695181][ T7353] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 4)
[  321.709716][ T4269] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  321.766830][ T7353] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 4)
[  322.503234][ T7390] netlink: 'syz.1.837': attribute type 9 has an invalid length.
[  322.510162][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  322.510178][   T26] audit: type=1326 audit(1747085643.056:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000
[  322.541220][ T7390] netlink: 'syz.1.837': attribute type 6 has an invalid length.
[  322.553373][ T7390] netlink: 'syz.1.837': attribute type 7 has an invalid length.
[  322.565707][ T7390] netlink: 'syz.1.837': attribute type 8 has an invalid length.
[  322.609437][   T26] audit: type=1326 audit(1747085643.096:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000
[  322.647640][   T26] audit: type=1326 audit(1747085643.096:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000
[  322.741948][   T26] audit: type=1326 audit(1747085643.096:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000
[  322.840269][   T26] audit: type=1326 audit(1747085643.096:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000
[  322.920010][   T26] audit: type=1326 audit(1747085643.096:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000
[  323.291924][   T26] audit: type=1326 audit(1747085643.096:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000
[  323.379766][   T26] audit: type=1326 audit(1747085643.096:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000
[  323.478171][   T26] audit: type=1326 audit(1747085643.096:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000
[  323.573274][ T7410] Cannot find add_set index 0 as target
[  323.994368][   T26] audit: type=1326 audit(1747085643.096:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000
[  324.459724][ T7416] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  324.714478][ T7421] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  324.776636][ T7423] netlink: 'syz.5.844': attribute type 10 has an invalid length.
[  324.785139][ T7423] netlink: 2 bytes leftover after parsing attributes in process `syz.5.844'.
[  324.793948][ T7423] device team0 entered promiscuous mode
[  324.799560][ T7423] device team_slave_0 entered promiscuous mode
[  324.805910][ T7423] device team_slave_1 entered promiscuous mode
[  324.812382][ T7423] bridge0: port 3(team0) entered blocking state
[  324.818747][ T7423] bridge0: port 3(team0) entered disabled state
[  324.827179][ T7423] bridge0: port 3(team0) entered blocking state
[  324.835659][ T7423] bridge0: port 3(team0) entered forwarding state
[  326.705847][ T7436] loop5: detected capacity change from 0 to 1024
[  326.714810][ T7436] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  326.725723][ T7436] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  326.735752][ T7436] EXT4-fs error (device loop5): ext4_get_journal_inode:5723: comm syz.5.851: inode #1: comm syz.5.851: iget: illegal inode #
[  326.749340][ T7436] EXT4-fs (loop5): no journal found
[  326.754662][ T7436] EXT4-fs (loop5): can't get journal size
[  326.768254][ T7438] netlink: 'syz.6.850': attribute type 9 has an invalid length.
[  326.964457][ T7438] netlink: 'syz.6.850': attribute type 6 has an invalid length.
[  326.974289][ T7438] netlink: 'syz.6.850': attribute type 7 has an invalid length.
[  326.984437][ T7436] EXT4-fs (loop5): failed to initialize system zone (-22)
[  326.999614][ T7436] EXT4-fs (loop5): mount failed
[  327.018133][ T7438] netlink: 'syz.6.850': attribute type 8 has an invalid length.
[  327.839097][ T7447] loop2: detected capacity change from 0 to 2048
[  327.966496][ T7447]  loop2: p1 < > p3
[  327.986303][ T7447] loop2: p3 size 134217728 extends beyond EOD, truncated
[  328.531828][   T26] kauditd_printk_skb: 88 callbacks suppressed
[  328.531843][   T26] audit: type=1326 audit(1747085649.076:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  328.604694][   T26] audit: type=1326 audit(1747085649.116:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  328.802492][   T26] audit: type=1326 audit(1747085649.116:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  329.176362][   T26] audit: type=1326 audit(1747085649.116:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  329.461772][   T26] audit: type=1326 audit(1747085649.116:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  329.486311][   T26] audit: type=1326 audit(1747085649.116:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  329.532582][   T26] audit: type=1326 audit(1747085649.116:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  329.591303][   T26] audit: type=1326 audit(1747085649.116:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  329.614598][   T26] audit: type=1326 audit(1747085649.116:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  329.638363][   T26] audit: type=1326 audit(1747085649.116:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000
[  329.860690][ T7476] loop3: detected capacity change from 0 to 256
[  331.583137][ T7478] netlink: 156 bytes leftover after parsing attributes in process `syz.1.858'.
[  335.684069][ T7526] loop3: detected capacity change from 0 to 164
[  336.824788][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.6.883'.
[  337.090137][ T7551] loop5: detected capacity change from 0 to 128
[  337.112741][ T7551] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  337.163132][ T7551] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  339.086712][ T7576] loop3: detected capacity change from 0 to 256
[  339.093956][ T7576] exfat: Deprecated parameter 'namecase'
[  339.100035][ T7576] exfat: Unknown parameter 'eprors'
[  340.120927][ T7588] capability: warning: `syz.5.907' uses 32-bit capabilities (legacy support in use)
[  341.287470][ T7586] xt_HMARK: proto mask must be zero with L3 mode
[  341.729690][ T7603] loop2: detected capacity change from 0 to 128
[  343.155470][ T7603] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  343.187957][ T7600] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  343.523923][ T7613] loop5: detected capacity change from 0 to 512
[  343.531311][ T7613] EXT4-fs: Ignoring removed mblk_io_submit option
[  343.540701][ T7613] EXT4-fs (loop5): unable to read superblock
[  344.199665][ T7618] loop5: detected capacity change from 0 to 256
[  344.340288][ T7619] loop2: detected capacity change from 0 to 512
[  344.382048][ T7619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  344.394289][ T7624] syz.1.909[7624] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  344.407254][ T7624] syz.1.909[7624] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  344.543461][ T7619] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  344.683094][ T7619] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  344.982488][ T7619] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  345.655333][ T4256] EXT4-fs (loop2): unmounting filesystem.
[  345.722300][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.6.914'.
[  347.537690][ T7656] netlink: 28 bytes leftover after parsing attributes in process `syz.3.920'.
[  349.139933][ T7672] loop5: detected capacity change from 0 to 8
[  349.167871][ T7674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.926'.
[  349.219271][ T7672] SQUASHFS error: xz decompression failed, data probably corrupt
[  349.299502][ T7672] SQUASHFS error: Failed to read block 0x108: -5
[  349.316382][ T7672] SQUASHFS error: Unable to read metadata cache entry [106]
[  349.323848][ T7672] SQUASHFS error: Unable to read inode 0x0
[  349.479685][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  349.479701][   T26] audit: type=1107 audit(1747085670.026:193): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  350.478385][ T7696] netlink: 'syz.2.934': attribute type 10 has an invalid length.
[  350.516996][ T7696] 8021q: adding VLAN 0 to HW filter on device batadv0
[  350.605786][ T7696] team0: Failed to send port change of device batadv0 via netlink (err -105)
[  350.616707][ T7696] team0: Failed to send options change via netlink (err -105)
[  350.626220][ T7696] team0: Port device batadv0 added
[  351.299425][ T7705] loop3: detected capacity change from 0 to 512
[  351.312938][ T7705] EXT4-fs: Ignoring removed mblk_io_submit option
[  351.342016][ T7705] /dev/loop3: Can't open blockdev
[  352.823054][ T7740] loop5: detected capacity change from 0 to 2048
[  352.850151][ T7740] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  354.028333][ T7756] binder: 7755:7756 ioctl c0306201 200000001a80 returned -11
[  357.416449][ T7806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.552931][ T7814] binder: 7813:7814 ioctl 4018620d 0 returned -22
[  357.570570][ T7814] binder: 7813:7814 ioctl c0306201 0 returned -14
[  357.963397][ T7828] tipc: Started in network mode
[  357.969233][ T7828] tipc: Node identity 4681c5774ecb, cluster identity 4711
[  357.977636][ T7828] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  357.990342][ T7828] device syzkaller0 entered promiscuous mode
[  358.017874][ T7828] tipc: Resetting bearer <eth:syzkaller0>
[  358.035163][ T7827] tipc: Resetting bearer <eth:syzkaller0>
[  358.061948][ T7827] tipc: Disabling bearer <eth:syzkaller0>
[  360.444734][ T7850] loop3: detected capacity change from 0 to 2048
[  360.459506][ T7850] /dev/loop3: Can't open blockdev
[  360.481930][ T7854] loop2: detected capacity change from 0 to 1024
[  360.505325][ T7854] EXT4-fs: Ignoring removed nomblk_io_submit option
[  360.670133][ T7856] netlink: 'syz.6.982': attribute type 2 has an invalid length.
[  360.677881][ T7856] netlink: 'syz.6.982': attribute type 8 has an invalid length.
[  360.685584][ T7856] netlink: 132 bytes leftover after parsing attributes in process `syz.6.982'.
[  361.752182][ T7854] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  361.793278][ T7854] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  361.877862][ T7854] EXT4-fs error (device loop2): ext4_group_add:1746: comm syz.2.983: inode #7: comm syz.2.983: iget: illegal inode #
[  361.917180][ T7854] EXT4-fs warning (device loop2): ext4_group_add:1748: Error opening resize inode
[  361.942959][   T26] audit: type=1326 audit(1747085682.486:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000
[  362.011593][   T26] audit: type=1326 audit(1747085682.516:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000
[  362.053434][ T4256] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 16: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=2, rec_len=12, size=1024 fake=1
[  362.080087][   T26] audit: type=1326 audit(1747085682.516:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000
[  362.104611][   T26] audit: type=1326 audit(1747085682.516:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000
[  362.189172][   T26] audit: type=1326 audit(1747085682.516:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000
[  362.358920][ T4256] EXT4-fs (loop2): unmounting filesystem.
[  362.597704][   T26] audit: type=1326 audit(1747085682.526:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000
[  362.864550][   T26] audit: type=1326 audit(1747085682.526:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000
[  363.070684][   T26] audit: type=1326 audit(1747085682.526:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000
[  363.093674][   T26] audit: type=1326 audit(1747085682.526:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000
[  363.118218][   T26] audit: type=1326 audit(1747085682.526:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000
[  363.196968][ T7871] device batadv_slave_1 entered promiscuous mode
[  363.720624][ T7871] device veth1_virt_wifi entered promiscuous mode
[  363.735178][ T7870] device veth1_virt_wifi left promiscuous mode
[  363.753527][ T7870] device batadv_slave_1 left promiscuous mode
[  364.273736][ T6301] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.043571][ T6301] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.276157][ T6301] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.410616][ T6301] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.040399][ T4270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  366.053531][ T4270] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  366.062010][ T4270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  366.071534][ T4270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  366.080730][ T4270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  366.088184][ T4270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  367.693646][   T26] kauditd_printk_skb: 15 callbacks suppressed
[  367.693661][   T26] audit: type=1326 audit(1747085688.236:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000
[  367.776355][   T26] audit: type=1326 audit(1747085688.326:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000
[  367.798629][    C0] vkms_vblank_simulate: vblank timer overrun
[  367.805166][   T26] audit: type=1326 audit(1747085688.326:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000
[  367.831820][   T26] audit: type=1326 audit(1747085688.326:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000
[  367.864183][   T26] audit: type=1326 audit(1747085688.326:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000
[  367.912069][   T26] audit: type=1326 audit(1747085688.326:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000
[  367.942361][   T26] audit: type=1326 audit(1747085688.326:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000
[  367.964756][    C0] vkms_vblank_simulate: vblank timer overrun
[  367.978780][   T26] audit: type=1326 audit(1747085688.346:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000
[  368.001653][   T26] audit: type=1326 audit(1747085688.346:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000
[  368.024104][   T26] audit: type=1326 audit(1747085688.346:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000
[  368.155516][ T4270] Bluetooth: hci1: command 0x0409 tx timeout
[  369.667003][ T6301] bond0: (slave wlan1): Releasing backup interface
[  370.047766][ T7947] rdma_rxe: rxe_register_device failed with error -23
[  370.055734][ T7947] rdma_rxe: failed to add ipvlan1
[  370.345120][ T4270] Bluetooth: hci1: command 0x041b tx timeout
[  370.786873][ T7898] chnl_net:caif_netlink_parms(): no params data found
[  371.071058][ T6301] device hsr_slave_0 left promiscuous mode
[  371.088599][ T6301] device hsr_slave_1 left promiscuous mode
[  371.133560][ T6301] device veth1 left promiscuous mode
[  371.161287][ T6301] device veth1_macvtap left promiscuous mode
[  371.239791][ T6301] device veth0_macvtap left promiscuous mode
[  371.267853][ T6301] device veth1_vlan left promiscuous mode
[  371.294118][ T6301] device veth0_vlan left promiscuous mode
[  372.088725][ T7972] overlayfs: failed to clone upperpath
[  372.424701][ T4269] Bluetooth: hci1: command 0x040f tx timeout
[  373.228079][ T6301] bond1 (unregistering): (slave vlan3): Releasing active interface
[  373.678027][ T6301] bond1 (unregistering): (slave veth3): Releasing active interface
[  374.464449][ T4270] Bluetooth: hci1: command 0x0419 tx timeout
[  375.542378][ T8004] rdma_rxe: rxe_register_device failed with error -23
[  375.549766][ T8004] rdma_rxe: failed to add ipvlan1
[  376.853904][ T6301] bond1 (unregistering): Released all slaves
[  378.610478][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.630304][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  380.687614][ T8046] overlayfs: failed to clone upperpath
[  380.779269][ T8048] loop3: detected capacity change from 0 to 1024
[  380.799166][ T8048] /dev/loop3: Can't open blockdev
[  380.920330][ T8053] rdma_rxe: rxe_register_device failed with error -23
[  380.927818][ T8053] rdma_rxe: failed to add ipvlan1
[  380.966338][ T8048] loop3: detected capacity change from 0 to 512
[  381.082146][ T8048] /dev/loop3: Can't open blockdev
[  382.971847][ T6301] team0 (unregistering): Port device batadv0 removed
[  383.302333][ T6301] bond0 (unregistering): Released all slaves
[  383.390351][ T7898] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.397777][ T7898] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.406262][ T7898] device bridge_slave_0 entered promiscuous mode
[  383.415180][ T7898] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.422518][ T7898] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.472326][ T7898] device bridge_slave_1 entered promiscuous mode
[  383.551328][ T8070] tipc: Started in network mode
[  383.556364][ T8070] tipc: Node identity ac1414aa, cluster identity 4711
[  384.017511][ T8070] tipc: Enabled bearer <udp:syz2>, priority 10
[  384.046511][ T7898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  384.059141][ T7898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  384.074090][ T8075] tipc: Enabled bearer <eth:team0>, priority 0
[  384.212024][ T7898] team0: Port device team_slave_0 added
[  384.244982][ T7898] team0: Port device team_slave_1 added
[  384.308866][ T7898] batman_adv: batadv0: Adding interface: batadv_slave_0
[  384.395234][ T7898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  384.463070][ T7898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  384.596822][ T7898] batman_adv: batadv0: Adding interface: batadv_slave_1
[  384.603846][ T7898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  384.629763][    C0] vkms_vblank_simulate: vblank timer overrun
[  384.709123][ T7898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  384.770083][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  384.784116][ T8082] bridge0: port 3(team0) entered disabled state
[  384.807842][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  384.820033][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  384.975728][ T8082] device bridge_slave_0 left promiscuous mode
[  384.982002][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.991267][ T8082] device bridge_slave_1 left promiscuous mode
[  384.998574][ T8082] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.011027][ T8082] bond0: (slave bond_slave_0): Releasing backup interface
[  386.157674][ T4283] tipc: Node number set to 2886997162
[  386.165259][ T8082] bond0: (slave bond_slave_1): Releasing backup interface
[  386.190142][ T8082] device team_slave_0 left promiscuous mode
[  386.219155][ T8082] team0: Port device team_slave_0 removed
[  386.232890][ T8082] device team_slave_1 left promiscuous mode
[  386.273205][ T8082] team0: Port device team_slave_1 removed
[  386.314360][ T8082] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  386.372730][ T8082] batman_adv: batadv0: Removing interface: batadv_slave_0
[  386.438931][ T8082] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  386.488461][ T8082] batman_adv: batadv0: Removing interface: batadv_slave_1
[  386.716981][ T8082] bond1: (slave bond2): Releasing backup interface
[  386.998010][ T8093] netlink: 'syz.5.1049': attribute type 10 has an invalid length.
[  387.019240][ T8093] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.237444][ T7898] device hsr_slave_0 entered promiscuous mode
[  387.257594][ T7898] device hsr_slave_1 entered promiscuous mode
[  387.266894][ T7898] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  387.285974][ T7898] Cannot create hsr debugfs directory
[  387.476048][ T8117] loop5: detected capacity change from 0 to 256
[  388.274996][ T8110] bridge_slave_0: default FDB implementation only supports local addresses
[  388.341480][ T7898] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  388.373521][ T7898] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  388.388704][ T7898] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  388.400437][ T7898] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  388.492830][ T7898] 8021q: adding VLAN 0 to HW filter on device bond0
[  388.506664][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  388.516842][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  388.532336][ T7898] 8021q: adding VLAN 0 to HW filter on device team0
[  388.542099][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  388.551047][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  388.560580][ T6318] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.567731][ T6318] bridge0: port 1(bridge_slave_0) entered forwarding state
[  388.586443][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  388.604003][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  388.613757][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  388.629484][ T6318] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.636659][ T6318] bridge0: port 2(bridge_slave_1) entered forwarding state
[  388.658970][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  388.668755][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  388.693242][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  388.709595][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  388.735281][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  388.743960][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  388.768776][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  388.777449][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  388.786392][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  388.797405][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  388.806329][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  388.817715][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  389.221971][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  389.230166][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  389.248968][ T7898] 8021q: adding VLAN 0 to HW filter on device batadv0
[  389.552630][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  389.561368][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  389.582492][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  389.591483][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  389.600785][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  389.608669][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  389.620582][ T7898] device veth0_vlan entered promiscuous mode
[  389.632922][ T7898] device veth1_vlan entered promiscuous mode
[  389.655109][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  389.665231][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  389.673233][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  389.682117][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  389.695911][ T7898] device veth0_macvtap entered promiscuous mode
[  389.706035][ T7898] device veth1_macvtap entered promiscuous mode
[  389.722551][ T7898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.733124][ T7898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.743357][ T7898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.754089][ T7898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.765792][ T7898] batman_adv: batadv0: Interface activated: batadv_slave_0
[  389.773928][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  389.782605][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  389.790712][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  389.799520][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  389.811072][ T7898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.822221][ T7898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.832790][ T7898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.843591][ T7898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.855101][ T7898] batman_adv: batadv0: Interface activated: batadv_slave_1
[  389.862828][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  389.871727][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  389.888768][ T7898] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.898007][ T7898] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.906956][ T7898] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.916233][ T7898] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.988570][ T6322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.997075][ T6322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.013594][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  390.029330][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.041491][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.055273][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  390.255645][ T8143] mmap: syz.5.1072 (8143) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  390.530606][ T8144] netlink: 'syz.6.1074': attribute type 11 has an invalid length.
[  390.538639][ T8144] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1074'.
[  390.549551][ T8138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  391.379886][ T8157] rdma_rxe: rxe_register_device failed with error -23
[  391.387533][ T8157] rdma_rxe: failed to add ipvlan1
[  393.083929][ T8171] loop7: detected capacity change from 0 to 4096
[  395.342440][ T8195] binder: 8184:8195 ioctl c018620b 0 returned -14
[  396.327130][ T8210] loop5: detected capacity change from 0 to 256
[  396.359998][ T8210] exfat: Bad value for 'uid'
[  396.388458][ T8217] ieee802154 phy0 wpan0: encryption failed: -22
[  396.641602][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1084'.
[  396.679889][ T8218] wlan1: mtu greater than device maximum
[  396.810458][ T8220] loop7: detected capacity change from 0 to 4096
[  396.867633][ T8220] NILFS (loop7): invalid segment: Checksum error in segment payload
[  396.883782][ T8220] NILFS (loop7): trying rollback from an earlier position
[  396.911190][ T8220] NILFS (loop7): recovery complete
[  397.040586][ T8231] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  397.164957][   T26] kauditd_printk_skb: 71 callbacks suppressed
[  397.164983][   T26] audit: type=1800 audit(1747085717.716:300): pid=8220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1087" name="bus" dev="loop7" ino=12 res=0 errno=0
[  397.667553][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  397.678412][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  397.686552][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  397.702839][ T8220] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  397.987361][ T8245] rdma_rxe: already configured on ipvlan1
[  402.298312][ T8296] rdma_rxe: rxe_register_device failed with error -23
[  402.305295][ T8296] rdma_rxe: failed to add ipvlan1
[  403.872538][ T8307] loop5: detected capacity change from 0 to 4096
[  403.927475][ T8307] NILFS (loop5): invalid segment: Checksum error in segment payload
[  403.950791][ T8307] NILFS (loop5): trying rollback from an earlier position
[  403.999179][ T8307] NILFS (loop5): recovery complete
[  404.026804][ T8312] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  404.085386][   T26] audit: type=1800 audit(1747085724.636:301): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1116" name="bus" dev="loop5" ino=12 res=0 errno=0
[  404.210283][ T8314] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  404.221479][ T8314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  404.229836][ T8314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  404.408484][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'.
[  404.442557][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'.
[  406.121267][ T8336] loop7: detected capacity change from 0 to 256
[  406.939418][ T8336] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  407.871809][ T8357] IPv6: sit1: Disabled Multicast RS
[  407.880971][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1130'.
[  409.235858][ T8376] netlink: 'syz.3.1136': attribute type 3 has an invalid length.
[  409.274523][    T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  409.487992][    T7] usb 6-1: Using ep0 maxpacket: 16
[  409.498080][    T7] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  409.520442][    T7] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  409.532219][    T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.548132][    T7] usb 6-1: config 0 descriptor??
[  409.576631][    T7] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input7
[  409.736253][ T8391] tipc: Resetting bearer <eth:geneve1>
[  409.778183][ T8368] input: syz0 as /devices/virtual/input/input8
[  410.595671][ T8400] loop7: detected capacity change from 0 to 256
[  410.603512][ T8400] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  410.689498][ T8400] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  411.378164][ T8400] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  413.658431][ T3608] bcm5974 6-1:0.0: could not read from device
[  413.672325][    T7] usb 6-1: USB disconnect, device number 5
[  415.645001][ T8441] loop7: detected capacity change from 0 to 4096
[  416.832110][ T8441] NILFS (loop7): invalid segment: Checksum error in segment payload
[  417.062214][ T8441] NILFS (loop7): trying rollback from an earlier position
[  417.147549][ T8453] xt_cgroup: invalid path, errno=-2
[  417.696966][ T8441] NILFS (loop7): recovery complete
[  417.869945][ T8463] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  419.633460][ T8472] loop5: detected capacity change from 0 to 2048
[  419.761923][ T8472] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  419.812742][ T8472] UDF-fs: Scanning with blocksize 512 failed
[  419.962885][ T8472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  420.811238][ T8483] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  420.930061][ T8488] loop7: detected capacity change from 0 to 128
[  421.837625][ T8488] FAT-fs (loop7): error, clusters badly computed (2 != 1)
[  421.854453][ T8488] FAT-fs (loop7): Filesystem has been set read-only
[  422.010508][ T7898] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00005934)
[  422.021965][ T7898] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00005934)
[  423.370004][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'.
[  424.954397][   T26] audit: type=1326 audit(1747085745.496:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.6.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52d98e969 code=0x7fc00000
[  424.976725][    C0] vkms_vblank_simulate: vblank timer overrun
[  425.143145][ T6305] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.332944][ T6305] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.460698][ T6305] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.571670][ T6305] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.984090][ T8528] loop3: detected capacity change from 0 to 8192
[  425.993307][ T8539] netlink: 'syz.1.1196': attribute type 1 has an invalid length.
[  426.067155][ T8539] 8021q: adding VLAN 0 to HW filter on device bond1
[  426.120317][ T8528] loop3: detected capacity change from 0 to 512
[  426.127463][ T8528] /dev/loop3: Can't open blockdev
[  426.134872][ T4269] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  426.145238][ T4269] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  426.154246][ T4264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  426.168966][ T8541] device veth3 entered promiscuous mode
[  426.184543][ T4264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  426.193572][ T4264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  426.201282][ T4264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  426.234603][ T8541] bond1: (slave veth3): Enslaving as an active interface with a down link
[  426.292149][ T8539] bond1: (slave erspan0): making interface the new active one
[  426.302452][ T8539] device erspan0 entered promiscuous mode
[  426.308613][ T8539] bond1: (slave erspan0): Enslaving as an active interface with an up link
[  426.326183][ T6323] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  426.616783][ T8550] xt_nat: multiple ranges no longer supported
[  427.374156][ T8544] chnl_net:caif_netlink_parms(): no params data found
[  427.439447][ T8544] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.447698][ T8544] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.456074][ T8544] device bridge_slave_0 entered promiscuous mode
[  427.482241][ T8544] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.489775][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.498251][ T8544] device bridge_slave_1 entered promiscuous mode
[  427.540760][ T8544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.553155][ T8544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.582948][ T8544] team0: Port device team_slave_0 added
[  427.612264][ T8544] team0: Port device team_slave_1 added
[  427.652537][ T8544] batman_adv: batadv0: Adding interface: batadv_slave_0
[  427.659714][ T8544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  427.686258][ T8544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  427.699882][ T8544] batman_adv: batadv0: Adding interface: batadv_slave_1
[  427.707161][ T8544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  427.733048][    C0] vkms_vblank_simulate: vblank timer overrun
[  427.739720][ T8544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  427.827460][ T8544] device hsr_slave_0 entered promiscuous mode
[  427.836020][ T8544] device hsr_slave_1 entered promiscuous mode
[  427.843312][ T8544] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  427.851175][ T8544] Cannot create hsr debugfs directory
[  428.101547][ T6305] device hsr_slave_0 left promiscuous mode
[  428.108298][ T6305] device hsr_slave_1 left promiscuous mode
[  428.114870][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  428.122291][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.130224][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  428.137967][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.146049][ T6305] device bridge_slave_1 left promiscuous mode
[  428.152227][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.162779][ T6305] device bridge_slave_0 left promiscuous mode
[  428.169248][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.201993][ T6305] device veth1_macvtap left promiscuous mode
[  428.208190][ T6305] device veth0_macvtap left promiscuous mode
[  428.214313][ T6305] device veth1_vlan left promiscuous mode
[  428.220417][ T6305] device veth0_vlan left promiscuous mode
[  428.236133][ T4264] Bluetooth: hci1: command 0x0409 tx timeout
[  428.756773][ T6305] team0 (unregistering): Port device team_slave_1 removed
[  428.810527][ T6305] team0 (unregistering): Port device team_slave_0 removed
[  428.860180][ T6305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  428.912696][ T6305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  429.429856][ T6305] bond0 (unregistering): Released all slaves
[  429.549160][ T8544] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  429.559212][ T8544] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  429.571015][ T8544] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  429.587088][ T8544] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  429.673671][ T8544] 8021q: adding VLAN 0 to HW filter on device bond0
[  429.698672][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  429.710789][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  429.729326][ T8544] 8021q: adding VLAN 0 to HW filter on device team0
[  429.741042][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  429.749895][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  429.759101][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.766254][ T6329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  429.774348][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  429.807207][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  429.829054][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  429.837853][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.845062][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state
[  429.856741][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  429.868837][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  429.893411][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  429.909973][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  429.919173][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  429.940590][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  429.949493][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  429.958213][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  429.966794][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  429.980440][ T6325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  429.989243][ T6325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  430.005000][ T8544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  430.204135][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  430.212517][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  430.233228][ T8544] 8021q: adding VLAN 0 to HW filter on device batadv0
[  430.305362][ T4264] Bluetooth: hci1: command 0x041b tx timeout
[  430.500736][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  430.509710][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  430.533260][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  430.542460][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  430.552608][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  430.561476][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  430.573711][ T8544] device veth0_vlan entered promiscuous mode
[  430.586577][ T8544] device veth1_vlan entered promiscuous mode
[  430.611433][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  430.620051][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  430.632523][ T8544] device veth0_macvtap entered promiscuous mode
[  430.642594][ T8544] device veth1_macvtap entered promiscuous mode
[  430.658459][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.669626][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.679656][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.690450][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.702779][ T8544] batman_adv: batadv0: Interface activated: batadv_slave_0
[  430.713214][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  430.722273][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  430.731006][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  430.739857][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  430.749741][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  430.761104][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.771139][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  430.781882][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.793394][ T8544] batman_adv: batadv0: Interface activated: batadv_slave_1
[  430.802620][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  430.813798][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  430.825543][ T8544] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.834739][ T8544] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.843632][ T8544] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.854453][ T8544] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.927876][ T6325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.942621][ T6325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.960004][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.975779][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  430.975879][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.997292][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  431.102668][ T8570] overlayfs: failed to clone upperpath
[  432.280165][ T8579] xt_nat: multiple ranges no longer supported
[  432.609907][ T4264] Bluetooth: hci1: command 0x040f tx timeout
[  434.634406][ T4270] Bluetooth: hci1: command 0x0419 tx timeout
[  434.947814][ T8610] usb usb1: usbfs: process 8610 (syz.5.1197) did not claim interface 0 before use
[  435.851371][ T8623] overlayfs: failed to clone upperpath
[  436.194717][ T8629] xt_nat: multiple ranges no longer supported
[  436.948235][ T8647] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  438.808133][ T8674] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1225'.
[  439.607211][ T8690] trusted_key: encrypted_key: insufficient parameters specified
[  440.130538][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  440.151506][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  440.965881][ T8700] xt_hashlimit: size too large, truncated to 1048576
[  442.252601][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1234'.
[  443.775823][ T4311] device erspan0 left promiscuous mode
[  443.984379][   T22] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  444.104340][ T4302] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  444.177227][   T22] usb 9-1: Using ep0 maxpacket: 32
[  444.190429][   T22] usb 9-1: config 0 has an invalid interface number: 89 but max is 0
[  444.198786][   T22] usb 9-1: config 0 has no interface number 0
[  444.210216][   T22] usb 9-1: config 0 interface 89 has no altsetting 0
[  444.219429][   T22] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  444.230244][   T22] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.238612][   T22] usb 9-1: Product: syz
[  444.254386][   T22] usb 9-1: Manufacturer: syz
[  444.259383][   T22] usb 9-1: SerialNumber: syz
[  444.274585][   T22] usb 9-1: config 0 descriptor??
[  444.305912][ T4302] usb 4-1: config 0 has no interfaces?
[  444.311449][ T4302] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  444.329755][ T4302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.350551][ T4302] usb 4-1: config 0 descriptor??
[  444.486617][ T8741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  444.502304][ T8741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  444.517087][   T27] usb 9-1: USB disconnect, device number 2
[  444.572237][ T8743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  444.586246][ T8743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  444.598496][   T22] usb 4-1: USB disconnect, device number 6
[  445.194541][   T22] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  445.207586][ T8766] 9pnet: Unknown protocol version 9p20\++}
[  445.966869][   T22] usb 4-1: Using ep0 maxpacket: 16
[  445.985840][   T22] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  446.002021][   T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  446.027868][   T22] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[  446.059577][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.100731][   T22] usb 4-1: Product: syz
[  446.106669][   T22] usb 4-1: Manufacturer: syz
[  447.282597][   T22] usb 4-1: SerialNumber: syz
[  447.314455][   T22] usb 4-1: can't set config #1, error -71
[  448.418923][   T22] usb 4-1: USB disconnect, device number 7
[  449.874476][   T22] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  450.727325][   T26] audit: type=1326 audit(1747085771.276:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000
[  450.824342][   T22] usb 4-1: Using ep0 maxpacket: 8
[  450.834210][   T22] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  450.843563][   T26] audit: type=1326 audit(1747085771.326:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000
[  450.866395][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.877625][   T22] usb 4-1: Product: syz
[  450.881820][   T22] usb 4-1: Manufacturer: syz
[  450.887882][   T26] audit: type=1326 audit(1747085771.326:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000
[  450.910952][   T22] usb 4-1: SerialNumber: syz
[  450.921943][   T22] usb 4-1: config 0 descriptor??
[  450.935369][   T26] audit: type=1326 audit(1747085771.326:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000
[  450.957627][    C0] vkms_vblank_simulate: vblank timer overrun
[  450.969940][   T26] audit: type=1326 audit(1747085771.326:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000
[  450.992198][    C0] vkms_vblank_simulate: vblank timer overrun
[  451.013816][   T26] audit: type=1326 audit(1747085771.326:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000
[  451.043604][   T26] audit: type=1326 audit(1747085771.326:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000
[  451.072540][   T26] audit: type=1326 audit(1747085771.326:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000
[  451.094796][    C0] vkms_vblank_simulate: vblank timer overrun
[  451.101951][   T26] audit: type=1326 audit(1747085771.326:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000
[  451.124238][    C0] vkms_vblank_simulate: vblank timer overrun
[  451.132320][   T26] audit: type=1326 audit(1747085771.326:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000
[  451.136459][   T22] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  452.576980][   T22] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  452.587091][   T22] usb 4-1: USB disconnect, device number 8
[  457.124071][ T8869] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  457.698695][ T8874] loop3: detected capacity change from 0 to 2048
[  458.686381][ T8874]  loop3: p2 < > p3 p4
[  458.694492][ T8874] loop3: p3 start 65535 is beyond EOD, truncated
[  458.701398][ T8874] loop3: p4 size 8192 extends beyond EOD, truncated
[  458.994144][ T8889] loop5: detected capacity change from 0 to 256
[  459.260955][ T8895] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 4294967272. macoff=96
[  460.677202][ T8907] overlayfs: failed to clone upperpath
[  461.213024][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'.
[  461.948865][ T8915] loop3: detected capacity change from 0 to 512
[  462.996578][ T8949] overlayfs: failed to clone upperpath
[  463.304490][   T27] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  463.528664][   T27] usb 6-1: config 9 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  463.553401][   T27] usb 6-1: config 9 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  463.577464][   T27] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  463.598939][   T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.837969][ T8951] loop5: detected capacity change from 0 to 512
[  463.923154][ T8951] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  463.934969][ T8951] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  464.063704][ T8970] loop8: detected capacity change from 0 to 512
[  464.140117][ T8970] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  464.169682][ T8970] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  464.274848][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  464.274865][   T26] audit: type=1804 audit(1747085784.816:317): pid=8970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1320" name="/newroot/27/file1/file2" dev="loop8" ino=16 res=1 errno=0
[  464.314772][   T27] usbhid 6-1:9.0: can't add hid device: -71
[  464.320915][   T27] usbhid: probe of 6-1:9.0 failed with error -71
[  464.360826][   T27] usb 6-1: USB disconnect, device number 6
[  464.501110][ T8970] EXT4-fs (loop8): unmounting filesystem.
[  464.759676][ T8980] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  465.768935][ T4875] EXT4-fs (loop5): unmounting filesystem.
[  466.522876][ T9012] loop3: detected capacity change from 0 to 1024
[  466.551452][ T9012] /dev/loop3: Can't open blockdev
[  466.645167][   T27] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  466.669880][   T27] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  466.690993][ T9012] loop3: detected capacity change from 0 to 1024
[  466.722997][ T9012] EXT4-fs: Ignoring removed i_version option
[  466.734195][ T9012] EXT4-fs: Ignoring removed nomblk_io_submit option
[  466.754305][ T9012] EXT4-fs: Ignoring removed oldalloc option
[  466.783966][ T9012] /dev/loop3: Can't open blockdev
[  466.855491][ T9012] hid-generic 0000:0000:0000.0002: pid 9012 passed too short report
[  467.943248][   T26] audit: type=1326 audit(1747085788.486:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.1.1344" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ae278e969 code=0x0
[  468.146549][ T9044] loop8: detected capacity change from 0 to 2048
[  468.208323][ T9044]  loop8: p2 < > p3 p4
[  468.227341][ T9044] loop8: p3 start 65535 is beyond EOD, truncated
[  468.239653][ T9044] loop8: p4 size 8192 extends beyond EOD, truncated
[  468.260537][ T9051] loop3: detected capacity change from 0 to 256
[  468.278137][ T9044] EXT4-fs (loop8p2): unable to read superblock
[  470.199886][ T9061] loop8: detected capacity change from 0 to 512
[  472.269381][ T9093] device gtp0 entered promiscuous mode
[  472.675278][   T27] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  472.904457][   T27] usb 6-1: Using ep0 maxpacket: 16
[  472.962464][   T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11
[  472.974472][   T27] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  472.988888][   T27] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  473.021922][   T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.068528][   T27] usb 6-1: config 0 descriptor??
[  473.511175][   T27] usbhid 6-1:0.0: can't add hid device: -71
[  473.534595][   T27] usbhid: probe of 6-1:0.0 failed with error -71
[  473.563019][   T27] usb 6-1: USB disconnect, device number 7
[  476.919578][ T9139] loop5: detected capacity change from 0 to 512
[  477.340543][ T9151] loop5: detected capacity change from 0 to 2048
[  477.421060][ T9151]  loop5: p2 < > p3 p4
[  477.426815][ T9151] loop5: p3 start 65535 is beyond EOD, truncated
[  477.448598][ T9151] loop5: p4 size 8192 extends beyond EOD, truncated
[  477.513263][ T9151] EXT4-fs (loop5p2): unable to read superblock
[  480.296439][ T9188] binder: 9185:9188 ioctl c0306201 0 returned -14
[  481.884355][ T4303] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  482.084724][ T4303] usb 9-1: Using ep0 maxpacket: 16
[  482.093067][ T4303] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11
[  482.104848][ T4303] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  482.118592][ T4303] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  482.145378][ T4303] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.165409][ T4303] usb 9-1: config 0 descriptor??
[  482.586556][ T4303] usbhid 9-1:0.0: can't add hid device: -71
[  482.592658][ T4303] usbhid: probe of 9-1:0.0 failed with error -71
[  482.646965][ T9218] loop5: detected capacity change from 0 to 512
[  482.674407][   T14] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  482.681998][ T4303] usb 9-1: USB disconnect, device number 3
[  482.691453][ T9218] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  482.739648][ T9218] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  482.809780][ T9218] EXT4-fs (loop5): 1 truncate cleaned up
[  482.815924][ T9218] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  482.884399][   T14] usb 4-1: Using ep0 maxpacket: 16
[  482.891802][   T14] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  482.903064][ T4875] EXT4-fs (loop5): unmounting filesystem.
[  482.912574][   T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  482.951860][   T14] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  482.971611][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.049594][   T14] usb 4-1: Product: syz
[  483.059698][   T14] usb 4-1: Manufacturer: syz
[  483.074300][   T14] usb 4-1: SerialNumber: syz
[  483.860612][   T14] usb 4-1: 0:2 : does not exist
[  483.914558][   T14] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  483.932218][   T14] usb 4-1: USB disconnect, device number 9
[  485.484531][ T9249] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1419'.
[  489.319348][ T9283] loop3: detected capacity change from 0 to 32768
[  489.410713][ T9283] XFS (loop3): Mounting V5 Filesystem
[  489.498713][ T9283] XFS (loop3): Ending clean mount
[  489.664989][ T9304] netlink: 'syz.5.1420': attribute type 16 has an invalid length.
[  489.703585][ T9304] netlink: 'syz.5.1420': attribute type 17 has an invalid length.
[  490.588703][ T9304] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  490.639829][ T9304] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  490.680989][ T9304] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  490.753113][ T9304] 8021q: adding VLAN 0 to HW filter on device bond0
[  490.782990][ T9304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  490.806730][ T9307] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  490.815744][ T9307] tipc: Resetting bearer <eth:team0>
[  490.974684][ T4261] XFS (loop3): Unmounting Filesystem
[  493.003271][ T9315] loop5: detected capacity change from 0 to 32768
[  493.186545][ T9315] XFS (loop5): Mounting V5 Filesystem
[  493.309381][ T9315] XFS (loop5): Ending clean mount
[  493.330679][ T9315] XFS (loop5): Quotacheck needed: Please wait.
[  493.393408][ T9315] XFS (loop5): Quotacheck: Done.
[  493.628239][ T4875] XFS (loop5): Unmounting Filesystem
[  493.746879][ T3639] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  493.954428][ T3639] usb 4-1: Using ep0 maxpacket: 16
[  493.963668][ T3639] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  494.003610][ T3639] usb 4-1: config 0 has no interfaces?
[  494.034176][ T3639] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  494.074553][ T3639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.110256][ T3639] usb 4-1: config 0 descriptor??
[  494.371490][ T9350] loop3: detected capacity change from 0 to 1024
[  494.431490][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'.
[  494.463367][   T27] usb 4-1: USB disconnect, device number 10
[  494.751404][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1440'.
[  495.104290][ T9367] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1443'.
[  495.331111][ T9371] loop3: detected capacity change from 0 to 128
[  495.356886][ T9371] /dev/loop3: Can't open blockdev
[  499.035134][ T9387] loop3: detected capacity change from 0 to 2048
[  499.591000][ T9387]  loop3: p1 < > p3
[  499.755571][ T9387] loop3: p3 size 134217728 extends beyond EOD, truncated
[  500.155845][ T9409] loop5: detected capacity change from 0 to 1024
[  500.409560][ T6297] hfsplus: b-tree write err: -5, ino 3
[  501.348358][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  501.355332][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  502.340798][ T9428] ==================================================================
[  502.349114][ T9428] BUG: KASAN: use-after-free in rose_transmit_link+0x5b6/0x730
[  502.356756][ T9428] Read of size 1 at addr ffff8880570b1432 by task syz.5.1459/9428
[  502.364780][ T9428] 
[  502.367142][ T9428] CPU: 0 PID: 9428 Comm: syz.5.1459 Not tainted 6.1.138-syzkaller #0
[  502.375425][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  502.386224][ T9428] Call Trace:
[  502.389625][ T9428]  <TASK>
[  502.392583][ T9428]  dump_stack_lvl+0x168/0x22e
[  502.397408][ T9428]  ? read_lock_is_recursive+0x10/0x10
[  502.403000][ T9428]  ? show_regs_print_info+0x12/0x12
[  502.408212][ T9428]  ? load_image+0x3b0/0x3b0
[  502.412772][ T9428]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[  502.418272][ T9428]  ? __virt_addr_valid+0x188/0x540
[  502.423408][ T9428]  ? __virt_addr_valid+0x465/0x540
[  502.428538][ T9428]  ? rose_transmit_link+0x5b6/0x730
[  502.434012][ T9428]  print_report+0xa8/0x220
[  502.438531][ T9428]  kasan_report+0x10b/0x140
[  502.443050][ T9428]  ? rose_transmit_link+0x5b6/0x730
[  502.448266][ T9428]  rose_transmit_link+0x5b6/0x730
[  502.453298][ T9428]  ? skb_put+0x117/0x210
[  502.457556][ T9428]  rose_write_internal+0x1096/0x1eb0
[  502.463115][ T9428]  ? debug_object_assert_init+0x1ed/0x2f0
[  502.469222][ T9428]  ? rose_validate_nr+0x120/0x120
[  502.474810][ T9428]  ? skb_queue_purge+0x64/0x1b0
[  502.479978][ T9428]  rose_release+0x22a/0x4f0
[  502.484801][ T9428]  sock_close+0xd5/0x240
[  502.489166][ T9428]  ? sock_mmap+0x90/0x90
[  502.493530][ T9428]  __fput+0x22c/0x920
[  502.497709][ T9428]  task_work_run+0x1ca/0x250
[  502.502585][ T9428]  ? task_work_cancel+0x230/0x230
[  502.507773][ T9428]  get_signal+0x11a6/0x1350
[  502.512519][ T9428]  arch_do_signal_or_restart+0xb0/0x1230
[  502.518543][ T9428]  ? __ia32_sys_pidfd_getfd+0x80/0x80
[  502.524024][ T9428]  ? wake_bit_function+0x200/0x200
[  502.529170][ T9428]  ? __might_fault+0xa6/0x120
[  502.534158][ T9428]  ? get_sigframe_size+0x10/0x10
[  502.539142][ T9428]  ? __sys_connect+0x239/0x410
[  502.543928][ T9428]  ? exit_to_user_mode_loop+0x3b/0x110
[  502.549511][ T9428]  exit_to_user_mode_loop+0x70/0x110
[  502.554811][ T9428]  exit_to_user_mode_prepare+0xb1/0x140
[  502.560463][ T9428]  syscall_exit_to_user_mode+0x16/0x40
[  502.565942][ T9428]  do_syscall_64+0x58/0xa0
[  502.570642][ T9428]  ? clear_bhb_loop+0x45/0xa0
[  502.575326][ T9428]  ? clear_bhb_loop+0x45/0xa0
[  502.580007][ T9428]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  502.585912][ T9428] RIP: 0033:0x7fd3b278e969
[  502.590435][ T9428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  502.610654][ T9428] RSP: 002b:00007fd3b35a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  502.619196][ T9428] RAX: fffffffffffffe00 RBX: 00007fd3b29b6240 RCX: 00007fd3b278e969
[  502.627364][ T9428] RDX: 000000000000001c RSI: 0000200000000240 RDI: 0000000000000007
[  502.635347][ T9428] RBP: 00007fd3b2810ab1 R08: 0000000000000000 R09: 0000000000000000
[  502.643483][ T9428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  502.651644][ T9428] R13: 0000000000000000 R14: 00007fd3b29b6240 R15: 00007ffd30a1e5e8
[  502.659835][ T9428]  </TASK>
[  502.662966][ T9428] 
[  502.665373][ T9428] Allocated by task 6447:
[  502.669703][ T9428]  kasan_set_track+0x4b/0x70
[  502.674312][ T9428]  __kasan_kmalloc+0x8e/0xa0
[  502.679718][ T9428]  rose_add_node+0x227/0xdb0
[  502.684408][ T9428]  rose_rt_ioctl+0xa4c/0xe90
[  502.689016][ T9428]  rose_ioctl+0x27a/0x790
[  502.693342][ T9428]  sock_do_ioctl+0xd3/0x2f0
[  502.697853][ T9428]  sock_ioctl+0x4ed/0x6e0
[  502.702238][ T9428]  __se_sys_ioctl+0xfa/0x170
[  502.706834][ T9428]  do_syscall_64+0x4c/0xa0
[  502.711260][ T9428]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  502.717511][ T9428] 
[  502.719854][ T9428] Freed by task 9417:
[  502.723930][ T9428]  kasan_set_track+0x4b/0x70
[  502.728550][ T9428]  kasan_save_free_info+0x2d/0x50
[  502.734149][ T9428]  ____kasan_slab_free+0x126/0x1e0
[  502.739274][ T9428]  slab_free_freelist_hook+0x131/0x1a0
[  502.744748][ T9428]  __kmem_cache_free+0xb6/0x1f0
[  502.749700][ T9428]  rose_rt_device_down+0x3e5/0x430
[  502.754990][ T9428]  rose_device_event+0x600/0x690
[  502.760113][ T9428]  raw_notifier_call_chain+0xcb/0x160
[  502.765761][ T9428]  __dev_notify_flags+0x178/0x2d0
[  502.770793][ T9428]  dev_change_flags+0xe3/0x1a0
[  502.775591][ T9428]  dev_ifsioc+0x159/0xe90
[  502.779944][ T9428]  dev_ioctl+0x578/0xea0
[  502.784181][ T9428]  sock_do_ioctl+0x222/0x2f0
[  502.788885][ T9428]  sock_ioctl+0x4ed/0x6e0
[  502.793665][ T9428]  __se_sys_ioctl+0xfa/0x170
[  502.798274][ T9428]  do_syscall_64+0x4c/0xa0
[  502.802703][ T9428]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  502.808974][ T9428] 
[  502.811296][ T9428] The buggy address belongs to the object at ffff8880570b1400
[  502.811296][ T9428]  which belongs to the cache kmalloc-512 of size 512
[  502.825547][ T9428] The buggy address is located 50 bytes inside of
[  502.825547][ T9428]  512-byte region [ffff8880570b1400, ffff8880570b1600)
[  502.838934][ T9428] 
[  502.841345][ T9428] The buggy address belongs to the physical page:
[  502.847760][ T9428] page:ffffea00015c2c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880570b3c00 pfn:0x570b0
[  502.859357][ T9428] head:ffffea00015c2c00 order:2 compound_mapcount:0 compound_pincount:0
[  502.867786][ T9428] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  502.875781][ T9428] raw: 00fff00000010200 ffffea00015c3008 ffffea0001e28708 ffff888017441c80
[  502.884545][ T9428] raw: ffff8880570b3c00 0000000000100004 00000001ffffffff 0000000000000000
[  502.893133][ T9428] page dumped because: kasan: bad access detected
[  502.899724][ T9428] page_owner tracks the page as allocated
[  502.905519][ T9428] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4263, tgid 4263 (syz-executor), ts 75699684648, free_ts 20248804770
[  502.924889][ T9428]  post_alloc_hook+0x173/0x1a0
[  502.929684][ T9428]  get_page_from_freelist+0x1a26/0x1ac0
[  502.935420][ T9428]  __alloc_pages+0x1df/0x4e0
[  502.940712][ T9428]  alloc_slab_page+0x5d/0x160
[  502.945640][ T9428]  new_slab+0x87/0x2c0
[  502.949903][ T9428]  ___slab_alloc+0xbc6/0x1220
[  502.954588][ T9428]  __kmem_cache_alloc_node+0x1a0/0x260
[  502.960080][ T9428]  __kmalloc+0xa0/0x240
[  502.964430][ T9428]  fib6_info_alloc+0x2e/0xe0
[  502.969037][ T9428]  ip6_route_info_create+0x44f/0x1210
[  502.974498][ T9428]  ip6_route_add+0x24/0x130
[  502.979078][ T9428]  addrconf_permanent_addr+0x652/0x980
[  502.984567][ T9428]  addrconf_notify+0x986/0xf40
[  502.989334][ T9428]  raw_notifier_call_chain+0xcb/0x160
[  502.994802][ T9428]  __dev_notify_flags+0x178/0x2d0
[  502.999869][ T9428]  dev_change_flags+0xe3/0x1a0
[  503.004653][ T9428] page last free stack trace:
[  503.009607][ T9428]  free_unref_page_prepare+0x8b4/0x9a0
[  503.015093][ T9428]  free_unref_page+0x2e/0x3f0
[  503.019780][ T9428]  free_contig_range+0x9d/0x150
[  503.024742][ T9428]  destroy_args+0xef/0x8bf
[  503.029179][ T9428]  debug_vm_pgtable+0x32a/0x37e
[  503.034036][ T9428]  do_one_initcall+0x214/0x7a0
[  503.038807][ T9428]  do_initcall_level+0x137/0x1e4
[  503.043856][ T9428]  do_initcalls+0x4b/0x8a
[  503.048281][ T9428]  kernel_init_freeable+0x3fa/0x5ac
[  503.053488][ T9428]  kernel_init+0x19/0x1b0
[  503.057816][ T9428]  ret_from_fork+0x1f/0x30
[  503.062260][ T9428] 
[  503.064687][ T9428] Memory state around the buggy address:
[  503.070435][ T9428]  ffff8880570b1300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  503.078544][ T9428]  ffff8880570b1380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  503.086637][ T9428] >ffff8880570b1400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  503.094730][ T9428]                                      ^
[  503.100529][ T9428]  ffff8880570b1480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  503.108672][ T9428]  ffff8880570b1500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  503.116816][ T9428] ==================================================================
[  503.124913][    C0] vkms_vblank_simulate: vblank timer overrun
[  503.158341][ T9428] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  503.165963][ T9428] CPU: 0 PID: 9428 Comm: syz.5.1459 Not tainted 6.1.138-syzkaller #0
[  503.174057][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  503.184155][ T9428] Call Trace:
[  503.187495][ T9428]  <TASK>
[  503.190450][ T9428]  dump_stack_lvl+0x168/0x22e
[  503.195170][ T9428]  ? memcpy+0x3c/0x60
[  503.199201][ T9428]  ? show_regs_print_info+0x12/0x12
[  503.204508][ T9428]  ? load_image+0x3b0/0x3b0
[  503.210025][ T9428]  panic+0x2c9/0x710
[  503.214064][ T9428]  ? bpf_jit_dump+0xd0/0xd0
[  503.219404][ T9428]  ? _raw_spin_unlock_irqrestore+0xf6/0x100
[  503.225719][ T9428]  ? _raw_spin_unlock+0x40/0x40
[  503.230620][ T9428]  check_panic_on_warn+0x80/0xa0
[  503.235949][ T9428]  ? rose_transmit_link+0x5b6/0x730
[  503.241810][ T9428]  end_report+0x66/0x110
[  503.246197][ T9428]  kasan_report+0x118/0x140
[  503.250743][ T9428]  ? rose_transmit_link+0x5b6/0x730
[  503.255985][ T9428]  rose_transmit_link+0x5b6/0x730
[  503.261052][ T9428]  ? skb_put+0x117/0x210
[  503.265367][ T9428]  rose_write_internal+0x1096/0x1eb0
[  503.270687][ T9428]  ? debug_object_assert_init+0x1ed/0x2f0
[  503.276626][ T9428]  ? rose_validate_nr+0x120/0x120
[  503.281774][ T9428]  ? skb_queue_purge+0x64/0x1b0
[  503.286670][ T9428]  rose_release+0x22a/0x4f0
[  503.291290][ T9428]  sock_close+0xd5/0x240
[  503.295661][ T9428]  ? sock_mmap+0x90/0x90
[  503.300030][ T9428]  __fput+0x22c/0x920
[  503.304045][ T9428]  task_work_run+0x1ca/0x250
[  503.308667][ T9428]  ? task_work_cancel+0x230/0x230
[  503.313728][ T9428]  get_signal+0x11a6/0x1350
[  503.317830][ T9435] loop3: detected capacity change from 0 to 128
[  503.318648][ T9435] /dev/loop3: Can't open blockdev
[  503.330252][ T9428]  arch_do_signal_or_restart+0xb0/0x1230
[  503.335935][ T9428]  ? __ia32_sys_pidfd_getfd+0x80/0x80
[  503.341694][ T9428]  ? wake_bit_function+0x200/0x200
[  503.346846][ T9428]  ? __might_fault+0xa6/0x120
[  503.351560][ T9428]  ? get_sigframe_size+0x10/0x10
[  503.356531][ T9428]  ? __sys_connect+0x239/0x410
[  503.361618][ T9428]  ? exit_to_user_mode_loop+0x3b/0x110
[  503.367299][ T9428]  exit_to_user_mode_loop+0x70/0x110
[  503.372715][ T9428]  exit_to_user_mode_prepare+0xb1/0x140
[  503.378327][ T9428]  syscall_exit_to_user_mode+0x16/0x40
[  503.383911][ T9428]  do_syscall_64+0x58/0xa0
[  503.388370][ T9428]  ? clear_bhb_loop+0x45/0xa0
[  503.393124][ T9428]  ? clear_bhb_loop+0x45/0xa0
[  503.397834][ T9428]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  503.403768][ T9428] RIP: 0033:0x7fd3b278e969
[  503.408235][ T9428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  503.427879][ T9428] RSP: 002b:00007fd3b35a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  503.436415][ T9428] RAX: fffffffffffffe00 RBX: 00007fd3b29b6240 RCX: 00007fd3b278e969
[  503.444504][ T9428] RDX: 000000000000001c RSI: 0000200000000240 RDI: 0000000000000007
[  503.452590][ T9428] RBP: 00007fd3b2810ab1 R08: 0000000000000000 R09: 0000000000000000
[  503.460585][ T9428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  503.468587][ T9428] R13: 0000000000000000 R14: 00007fd3b29b6240 R15: 00007ffd30a1e5e8
[  503.476603][ T9428]  </TASK>
[  503.480069][ T9428] Kernel Offset: disabled
[  503.484402][ T9428] Rebooting in 86400 seconds..