last executing test programs:

56.324125363s ago: executing program 0 (id=190):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6)

56.245461274s ago: executing program 0 (id=191):
ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0)
r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

56.027290285s ago: executing program 0 (id=192):
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)
mprotect(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea)

55.957048856s ago: executing program 0 (id=193):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@nombcache}, {@noload}, {@debug}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x53}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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")
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x80)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0)
syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000002180)=ANY=[@ANYRESOCT=r0, @ANYBLOB="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", @ANYRESDEC, @ANYBLOB="a92fe8de136908e852768595aa546296821087e5b1bbc32156ada61f7c8a700880fe17c721514fd66f6d073702603f43f39d10ed62b784f0ea603a459b42f61a2174a30374bec0296612104179832730d5741398231d9ffd1e9995a06bb5ada99b9f2d4a71c580fe19a6dea2485a8ef6042e0d96839465522c03ac9b1e3e4be07bd09a1568add843860228063e6e4a59adc27ad98e26260605e1df1bd5e5dcc1735af362ce57237d4455a267daeea0b2368f8c69ed577f4849d608dcd60b0dabe1d6dada51feb6b1751dfa136da4ab1a73a25bcfba9ba846676558290f27b2a256c2257003da000000", @ANYRESHEX=r1, @ANYRESHEX, @ANYRES16=0x0, @ANYRES32=r0, @ANYRESHEX, @ANYRES64, @ANYRES64, @ANYRES32], 0x10, 0x1c4, &(0x7f0000000440)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9)

55.507489429s ago: executing program 0 (id=197):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, 0x0, 0x8}, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)

53.839720598s ago: executing program 0 (id=211):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x1)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000880)={0x1, 0xffffffff, 0x0, 0xb, 0xfdfffffffffff000, 0x4, 0xfffffffffffffd2b, 0x800000, 0xfffffffffffffff9, 0x4, 0x1, 0x1})

53.6613411s ago: executing program 32 (id=211):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x1)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000880)={0x1, 0xffffffff, 0x0, 0xb, 0xfdfffffffffff000, 0x4, 0xfffffffffffffd2b, 0x800000, 0xfffffffffffffff9, 0x4, 0x1, 0x1})

47.575741236s ago: executing program 3 (id=246):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x8, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000)

46.824037201s ago: executing program 3 (id=250):
r0 = fanotify_init(0x0, 0x101000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r0, 0x1, 0x8001030, r1, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x39, 0x1a, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020)

46.547886842s ago: executing program 3 (id=252):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4080, 0xff0}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0)

46.298624373s ago: executing program 3 (id=254):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@gquota}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0x9793, &(0x7f0000012f40)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x194)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xc4042, 0x1ff)

44.623898483s ago: executing program 3 (id=261):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x12}, 0x18)

44.507625334s ago: executing program 5 (id=214):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x1b, 0x4)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000))
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x6c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x6c}}, 0x0)
syz_usb_connect$uac1(0x2, 0xa3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102000000206b1d01014000010203010902910013010140cc0904000000010100000a2401f5ffff020102132406060406040003000300030003000a000705240501030a24040508e53a273e3108240405047b653609040100000102000009040101010102000008240201080200030905010920003b0008072501020510000904020000010200000904020101010220000905820920"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0})
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x2004c800)

43.875834088s ago: executing program 3 (id=264):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x61f0, 0x0)

42.433003607s ago: executing program 5 (id=274):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r2, 0x0, r1, 0x0, 0x6, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x15, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)
write$FUSE_ATTR(r1, &(0x7f00000003c0)={0x78, 0x0, 0x0, {0x1, 0x9, 0x0, {0x1, 0x0, 0x87ac, 0x1, 0xffffffff, 0x4, 0xfffffcd8, 0x4, 0x7, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x6}}}, 0xfdef)
close_range(r0, 0xffffffffffffffff, 0x0)

42.252093808s ago: executing program 5 (id=275):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

42.142461448s ago: executing program 5 (id=276):
syz_mount_image$f2fs(&(0x7f000000e000), &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x4, 0x550c, &(0x7f00000089c0)="$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")
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x1b0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

40.741259677s ago: executing program 5 (id=282):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0xfff2, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xe85, 0x1, 0xc}, {0x4, 0xa0000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0)

39.111866606s ago: executing program 5 (id=296):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001380)="435d61e778eb38a7b38869e147b2bb2d8ea5f836c654c0d9d14ceca9529604eb9a1f8d24c87b2153413b8bc5d52b8aa671b64b2290f0d96afeaa40f60d23f9f9f7d8b4c37a6409abd84ddbe5264f73200c67d8f9742d0f51951f7bb8fe27a59cc395ba580c12f6e995b8a62901c58273c223abb61def8a24a9d9c3e164fcc9c0ef085049e39d964b4afa4e79d6dc9d4f792776248a6ac45606026857497e7760e7dcc543cbd35aaaca6b30aa8acb8e4e77cd6626b8371a55fa07ede86c92893bad324de1fef3953ff5c36951f9647ffd6924de49d9a66baeb6a75df64352c800a13b897dbd01621199d6d5424e90a346c805c801fd6be1e96f2a69e5937a4e7df9445d776f56182a9c26c219e3462d7ef57f9037d6b14a5f0288", 0x11a}, {&(0x7f0000000b40)="518cf972f4602550447422ed8ab8e292d2b9e8f110c883251bad904148ec2972fe137bd155df9280115c15ef84b13e47e1f03396189a1c190470ee546a28d08515a098686a73a9ad70f822e5140fbfb110391250b8a84802dbf4588dc39d82195d48715ca048c7d8c59a24b6243810e456ba666105704711b987f85fb409a72e0b54194f1fd5a802e4692a1d90af11dc51df1ddced4389edb8073eb6f00f3ed16c292f5ba1ca872d781fd40050ce60814a7b3396efbe6fd294f4cd171446572145fe460ae70a488caf82d6f939612739d6319c182c4346b63cb07a30b4bfcaccd9dfe7d9c9bb755cbdbcee5caa", 0xed}, {&(0x7f0000000380)="5132ac5e8205378f905fac4b0f7b0ad4ff080df00b5a6655e32124d51a45ebebdf4a86101587d502357bfc43f44098742b83caede42f6e007330dc8ab67371c65d39bc126b8f9bf17dce0ba9d14f263efa7056bb8a0291a4842e42342519a9e795b7d8aee13edfa09bd3f9ae3bdc4c2dccc274c0cf4fe85fa17f46ff8c017571490f296ef2ea1cf31486bd4167bb33cb9a5e1f96de2ee8af5074695ddf5d1ec4d17c9508cdd9e77ec5bc62a820e263a31521f0b9031c9e1e1491f0c99b44960df2aaee22480355aa20d280d1ed54ae539055ca1e20a57f81db185fa207", 0xdd}, {&(0x7f0000000280)="661da68e4cccac69431df174bbce91246fce262b3de6a53334d329a142ae0f304e4fbde8fab4d68bedcd182b41227278c65f7de3723a93dbbaeb901b447fb35a9f3f4b671a3e3929c119f9deec5e46cdbe5cac679cad88c9aa61bc7ffd219a18b36ef0bf5ca45da80aa46274c5cda17a4b8588c492dcdd43dee797fe7debf7c1143177d4f4b02255ca5a46", 0x8b}], 0x4}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="72126509caec095807090dba7a3967d9884ce638db1b533a4b22559bf9166ba1568930c85350c8e4c4bc40d2f21c8042ef5f78d0c8450382c66ea27d01387272ddb6350a1b9df7af8dc636bd2a4e14c5ead6ff46562bbb74e63c835b9827f0b5be88de7ea0b09ad394495e7a2e45da891ae90f972844a04ac9427903a3102cfc7d7ebe01950d7c3c1a1df3b5c2c7940b81f27ed3e5bbb9db01d84e36e67763cde8eb69ed38a8401e2c6daa808897bf60b8b795aac9afe46e918edb28ea6fe06a6afcfad209e55826dc2000a46b358665fdfee08e82c24a22ef3e7c3a5400"/232, 0xe8}, {&(0x7f00000000c0)="5cab1cd4386d9e0da57f099176822a04ecde038848f2a14590ae331a739346dc6190b07b965aa699ddce8f182904e77610ec", 0x32}, {&(0x7f0000000200)="2807eb239ed0436e9e6e49955dfb4a4d3e1fb254c484ed2da2060d16fe61161b8cdf744a18e00a9b61fc0e090f175efa", 0x30}, {&(0x7f0000000480)="be604475647d7a29472269b80db06ea99d16a1e23f58504441c02e955c5499b328b1bd19909555679e3bbb39e23235037223da6566635d09c0a7192acce97d05ae3077ffe54c98d0c06a98319bc853f4c0177977cff5e33badeed08f6d2ff80d19c30d111c2b98cd96a0f57677161d34c64fb37365fb0ffa931bc4915658f185a359953910493f692868399f95a8", 0x8e}, {&(0x7f0000000c40)="38b4526ae50b033bea476dbff6a39da0edcb079b0fda4152d05cdd28639ff976bf8594edbe9b6b439ddfb8143ab5819a9cde4005fc8adb41ad29a3369003f5e177ea1969e84e2be7d467b594e4b190cbf86b38fb8039818db8014f84e999b0f7b78f9dd8aec01f1c034f1c6246920f83d091bc5145fdedbc235e953816080abf9f87f8705111fd616fecd24134a4616f18a38dbea6ff7ef450e25cbd6477cf4286ad1a1065", 0xa5}, {&(0x7f00000007c0)="2a4a2d2736aa271ff948d901a7adf288f6719586ffff0b55fb690d2d86d9d7603d25f7db711e240c36ab259c6938e408b0e33022710d972ae1e0d8c6aa23f69f067632ae620d39c5d35dd7b31146206c086927d6263cb79145d6722c847b78b1a97b6e1bde94f1601470a8bf0eac556edaa615", 0x73}], 0x6}}], 0x3, 0x2000c044)
sendto$inet(r1, &(0x7f0000000540)=';', 0x1, 0x80, 0x0, 0x0)

38.999730337s ago: executing program 33 (id=296):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001380)="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", 0x11a}, {&(0x7f0000000b40)="518cf972f4602550447422ed8ab8e292d2b9e8f110c883251bad904148ec2972fe137bd155df9280115c15ef84b13e47e1f03396189a1c190470ee546a28d08515a098686a73a9ad70f822e5140fbfb110391250b8a84802dbf4588dc39d82195d48715ca048c7d8c59a24b6243810e456ba666105704711b987f85fb409a72e0b54194f1fd5a802e4692a1d90af11dc51df1ddced4389edb8073eb6f00f3ed16c292f5ba1ca872d781fd40050ce60814a7b3396efbe6fd294f4cd171446572145fe460ae70a488caf82d6f939612739d6319c182c4346b63cb07a30b4bfcaccd9dfe7d9c9bb755cbdbcee5caa", 0xed}, {&(0x7f0000000380)="5132ac5e8205378f905fac4b0f7b0ad4ff080df00b5a6655e32124d51a45ebebdf4a86101587d502357bfc43f44098742b83caede42f6e007330dc8ab67371c65d39bc126b8f9bf17dce0ba9d14f263efa7056bb8a0291a4842e42342519a9e795b7d8aee13edfa09bd3f9ae3bdc4c2dccc274c0cf4fe85fa17f46ff8c017571490f296ef2ea1cf31486bd4167bb33cb9a5e1f96de2ee8af5074695ddf5d1ec4d17c9508cdd9e77ec5bc62a820e263a31521f0b9031c9e1e1491f0c99b44960df2aaee22480355aa20d280d1ed54ae539055ca1e20a57f81db185fa207", 0xdd}, {&(0x7f0000000280)="661da68e4cccac69431df174bbce91246fce262b3de6a53334d329a142ae0f304e4fbde8fab4d68bedcd182b41227278c65f7de3723a93dbbaeb901b447fb35a9f3f4b671a3e3929c119f9deec5e46cdbe5cac679cad88c9aa61bc7ffd219a18b36ef0bf5ca45da80aa46274c5cda17a4b8588c492dcdd43dee797fe7debf7c1143177d4f4b02255ca5a46", 0x8b}], 0x4}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="72126509caec095807090dba7a3967d9884ce638db1b533a4b22559bf9166ba1568930c85350c8e4c4bc40d2f21c8042ef5f78d0c8450382c66ea27d01387272ddb6350a1b9df7af8dc636bd2a4e14c5ead6ff46562bbb74e63c835b9827f0b5be88de7ea0b09ad394495e7a2e45da891ae90f972844a04ac9427903a3102cfc7d7ebe01950d7c3c1a1df3b5c2c7940b81f27ed3e5bbb9db01d84e36e67763cde8eb69ed38a8401e2c6daa808897bf60b8b795aac9afe46e918edb28ea6fe06a6afcfad209e55826dc2000a46b358665fdfee08e82c24a22ef3e7c3a5400"/232, 0xe8}, {&(0x7f00000000c0)="5cab1cd4386d9e0da57f099176822a04ecde038848f2a14590ae331a739346dc6190b07b965aa699ddce8f182904e77610ec", 0x32}, {&(0x7f0000000200)="2807eb239ed0436e9e6e49955dfb4a4d3e1fb254c484ed2da2060d16fe61161b8cdf744a18e00a9b61fc0e090f175efa", 0x30}, {&(0x7f0000000480)="be604475647d7a29472269b80db06ea99d16a1e23f58504441c02e955c5499b328b1bd19909555679e3bbb39e23235037223da6566635d09c0a7192acce97d05ae3077ffe54c98d0c06a98319bc853f4c0177977cff5e33badeed08f6d2ff80d19c30d111c2b98cd96a0f57677161d34c64fb37365fb0ffa931bc4915658f185a359953910493f692868399f95a8", 0x8e}, {&(0x7f0000000c40)="38b4526ae50b033bea476dbff6a39da0edcb079b0fda4152d05cdd28639ff976bf8594edbe9b6b439ddfb8143ab5819a9cde4005fc8adb41ad29a3369003f5e177ea1969e84e2be7d467b594e4b190cbf86b38fb8039818db8014f84e999b0f7b78f9dd8aec01f1c034f1c6246920f83d091bc5145fdedbc235e953816080abf9f87f8705111fd616fecd24134a4616f18a38dbea6ff7ef450e25cbd6477cf4286ad1a1065", 0xa5}, {&(0x7f00000007c0)="2a4a2d2736aa271ff948d901a7adf288f6719586ffff0b55fb690d2d86d9d7603d25f7db711e240c36ab259c6938e408b0e33022710d972ae1e0d8c6aa23f69f067632ae620d39c5d35dd7b31146206c086927d6263cb79145d6722c847b78b1a97b6e1bde94f1601470a8bf0eac556edaa615", 0x73}], 0x6}}], 0x3, 0x2000c044)
sendto$inet(r1, &(0x7f0000000540)=';', 0x1, 0x80, 0x0, 0x0)

28.646359389s ago: executing program 34 (id=264):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x61f0, 0x0)

23.143148341s ago: executing program 1 (id=375):
socket$inet6_udplite(0xa, 0x2, 0x88)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x88}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
close(0x3)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

23.005432232s ago: executing program 1 (id=377):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x20000}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000)

22.892948753s ago: executing program 1 (id=379):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000", @ANYRES32=0x0, @ANYBLOB="000000001c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c"], 0x158, 0x24000091}}], 0x1, 0x4000084)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff000)
recvmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x5ed, 0x40001023, 0x0)

22.261520097s ago: executing program 1 (id=380):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0)
r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3808c4d, &(0x7f0000000240)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec51c3ec73c82014eee15eaaa123084415546ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b86b45e5d7cb4affc1c539a764f5"], 0xf5, 0x319, &(0x7f0000000700)="$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")
write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x53a, 0x2000000, 0x0, {0xffffffffff7ffffe, 0x1, 0xffffffffbfffffff, 0x10, 0xffffffffffff592e, 0x101, 0x6, 0x6288f666, 0x0, 0x8000, 0x9, 0x0, 0x0, 0xfffffffe}}}, 0x78)

21.278630733s ago: executing program 1 (id=383):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000fc0)={0x2, 0x0, @ioapic={0x10000, 0x7ff, 0x9, 0x80, 0x0, [{0x6, 0x10, 0xe, '\x00', 0x38}, {0x5, 0x9, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x3, '\x00', 0x7d}, {0xb, 0x7f, 0x4, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x9}, {0x3, 0x8, 0x1, '\x00', 0x5}, {0x52, 0x3, 0x3, '\x00', 0x9}, {0x0, 0x2, 0x2, '\x00', 0xff}, {0x1, 0x6, 0x9, '\x00', 0x80}, {0x6, 0x8, 0x6, '\x00', 0x1}, {0x1, 0x1, 0xd, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x8}, {0xf, 0x10, 0x91, '\x00', 0x4}, {0x5, 0xc0, 0x7, '\x00', 0x1}, {0x8, 0x6, 0x1, '\x00', 0x2}, {0x7, 0x8, 0x8, '\x00', 0x3}, {0x9, 0x3, 0xfa, '\x00', 0x5}, {0x9, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x4, 0xfe, '\x00', 0xf8}, {0x8, 0x2, 0x1, '\x00', 0xf7}, {0x6, 0x6, 0x1, '\x00', 0xa}, {0x1, 0x0, 0x1, '\x00', 0x8}, {0x12, 0xe, 0x4, '\x00', 0xff}]}})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19.739729802s ago: executing program 1 (id=388):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000200)='./file0/file0\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x5, 0x2af, &(0x7f0000000340)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x242, 0x18e)

19.494450773s ago: executing program 35 (id=388):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000200)='./file0/file0\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x5, 0x2af, &(0x7f0000000340)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x242, 0x18e)

13.931114716s ago: executing program 2 (id=437):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004b00)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xff000000, 0xffffff00, 0xffffff00, 0x7f]}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @empty}]}}]}, 0x5c}}, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

13.670567038s ago: executing program 2 (id=439):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffff66, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x8, 0xa, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

13.472037819s ago: executing program 2 (id=440):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x9, 0xce1, 0x11, "ec28a144f13d7607"})
write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x12, "0062ba5d8200"})
r1 = syz_open_pts(r0, 0x20800)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x44)

12.503605765s ago: executing program 2 (id=446):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x1, 0x89, 0x100000}, 0x20)

12.359796666s ago: executing program 2 (id=449):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000010000)=@sack_info={r2, 0x3, 0x1}, &(0x7f0000010040)=0xc)

11.971670348s ago: executing program 2 (id=451):
r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000001080)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f00000011c0)='smaps_rollup\x00')
syz_read_part_table(0x1054, &(0x7f0000000000)="$eJzsz8GpwkAABNBJ8slPWTlYgvZgDZ5iH1Yg2IVHm7ABwaOnlYirHUgO7x2GZYcd2LAU/Ry7S4aSqc+9+TZtkv+x67okw+e+L+Vaz4/TnNPqvVLKmNLWt+ftYZ0mf+OrvGWfurE5/ux3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBgzwAAAP//mPwRkw==")
syz_fuse_handle_req(r2, &(0x7f0000001200)="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", 0x2000, &(0x7f0000005cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003380)={0x16, 0x0, 0x8, {'nodots'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11.63100641s ago: executing program 36 (id=451):
r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000001080)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f00000011c0)='smaps_rollup\x00')
syz_read_part_table(0x1054, &(0x7f0000000000)="$eJzsz8GpwkAABNBJ8slPWTlYgvZgDZ5iH1Yg2IVHm7ABwaOnlYirHUgO7x2GZYcd2LAU/Ry7S4aSqc+9+TZtkv+x67okw+e+L+Vaz4/TnNPqvVLKmNLWt+ftYZ0mf+OrvGWfurE5/ux3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBgzwAAAP//mPwRkw==")
syz_fuse_handle_req(r2, &(0x7f0000001200)="dadbc9cfdfd5b56bc9215a0ae246ee1d9ab952c212716dcb252ed0f4873f7e016d50820b1847597eecd78b0352dce37cde40221982a925f52858701281b541974e41b2d96a6764733a43becea73c192a4a101afa2121fac030b96c080e5ef8409475e32f5d64bfac84f633dfc82007f3d8a3a2ade6005deb1c1cddb78f7442c855c9ea96b77e55b989f16251ad6a4b5f1dd6aad0f11f294113ce5587996bf0cfa0a73f335d89d7b7ecb38276cf39cb033f29bf01493b054967d0095b1a0cad7990292602be0cb1a77e3bb549d611958875e3baffea7e62f2d2e5cc72a90904f08df6cf48d13ec43b66ada60124801bf13aec8846928424e14a97f85c2c7bfcfd257b8887edca12f38e3bfbf6bc4d68720a9bb50144182238b6ac81e4003159b14150fe911ad680aee21506c3189d5b9c6a398dfb4b14abe4e9db255fa598ed85545ea74489d134fceb48f92d4c85bd9af49532617413c2c465eebb849aad415a7a97814ea1884d95519e5f41d03a26221298413032eb4685dca623c940e6f91789a4d10348e26eaf30bcb44f43721da66b1090a10565d04abb2f7494f425f9a9943887052e4d6a6ae85da8620fba5b727e44cedf2107bf0430d347335cec514145f3f3592de2909f17c6ca2827fd3accf84fbe6cb998b90b3dda7b515f45a08cb4e26c4b0a821a3b094a7c690389be02434ce1a009321118b55997807edbc3b47bc0953a9f102b003b4d66035bbf40c7bbc41d0d512d8ecc11a7bff3e2a3d55b6313544d794d106043d2f50eaf3a5a7ae6b60f8af1f73e0bb872391776884c872e15e3ca1b57f7d27c98bf46da3b52379c1bd880b9242cc9c77969115c6fcc9875bd651236297e8ce6c0f99eca89cbdc14cc5993bf0f5373c42193e7804f3b937294a35a778c6a335d68aa75a52363d858acbe54ac6dd79608a1cf360584096be81eeafa0869d90a8e7afd1bd10e5044b9af32a926290d9a235565b6c007faefe861742c43e0b443fb64b30f5464e02ae5e7a1d9598bcdadbcf57d5a9d69c59096e3e576eb0e5243fda02b28bbaba4bd625eb25d6b34c42d095fd115d5f3595ea9837f3f29e1eafdcb37cf66b94ade03de3ac1de76a55992d045a981100838d0f1e2c7db1902d40c08c7f19604772c4b3e1d123fcbdc40e3450f459f18b32ae870b6fee0c8b533a4b95f735e98927a8673b65b754e3f38416975f5ebc1d63878b324a2c64bcb18ba04c270255fc4e1d7332bbfaa2b5961343967a4f9d0243b0d2d135e736940bd3688cae5ab84dbeba6cc008fef6e2371540e82c7500d93a9b737fff04825e169c2de01ce1bbbc31efe011b7f5e0dcb2d3ef94afe98c91269cadb3bfdd43173bf5f39839736f0e6290c882991a7178a6690ea1e2df4f64d7b69cfb7eae9bbc83bfe697144c0ccba1031a12684eadbbb590d727135204eb55539f6ea64e1aad59eac8bb2c1e0d03166d7a37862a147e8e61bd1136b2b530b8c23f6d194efc1074471589b6ed07e4bd53120af4e8074d30e12e7831851dba404e02daa691cc2e5174a2dc1794828d6b66e3452560812d9cee8fe50e0f1395b47f54709f1fb857940748fd07951ab029ef43dd031f4f3d9972a62c4b652c9342045ea887839f83bb9a5072f7653342b9e22c43c9d4f6ba84c76a8c2e25c34d1621abbafcaab4665f5eeeccdc8a18c60cb45d20f80aa6d52aa303c47132a8b885b94bb672eb6878b5713fff2e9c92295ef7d9734cebce385e68380cc6b17852c799ca12b83093482bdc4f89593d3185926d3168d0c9756925e449f38a74a44d626f94f8b218c54b4c6e888708d062e9ff90fe828938a0ab870c202f06882e8ca214e3817a4a682fb2ce17f8423bf903435710b97aaee7b8eb40166d6f60b3a43db6b1406253a8fc6160bb313acd4fc8062663fe008d551861221a9fed74f3c823560f1b49180e9fdd7991fcdb79a3c185e252f08e768a0df0c11b938518a59e3d28fd604ac4bf7c8e69ff2535abacaf67f5e63fdc74415381effb44cce8f075e130fd8c21c66059e4d05d61b217aeeae58d6d1172519ea7fa75f63e2b98a78c4d97e6a75d6cb75860caff3ac6d72ef6d5f8ec07b115910e9c0907ba3ecbaee5ea21c91f6a838fda1bc6f4e6678f0f371d2469c311bf22ca5d6cc46bfe6a166c1115dd307d63179c0553d456e54630d63d42814cfe92e5782f3c03387095619976ad54ae5fdc5fec917a9469927586812d7a977cabfbc31e98b17ffac791a0d0b9d0429f68166b6b68d1d72ab96c3c64b747d9298f001f6e8d4887de933fb8a51b95850a3c2b3aaf0339ed36bdfa780a259d8d85456d868cf18a8ad8af90ba5c93b55f6c4f8a86fe55065ac2809cfd52f15f33e2584211e05dbce230ba4365fced6ad09cc1a89292d834bc12e95f765bdcd48612fcb2f3fd3864b55b60d5ad636a3a0dfc312ab932af3362fdd33648c17b9164f9b69c9a50db06f73a9fe37a70fb24a1639b40995ca8ec8c0f1f720e58d8067592e4613e14918653230c2acc2568b8ef667dc62582193c3990f6172023207e46d54b1438424f191855898dfeb68f7908f428671baaf95f3b31d502cec0915020a19a2e04be54d9876b1b0ad84e2ae78d5fad3f33eefad83ac9380917333dfb492358dd8f915fa2d5619f5da99ed44c308b32545b6bcd15cf90af0619b8460a281e32ecc6c1bb2358f3bedc872a1f092f07dfbd9d495b1972dd049893fdb3b46eda1b2733723e6b73ba3334313b19a29f9645f13e734118fe1d0dfa1b6c234168d11a16b103c4e2c4a987dd1799b1dbefdf3b0b42c176da6180d504a73355bd3a8c72bb38a9f3cad6f81688d485fa68f1afce661928cada3c2ce64c92d276d1548de7dc942b4c943158e80ff7ff89c592976944bb22e4eee8053abb05b1a2c5ca51b80c7e1ff81f7a55399da37dbb0715a431f27ca91d3e43df3cb884c4bf7b80ca19c965b7b4011979fd73f8a8f26a6f8b2519f8207549cfeefa2a41e57294aa9f0edff9815bbf4439235e6528591b2bc686707984e52409baa7c033d6e155993f2e17dc7aa7d04e302610af80559ab877ea92c9683c5f9ceb69456da494b675caf3a2dc25facb144a6ea5795dde0643d6e07692ac5415962d166fa8f872f2cc2e96555fcbcbd8e7814cb6af3701b85ba50c54c5b43da22982a40fe74d373f61354cb198444c01a301118f613af8b5297a0709a99db04e8d578513ebc5d52e5b49e1d04666d5ad0ae6704c49704d477e26267a7f7c5008b72aa86e6bd4c41fd89f4a5d41f387aa4a58eae82e7feba0b20b8c713f1d536b1d5d8b826f1f0f2ff0dc40dc5347a00478e3c2b7297fe950df2c0ab3260ea4300028ec0bccc0af67fd43fc632e89a6c87ccc09b64faaae51fb2855345212bd85503a40538195a69fe076eaceb2b89dfd899338a686b35ffa59c19649c2c5d9d3022342e4d140d0863c42a5ff411e41c3cab7f63193888c1206230a2781c6fe35944c4385e8a74927299ca47017e25f2977358acffe7d44b37dfe72e1c12cd18b698697566ee53129d69e91c31680e78695e85f2b2a0646663740e2d9fae36dceeeb7a9b58d24ef678f34a14a8bd8093408b09bc64ef56874b4a14b2053977fd3ca08e08ba87cc1b628983ce77e445f24b23f07cff81db0b3ef039a9d2ec8cde93b1f6d921b842d263d34b6c52b32e82a5323d650185987f0cfcf3259f52e21ec215f30558990514deeb6f8aede62a2d588f838e3fb5696320f5698a78613789edda7871f77f26078a3b334c3544a2237da99d7e3c14c9cbc3422695767cff6e1dcb64bbd6b362ee0b4638afbf176d6e34cff974b9dd3ab3011616cae2fb66801b2b4d24827061d36b114f303a8dd86326ec7aab8be31b274edb00d2df4fd1658d42f05bea6efc2dde2ac164f6c68fd2fcb9fa746e6c48ff9a1b1215b3b52d074720f2dbccfcebccc213ae3cefff5be72095d6d13035b2b233e7fbb43e6dfed9f511f1034cec1e834935af69aec1f70676506cf8fb2ba251d6b24ed02abbbf688a7564eef0d3f5d21e92bc522e16aca70fa5caedecd043946a0443e5052eb816581e847b225fd77d34ab19f88b0dadb2cc2919b89d5d6e7cf640531781b2e7b5a003156a4b8cf667ec159b3eaab1dcdb2f7c89fa59f63a32274302473e0a7b54f85661c3702c06c9d9874feccaf17c46fc5af6d753d54970e0ccf16b10a95a6e71c390b540c3d3b98840dc48b27c68ee4ddcc7b11e2d558185f164945266662e67cbf1b2c4e54d1a2ebc88ebfd692faaffc1cc58c71f6ea2c9f88e5d915363c0f431e847887c74acc3c47a062798d269b2c7840b1455bd0c2ef3b527585fe2b42be4cd345ca4c7244cfd2efc32645f964c4dbef1ea203756633064cc7c7cdaae9edfc6d2e74f3d3fbabfcf7f38383329c60f68168f553959462dbf5c0164f29b938a4022bf3bc6bb88b419eba385c1f8a261dbe96b78e623c8495d1e32030ae9535b32d43f6979d0057a0ecbfbc7a532d9907f15ec2697355725be6d2a378f6f8d2555aab39bc89d0572af54fa6c8d208735bc624908ac12c5cdacef3eac0f3f5cf0604f7058e9275c5056df523bd7b3fdf451cf6aaa27f3aff1cb55aae90656c8c64ebe304535e0bcb83d99d9f58ae4d8044a2dc78eb1115c5551ff68fcd74d75637ca30c2a0e79e802a74e75fec19890eea5a124c22f75c2d98e5c028e19ed9500eb067b7628291d7e23f0b531c209a0a68f581878cb16004ccf0e4b04caecd83ca9a860e74d168124955a920c4fd7679853353f2f4ed75bccd5833566407b49b9eb34127a21fc6cf569af5b5c4c1330695c705871eef9a383685858a15eb60a946427d58afc2f5877b20cdf2909803abf532dffe2ba4f83534a3886ba2f2fa83d7e70e9e1f9b6c81478ed84d7de9f145712427bf63032a24958b582b383e53f0bb1dec22186e1bddfc538fceb5fdc6976a8fdadded5df68af67d89139f177b6125f9d5c611113084a2f750686c535d352c1a7b46a775c24bfff7ca45449823b39c8ba59cd578a98ac411cf0e543d4a76c3ad078569bee46da6db8f8d06c325b20a3e665f87cb8b69f2241d96b7c67c95cb10934d1f7ad1a811375561c602ad59159543d6592fad28838cd787baec9ada59570c8ce89160e108226adf6cc440850e0dcb1b3db119cd6d2fd1c07d0f242cdc4ff89d08650ef211dc20e3e1178f7fd9eb9151f963af7d1809bbcb738ab04c9864f470de05f60bc432e89bad7a86001923b7c3c22750f52d38371b9e4f63f10540dc6223b3fe38771795277727229557ad17d42b1b8e7bb34fb3a43ac26461af51c57a8444e2a1bfdf83c07d4b3379b4ae86726afda59777a639f376ccb0736284bc4f3966939c7b85aac96f6525b28fc74427c087dcfd314fae93275d0b8f79c11c305e01d57459b80c800249fc508bbab29627df73e9db9bff4d0836a27adf00e908cec2caa81f4cd2be0c1452e181ae24f69b1b466581bec6ae000382e1fbe20e2ef77ef4f2487a0ca4fc8242d2a48a19bd6487219b65ef7246e8e5c32adf2059ee1299eeb2b33d58b35f565f22ed44076b2faa4cf1311d3f3d148b11e8756b631e1359687c7e0cca086a410e8ad71e63794236183f517d63bd8913f41b436d16bca147d41e4d609e9b1352daf2a456788e71fa7354c37ccd69e8aa2db86c5d2426b3b553c50138d9d99fab7baab41caa653d89dc6dc27dd2145880f738bc849ca2276332ea4b0011ecf66140986a6112dbda95e7db2b53c318b360aaa6d6a786a73afabc6288997ae6d17b4db69d65e3349e69efc1d7e986b28dd8d156d06698afe42e6a7a6754bf9e5473a7d864b4c70a1a0f476daf6fb53f0169597efbfcf4dc6c5d57466d5c041b4633b72f7da18ed3a790f9b904078850d24709068fac1f836c48e4c876f57c891a1ea7dd69458fe1b99df3d0e6c0d40089dbfc2a43808126e5f1426e28968ef54fb1d4377db941cc4db081fbf9558474f5052b57d1e39b5c1ab3272061cc4cc071d99902190e78547dcb15414e2f210baa478fb742acf380f380ec9530f450be71682a0793fdbf2d9a63326bcebd045d544fe8041fb88d887b2395a0a0bb097f8eee81005c74586ed978685022721ba02c6a5245d946c3468fd8de6ee2b07b3a3fd605f243fe8ba1c2c9666fb23c3db5a935ecfd0862d07779811b9fa15ba9f40db152960566d903ad89c5d2209158265b04f70a5d10f40070bd9bc2e34a2914a4371bd9464024c554395a98860bef2b6841b330f099d1ecd57d15536100979aaade9784c132423752d032b064663274cfbc8986de424e4ea47436032db97ed024ecbd7dd868771c422c66c41cff449ef8c2a3d0297bd8393b32a2ca7605fa80f737d7cfe1fb90ffe34c4e9d0fe41335b634f4782272fc9aee5c8dc87ea6d27061f97a6d0b4a18132b30822db26031653993409f62f70bc28702dfb07888c56e9e52dacf128321dfce9362f71e0468928382f9c46d732109b6bd96b5c0b11d3f03075d06ac51d54531033da1ebb02a53d45d8e625f68254f67168e67a88c15dd5114e09109b2d81df155eede1d73600284f4ea1f1aa218f076d07400d2327e5e97abad617b7ffcdea66888c716b652ec854edde280dce76fb000abd32200e2c096b6085096e3ce7046c54eed3cf7c315638c3577eb69e22665cd5a9a15140496f86784fe3ba55c685dfbe1d562e2f880497e5ba97acd34e379a972c410210a8ad2bff21171a85f7fda34ebb6d1fe56dcd7f04e577bf17efd48c814b5828c6d2d546e126dbda254a628e23d648942a76c4c5e23cdfd8c70fe147d9ebac4415571171ddace48a4c3597308fed9060d0dba73b9babca2bddf3c82e5b3d4b36ad4ea6c2c8512d2e5c7aec4cbfee4d4e1ccb77682beafb39fe2c8d62da86e963c7eabcbfe6522501e95bfa2a9825d24ace96a2d4928f049974b433186f68f9926f2fee105f546837310e278df309682fde29ab8f9e176b84eb67ca784c77b8791e092b28b4121d10c7eba2926705e1f6fb69c0683a310b3675b47f15254f048e6fbd0c6c6123aeec46d8fb02b9f7b2b6d4a6fabff71e20f2fb5cd15f9bed52f9c079cb75557a1e9af92992cd43208d00f4c72dc95e0e2bb438534fcef985cc76998f1ab7f850f99be38d1dd8b88792bb5013ce9ede4e0a00bf0f91a6ee56b1e0822dc4909cbfc3664a8b32a7b31bbaa18e04e43caedf43a20ddfe8c25d364def08df4e24b899ca833bdb288d172c3b8c6a09b2f6094a785cf70b5fb52846d8bb7622eb0f0ffb9e9cbb30e09584b5acec7a1a84f1c9dc8296bd11cb2825a0ae5fa1b87ccf8083b737b6709e6a48e149401b98671eada62b9b47cc7900f84f157a02ce59215f09dd88d93e78fd526a33ba1e5b4f040eda09a064be5d0b79e28ea254d07a0e714acc38b755c9dd0307263a8e970c5a0d53cdcf7b4d450243c71ada9cbd20b4960fd51fbfe5c25aeb0d58b82788cdb9547e87ed10f52a9c8a76409c2dfe328d4e677c679b3dbfa4bdcc5448a7f0c8de0e760697bd49e9f2815ad8d304c09947edc10960c745ee50c44584e06886c5aa4a346c96b48225c9d4f51dcb4a3b2fe35dc5fac99a0b83377dca56325dd55f520a3059e2731068a9d97055025f3f4f931ce5259ea65a99838b71db03313be8ce4befd465ab9c77ba8131fac1448c8c619dae66cecb55425a15b5007e3a49f4187a4aaf952b7f9ff9a89317f68fc25a306fdad58815341939ee469d32467a37850b5b42dbb567a052843ccefaa5db1b355634dbf2fb5fe8f5304c2d5c38f6a50d9e76e441edeb6e3946fd99956a7da76caf768affdea2da380cacf6f803484cbfcb0194c0878a5d0fd2a38676c153b082cb728e4fd8b28792a26c6d3b05ed666cbe5a9df21c1b53e5f3c15bc406b35c2901bd624d6fb84ca3e93411ac79fe7f91650eb304bc98a48a3d173e455934fb1a2569ce65c0464f69e961f6129377048df2887a331ceada7cbd4a40f0c2778c57a303cb3c7090e821306c2ba5152edd2de227e5e5ad380188da3c515d30f5cb858d0e561ff1dd442bd53bd388c628c83a41e15074aeb4189f9162a5085e896dacb145ceeb71530db726e32082ff41b8647ae736cd9475e94280c701145432894781aaf7fe0c95fd25083028481529cce411d8ca9903c6870d95dfabcf14b5c6259056ae9ab18b56b61a8f3eb52dd29b5413da11d1cc58a3d3872126f9c75d69acc8a9896efeff88b07a055ea5d21157be5cd412f30d35bd0174300ec10c80fbd8b78b935547e5f857ec1afcea5b130e6a7ccf8cde9ab4bb906b030ead6a99b215a13a2d73e97ef38f9795cf66cd27ee5098ad56de5aeae3dae029fe2311c50553f56ff01670dc8e97491293e7e08b559bcdaa9b89865a826a7c093f3065af75caeeeb87ac2a9c88c5cd5f1dbae4f5a016b9f9a50aa116a71921f3071dc4f60c26003baaeb7f31ec9669e89502debddc78dc0b2841fbd9fce7277be680c24fd4d549a085dd272df974b35bca334f3d00d5365510a39a834f7e5602f26cd5a18b699278a796ef46219cc3955ee51808cd406f40ebd91a5085fe493286cd7788020a2fe8632706e591921a25536d73fee375070b843ed59f520cec48000380ee46adf338c70d52f62bee4da18d47b8b18d9a4f9bcc8140b51e3e5585b06767037fbde007ce6b8175edc73c61fc12f5b6587e1636fbb5fd478dc5331d0c91b97daabac227fc2f90e27d85464d6503107831c3ad92610c31c4c18259a4d6999b3cb4575930f70a42d2fd6b9f8db6b92fe541dbd9a2ef4345cf27c5dc0ca477efe010c57f875e6651f07f907b18069a95c884feaf7a6ec7d55aaea9e0aad9587a6b147f7ca84898d1e4fb2d535221fbae9f7cb6fc2f86331528b5d3b105b9fa281ac28de48c740181dfaf25ba298bb8959ddbcc4be3ed564a07e5b3ff689ebc6e86b57f863d2b5d2c2807ace26ab4860e30ec7df265b5f79cef2811591b39a89ffd46641fff0990d3d2c45a3c1591152c4dd25886bdd1cbd4da03c1cdf871a2fd7ed71ef0fd367d0c966b39cd933bdd3903579398f1d99bc3254974e8635ac3705f622128a0a4fab585f808cb91c3dfa2103c078fd41b0a654ee3f1b6550f72840c51e84f41e7a8f2291bad9c568f31acaaa63126e50f92bffd63686fae3b2052e2fae2160615d9c2385fbe5bac73719fdd30a872d665b95135ca5fba793c175f9a1b796d9f90dfa363f1f7bb7391b9e3cf07e22a1731cef3534e7736938386ab236a6ba284dcb0d09eee8332cfbf9ef0c8317b868a97161728f8d118c14750afa1c3db08f6ce6c88379d4f9c946b7d794afe918aae7e2636290f2f27c8ea76d5e305361e7842dd259564dc6d234e89e59fd27cba30a2a31423501b5d2f8166b6b8b765d02e54c011f677c7572bdd89aacabf465edcd650ce9294b56b5461b2663b0e877cfc19df8054b7639a3cd0cec253d4692cacde79990791e450cb9443cde9be2f3f56e26e00903c3093449cc82311a7a0831bc2285d116870334cbdf6342c678738f5509007acc49fca6cc131d6ab61111811bc132150fe92dc673d2cef4997f3d06f06f69bcebb11ad207c4d8f915dc90ccfabc2a365e54b9c920d2df697276013212274a1f0bfee04ed4cb26becff430e91c82280f764cb90d746ae7e008eb003e5f0e90696b973ea1e5cdc1833a0725677bda3c636e07ef975ece5e98eca7a3ad247500a3256628148c49816529a0266a4ac5806db6915e1271e77a4a72cb7092f312383c4480a44e9e7170492850248bd849fc8f7a9762ff6e74c0f604a45848a390378d63e771f1fda70e353b900ec32f3b5cea966107fd3e470cb08b7f468353db24c5d62cef9e2e0c191a04145ed1121b7480451092804e69946fa2f989eb999cfbec94a36046e2af6fa8cbf0079129014b65021ad03252f319039cc89b1bc0c71991958c9239f46e03d2b5126c8eb796b447ebf7166bc920059e17aad0bf3779eecbf1282a12bc4b9d79dc94e4622b3e17104592e9c3f0d9f9466cf154a236b8a5bdfb6bf770348e58cafa90087699e411fd1f673ec2636bc7734ac0e12e6566107b82e9cf18b2ed0b5f071f4926ca13aa359a98cf505cf6fbc81bd3d8643557cf7f45e9be5a1c50e40d523b341a145484c7b9561cc8c3996b8c76d8df8172a0dd66546460a9b7361960ef2d5f403b1702c8805663f0996af54e889d7792f0f194b3385d434ce5cca0f9e8571240bd951d69d78c0fd7b4996794805127441d233adbfcba835058e916405418e74740a6862537eb58a6521903208133cfc92f111696db4bbe9d4f3f28565a2f8359036a5792bfda994b8e314c9fc5b907dab597afc81ae53b60384b6120081fec8cd1bd4af543046ce5e22f9e63f24024497b3bb8e36a4249a5d71e44af577e72607378cdb59719227b42f382f24a2796f8d5f390fdae3a3936973c64dd4feb9ddbea9fac6ed03cb2effb92568dd518416b4e0422b6247ae7942b73b5bbbc5cbce4e65d5745bc0ee722b4f440fce862699318a4cdf05ef8080286852ca593ac305b6baf143b6e340bbf7815df061892ca73c53bca283ea87af03a2ac01eeebf07b258816f4b44867fb524600713c558fa0552f5c151ea8bda9e5924d29fe4a4ed0f9e19a2a5635fb9e1d519df1ae4bc618ae78833fa1ca9dd564d604e3eb08006ef048c0bbd07e338ecd44bffb3c590b2e72428203dcf9f78b757a74b40b4248a29e62a17f4d8bd6579c9dcbb042981fb8629dda9ef98b34b5f8551c86a6409d14d4ab690bafe3a849ca8f011d177e29a43279d0a5332395326d956d64804b6b64e9f9a4b7cf4c4960266acca7c88109ac545c95b9d96fa4f6f2b990c2312b97a7c99652478591e4ee87e14ca12ad010ef39d9c0b52a1a37f1bb11dcf3b8cf0d8f3772a91ed679dba6b6e5df8777674caa5b17c2aa7252d5cceac7374d61551b984976f7154c10e08d7f725e2dbf2b7133d0a27f0a52502d08c16186d695f09730e69e7bd8ab80744ae37c4b15968c4365fb06b700709d4097127ee8ace3833fc9ca1fa50b45070aa76b142aed6dc381307d0a93f340a4b202eb97545e80ae7e1707c418207b9cf772d40bf4bdb91eb68a74d10f614bf6c0dce52d01d0f2d00d94c3caff2e1caf159ad788872499e23d3005e614d7c06acd7c3dbd1467c00fb4b9dbd8f3fba3ddb74e16815e6abf11c816bd64f5256622024ce4dc7ccd29c64ad7c8290beae91f3e0319eb9fcfe7336f2f5a852588eba92c425f6c2c411912f71727c6b41a27bd42ec21f3410096313e9bef71828401790d45197d33b48530440b5456ddb0ae3d81d5850f2f149fe66bd0798ba25a5dfa8a2244bace1af28afac099a616dbcb41c359580570555cbb89c8ba327e81c72b009db23546a44f5a91f920ed4a6ee3b15837186f6f4935102b7b1d86c228f6ccb70d49181619d85d3ea7b893fe483ca7a00548ec0990b4104fd44664da37c83946dd042134f30808eeb06b0efc66974795dd2e831faf1bb8e9bc0d4609a0f9ba847a70db6c732d9a502d78c5a1e455f3f99bc1", 0x2000, &(0x7f0000005cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003380)={0x16, 0x0, 0x8, {'nodots'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.068671109s ago: executing program 8 (id=493):
r0 = inotify_init1(0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x5438)
r1 = inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x9400002f)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x4)
inotify_rm_watch(r2, r1)

4.94650796s ago: executing program 8 (id=496):
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4000)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000be7000/0x3000)=nil, 0x3000}})

4.143065925s ago: executing program 6 (id=503):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x40, r2, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffc}]}, 0x40}}, 0x4)

3.983848606s ago: executing program 8 (id=506):
ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, &(0x7f0000000140)={'dvmrp1\x00', @ifru_addrs=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, 0x0)
r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}})

3.899362156s ago: executing program 6 (id=507):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
socket$inet6_icmp(0xa, 0x2, 0x3a)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/80)

3.839502196s ago: executing program 8 (id=508):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21ea000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

3.722930397s ago: executing program 6 (id=510):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read(r1, &(0x7f0000000140)=""/87, 0x57)

3.624198918s ago: executing program 8 (id=511):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xa, 0xffff}, {}, {0xfff3, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x4}, {0xcf9, 0x1, 0x1}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x200008c2)

3.587493568s ago: executing program 6 (id=512):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000480)={0x0, 0x12, 0x3, "7e6991"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

3.548000028s ago: executing program 4 (id=513):
r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9\xf0I{\xf0:\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x06\xbe\xb1\x0f\xa2\xa6\xedA\xb7\x0f\xda\x9d<\xd6l\xbcF\xcb\xec\x83#?\xf4\x81\x16+\x14\xd0\xb8\x88`W\xa9\xef\'\xe1\xd9[\xac^', 0x1)
r1 = dup(r0)
r2 = fanotify_init(0x2, 0x2)
fanotify_mark(r2, 0x1, 0x2, r1, 0x0)
r3 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0)
fallocate(r3, 0x0, 0x0, 0x8)
sendfile(r1, r3, 0x0, 0x40)

3.500624978s ago: executing program 4 (id=514):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
unshare(0x22020600)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x1, 0x4f96, 0xe20, 0x42})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

2.889839602s ago: executing program 4 (id=515):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000500)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, &(0x7f0000000540)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000280)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0})

2.709764973s ago: executing program 8 (id=517):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
recvmmsg(r0, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/13, 0xd}], 0x1}, 0x70}], 0x1, 0xfbd938585c4b5529, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x6, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0xd209f6d814827b17)

2.316820275s ago: executing program 4 (id=518):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x1010006, &(0x7f0000000080)={[{@discard_size={'discard', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}]}, 0x1, 0x6255, &(0x7f0000001840)="$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")
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc}}, 0x10)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}])

1.958442018s ago: executing program 7 (id=519):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x42)

1.871153758s ago: executing program 7 (id=520):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="757466383d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c000f3556feecb6412e00c80bdee16891f8bf67c9f201996782a86d4bab33b4f23383380e4ccafc9da9def41b05c1dfb2cfa24e43aedf5536d3bce06ddda97c586bc37fab5366b1ab6fee95cc224e56e681e82dd4dbbde3785fdd0fc4e7df753a0e2658aa5e88e1d38366c7908a7b2b678ee4b4bfc7aafa2101c157745926241af5ac30189eced78c1611b972d03bfef046f4adcada230ef0ac02ede79fb7d92a8354670c01cb80361c1fde2cef3204a182323c318e10ef11cb24c435d589b17a396377800f"], 0x1, 0x21b, &(0x7f0000000300)="$eJzs2j+LHGUcB/DfnJHEC5dd8R8JiA9aqM2Q3doihyQgLiiaFaIgmXizuuy4e+wsBytirtLWl2AtlnaCpLS5xldgYXfNlSnEkWRjcnesxSHein4+zXzhmS88D8/w8BSz/9rXn44GdT4oZrGWZbF2JXbjbhbtWIs/7carL9/46fl3b7z/5mavd/WdlK5tXu90U0oXXvjxg8+/e/HO7Px731/44WzstT/cP+j+uvfs3sX9369/MqzTsE7jySwV6dZkMituVWXaGtajPKW3q7KoyzQc1+X0yPigmmxvz1Mx3tpY356WdZ2K8TyNynmaTdJsOk/Fx8VwnPI8Txvrwd/R//Zu08RB8/jNaJrmiW/i/J3Y+CVakT2ZsqeuZM/czJ7bzS4eNE1r1VPlH2H//98OHernIqqvdvo7/cVzMb45iGFUUcblaMVvce8zeWCRr73Ru3o53deOL6vbD/q3d/qPHe13ohXt5f3Oop+O9s/G+uF+N1rx9PJ+d2n/XLzy0qF+Hq34+aOYRBVbca/7qP9FJ6XX3+od61+6/x4AwH9Nnh5aen/L878aX/RPcD88dr86E5fOrHbtRNTzz0ZFVZVTQRCEh2HVJxOn4dGmr3omAAAAAAAAAAAAnMRp/E646jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/bn8EAAD//xrx1cI=")
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbb"], 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
mlock(&(0x7f0000a6c000/0x3000)=nil, 0x3000)

875.721014ms ago: executing program 4 (id=521):
r0 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x6)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file2\x00', 0x80, &(0x7f0000000080)=ANY=[], 0x44, 0x6ff, &(0x7f0000000500)="$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")
connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
sendmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[], 0x20}}], 0x2, 0x20008094)

866.056364ms ago: executing program 7 (id=522):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, 0x2, 0x98}}, 0x2e)

648.822266ms ago: executing program 7 (id=523):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

611.066295ms ago: executing program 6 (id=524):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r3, 0xc008aeba, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x5625e9b0})
ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f00000000c0)={0xc5, 0x0, r3})
close(0x4)

374.951197ms ago: executing program 9 (id=453):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @broadcast}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x0, 0x343}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0)

358.966107ms ago: executing program 6 (id=525):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001500b595279d7000ffdbdf250a4002ff", @ANYRES32=r4, @ANYBLOB="140002"], 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x8001, 0xd)

259.750028ms ago: executing program 7 (id=526):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x8, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x5, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6e, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0xfffffffe], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40, 0x0, 0x0, 0x200, 0x0, 0x0, 0x8000000, 0x40, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x2000000000000000)

133.766689ms ago: executing program 9 (id=527):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x20000000)
getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0x10002}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x4}, {}, {0x2, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x24000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

70.799129ms ago: executing program 7 (id=528):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x1000002, 0x0, 0x0, 0x0, 0x0)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0083080057dc19000c006671812e0fe50678760d4fde82cabd362a6b6283a966aca06536e614c969f7ae03bb8d007e3a27175815a13fda56e412c611f9ac84"], 0x1017)

0s ago: executing program 4 (id=529):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x114)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2}, './file0\x00'})

kernel console output (not intermixed with test programs):

igured BSSID 50:50:50:50:50:50
[   65.719972][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.769362][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.817847][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.831824][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.885544][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.912983][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.923511][  T775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.931455][  T775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.949362][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.985265][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.002547][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.063644][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.063652][ T1247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.063696][ T1247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.082319][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.103400][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.162990][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.187335][ T4303] loop2: detected capacity change from 0 to 32768
[   66.233801][ T4303] =======================================================
[   66.233801][ T4303] WARNING: The mand mount option has been deprecated and
[   66.233801][ T4303]          and is ignored by this kernel. Remove the mand
[   66.233801][ T4303]          option from the mount to silence this warning.
[   66.233801][ T4303] =======================================================
[   66.468167][ T4303] XFS (loop2): Mounting V5 Filesystem
[   66.640949][ T4303] XFS (loop2): Ending clean mount
[   66.655869][ T4303] XFS (loop2): Quotacheck needed: Please wait.
[   66.706234][ T4303] XFS (loop2): Quotacheck: Done.
[   66.823191][ T4240] Bluetooth: hci4: command 0x0419 tx timeout
[   66.831560][ T4240] Bluetooth: hci0: command 0x0419 tx timeout
[   66.893747][ T4240] Bluetooth: hci3: command 0x0419 tx timeout
[   66.905691][ T4240] Bluetooth: hci2: command 0x0419 tx timeout
[   66.920100][ T4240] Bluetooth: hci1: command 0x0419 tx timeout
[   67.028533][ T4183] XFS (loop2): Unmounting Filesystem
[   67.294946][ T4331] loop0: detected capacity change from 0 to 32768
[   67.391901][ T4201]  loop0: p1 p3 < >
[   67.462539][ T4331]  loop0: p1 p3 < >
[   67.785561][ T4374] loop1: detected capacity change from 0 to 1024
[   67.854166][ T4374] EXT4-fs (loop1): Ignoring removed orlov option
[   67.939524][ T4374] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,noinit_itable,orlov,. Quota mode: none.
[   68.009652][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   68.024820][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   68.083120][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   68.101186][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   68.291882][   T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   68.316527][ T4385] loop0: detected capacity change from 0 to 164
[   68.379979][ T4385] Unable to read rock-ridge attributes
[   68.402974][ T4390] capability: warning: `syz.2.33' uses deprecated v2 capabilities in a way that may be insecure
[   68.562000][   T13] usb 4-1: Using ep0 maxpacket: 8
[   68.622840][ T4388] loop1: detected capacity change from 0 to 32768
[   68.665271][ T4395] overlayfs: upper fs does not support file handles, falling back to index=off.
[   68.682362][   T13] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[   68.711220][ T4388] (syz.1.32,4388,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   68.726573][ T4388] (syz.1.32,4388,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   68.732250][   T13] usb 4-1: config 179 has no interface number 0
[   68.787205][ T4388] JBD2: Ignoring recovery information on journal
[   68.795011][   T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   68.812549][   T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   68.824323][   T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   68.836429][   T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   68.848071][   T13] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   68.861539][   T13] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   68.870994][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.912982][ T4380] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   68.983737][ T4388] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   69.060434][ T4388] syz.1.32 (4388) used greatest stack depth: 20064 bytes left
[   69.141894][   T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   69.160479][ T4184] ocfs2: Unmounting device (7,1) on (node local)
[   69.218578][   T13] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input5
[   69.317767][ T4404] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   69.328632][ T4407] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 4294967272. macoff=96
[   69.423061][   T21] usb 3-1: Using ep0 maxpacket: 32
[   69.537683][ T4413] loop1: detected capacity change from 0 to 256
[   69.545540][   T21] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[   69.561985][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.589557][   T21] usb 3-1: config 0 descriptor??
[   69.602330][   T13] usb 4-1: USB disconnect, device number 2
[   69.622624][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   69.631446][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   69.634794][   T21] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[   70.370567][ T4431] loop1: detected capacity change from 0 to 40427
[   70.389818][ T4431] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   70.398091][ T4431] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   70.439160][ T4431] F2FS-fs (loop1): invalid crc value
[   70.482517][ T4431] F2FS-fs (loop1): Found nat_bits in checkpoint
[   70.562136][ T4431] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   70.569485][ T4431] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   70.721050][ T4431] attempt to access beyond end of device
[   70.721050][ T4431] loop1: rw=2049, want=45104, limit=40427
[   70.819817][ T4427] loop4: detected capacity change from 0 to 131072
[   70.865231][ T4427] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[   70.873441][ T4427] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   70.902771][ T4427] F2FS-fs (loop4): invalid crc value
[   70.941549][ T4427] F2FS-fs (loop4): Found nat_bits in checkpoint
[   70.985562][ T4427] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   70.992674][ T4427] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   71.136187][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.142938][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.301965][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   71.694889][ T4460] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   71.761828][   T21] gspca_vc032x: reg_w err -71
[   71.766643][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[   71.793707][ T4462] syz.0.59 sent an empty control message without MSG_MORE.
[   71.802666][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[   71.808569][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[   71.831754][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[   71.837076][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[   71.881819][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[   71.887182][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[   71.901790][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[   71.921782][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[   71.938307][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[   71.959808][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[   71.969750][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[   71.983789][ T4466] Zero length message leads to an empty skb
[   71.988607][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[   72.001059][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[   72.006897][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[   72.019639][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[   72.025242][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[   72.030752][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[   72.056446][   T21] gspca_vc032x: Unknown sensor...
[   72.067271][   T21] vc032x: probe of 3-1:0.0 failed with error -22
[   72.069577][ T4464] loop1: detected capacity change from 0 to 8192
[   72.103421][   T21] usb 3-1: USB disconnect, device number 2
[   72.136456][ T4464] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[   72.191941][ T4464] REISERFS (device loop1): using ordered data mode
[   72.215839][ T4464] reiserfs: using flush barriers
[   72.251465][ T4477] loop0: detected capacity change from 0 to 512
[   72.265718][ T4464] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   72.312026][ T4464] REISERFS (device loop1): checking transaction log (loop1)
[   72.344989][ T4464] REISERFS (device loop1): Using r5 hash to sort names
[   72.366822][ T4477] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   72.367062][ T4464] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   72.387813][ T4477] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.448905][ T4482] loop2: detected capacity change from 0 to 24
[   72.512534][ T4482] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   72.541851][ T4304] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   72.581599][ T4482] romfs: bad initial checksum on dev loop2.
[   72.627125][ T4177] udevd[4177]: incorrect romfs checksum on /dev/loop2
[   72.686016][ T4482] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   72.781995][ T4304] usb 4-1: Using ep0 maxpacket: 8
[   72.912117][ T4304] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[   72.920372][ T4304] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   72.967383][ T4304] usb 4-1: config 0 has no interface number 0
[   72.979244][ T4304] usb 4-1: config 0 interface 52 has no altsetting 0
[   73.072839][ T4501] loop2: detected capacity change from 0 to 2048
[   73.106796][ T4304] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[   73.127440][ T4304] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[   73.146977][ T4304] usb 4-1: Manufacturer: syz
[   73.163607][ T4501] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   73.186540][ T4304] usb 4-1: config 0 descriptor??
[   73.192968][ T4508] device batadv_slave_0 entered promiscuous mode
[   73.207933][ T4501] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   73.221045][ T4501] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   73.230628][ T4507] device batadv_slave_0 left promiscuous mode
[   73.248488][ T4501] UDF-fs: Scanning with blocksize 512 failed
[   73.259489][ T4501] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   73.319002][   T26] audit: type=1800 audit(1762467339.850:2): pid=4501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.72" name="file1" dev="loop2" ino=838 res=0 errno=0
[   73.709247][ T4527] ALSA: seq fatal error: cannot create timer (-16)
[   73.723336][   T13] usb 4-1: USB disconnect, device number 3
[   73.783336][ T4533] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   74.558998][ T4574] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   74.633941][   T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   74.666700][ T4304] Process accounting resumed
[   74.839166][ T4581] 9pnet: p9_errstr2errno: server reported unknown error �@c�F	S+�ing���#
[   75.036492][   T23] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   75.055502][   T23] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   75.094907][   T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[   75.123854][   T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   75.167093][   T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   75.254211][ T4571] loop2: detected capacity change from 0 to 32768
[   75.268823][ T4592] process 'syz.4.109' launched './file0' with NULL argv: empty string added
[   75.291443][ T4568] loop0: detected capacity change from 0 to 40427
[   75.322411][   T23] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   75.331488][   T23] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   75.349982][   T23] usb 2-1: Product: syz
[   75.354455][   T23] usb 2-1: Manufacturer: syz
[   75.358161][ T4568] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   75.402989][   T23] cdc_wdm 2-1:1.0: skipping garbage
[   75.409286][   T23] cdc_wdm 2-1:1.0: skipping garbage
[   75.431992][   T23] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[   75.436959][ T4568] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   75.443686][   T23] cdc_wdm 2-1:1.0: Unknown control protocol
[   75.506805][ T4571] XFS (loop2): Mounting V5 Filesystem
[   75.552897][ T4568] F2FS-fs (loop0): Found nat_bits in checkpoint
[   75.723850][ T4571] XFS (loop2): Ending clean mount
[   75.732851][ T4571] XFS (loop2): Quotacheck needed: Please wait.
[   75.748384][ T4568] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   75.766377][  T775] Bluetooth: hci5: Frame reassembly failed (-84)
[   75.767958][ T4568] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   75.873803][ T4571] XFS (loop2): Quotacheck: Done.
[   75.888126][ T4196] usb 2-1: USB disconnect, device number 2
[   75.901822][    C1] cdc_wdm 2-1:1.0: Unexpected error -71
[   75.908706][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[   75.915502][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[   75.921593][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   76.198223][ T4183] XFS (loop2): Unmounting Filesystem
[   76.292299][ T4568] syz.0.101 (4568): drop_caches: 2
[   76.774579][ T4625] loop4: detected capacity change from 0 to 512
[   76.859143][ T4629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.121'.
[   77.003068][ T4625] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   77.145225][   T26] audit: type=1800 audit(1762467343.680:3): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.118" name="bus" dev="loop4" ino=18 res=0 errno=0
[   77.235809][ T4646] loop2: detected capacity change from 0 to 1024
[   77.313372][ T4646] EXT4-fs (loop2): Ignoring removed orlov option
[   77.365816][ T4646] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,data_err=ignore,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,nombcache,stripe=0x0000000000000002,,errors=continue. Quota mode: none.
[   77.403757][ T4193] Trying to write to read-only block-device loop4
[   77.414128][ T4193] Trying to write to read-only block-device loop4
[   77.449378][ T4193] Trying to write to read-only block-device loop4
[   77.488847][ T4193] Trying to write to read-only block-device loop4
[   77.507727][ T4193] Trying to write to read-only block-device loop4
[   77.514980][ T4193] Trying to write to read-only block-device loop4
[   77.521628][ T4193] Trying to write to read-only block-device loop4
[   77.532345][ T4193] Trying to write to read-only block-device loop4
[   77.550130][ T4656] binder: 4655:4656 unknown command 0
[   77.562444][ T4656] binder: 4655:4656 ioctl c0306201 200000000080 returned -22
[   77.597783][ T4193] Trying to write to read-only block-device loop4
[   77.632681][ T4635] Trying to write to read-only block-device loop4
[   77.771783][ T4196] Bluetooth: hci5: command 0x1003 tx timeout
[   77.779161][ T4195] Bluetooth: hci5: sending frame failed (-49)
[   78.328966][ T4686] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   78.921949][    T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   78.988549][ T4718] loop1: detected capacity change from 0 to 16
[   79.065499][ T4718] erofs: (device loop1): mounted with root inode @ nid 36.
[   79.211885][    T7] usb 5-1: Using ep0 maxpacket: 32
[   79.220929][ T4184] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46
[   79.256949][ T4184] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   79.273241][ T4184] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   79.332007][    T7] usb 5-1: config 0 has no interfaces?
[   79.337752][    T7] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   79.359267][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.374134][    T7] usb 5-1: config 0 descriptor??
[   79.610290][ T4737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'.
[   79.672064][    T7] usb 5-1: USB disconnect, device number 2
[   79.755243][ T4743] loop0: detected capacity change from 0 to 256
[   79.779595][ T4743] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value
[   79.852206][ T4304] Bluetooth: hci5: command 0x1001 tx timeout
[   79.862423][ T4195] Bluetooth: hci5: sending frame failed (-49)
[   80.108546][ T4751] loop2: detected capacity change from 0 to 8192
[   80.121424][ T4754] loop0: detected capacity change from 0 to 512
[   80.280204][ T4754] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   80.349504][ T4754] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   80.373442][ T4745] loop1: detected capacity change from 0 to 40427
[   80.442163][ T4745] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   80.455849][ T4745] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   80.470824][ T4745] F2FS-fs (loop1): invalid crc value
[   80.505488][ T4745] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   80.555686][ T4764] Bluetooth: Invalid byte 02 after esc byte
[   80.622946][ T4745] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   80.630287][ T4745] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   80.699939][ T4769] loop2: detected capacity change from 0 to 128
[   80.807329][ T4770] attempt to access beyond end of device
[   80.807329][ T4770] loop1: rw=2049, want=55296, limit=40427
[   80.841058][ T4769] attempt to access beyond end of device
[   80.841058][ T4769] loop2: rw=1, want=140, limit=128
[   80.865873][ T4769] Buffer I/O error on dev loop2, logical block 69, lost async page write
[   80.867646][ T4770] attempt to access beyond end of device
[   80.867646][ T4770] loop1: rw=2049, want=57344, limit=40427
[   80.889653][ T4770] attempt to access beyond end of device
[   80.889653][ T4770] loop1: rw=2049, want=49336, limit=40427
[   81.051129][ T4184] attempt to access beyond end of device
[   81.051129][ T4184] loop1: rw=2049, want=45104, limit=40427
[   81.161347][ T4773] loop0: detected capacity change from 0 to 1024
[   81.250681][ T4773] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   81.373707][ T1110] cfg80211: failed to load regulatory.db
[   81.413216][ T4773] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none.
[   81.601910][ T4304] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   81.841807][ T4304] usb 3-1: Using ep0 maxpacket: 16
[   81.931846][ T4196] Bluetooth: hci5: command 0x1009 tx timeout
[   81.961983][ T4304] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[   81.971210][ T4304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.984221][ T4304] usb 3-1: config 0 descriptor??
[   82.024304][ T4304] gspca_main: sonixj-2.14.0 probing 0471:0327
[   82.572152][ T4196] Bluetooth: hci6: command 0x1003 tx timeout
[   82.579608][ T4185] Bluetooth: hci6: sending frame failed (-49)
[   82.626483][ T4791] loop1: detected capacity change from 0 to 32768
[   82.655477][ T4791] XFS (loop1): Mounting V5 Filesystem
[   82.691225][ T4791] XFS (loop1): Ending clean mount
[   82.699559][ T4791] XFS (loop1): Quotacheck needed: Please wait.
[   82.752887][ T4791] XFS (loop1): Quotacheck: Done.
[   82.810731][ T4801] loop0: detected capacity change from 0 to 2048
[   82.824672][ T4791] XFS (loop1): User initiated shutdown received.
[   82.834643][ T4791] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491).  Shutting down filesystem.
[   82.848585][ T4791] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[   82.892449][ T4184] XFS (loop1): Unmounting Filesystem
[   83.063732][ T4803] device syzkaller1 entered promiscuous mode
[   83.341863][ T4304] gspca_sonixj: reg_w1 err -71
[   83.375276][ T4304] sonixj: probe of 3-1:0.0 failed with error -71
[   83.394461][ T4304] usb 3-1: USB disconnect, device number 3
[   83.484062][ T4805] loop1: detected capacity change from 0 to 32768
[   83.529577][ T4805] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.184 (4805)
[   83.570634][ T4805] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[   83.590333][ T4805] BTRFS info (device loop1): enabling auto defrag
[   83.597283][ T4805] BTRFS info (device loop1): use no compression
[   83.609737][ T4805] BTRFS info (device loop1): force clearing of disk cache
[   83.619036][ T4805] BTRFS info (device loop1): max_inline at 4096
[   83.632004][ T4805] BTRFS info (device loop1): disabling free space tree
[   83.639065][ T4805] BTRFS info (device loop1): has skinny extents
[   83.759798][ T4805] BTRFS info (device loop1): enabling ssd optimizations
[   83.791317][ T4805] BTRFS info (device loop1): clearing free space tree
[   83.823112][ T4805] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   83.834901][ T4805] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   83.904453][ T4841] loop0: detected capacity change from 0 to 512
[   83.981832][ T4841] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c11d, mo2=0002]
[   83.991444][ T4843] loop2: detected capacity change from 0 to 16
[   84.015091][ T4841] System zones: 1-12
[   84.027805][ T4841] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #15: comm syz.0.193: corrupted in-inode xattr
[   84.048302][ T4841] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.193: couldn't read orphan inode 15 (err -117)
[   84.070703][ T4843] erofs: (device loop2): mounted with root inode @ nid 36.
[   84.109616][ T4841] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,nombcache,noload,debug,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000800,bsdgroups,barrier=0x0000000000000053,,errors=continue. Quota mode: none.
[   84.146579][ T4843] attempt to access beyond end of device
[   84.146579][ T4843] loop2: rw=524288, want=48, limit=16
[   84.160832][ T4843] attempt to access beyond end of device
[   84.160832][ T4843] loop2: rw=524288, want=40, limit=16
[   84.235819][ T4841] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.193: bad entry in directory: directory entry overrun - offset=128, inode=18, rec_len=896, size=1012 fake=0
[   84.277732][ T4201] udevd[4201]: incorrect jbd checksum on /dev/loop0
[   84.320119][ T4189] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   84.362507][ T4189] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0
[   84.420551][ T4848] loop2: detected capacity change from 0 to 256
[   84.427137][ T4189] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   84.443186][ T4189] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[   84.458449][ T4189] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   84.474466][ T4189] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 2048
[   84.494709][ T4189] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   84.512315][ T4848] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   84.514997][ T4189] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 3072
[   84.558601][ T4189] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   84.581281][ T4189] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 4096
[   84.597098][ T4189] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   84.627197][ T4189] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 5120
[   84.654676][ T4304] Bluetooth: hci6: command 0x1001 tx timeout
[   84.659232][ T4189] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   84.661667][ T4185] Bluetooth: hci6: sending frame failed (-49)
[   84.682892][ T4189] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 6144
[   84.697708][ T4189] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   84.714032][ T4189] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 7168
[   84.729917][ T4189] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   84.746741][ T4189] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[   84.767892][ T4189] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   84.849739][ T4860] overlayfs: upper fs does not support file handles, falling back to index=off.
[   85.126003][   T26] audit: type=1326 audit(1762467351.660:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.1.201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe9d2476c9 code=0x0
[   85.175383][ T4873] loop2: detected capacity change from 0 to 1024
[   85.213291][ T4873] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   86.048228][ T4277] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.099980][ T4892] loop2: detected capacity change from 0 to 2048
[   86.191714][ T4892] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   86.235406][ T4277] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.267770][ T4201] udevd[4201]: incorrect nilfs2 checksum on /dev/loop2
[   86.321064][ T4201] udevd[4201]: incorrect nilfs2 checksum on /dev/loop2
[   86.340389][ T4277] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.341068][ T4897] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   86.443430][ T4277] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.481892][ T1110] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   86.687228][ T4889] loop3: detected capacity change from 0 to 32768
[   86.721766][ T1110] usb 2-1: Using ep0 maxpacket: 32
[   86.737258][ T4304] Bluetooth: hci6: command 0x1009 tx timeout
[   86.834512][ T4889] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   86.842112][ T1110] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[   86.894726][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.999620][ T1110] usb 2-1: config 0 descriptor??
[   87.054136][ T1110] gspca_main: nw80x-2.14.0 probing 055f:d001
[   87.193432][ T4194] ocfs2: Unmounting device (7,3) on (node local)
[   87.340078][ T4898] chnl_net:caif_netlink_parms(): no params data found
[   87.443607][ T4909] loop2: detected capacity change from 0 to 32768
[   87.553616][ T4909] XFS (loop2): Mounting V5 Filesystem
[   87.654162][ T4898] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.661347][ T4898] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.677383][ T4909] XFS (loop2): Ending clean mount
[   87.691530][ T4909] XFS (loop2): Quotacheck needed: Please wait.
[   87.707752][ T4898] device bridge_slave_0 entered promiscuous mode
[   87.754097][ T4898] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.761184][ T4898] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.775218][ T4898] device bridge_slave_1 entered promiscuous mode
[   87.842075][ T4909] XFS (loop2): Quotacheck: Done.
[   87.890255][ T4898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.944161][ T4898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.959422][   T26] audit: type=1800 audit(1762467354.490:5): pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.218" name="bus" dev="loop2" ino=6148 res=0 errno=0
[   88.035763][ T4898] team0: Port device team_slave_0 added
[   88.097924][ T4898] team0: Port device team_slave_1 added
[   88.162519][ T4898] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.179723][ T4898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.191621][ T4183] XFS (loop2): Unmounting Filesystem
[   88.226922][ T4898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.329236][ T4898] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.337512][ T4898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.365737][ T4898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.531963][ T4898] device hsr_slave_0 entered promiscuous mode
[   88.543000][ T4898] device hsr_slave_1 entered promiscuous mode
[   88.591575][ T4304] usb 2-1: USB disconnect, device number 3
[   88.592024][ T4898] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.623375][ T4898] Cannot create hsr debugfs directory
[   88.651954][ T1110] Bluetooth: hci2: command 0x0409 tx timeout
[   88.756075][ T4277] device hsr_slave_0 left promiscuous mode
[   88.803034][ T4277] device hsr_slave_1 left promiscuous mode
[   88.828556][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.856522][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.886230][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.918920][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.966713][ T4277] device bridge_slave_1 left promiscuous mode
[   88.976963][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.015458][ T4277] device bridge_slave_0 left promiscuous mode
[   89.053009][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.113762][ T4277] device veth1_macvtap left promiscuous mode
[   89.130577][ T4277] device veth0_macvtap left promiscuous mode
[   89.140214][ T4277] device veth1_vlan left promiscuous mode
[   89.173482][ T4277] device veth0_vlan left promiscuous mode
[   89.871199][ T4277] team0 (unregistering): Port device team_slave_1 removed
[   89.889134][ T4277] team0 (unregistering): Port device team_slave_0 removed
[   89.909499][ T4277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   89.938876][ T4277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.089207][ T4277] bond0 (unregistering): Released all slaves
[   90.234549][ T4984] netlink: 'syz.1.229': attribute type 4 has an invalid length.
[   90.301642][ T4985] netlink: 'syz.1.229': attribute type 4 has an invalid length.
[   90.570282][ T4989] loop1: detected capacity change from 0 to 2048
[   90.634148][ T4898] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   90.662706][ T4898] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   90.680489][ T4898] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   90.698823][ T4898] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   90.774374][ T1110] Bluetooth: hci2: command 0x041b tx timeout
[   90.954036][ T4898] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.063218][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   91.106379][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   91.140913][ T4898] 8021q: adding VLAN 0 to HW filter on device team0
[   91.186097][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   91.223033][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   91.305443][  T775] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.312576][  T775] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.378715][ T5025] loop4: detected capacity change from 0 to 256
[   91.382217][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   91.421365][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   91.452416][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   91.473167][ T5025] exfat: Deprecated parameter 'utf8'
[   91.478520][ T5025] exfat: Deprecated parameter 'namecase'
[   91.489669][ T5028] APIC base relocation is unsupported by KVM
[   91.491822][ T5025] exfat: Bad value for 'gid'
[   91.530198][  T775] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.537327][  T775] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.599292][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   91.670979][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   91.722622][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   91.751964][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   91.778804][ T5025] loop4: detected capacity change from 0 to 4096
[   91.793204][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   91.835104][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   91.867541][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   91.894408][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   91.923571][ T4898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   91.965838][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   92.002344][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   92.014672][ T5042] input: syz0 as /devices/virtual/input/input6
[   92.024169][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   92.054665][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   92.065214][ T5042] input: failed to attach handler leds to device input6, error: -6
[   92.463300][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   92.473191][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   92.521630][ T4898] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.653021][   T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   92.811976][ T4196] Bluetooth: hci2: command 0x040f tx timeout
[   93.012083][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.046607][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.057297][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   93.080302][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   93.095946][   T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   93.116478][   T23] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   93.128496][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.168030][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   93.179726][   T23] usb 5-1: config 0 descriptor??
[   93.204038][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   93.244442][ T4898] device veth0_vlan entered promiscuous mode
[   93.258534][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   93.281272][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   93.328340][ T4898] device veth1_vlan entered promiscuous mode
[   93.423086][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   93.445725][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   93.495733][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   93.514645][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   93.541477][ T4898] device veth0_macvtap entered promiscuous mode
[   93.615337][ T4898] device veth1_macvtap entered promiscuous mode
[   93.709134][   T23] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   93.729207][ T4898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.762303][ T4898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.799093][ T4898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.810551][   T23] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   93.833915][ T4898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.879406][ T4898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.919068][ T4898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.950497][ T4898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.978024][ T4898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.005048][ T4898] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.029423][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   94.042649][   T23] usb 5-1: USB disconnect, device number 3
[   94.047624][    T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   94.059321][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   94.065997][ T5113] fido_id[5113]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[   94.094650][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   94.127919][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   94.190422][ T4898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.225327][ T4898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.256268][ T4898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.277244][ T4898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.297670][ T4898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.315055][ T4898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.335280][ T4898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.351762][    T7] usb 3-1: Using ep0 maxpacket: 16
[   94.362015][ T4898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.383263][ T4898] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.409561][ T5102] loop3: detected capacity change from 0 to 32768
[   94.451045][ T5102] XFS (loop3): Mounting V5 Filesystem
[   94.460720][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   94.476564][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   94.491503][ T4898] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.509114][ T4898] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.518961][ T4898] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.528356][ T4898] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.642266][    T7] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[   94.659672][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.669848][    T7] usb 3-1: Product: syz
[   94.674238][    T7] usb 3-1: Manufacturer: syz
[   94.678849][    T7] usb 3-1: SerialNumber: syz
[   94.685295][    T7] usb 3-1: config 0 descriptor??
[   94.707239][ T5102] XFS (loop3): Ending clean mount
[   94.708834][ T5128] loop4: detected capacity change from 0 to 1024
[   94.727937][ T5102] XFS (loop3): Quotacheck needed: Please wait.
[   94.816182][ T4434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.850663][ T4434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.863293][ T5102] XFS (loop3): Quotacheck: Done.
[   94.892347][   T21] Bluetooth: hci2: command 0x0419 tx timeout
[   94.924870][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   94.964004][  T775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.040502][  T775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.112267][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   95.133830][   T26] audit: type=1800 audit(1762467361.670:6): pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.254" name="file1" dev="loop3" ino=6150 res=0 errno=0
[   95.172035][    T7] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[   95.219801][    T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   95.231960][ T4194] XFS (loop3): Unmounting Filesystem
[   95.299521][    T7] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[   95.318483][    T7] usb 3-1: media controller created
[   95.361097][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   95.495028][ T4196] kernel write not supported for file /amidi2 (pid: 4196 comm: kworker/1:4)
[   95.542665][    T7] zl10353_read_register: readreg error (reg=127, ret==0)
[   95.550374][    T7] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[   95.580892][    T7] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[   95.671974][   T21] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[   95.943664][ T5153] dtv5100: wlen = 0, aborting.
[   96.015578][ T5133] loop4: detected capacity change from 0 to 32768
[   96.027256][ T5133] /dev/loop4: Can't open blockdev
[   96.082083][   T21] usb 6-1: unable to get BOS descriptor or descriptor too short
[   96.132056][   T21] usb 6-1: not running at top speed; connect to a high speed hub
[   96.144173][ T4196] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   96.211953][   T21] usb 6-1: config 1 has an invalid interface descriptor of length 5, skipping
[   96.221179][ T4233] usb 3-1: USB disconnect, device number 4
[   96.241279][   T21] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.272294][   T21] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 19
[   96.297587][   T21] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4
[   96.313863][ T4233] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[   96.328820][   T21] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[   96.513453][   T21] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   96.522995][   T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.531019][   T21] usb 6-1: Product: syz
[   96.535569][   T21] usb 6-1: Manufacturer: syz
[   96.540184][   T21] usb 6-1: SerialNumber: syz
[   96.681985][ T4196] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[   96.701820][ T4196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.711946][ T4196] usb 2-1: Product: syz
[   96.716138][ T4196] usb 2-1: Manufacturer: syz
[   96.736507][ T4196] usb 2-1: SerialNumber: syz
[   96.748532][ T4196] usb 2-1: config 0 descriptor??
[   96.793008][ T4196] ch341 2-1:0.0: ch341-uart converter detected
[   96.911991][   T21] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   96.990262][   T21] usb 6-1: USB disconnect, device number 2
[   97.285076][ T4201] udevd[4201]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   98.170098][ T5225] loop5: detected capacity change from 0 to 40427
[   98.210171][ T5228] loop2: detected capacity change from 0 to 32768
[   98.229488][ T4196] usb 2-1: ch341-uart converter now attached to ttyUSB0
[   98.274653][ T5216] ODEBUG: Out of memory. ODEBUG disabled
[   98.429352][ T4855] usb 2-1: USB disconnect, device number 4
[   98.461825][ T4855] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[   98.493881][ T4855] ch341 2-1:0.0: device disconnected
[   98.622811][ T5216] syz.4.273 (5216): drop_caches: 2
[   98.636405][ T5225] F2FS-fs (loop5): build fault injection attr: rate: 684, type: 0x1ffff
[   98.657163][ T5225] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7
[   98.674623][ T5225] F2FS-fs (loop5): invalid crc value
[   98.692092][ T5225] F2FS-fs (loop5): Found nat_bits in checkpoint
[   98.700885][ T5228] XFS (loop2): Mounting V5 Filesystem
[   98.736715][ T5228] XFS (loop2): Ending clean mount
[   98.743342][ T5225] F2FS-fs (loop5): Start checkpoint disabled!
[   98.767680][ T5225] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   98.924046][ T5225] F2FS-fs (loop5) : inject kmalloc in f2fs_kmalloc of __f2fs_setxattr+0x1df/0x10e0
[   98.942505][ T5225] overlayfs: failed to create directory ./bus/index (errno: 12); mounting read-only
[   98.958030][ T5225] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[   99.009866][ T4183] XFS (loop2): Unmounting Filesystem
[   99.106046][ T4898] F2FS-fs (loop5): access invalid blkaddr:4043309056
[   99.123401][ T4898] CPU: 0 PID: 4898 Comm: syz-executor Not tainted syzkaller #0
[   99.130995][ T4898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   99.141089][ T4898] Call Trace:
[   99.144389][ T4898]  <TASK>
[   99.147338][ T4898]  dump_stack_lvl+0x168/0x230
[   99.152042][ T4898]  ? show_regs_print_info+0x20/0x20
[   99.157270][ T4898]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[   99.163093][ T4898]  ? __se_sys_getdents64+0xe5/0x260
[   99.168327][ T4898]  ? unlock_page+0x17c/0x1f0
[   99.172943][ T4898]  f2fs_is_valid_blkaddr+0xc7e/0x1250
[   99.178353][ T4898]  f2fs_map_blocks+0xbd1/0x3330
[   99.183264][ T4898]  ? f2fs_force_buffered_io+0x680/0x680
[   99.188840][ T4898]  ? xa_load+0x286/0x2a0
[   99.193113][ T4898]  f2fs_mpage_readpages+0xc53/0x21f0
[   99.198448][ T4898]  ? dquot_release_reservation_block+0xa0/0xa0
[   99.204638][ T4898]  ? f2fs_is_compress_backend_ready+0x99/0x120
[   99.210818][ T4898]  ? f2fs_readahead+0x163/0x2f0
[   99.215687][ T4898]  ? f2fs_set_data_page_dirty+0xad0/0xad0
[   99.221450][ T4898]  read_pages+0x165/0x920
[   99.225825][ T4898]  ? page_cache_ra_unbounded+0x930/0x930
[   99.231491][ T4898]  ? add_to_page_cache_lru+0x2a8/0x4a0
[   99.236991][ T4898]  page_cache_ra_unbounded+0x830/0x930
[   99.242483][ T4898]  ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[   99.245411][ T5256] loop1: detected capacity change from 0 to 256
[   99.249012][ T4898]  f2fs_readdir+0x471/0xd40
[   99.249090][ T4898]  ? f2fs_fill_dentries+0xce0/0xce0
[   99.249129][ T4898]  ? end_current_label_crit_section+0x14b/0x170
[   99.249155][ T4898]  ? preempt_count_add+0x8d/0x190
[   99.249177][ T4898]  ? down_read_killable+0x1ce/0x340
[   99.249198][ T4898]  ? fsnotify_perm+0x254/0x560
[   99.249224][ T4898]  iterate_dir+0x218/0x560
[   99.249247][ T4898]  ? f2fs_fill_dentries+0xce0/0xce0
[   99.249278][ T4898]  __se_sys_getdents64+0xe5/0x260
[   99.249304][ T4898]  ? __x64_sys_getdents64+0x80/0x80
[   99.249325][ T4898]  ? filldir+0x720/0x720
[   99.249344][ T4898]  ? vtime_user_exit+0x2dc/0x400
[   99.249370][ T4898]  ? lockdep_hardirqs_on+0x94/0x140
[   99.249395][ T4898]  do_syscall_64+0x4c/0xa0
[   99.249412][ T4898]  ? clear_bhb_loop+0x30/0x80
[   99.249431][ T4898]  ? clear_bhb_loop+0x30/0x80
[   99.249450][ T4898]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   99.249476][ T4898] RIP: 0033:0x7f49c6f5b033
[   99.249508][ T4898] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 32 3d f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[   99.249523][ T4898] RSP: 002b:00007fff8567cdf8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   99.249544][ T4898] RAX: ffffffffffffffda RBX: 0000555570a06600 RCX: 00007f49c6f5b033
[   99.249558][ T4898] RDX: 0000000000008000 RSI: 0000555570a06600 RDI: 0000000000000005
[   99.249570][ T4898] RBP: 0000555570a065d4 R08: 0000000000028a41 R09: 0000000000000000
[   99.249581][ T4898] R10: 00007f49c7150cc0 R11: 0000000000000293 R12: ffffffffffffffa8
[   99.404708][ T4898] R13: 0000000000000010 R14: 0000555570a065d0 R15: 00007fff8567f0b0
[   99.412695][ T4898]  </TASK>
[   99.437457][ T4898] attempt to access beyond end of device
[   99.437457][ T4898] loop5: rw=524288, want=45072, limit=40427
[   99.449578][ T4898] attempt to access beyond end of device
[   99.449578][ T4898] loop5: rw=0, want=45072, limit=40427
[   99.906697][ T4434] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.069931][    T9] attempt to access beyond end of device
[  100.069931][    T9] loop5: rw=2049, want=40992, limit=40427
[  100.085187][ T4434] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.183598][ T4434] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.289820][ T4434] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.392858][ T5298] MPTCP: kernel_bind error, err=-99
[  100.743653][ T4856] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  100.896869][ T5318] syz.4.298 uses obsolete (PF_INET,SOCK_PACKET)
[  101.071808][ T4856] usb 2-1: Using ep0 maxpacket: 32
[  101.202046][ T4856] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  101.214678][ T4856] usb 2-1: config 0 has no interface number 0
[  101.237002][ T4856] usb 2-1: config 0 interface 12 has no altsetting 0
[  101.446811][ T4856] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  101.466848][ T4856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.475231][ T4856] usb 2-1: Product: syz
[  101.479485][ T4856] usb 2-1: Manufacturer: syz
[  101.485170][ T4856] usb 2-1: SerialNumber: syz
[  101.502921][ T4856] usb 2-1: config 0 descriptor??
[  101.531033][ T5325] chnl_net:caif_netlink_parms(): no params data found
[  101.620436][ T4434] device hsr_slave_0 left promiscuous mode
[  101.625283][ T5323] loop4: detected capacity change from 0 to 32768
[  101.643212][ T5323] /dev/loop4: Can't open blockdev
[  101.650030][ T4434] device hsr_slave_1 left promiscuous mode
[  101.657722][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.670446][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.702853][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.721963][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.738837][ T4434] device bridge_slave_1 left promiscuous mode
[  101.746456][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.761547][ T4434] device bridge_slave_0 left promiscuous mode
[  101.768028][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.779641][ T4434] device veth1_macvtap left promiscuous mode
[  101.785967][ T4434] device veth0_macvtap left promiscuous mode
[  101.792753][ T4434] device veth1_vlan left promiscuous mode
[  101.798709][ T4434] device veth0_vlan left promiscuous mode
[  102.002604][ T4196] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  102.003726][ T4434] team0 (unregistering): Port device team_slave_1 removed
[  102.026060][ T4434] team0 (unregistering): Port device team_slave_0 removed
[  102.038596][ T4434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.052761][ T4434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.120586][ T4434] bond0 (unregistering): Released all slaves
[  102.365838][ T4196] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  102.387974][ T5325] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.397646][ T4196] usb 5-1: config 0 has no interface number 0
[  102.411926][ T5325] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.437369][ T5325] device bridge_slave_0 entered promiscuous mode
[  102.486359][ T5325] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.532013][ T5325] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.557773][ T5325] device bridge_slave_1 entered promiscuous mode
[  102.574988][ T4196] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  102.609817][ T4196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.637946][ T4196] usb 5-1: Product: syz
[  102.651040][ T4196] usb 5-1: Manufacturer: syz
[  102.667262][ T4196] usb 5-1: SerialNumber: syz
[  102.693628][ T4196] usb 5-1: config 0 descriptor??
[  102.736573][ T5325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.737512][ T5354] loop2: detected capacity change from 0 to 32768
[  102.778273][ T5325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.800809][ T5354] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.302 (5354)
[  102.818907][ T5354] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  102.827940][ T5354] BTRFS info (device loop2): enabling ssd optimizations
[  102.835637][ T5354] BTRFS info (device loop2): using spread ssd allocation scheme
[  102.843350][ T5354] BTRFS info (device loop2): setting nodatacow, compression disabled
[  102.851440][ T5354] BTRFS info (device loop2): not using ssd optimizations
[  102.858537][ T5354] BTRFS info (device loop2): not using spread ssd allocation scheme
[  102.866677][ T5354] BTRFS info (device loop2): max_inline at 0
[  102.872720][ T5354] BTRFS info (device loop2): using free space tree
[  102.879230][ T5354] BTRFS info (device loop2): has skinny extents
[  102.934400][ T5325] team0: Port device team_slave_0 added
[  102.942509][ T4196] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  102.947536][ T5325] team0: Port device team_slave_1 added
[  102.970786][ T4196] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  102.991519][ T4196] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  103.016687][ T5325] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.029502][ T5325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.031780][ T4196] usb 5-1: media controller created
[  103.061026][ T5325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.102006][ T4196] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  103.121119][ T5325] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.132261][ T4304] Bluetooth: hci2: command 0x0409 tx timeout
[  103.142366][ T5325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.188669][ T5325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.222946][ T4196] i2c i2c-1: ec100: i2c rd failed=-32 reg=33
[  103.346524][ T5325] device hsr_slave_0 entered promiscuous mode
[  103.363592][ T5325] device hsr_slave_1 entered promiscuous mode
[  103.371410][ T5325] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  103.379488][ T4856] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71
[  103.388214][ T4856] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  103.395834][ T5325] Cannot create hsr debugfs directory
[  103.401320][ T4856] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  103.414796][ T4856] f81534: probe of 2-1:0.12 failed with error -71
[  103.447180][ T4856] usb 2-1: USB disconnect, device number 5
[  103.896415][ T5325] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  104.060697][ T5325] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  104.073011][ T5390] Process accounting resumed
[  104.158456][ T5325] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  104.196744][ T5325] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  104.306341][ T5418] 9pnet: p9_errstr2errno: server reported unknown error �@c�F	S+�ing���#
[  104.367251][ T4196] usb 5-1: USB disconnect, device number 4
[  104.482457][ T5325] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.539276][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  104.557904][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  104.580177][ T5325] 8021q: adding VLAN 0 to HW filter on device team0
[  104.595633][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  104.618627][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  104.637784][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.644935][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.687280][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  104.702362][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  104.723199][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  104.757841][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.764997][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.805525][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  104.829351][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  104.868002][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  104.892173][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  104.911029][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  104.948562][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  104.988943][ T5325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  105.073449][ T5325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  105.104262][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  105.112826][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  105.133520][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  105.143744][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  105.174283][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  105.211910][ T1110] Bluetooth: hci2: command 0x041b tx timeout
[  105.223815][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  105.627093][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.641877][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.674189][ T5325] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.206893][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  106.231396][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  106.303018][ T5325] device veth0_vlan entered promiscuous mode
[  106.331237][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  106.349615][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  106.387929][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  106.425650][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  106.473749][ T5325] device veth1_vlan entered promiscuous mode
[  106.507367][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  106.538999][ T5459] syz.2.312 (5459): drop_caches: 2
[  106.562535][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  106.580569][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  106.602711][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  106.614553][ T5325] device veth0_macvtap entered promiscuous mode
[  106.632332][ T5325] device veth1_macvtap entered promiscuous mode
[  106.645479][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  106.662058][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  106.694016][ T5325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.723376][ T5325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.751785][ T5325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.768851][ T5486] loop2: detected capacity change from 0 to 8192
[  106.775312][ T5325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.785469][ T5325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.801345][ T5325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.815184][ T5325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.828434][ T5325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.841347][ T5325] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.853001][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.874090][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.891501][ T5325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.903137][ T5486] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  106.918596][ T5486] REISERFS (device loop2): using ordered data mode
[  106.925263][ T5486] reiserfs: using flush barriers
[  106.938883][ T5486] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  106.944374][ T5325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.957179][ T5486] REISERFS (device loop2): checking transaction log (loop2)
[  106.986318][ T5486] REISERFS (device loop2): Using r5 hash to sort names
[  106.994164][ T5486] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  107.029444][ T5486] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3633, free_space(entry_count) 2
[  107.046129][ T5486] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  107.057073][ T5486] REISERFS (device loop2): Remounting filesystem read-only
[  107.061934][ T5325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.094096][ T5493] loop4: detected capacity change from 0 to 4096
[  107.106905][ T5325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.117075][ T5325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.127762][ T5325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.139050][ T5325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.149824][ T5325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.161260][ T5325] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.180358][ T5325] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.189214][ T5325] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.200614][ T5325] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.218190][ T5325] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.231194][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  107.244010][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  107.282899][ T5493] /dev/loop4: Can't open blockdev
[  107.292623][ T5390] Bluetooth: hci2: command 0x040f tx timeout
[  107.455152][ T4434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.481654][ T4434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.544366][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  107.568795][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.627373][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.673479][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  107.864651][ T5390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  107.923393][ T5519] loop1: detected capacity change from 0 to 1024
[  107.939528][ T5390] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  108.131813][ T5519] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  108.418667][ T5538] loop2: detected capacity change from 0 to 4096
[  108.509829][ T5543] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  108.628764][   T26] audit: type=1800 audit(1762467375.160:7): pid=5538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.327" name="file1" dev="loop2" ino=15 res=0 errno=0
[  108.702595][   T26] audit: type=1800 audit(1762467375.180:8): pid=5547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.327" name="file1" dev="loop2" ino=15 res=0 errno=0
[  109.341981][ T4855] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  109.372017][ T1110] Bluetooth: hci2: command 0x0419 tx timeout
[  109.757397][ T5593] loop6: detected capacity change from 0 to 2048
[  109.764474][ T4855] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.779434][ T4855] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  109.799783][ T4855] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  109.819231][ T4855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.834318][ T4855] usb 5-1: config 0 descriptor??
[  109.883683][ T4855] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  109.890746][ T4855] dvb-usb: bulk message failed: -22 (3/0)
[  109.937569][ T4855] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  109.992041][ T4855] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  110.000009][ T4855] usb 5-1: media controller created
[  110.005980][ T4233] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  110.042959][ T4855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  110.092100][ T4855] dvb-usb: bulk message failed: -22 (6/0)
[  110.109095][ T5557] dibusb: i2c wr: len=61 is too big!
[  110.109095][ T5557] 
[  110.117056][ T4855] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  110.173810][ T4855] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8
[  110.212125][ T4855] dvb-usb: schedule remote query interval to 150 msecs.
[  110.235246][ T5603] loop6: detected capacity change from 0 to 4096
[  110.241797][ T4855] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  110.266792][ T4855] usb 5-1: USB disconnect, device number 5
[  110.316247][ T4855] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  110.317007][ T5601] loop1: detected capacity change from 0 to 8192
[  110.331823][ T4233] usb 3-1: Using ep0 maxpacket: 32
[  110.371312][ T5609] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.394594][   T26] audit: type=1800 audit(1762467376.920:9): pid=5603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.340" name="file1" dev="loop6" ino=15 res=0 errno=0
[  110.440048][ T5601] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  110.452806][   T26] audit: type=1800 audit(1762467376.960:10): pid=5603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.340" name="file1" dev="loop6" ino=15 res=0 errno=0
[  110.475797][ T5601] REISERFS (device loop1): using ordered data mode
[  110.506901][ T5601] reiserfs: using flush barriers
[  110.521797][ T5601] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  110.532179][ T4233] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  110.542395][ T5601] REISERFS (device loop1): checking transaction log (loop1)
[  110.569688][ T5601] REISERFS (device loop1): Using r5 hash to sort names
[  110.587391][ T5601] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  110.619897][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.653974][ T4233] usb 3-1: config 0 descriptor??
[  110.689094][ T5601] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3633, free_space(entry_count) 2
[  110.713911][ T4233] gspca_main: nw80x-2.14.0 probing 055f:d001
[  110.731384][ T5601] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  110.752457][ T5601] REISERFS (device loop1): Remounting filesystem read-only
[  110.895044][ T4855] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  110.954152][ T4855] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  111.632113][ T4434] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.734397][ T4434] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.795479][ T4434] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.855203][ T5648] chnl_net:caif_netlink_parms(): no params data found
[  111.935132][ T4434] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.284937][ T4233] usb 3-1: USB disconnect, device number 5
[  112.305512][ T5685] loop6: detected capacity change from 0 to 256
[  112.365180][ T5685] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  112.389303][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.447390][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.475716][ T5648] device bridge_slave_0 entered promiscuous mode
[  112.542894][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.570441][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.589554][ T5648] device bridge_slave_1 entered promiscuous mode
[  112.648696][ T5648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.661409][ T5648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.755157][ T5648] team0: Port device team_slave_0 added
[  112.774109][ T5648] team0: Port device team_slave_1 added
[  112.817305][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.824570][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.861020][ T5648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.872175][ T4196] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  112.908866][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.916788][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.943635][ T5648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.984712][ T5648] device hsr_slave_0 entered promiscuous mode
[  112.999219][ T5648] device hsr_slave_1 entered promiscuous mode
[  113.006407][ T5648] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  113.020808][ T5648] Cannot create hsr debugfs directory
[  113.251422][ T5716] loop4: detected capacity change from 0 to 4096
[  113.258050][ T5648] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  113.267895][ T5648] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  113.293106][ T5648] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  113.301954][ T4196] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.322273][ T5648] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  113.328482][ T4196] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  113.395241][ T4196] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  113.427889][ T4196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.458228][ T4196] usb 2-1: config 0 descriptor??
[  113.503791][ T4196] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  113.527702][ T4196] dvb-usb: bulk message failed: -22 (3/0)
[  113.579078][ T4196] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  113.589784][ T5389] Bluetooth: hci4: command 0x0409 tx timeout
[  113.613412][ T4196] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  113.620491][ T4196] usb 2-1: media controller created
[  113.633515][ T4196] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  113.649742][ T4196] dvb-usb: bulk message failed: -22 (6/0)
[  113.669810][ T4196] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  113.706421][ T5693] dibusb: i2c wr: len=61 is too big!
[  113.706421][ T5693] 
[  113.715525][ T4196] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9
[  113.751996][ T1110] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  113.769966][ T4196] dvb-usb: schedule remote query interval to 150 msecs.
[  113.779166][ T5648] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.787810][ T4196] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  113.819560][ T4196] usb 2-1: USB disconnect, device number 6
[  113.827445][ T5648] 8021q: adding VLAN 0 to HW filter on device team0
[  113.838058][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  113.858206][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  113.880528][ T4196] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  113.914829][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  113.926875][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  113.935885][ T5030] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.943084][ T5030] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.987068][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  113.998529][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  114.008264][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  114.024705][ T5030] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.031934][ T5030] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.040018][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  114.067720][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  114.076956][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  114.087693][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  114.098767][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  114.139411][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  114.150119][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  114.181876][ T1110] usb 3-1: unable to get BOS descriptor or descriptor too short
[  114.186478][ T5648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  114.205419][ T5648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  114.221286][ T4434] device hsr_slave_0 left promiscuous mode
[  114.228192][ T4434] device hsr_slave_1 left promiscuous mode
[  114.235695][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.243624][ T1110] usb 3-1: not running at top speed; connect to a high speed hub
[  114.247399][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.259284][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.266819][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.275925][ T4434] device bridge_slave_1 left promiscuous mode
[  114.282479][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.290539][ T4434] device bridge_slave_0 left promiscuous mode
[  114.296887][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.312065][ T4434] device veth1_macvtap left promiscuous mode
[  114.318099][ T4434] device veth0_macvtap left promiscuous mode
[  114.324362][ T1110] usb 3-1: config 1 has an invalid interface descriptor of length 5, skipping
[  114.366194][ T1110] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.391648][ T4434] device veth1_vlan left promiscuous mode
[  114.397795][ T1110] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 19
[  114.425621][ T4434] device veth0_vlan left promiscuous mode
[  114.434619][ T5756] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  114.443204][ T1110] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4
[  114.453898][ T5756] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  114.459581][ T1110] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  114.489207][ T5765] loop4: detected capacity change from 0 to 2048
[  114.632180][ T1110] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  114.646998][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.691285][ T1110] usb 3-1: Product: syz
[  114.698809][ T1110] usb 3-1: Manufacturer: syz
[  114.707492][ T1110] usb 3-1: SerialNumber: syz
[  114.881839][ T4196] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  114.882940][ T4434] team0 (unregistering): Port device team_slave_1 removed
[  114.905271][ T4434] team0 (unregistering): Port device team_slave_0 removed
[  114.922455][ T4434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.938430][ T4434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.009134][ T4434] bond0 (unregistering): Released all slaves
[  115.066200][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  115.074906][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  115.082012][ T1110] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  115.084597][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  115.098259][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  115.129094][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  115.167499][ T1110] usb 3-1: USB disconnect, device number 6
[  115.252058][ T4196] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  115.292059][ T4196] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  115.321374][ T4196] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  115.336115][ T4196] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.496651][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  115.511329][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  115.557279][ T5648] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.561058][ T5790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'.
[  115.619540][ T4196] usb 7-1: usb_control_msg returned -32
[  115.640063][ T4196] usbtmc 7-1:16.0: can't read capabilities
[  115.674429][ T4196] Bluetooth: hci4: command 0x041b tx timeout
[  115.766496][ T5801] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  115.963148][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  115.988723][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  116.034092][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  116.060016][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  116.102647][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  116.110569][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  116.138353][ T5648] device veth0_vlan entered promiscuous mode
[  116.165787][ T5648] device veth1_vlan entered promiscuous mode
[  116.220097][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  116.249642][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  116.304080][ T5648] device veth0_macvtap entered promiscuous mode
[  116.342661][ T5648] device veth1_macvtap entered promiscuous mode
[  116.431255][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.461988][ T5824] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  116.470685][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.482636][ T5824] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  116.491323][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.502703][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.513874][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.526519][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.548971][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.573308][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.596170][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.632980][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  116.641151][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  116.671792][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  116.697340][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  116.740932][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.760645][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.792428][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.843742][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.889257][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.912431][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.947220][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.997255][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.028934][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.732244][ T4240] usb 7-1: USB disconnect, device number 2
[  117.772097][ T5390] Bluetooth: hci4: command 0x040f tx timeout
[  117.866670][ T5865] loop1: detected capacity change from 0 to 512
[  117.899254][ T5865] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  117.967783][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.977144][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.049840][ T5865] EXT4-fs (loop1): 1 orphan inode deleted
[  118.055987][ T5865] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  118.068595][ T5865] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.239894][ T5865] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #4: block 41: comm syz.1.380: lblock 2 mapped to illegal pblock 41 (length 1)
[  118.307577][ T5865] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  118.331904][ T5865] EXT4-fs error (device loop1): ext4_write_dquot:6189: comm syz.1.380: Failed to commit dquot type 1
[  118.348014][ T5865] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.380: Invalid inode table block 34 in block_group 0
[  118.366829][ T5865] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5850: Corrupt filesystem
[  118.378254][ T5865] EXT4-fs error (device loop1): ext4_dirty_inode:6054: inode #16: comm syz.1.380: mark_inode_dirty error
[  118.391471][ T5865] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.380: Invalid block bitmap block 2 in block_group 0
[  118.408819][ T5865] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #4: block 41: comm syz.1.380: lblock 2 mapped to illegal pblock 41 (length 1)
[  118.424465][ T5865] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  118.434150][ T5865] EXT4-fs error (device loop1): ext4_write_dquot:6189: comm syz.1.380: Failed to commit dquot type 1
[  118.445753][ T5865] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.380: Invalid inode table block 34 in block_group 0
[  118.458922][ T5865] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5850: Corrupt filesystem
[  118.866051][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.917394][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.163297][ T5873] loop6: detected capacity change from 0 to 8192
[  119.189697][ T5873] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  119.513729][ T5840] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.523532][ T5840] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.533135][ T5840] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.544543][ T5840] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.672515][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  119.681173][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  119.713893][ T5648] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.723312][ T5648] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.738202][ T5648] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.748660][ T5648] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.851943][ T2305] Bluetooth: hci4: command 0x0419 tx timeout
[  119.926927][ T5884] loop2: detected capacity change from 0 to 8192
[  119.966744][ T1247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.989499][ T5884] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  119.995392][ T1247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.022552][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.030752][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.043655][ T5884] REISERFS (device loop2): using ordered data mode
[  120.043763][    T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  120.050896][ T5884] reiserfs: using flush barriers
[  120.067230][ T5884] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  120.091660][ T5884] REISERFS (device loop2): checking transaction log (loop2)
[  120.115266][ T5884] REISERFS (device loop2): Using r5 hash to sort names
[  120.129212][ T5884] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  120.130477][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  120.232299][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  120.453644][    T7] usb 5-1: Using ep0 maxpacket: 32
[  120.509862][ T5895] loop6: detected capacity change from 0 to 2048
[  120.598761][    T7] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  120.629598][ T5895] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  120.641279][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.692046][ T5895] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  120.703601][    T7] usb 5-1: config 0 descriptor??
[  120.753954][    T7] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  120.771903][ T5895] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  120.779661][ T5895] UDF-fs: Scanning with blocksize 512 failed
[  120.855936][ T5895] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  120.885627][ T4434] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.918297][   T26] audit: type=1800 audit(1762467387.450:11): pid=5895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.391" name="file1" dev="loop6" ino=838 res=0 errno=0
[  120.964219][ T4434] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.106526][ T4434] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.230931][ T4434] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.310557][ T5910] chnl_net:caif_netlink_parms(): no params data found
[  121.340148][ T5926] loop6: detected capacity change from 0 to 128
[  121.472243][ T5931] loop2: detected capacity change from 0 to 2048
[  121.506040][ T5926] VFS: Found a Xenix FS (block size = 512) on device loop6
[  121.619220][ T5926] sysv_free_block: trying to free block not in datazone
[  121.637566][ T5931] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.653981][ T5926] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  121.669662][ T5929] loop7: detected capacity change from 0 to 32768
[  121.728141][ T5929] (syz.7.398,5929,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  121.754904][ T5929] (syz.7.398,5929,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  121.793343][ T5937] loop6: detected capacity change from 0 to 2048
[  121.815372][ T5929] JBD2: Ignoring recovery information on journal
[  121.888598][ T5929] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  121.920221][ T5937] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.964329][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.971579][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.006424][ T5910] device bridge_slave_0 entered promiscuous mode
[  122.039861][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.089917][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.104732][ T5910] device bridge_slave_1 entered promiscuous mode
[  122.148620][ T5648] ocfs2: Unmounting device (7,7) on (node local)
[  122.334046][    T7] gspca_vc032x: reg_w err -71
[  122.338775][    T7] gspca_vc032x: I2c Bus Busy Wait 00
[  122.371744][    T7] gspca_vc032x: I2c Bus Busy Wait 00
[  122.377068][    T7] gspca_vc032x: I2c Bus Busy Wait 00
[  122.421085][    T7] gspca_vc032x: I2c Bus Busy Wait 00
[  122.427028][    T7] gspca_vc032x: I2c Bus Busy Wait 00
[  122.432366][    T7] gspca_vc032x: I2c Bus Busy Wait 00
[  122.437663][    T7] gspca_vc032x: I2c Bus Busy Wait 00
[  122.461741][    T7] gspca_vc032x: I2c Bus Busy Wait 00
[  122.467062][    T7] gspca_vc032x: I2c Bus Busy Wait 00
[  122.485850][    T7] gspca_vc032x: I2c Bus Busy Wait 00
[  122.497974][    T7] gspca_vc032x: I2c Bus Busy Wait 00
[  122.511307][    T7] gspca_vc032x: I2c Bus Busy Wait 00
[  122.526594][    T7] gspca_vc032x: I2c Bus Busy Wait 00
[  122.544238][    T7] gspca_vc032x: I2c Bus Busy Wait 00
[  122.569691][    T7] gspca_vc032x: I2c Bus Busy Wait 00
[  122.584392][    T7] gspca_vc032x: I2c Bus Busy Wait 00
[  122.606133][    T7] gspca_vc032x: I2c Bus Busy Wait 00
[  122.616205][    T7] gspca_vc032x: I2c Bus Busy Wait 00
[  122.621912][    T7] gspca_vc032x: Unknown sensor...
[  122.627058][    T7] vc032x: probe of 5-1:0.0 failed with error -22
[  122.643397][    T7] usb 5-1: USB disconnect, device number 6
[  122.664561][ T5910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.704693][ T5910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.823633][ T5910] team0: Port device team_slave_0 added
[  122.843634][ T5910] team0: Port device team_slave_1 added
[  122.875903][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.899983][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.948698][ T5910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.980526][    T7] Bluetooth: hci1: command 0x0409 tx timeout
[  123.012224][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.019596][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.069134][ T5910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.323648][ T5910] device hsr_slave_0 entered promiscuous mode
[  123.360304][ T5910] device hsr_slave_1 entered promiscuous mode
[  123.384706][ T5910] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  123.394882][ T5910] Cannot create hsr debugfs directory
[  123.760698][ T6003] syz.7.417[6003] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  123.760840][ T6003] syz.7.417[6003] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  123.818643][ T6005] loop2: detected capacity change from 0 to 128
[  123.892620][ T4434] device hsr_slave_0 left promiscuous mode
[  123.917557][ T4434] device hsr_slave_1 left promiscuous mode
[  123.936564][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.954528][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.010274][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.019035][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.032288][ T4434] device bridge_slave_1 left promiscuous mode
[  124.038586][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.045891][ T6005] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  124.066493][ T4434] device bridge_slave_0 left promiscuous mode
[  124.081537][ T6005] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  124.103664][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.112757][ T6011] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  124.123034][ T6011] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  124.156744][ T4434] device veth1_macvtap left promiscuous mode
[  124.165355][ T4434] device veth0_macvtap left promiscuous mode
[  124.171443][ T4434] device veth1_vlan left promiscuous mode
[  124.178639][ T4434] device veth0_vlan left promiscuous mode
[  124.252711][ T6005] EXT4-fs (loop2): shut down requested (1)
[  124.610660][ T6039] loop2: detected capacity change from 0 to 512
[  124.671159][ T6039] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  124.701116][   T26] audit: type=1800 audit(1762467391.230:12): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.427" name="bus" dev="loop2" ino=18 res=0 errno=0
[  124.750831][ T4434] team0 (unregistering): Port device team_slave_1 removed
[  124.767173][ T4434] team0 (unregistering): Port device team_slave_0 removed
[  124.786429][ T4183] Trying to write to read-only block-device loop2
[  124.793365][ T4183] Trying to write to read-only block-device loop2
[  124.793542][ T4434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  124.799924][ T4183] Trying to write to read-only block-device loop2
[  124.815851][ T4183] Trying to write to read-only block-device loop2
[  124.823973][ T4856] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  124.831892][ T4183] Trying to write to read-only block-device loop2
[  124.838502][ T4183] Trying to write to read-only block-device loop2
[  124.838611][ T4434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  124.847385][ T4183] Trying to write to read-only block-device loop2
[  124.860186][ T4183] Trying to write to read-only block-device loop2
[  124.885885][ T4183] Trying to write to read-only block-device loop2
[  124.899236][ T6040] Trying to write to read-only block-device loop2
[  124.947103][ T4434] bond0 (unregistering): Released all slaves
[  125.052465][ T4240] Bluetooth: hci1: command 0x041b tx timeout
[  125.161024][ T5910] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  125.236221][ T6047] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-61)
[  125.253063][ T5910] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  125.267239][ T4856] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  125.279914][ T4856] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  125.298371][ T4856] usb 5-1: config 0 interface 0 has no altsetting 0
[  125.310028][ T4856] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  125.326103][ T4856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.344817][ T4856] usb 5-1: config 0 descriptor??
[  125.381945][ T6037] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  125.392221][ T5910] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  125.415199][ T5910] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  125.717919][ T5910] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.790746][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  125.808255][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  125.830692][ T5910] 8021q: adding VLAN 0 to HW filter on device team0
[  125.848073][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  125.858181][ T4856] logitech 0003:046D:C24F.0004: unbalanced collection at end of report description
[  125.882578][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  125.892442][ T4856] logitech 0003:046D:C24F.0004: parse failed
[  125.898508][ T4856] logitech: probe of 0003:046D:C24F.0004 failed with error -22
[  125.906716][  T775] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.913819][  T775] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.952377][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  125.980273][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  126.002532][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  126.022107][  T775] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.025257][ T4196] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  126.029190][  T775] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.066555][ T1110] usb 5-1: USB disconnect, device number 7
[  126.078583][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  126.157594][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  126.179046][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  126.210085][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  126.239526][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  126.266118][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  126.308304][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  126.323107][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  126.342025][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  126.366838][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  126.390017][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  126.401860][ T4196] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  126.412555][ T5910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  126.562033][ T4196] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  126.587514][ T4196] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.632553][ T4196] usb 7-1: Product: syz
[  126.645691][ T4196] usb 7-1: Manufacturer: syz
[  126.658246][ T4196] usb 7-1: SerialNumber: syz
[  126.666034][ T6101] loop4: detected capacity change from 0 to 128
[  126.681032][ T4196] usb 7-1: config 0 descriptor??
[  126.800331][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  126.819666][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  126.851551][ T6102] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  126.869137][ T5910] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.900511][ T6102] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  127.132284][    T7] Bluetooth: hci1: command 0x040f tx timeout
[  127.241399][    T7] usb 7-1: USB disconnect, device number 3
[  127.641155][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  127.650420][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  127.688598][ T6139] loop7: detected capacity change from 0 to 512
[  127.731124][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  127.744682][ T6139] EXT4-fs (loop7): Ignoring removed oldalloc option
[  127.760894][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  127.788936][ T5910] device veth0_vlan entered promiscuous mode
[  127.810502][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  127.824239][ T6139] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  127.839493][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  127.872479][ T5910] device veth1_vlan entered promiscuous mode
[  127.878924][ T6139] EXT4-fs (loop7): 1 truncate cleaned up
[  127.901627][ T6139] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv1,oldalloc,barrier=0x0000000000000003,errors=continue,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  127.989852][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  128.018730][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  128.061090][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  128.086904][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  128.144289][ T5910] device veth0_macvtap entered promiscuous mode
[  128.176809][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  128.195486][ T5910] device veth1_macvtap entered promiscuous mode
[  128.270392][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.312191][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.350366][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.387922][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.461709][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.508637][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.537769][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.542271][ T5648] EXT4-fs error (device loop7): mb_free_blocks:1860: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[  128.587955][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  128.598039][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  129.299365][ T4856] Bluetooth: hci1: command 0x0419 tx timeout
[  129.307849][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.333195][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.343109][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.365420][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.387370][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.399485][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.411217][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.433429][ T6169] chnl_net:caif_netlink_parms(): no params data found
[  129.445019][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  129.457270][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  129.471278][ T5910] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.480353][ T5910] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.490891][ T5910] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.499882][ T5910] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.714958][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.719611][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.730521][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.738822][ T6169] device bridge_slave_0 entered promiscuous mode
[  129.747558][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.759039][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.763220][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.768119][ T6169] device bridge_slave_1 entered promiscuous mode
[  129.861292][ T6169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.919112][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  129.943826][ T6169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.995075][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.027536][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.094747][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  130.127063][ T6169] team0: Port device team_slave_0 added
[  130.145132][ T6196] loop6: detected capacity change from 0 to 512
[  130.181461][ T6169] team0: Port device team_slave_1 added
[  130.245098][ T6196] EXT4-fs (loop6): Ignoring removed nobh option
[  130.251596][ T6196] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  130.341348][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.365062][ T6206] fuse: Bad value for 'fd'
[  130.365119][ T6196] EXT4-fs (loop6): 1 truncate cleaned up
[  130.376609][ T6196] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none.
[  130.422146][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.550159][ T6169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.603627][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.610684][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.705598][ T6169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.809494][ T4434] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.820135][ T5390] Bluetooth: hci0: command 0x0409 tx timeout
[  130.864132][ T6169] device hsr_slave_0 entered promiscuous mode
[  130.884922][ T6169] device hsr_slave_1 entered promiscuous mode
[  130.911456][ T6169] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.951865][ T6169] Cannot create hsr debugfs directory
[  131.533963][ T6222] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.541411][ T6222] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.689355][ T6242] loop8: detected capacity change from 0 to 40427
[  131.717484][ T6242] F2FS-fs (loop8): build fault injection attr: rate: 694, type: 0x1ffff
[  131.755046][ T6242] F2FS-fs (loop8): invalid crc value
[  131.764336][ T6242] F2FS-fs (loop8): Found nat_bits in checkpoint
[  131.821502][ T6242] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  131.853613][ T6242] F2FS-fs (loop8) : inject dquot initialize in f2fs_dquot_initialize of f2fs_mknod+0x13e/0x4f0
[  131.908889][ T5910] attempt to access beyond end of device
[  131.908889][ T5910] loop8: rw=2049, want=45128, limit=40427
[  132.215421][ T6251] netlink: 14 bytes leftover after parsing attributes in process `syz.6.476'.
[  132.478024][ T6222] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.565209][ T6222] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.585237][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.591561][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.891987][ T5389] Bluetooth: hci0: command 0x041b tx timeout
[  133.187564][ T6222] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.196586][ T6222] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.206102][ T6222] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.215828][ T6222] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.376228][ T4434] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.477511][ T4434] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.601762][ T6275] 9pnet: p9_errstr2errno: server reported unknown error ��00000000000000000000004
[  133.626515][ T4434] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.670479][ T6279] netlink: 'syz.6.482': attribute type 1 has an invalid length.
[  133.959620][ T6169] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  134.025160][ T6169] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  134.058707][ T6169] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  134.122135][ T6169] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  134.234394][ T6272] loop7: detected capacity change from 0 to 32768
[  134.260937][ T6272] XFS (loop7): Mounting V5 Filesystem
[  134.325858][ T6169] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.375168][ T6272] XFS (loop7): Ending clean mount
[  134.387378][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  134.408554][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  134.535926][ T6169] 8021q: adding VLAN 0 to HW filter on device team0
[  134.579470][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  134.588981][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  134.622792][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.629972][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.679979][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  134.709135][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  134.738187][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.745483][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.787971][ T5648] XFS (loop7): Unmounting Filesystem
[  134.821334][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  134.836873][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  134.883193][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  134.912950][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  134.957344][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  134.966507][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  134.971885][ T2305] Bluetooth: hci0: command 0x040f tx timeout
[  134.976195][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  135.047132][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  135.059751][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  135.076021][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  135.096970][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  135.129013][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  135.164985][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  135.237531][ T6341] device syzkaller1 entered promiscuous mode
[  135.607077][ T4434] device hsr_slave_0 left promiscuous mode
[  135.625040][ T4434] device hsr_slave_1 left promiscuous mode
[  135.646849][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.701809][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.715275][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.730085][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.740313][ T4434] device bridge_slave_1 left promiscuous mode
[  135.777557][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.823252][ T4434] device bridge_slave_0 left promiscuous mode
[  135.829578][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.879532][ T4434] device veth1_macvtap left promiscuous mode
[  135.899070][ T4434] device veth0_macvtap left promiscuous mode
[  135.948646][ T4434] device veth1_vlan left promiscuous mode
[  135.981292][ T4434] device veth0_vlan left promiscuous mode
[  136.486395][ T4434] team0 (unregistering): Port device team_slave_1 removed
[  136.512622][ T6384] loop7: detected capacity change from 0 to 32768
[  136.521061][ T4434] team0 (unregistering): Port device team_slave_0 removed
[  136.536671][ T4434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.557331][ T4434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.571980][ T2305] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  136.598333][ T6384] XFS (loop7): Mounting V5 Filesystem
[  136.654858][ T4434] bond0 (unregistering): Released all slaves
[  136.679452][ T6384] XFS (loop7): Ending clean mount
[  136.687353][ T6384] XFS (loop7): Quotacheck needed: Please wait.
[  136.741583][ T6384] XFS (loop7): Quotacheck: Done.
[  136.780403][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  136.792541][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  136.804451][ T6169] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.958709][ T2305] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  136.968500][ T2305] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.014346][ T5648] XFS (loop7): Unmounting Filesystem
[  137.017667][ T2305] usb 7-1: config 0 descriptor??
[  137.062825][ T5389] Bluetooth: hci0: command 0x0419 tx timeout
[  137.410337][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  137.430080][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  137.507321][ T6169] device veth0_vlan entered promiscuous mode
[  137.546135][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  137.588695][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  137.619002][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  137.653346][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  137.700414][ T6169] device veth1_vlan entered promiscuous mode
[  137.719634][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  137.797229][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  137.822411][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  137.853978][ T6169] device veth0_macvtap entered promiscuous mode
[  137.935893][ T6169] device veth1_macvtap entered promiscuous mode
[  137.988641][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.027481][ T6448] loop7: detected capacity change from 0 to 128
[  138.029618][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.051730][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.071699][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.103067][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.167461][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  138.195275][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  138.227988][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  138.266642][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  138.310504][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.341324][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.364388][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.396841][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.428887][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.461126][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  138.475442][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  138.497112][ T6169] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.516351][ T6169] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.535457][ T6169] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.551726][ T6169] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.631829][ T2305] usb 7-1: Cannot set autoneg
[  138.637559][ T2305] MOSCHIP usb-ethernet driver: probe of 7-1:0.0 failed with error -71
[  138.710765][ T2305] usb 7-1: USB disconnect, device number 4
[  138.712411][ T6429] chnl_net:caif_netlink_parms(): no params data found
[  138.863277][  T775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.891777][  T775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.963002][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  139.073534][ T6429] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.100954][ T6429] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.120710][ T6429] device bridge_slave_0 entered promiscuous mode
[  139.152887][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.164073][ T6429] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.181378][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.236795][ T6429] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.265761][ T6429] device bridge_slave_1 entered promiscuous mode
[  139.308434][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  139.393640][ T6429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.434135][ T6429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.573184][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.525'.
[  139.576463][ T6485] input: syz0 as /devices/virtual/input/input10
[  139.619656][ T6429] team0: Port device team_slave_0 added
[  139.627286][ T5398] Bluetooth: hci1: command 0x0409 tx timeout
[  139.669261][ T6429] team0: Port device team_slave_1 added
[  139.704663][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.525'.
[  139.869789][ T4855] 
[  139.872152][ T4855] ======================================================
[  139.879174][ T4855] WARNING: possible circular locking dependency detected
[  139.886208][ T4855] syzkaller #0 Not tainted
[  139.890630][ T4855] ------------------------------------------------------
[  139.897779][ T4855] kworker/0:14/4855 is trying to acquire lock:
[  139.903943][ T4855] ffff888079654c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0
[  139.915000][ T4855] 
[  139.915000][ T4855] but task is already holding lock:
[  139.922372][ T4855] ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170
[  139.931437][ T4855] 
[  139.931437][ T4855] which lock already depends on the new lock.
[  139.931437][ T4855] 
[  139.941840][ T4855] 
[  139.941840][ T4855] the existing dependency chain (in reverse order) is:
[  139.950855][ T4855] 
[  139.950855][ T4855] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[  139.958866][ T4855]        __mutex_lock_common+0x1eb/0x2390
[  139.964592][ T4855]        mutex_lock_nested+0x17/0x20
[  139.969889][ T4855]        rfkill_register+0x33/0x8a0
[  139.975108][ T4855]        hci_register_dev+0x452/0x970
[  139.980492][ T4855]        vhci_create_device+0x32c/0x5c0
[  139.986045][ T4855]        vhci_write+0x391/0x450
[  139.990912][ T4855]        vfs_write+0x712/0xd00
[  139.995685][ T4855]        ksys_write+0x14d/0x250
[  140.000549][ T4855]        do_syscall_64+0x4c/0xa0
[  140.005498][ T4855]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  140.011925][ T4855] 
[  140.011925][ T4855] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[  140.019759][ T4855]        __mutex_lock_common+0x1eb/0x2390
[  140.025513][ T4855]        mutex_lock_nested+0x17/0x20
[  140.030816][ T4855]        vhci_send_frame+0x88/0x100
[  140.036031][ T4855]        hci_send_frame+0x1a9/0x2e0
[  140.041247][ T4855]        hci_tx_work+0x9f9/0x1710
[  140.046287][ T4855]        process_one_work+0x863/0x1000
[  140.051770][ T4855]        worker_thread+0xaa8/0x12a0
[  140.056983][ T4855]        kthread+0x436/0x520
[  140.061598][ T4855]        ret_from_fork+0x1f/0x30
[  140.066549][ T4855] 
[  140.066549][ T4855] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  140.075856][ T4855]        __flush_work+0xdd/0x1b0
[  140.080808][ T4855]        hci_dev_do_close+0x1e7/0x1030
[  140.086280][ T4855]        hci_dev_close+0xd7/0x180
[  140.091314][ T4855]        sock_do_ioctl+0xd3/0x2f0
[  140.096348][ T4855]        sock_ioctl+0x4ed/0x6e0
[  140.101216][ T4855]        __se_sys_ioctl+0xfa/0x170
[  140.106348][ T4855]        do_syscall_64+0x4c/0xa0
[  140.111335][ T4855]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  140.117754][ T4855] 
[  140.117754][ T4855] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[  140.125404][ T4855]        __mutex_lock_common+0x1eb/0x2390
[  140.131137][ T4855]        mutex_lock_nested+0x17/0x20
[  140.136438][ T4855]        bg_scan_update+0x44/0x3b0
[  140.141558][ T4855]        process_one_work+0x863/0x1000
[  140.147025][ T4855]        worker_thread+0xaa8/0x12a0
[  140.152250][ T4855]        kthread+0x436/0x520
[  140.156850][ T4855]        ret_from_fork+0x1f/0x30
[  140.161798][ T4855] 
[  140.161798][ T4855] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[  140.171625][ T4855]        __lock_acquire+0x2c33/0x7c60
[  140.177021][ T4855]        lock_acquire+0x197/0x3f0
[  140.182059][ T4855]        __flush_work+0xdd/0x1b0
[  140.187117][ T4855]        __cancel_work_timer+0x3ac/0x520
[  140.192767][ T4855]        hci_request_cancel_all+0xcc/0x300
[  140.198596][ T4855]        hci_dev_do_close+0x4e/0x1030
[  140.204094][ T4855]        hci_rfkill_set_block+0x10a/0x190
[  140.209829][ T4855]        rfkill_set_block+0x1c6/0x420
[  140.215353][ T4855]        rfkill_epo+0x75/0x170
[  140.220128][ T4855]        rfkill_op_handler+0x76/0x220
[  140.225507][ T4855]        process_one_work+0x863/0x1000
[  140.230980][ T4855]        worker_thread+0xaa8/0x12a0
[  140.236199][ T4855]        kthread+0x436/0x520
[  140.240805][ T4855]        ret_from_fork+0x1f/0x30
[  140.245865][ T4855] 
[  140.245865][ T4855] other info that might help us debug this:
[  140.245865][ T4855] 
[  140.256104][ T4855] Chain exists of:
[  140.256104][ T4855]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[  140.256104][ T4855] 
[  140.271943][ T4855]  Possible unsafe locking scenario:
[  140.271943][ T4855] 
[  140.279408][ T4855]        CPU0                    CPU1
[  140.284773][ T4855]        ----                    ----
[  140.290135][ T4855]   lock(rfkill_global_mutex);
[  140.294904][ T4855]                                lock(&data->open_mutex);
[  140.302021][ T4855]                                lock(rfkill_global_mutex);
[  140.309306][ T4855]   lock((work_completion)(&hdev->bg_scan_update));
[  140.316025][ T4855] 
[  140.316025][ T4855]  *** DEADLOCK ***
[  140.316025][ T4855] 
[  140.324173][ T4855] 3 locks held by kworker/0:14/4855:
[  140.329462][ T4855]  #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000
[  140.339849][ T4855]  #1: ffffc90003e2fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000
[  140.350258][ T4855]  #2: ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170
[  140.359768][ T4855] 
[  140.359768][ T4855] stack backtrace:
[  140.365672][ T4855] CPU: 0 PID: 4855 Comm: kworker/0:14 Not tainted syzkaller #0
[  140.373234][ T4855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  140.383304][ T4855] Workqueue: events rfkill_op_handler
[  140.388697][ T4855] Call Trace:
[  140.391990][ T4855]  <TASK>
[  140.394928][ T4855]  dump_stack_lvl+0x168/0x230
[  140.399624][ T4855]  ? load_image+0x3b0/0x3b0
[  140.404139][ T4855]  ? show_regs_print_info+0x20/0x20
[  140.409355][ T4855]  ? print_circular_bug+0x12b/0x1a0
[  140.414563][ T4855]  check_noncircular+0x274/0x310
[  140.419511][ T4855]  ? add_chain_block+0x940/0x940
[  140.424458][ T4855]  ? lockdep_lock+0xdc/0x1e0
[  140.429078][ T4855]  ? __lock_acquire+0x12d9/0x7c60
[  140.434116][ T4855]  ? lockdep_lock+0x1e0/0x1e0
[  140.438798][ T4855]  ? mark_lock+0x94/0x320
[  140.443138][ T4855]  __lock_acquire+0x2c33/0x7c60
[  140.448006][ T4855]  ? unwind_next_frame+0x1296/0x1d90
[  140.453319][ T4855]  ? verify_lock_unused+0x140/0x140
[  140.458531][ T4855]  ? ret_from_fork+0x1e/0x30
[  140.463137][ T4855]  lock_acquire+0x197/0x3f0
[  140.467652][ T4855]  ? __flush_work+0xc1/0x1b0
[  140.472254][ T4855]  ? __lock_acquire+0x7c60/0x7c60
[  140.477393][ T4855]  ? read_lock_is_recursive+0x10/0x10
[  140.482780][ T4855]  ? start_flush_work+0x776/0x820
[  140.487811][ T4855]  ? kasan_set_track+0x62/0x70
[  140.492596][ T4855]  __flush_work+0xdd/0x1b0
[  140.497023][ T4855]  ? __flush_work+0xc1/0x1b0
[  140.501617][ T4855]  ? flush_work+0x20/0x20
[  140.505962][ T4855]  ? try_to_grab_pending+0xf3/0x7e0
[  140.511176][ T4855]  ? lockdep_hardirqs_off+0x70/0x100
[  140.516479][ T4855]  ? mark_lock+0x94/0x320
[  140.520834][ T4855]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  140.526832][ T4855]  ? lock_chain_count+0x20/0x20
[  140.531700][ T4855]  ? lockdep_hardirqs_off+0x70/0x100
[  140.537026][ T4855]  ? mark_lock+0x94/0x320
[  140.541375][ T4855]  ? __cancel_work_timer+0x331/0x520
[  140.546675][ T4855]  __cancel_work_timer+0x3ac/0x520
[  140.551807][ T4855]  ? cancel_work_sync+0x20/0x20
[  140.556673][ T4855]  ? __cancel_work+0x1f4/0x2d0
[  140.561451][ T4855]  ? lockdep_hardirqs_on+0x94/0x140
[  140.566664][ T4855]  ? __cancel_work+0x26f/0x2d0
[  140.571444][ T4855]  ? cancel_work+0x20/0x20
[  140.575879][ T4855]  hci_request_cancel_all+0xcc/0x300
[  140.581183][ T4855]  hci_dev_do_close+0x4e/0x1030
[  140.586042][ T4855]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  140.591958][ T4855]  ? _raw_spin_unlock+0x40/0x40
[  140.596816][ T4855]  ? kobject_uevent_env+0x371/0x890
[  140.602036][ T4855]  hci_rfkill_set_block+0x10a/0x190
[  140.607251][ T4855]  ? rcu_lock_release+0x20/0x20
[  140.612116][ T4855]  rfkill_set_block+0x1c6/0x420
[  140.617087][ T4855]  rfkill_epo+0x75/0x170
[  140.621344][ T4855]  rfkill_op_handler+0x76/0x220
[  140.626212][ T4855]  process_one_work+0x863/0x1000
[  140.631177][ T4855]  ? worker_detach_from_pool+0x240/0x240
[  140.636831][ T4855]  ? lockdep_hardirqs_off+0x70/0x100
[  140.642140][ T4855]  ? _raw_spin_lock_irq+0xab/0xe0
[  140.647166][ T4855]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  140.652541][ T4855]  ? wq_worker_running+0x97/0x170
[  140.657567][ T4855]  worker_thread+0xaa8/0x12a0
[  140.662258][ T4855]  kthread+0x436/0x520
[  140.666327][ T4855]  ? rcu_lock_release+0x20/0x20
[  140.671179][ T4855]  ? kthread_blkcg+0xd0/0xd0
[  140.675766][ T4855]  ret_from_fork+0x1f/0x30
[  140.680208][ T4855]  </TASK>
[  140.688957][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.699607][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.745422][ T6429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.775762][ T6491] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  140.783863][ T6491] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.791195][ T6491] 8021q: adding VLAN 0 to HW filter on device team0
[  140.800781][ T6491] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19
[  140.809890][ T6491] caif:caif_disconnect_client(): nothing to disconnect
[  140.817152][ T6491] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT
[  140.826144][ T6491] chnl_net:chnl_net_open(): state disconnected
[  140.832466][ T6491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  140.856352][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.871834][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.899202][ T6429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.002871][ T6429] device hsr_slave_0 entered promiscuous mode
[  141.020176][ T6429] device hsr_slave_1 entered promiscuous mode
[  141.137164][ T6429] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.185789][ T6429] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.277313][ T6429] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.318393][ T6429] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.433026][ T6429] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  141.442749][ T6429] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  141.451029][ T6429] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  141.464934][ T6429] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  141.519633][ T6429] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.533936][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  141.543866][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  141.553415][ T6429] 8021q: adding VLAN 0 to HW filter on device team0
[  141.569383][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  141.577972][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  141.586435][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.593508][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.601075][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  141.611138][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  141.619459][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.626513][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.634418][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  141.649258][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  141.667002][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  141.676772][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  141.686166][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  141.695610][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  141.705239][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  141.715042][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  141.728573][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  141.740782][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  141.752161][ T6429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  141.853054][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  141.860558][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  141.890807][ T6429] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.963226][ T4434] device hsr_slave_0 left promiscuous mode
[  141.969455][ T4434] device hsr_slave_1 left promiscuous mode
[  141.977567][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.985938][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.993561][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.000940][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.008495][ T4434] device bridge_slave_1 left promiscuous mode
[  142.014862][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.023043][ T4434] device bridge_slave_0 left promiscuous mode
[  142.029183][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.039019][ T4434] device veth1_macvtap left promiscuous mode
[  142.045129][ T4434] device veth0_macvtap left promiscuous mode
[  142.051252][ T4434] device veth1_vlan left promiscuous mode
[  142.057058][ T4434] device veth0_vlan left promiscuous mode
[  142.149359][ T4434] team0 (unregistering): Port device team_slave_1 removed
[  142.162618][ T4434] team0 (unregistering): Port device team_slave_0 removed
[  142.173670][ T4434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.187137][ T4434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.231542][ T4434] bond0 (unregistering): Released all slaves
[  142.328983][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  142.338209][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  142.370502][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  142.389598][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  142.406979][ T6429] device veth0_vlan entered promiscuous mode
[  142.415515][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  142.424770][  T775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  142.434757][ T6429] device veth1_vlan entered promiscuous mode
[  142.452640][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  142.460593][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  142.471495][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  142.480580][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  142.494361][ T6429] device veth0_macvtap entered promiscuous mode
[  142.512805][ T6429] device veth1_macvtap entered promiscuous mode
[  142.532096][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.545440][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.556321][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.567152][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.579976][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.588831][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.599788][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.611316][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.624748][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.635365][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.653404][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  142.668160][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  142.678626][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  142.687492][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  142.697020][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  142.705885][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  142.717231][ T6429] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.726270][ T6429] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.735733][ T6429] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.745178][ T6429] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.795384][ T6429] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht'
[  142.856649][ T5030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.866805][ T6429] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht'
[  142.877059][ T5030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.902761][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  142.936520][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.949762][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.968356][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready