last executing test programs:

17m28.19875246s ago: executing program 0 (id=44):
r0 = semget$private(0x0, 0x5, 0x0)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
userfaultfd(0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, 0x0, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4])
semctl$IPC_RMID(r0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00')
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x32}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000140)=0x4, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e26, @remote}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x883)
recvmmsg(r5, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0)

17m23.779050623s ago: executing program 0 (id=56):
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}}}}}}}}, 0x0)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0xc0086c43, &(0x7f0000000080)=0x6ff)

17m20.4372007s ago: executing program 0 (id=62):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x22000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x14484, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=r0], 0x0, 0x2ff, &(0x7f0000000540)="$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")
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000003000040"])

17m19.027883168s ago: executing program 0 (id=67):
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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")
r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9)
write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b)
write$UHID_INPUT(r0, &(0x7f0000001000)={0x8, {"252cf433bf47dd2df8d2ca5bb41b51fb6ed828029baa9bd3afa855843172f65ce0ef21895fce15ac36ae63fab14f0e571e1510b5ce73de53c9062166d5b0883d42cd6fea0cd7f34e743ad9095f1351c1c8ac1c44d93445a1068789356f795a61b7d99921852ede79cc905c3d6806c92d41ef0f20a94e47b1e289e75813b915b3c7318b50698d5e18e276cf34ae9bef6277d79dab05204ffdf3207ac75e2fa72892607be8e04465c690ecd2127a18b092c04ff9c144ae6784ac4a885376cc7c100b12e430e0ec52ca38273cc15e55fb5a6c1c9f7a29f6c2de6ee989e81b7244ea9f5fd6e154fecd445555ca7cfc4e5266389bc0308adaca6d277e30e3cda65cb200d3e7b06a7c13eee08c75cc3b5434295493d20401b58e1d6a00f27bed88d73e9cc51c38c042da7ae6f92ccdc74e3f2e575ad0c61a806af8dca9fd0daf810d8a208084984d2c1f014e5e2ad216cd0a5859c1453fb4e7cbc624466edbb3a229d33d0e5539ab9842f8a77da5073b5c8ef2cc2c5640f08f245d7911dc0350e1f397575d86e0a96a5be2531e7a076c9e86d403a12c754748264d5758cc7abc665de66c3cde8d1dc11d854ea6cc5435635cd8769e5853f6666f533676bd87ddc22ac04af4fc06bade654490d1a4e2416dff3fe5d416834c9e33cb5ac99836e1abff49fe785112bc14233c0161a1ab931cf24bb46405444b568836e79bfa6c8460494c8f446e7d8cdfb7bd2e18562b82574b76b18c265da265028f1633777bdeeae79cb168ae2823d877bb4e0eed025ba92586dc4d967e8af60cc23ea12b2c2ae24e7a7d4fc04e88e0b2c5a69337f2e5c1b37e80e6dde6b51dd9d2f174647e99729c2f844ef404879114c398eea223f7059e98ac6611f0e3476bf2a0fc01d67932b96fe2eeb6b60f053c5a0bdd0c8d535f3912ac6812545387bd25e8748450b7f5dcc8a1738b394d3b979a8731612b8e0e2826928880b8c26263240cd8db3cce90c414b110bfdd82d5e03be492b4268ea7f06bb05a14a555029047cd772ab89c5620c67071247f10aab616422afd47d1d10e77209c2356320c12175c7c2800db3b4584ab304de688b11d1822b9ae748435f2099b8805b22cf3646307b76ccdf7fe68568895bd0749f42f3bb653f5d6d0da4453b951e2d71ee6b7e5a4d8f609759f93c5e5b32fea7c573b6118081e287b7c4886153e7f4a29524dd944d77605984174b45168964762c80cba5e6740a0d2cd9cf0c35753f5b915ae7ec48b6a8fabce433a5dc89ed133bdc152ebcdcac825b96110cab3b4d03679fd180409ebbb0f61ea5a933100608173890c8313469b1dc24e3589e6b340201802bce1f60d15ceb8e16634e7c12c50045a0aa1b2df17995d8391410851af6da6325a4dc1960408813e48c9363abe10b0e4e365487f9657222b24689de66cc736f70e6e0ea5baae2fb77ab3ff294117509261bd29d05e633814bc220384444cf704538ee0408c37aff53dfe988ec0909138f535ac9aad3af73e4e2b9e1809a57dc08a044f89d682cf2343cb0a639fec4223b94645838a2567ea482aebf77a40048e22fd1274a389c5c8d7cb83bc0c2ae00f7cf29a02f85ce4b8264078c538ac655823eed6e21e8bba6a4d59727f76ce30d1fd8db28ec538d1552088f34728c83f80fff317f9f4ab7334df608a013cb1e93ea4ab3cfcd07dc2df6b407017b67d5b457a80e891e00dbaf1d3847eea3ad135dc9bab8319041a6c508dcc45d8a473bcf6fb07a389594a52cc667ff7be60b4aa013e37594fea644293ebb0dc8b8e45ced5cd58ea99368c33ebcc98f4d633a85fd17f3fcf3a33c8d6554a0233b7eba47b749f3a99669fef284cc5cce1e106192d32e9e64207ce33281aa697123ee3c221d9066d5f6436045bbdaebf501d29b35c9302b402965ba7904644dfef6196abfe5980356f455fc66beb957978d27f2b5e1db0dcac86f9d87bcf6460d136e8008f4417345f67faf7c53a40bbfd7f0f2cdca00e76e3acb3f8d00d239f3b499e5d861675d584bb0364cc973ad4b7dec38003a1980812407470f3fa4a1de0d52a8effc2827b22419411f27731d3d6b77a7f8a15a3e1c08864ada9aab52ad774a45080b4a1271513c4d35ea7ae566b170b62350ee2c8d26cae13ab63961933c7f5dab2c2054823155e4b4e9c261cb13c0d02cfda59e09f86b7f8da6975b34b34f74cab1bb2754de508ecaa3d8932c36008f0fe8616511ab0fffc73b98dce1d904fad4c877faa7c4710507170e4ddd2d14e94a7043e4fecf6bb582f80254ba6bde560ab6b011059bd458a5f0afa44093079e73e6017a905cda897db270e99fdbc1f7630b1ac911d38bea8ceb8cdfdef92c67a38857ac3ce0ca2f1351366dfd407258ded66a55dffb92e821c13d92e03da36e0803f5cba590ee16b4f14c126cc311fc80e259fab7cb5c93939cbc6cedaecff0b9e7bb51d7e1a9e78ca18b7a9990e63dfd7ad0379c4df141e18f70327aa4e43d4217e4153b6db4c96287f2fa19d94df4be23402fac1c61722488ac3211a7079de19566e4144f392202ab9dc963467ba6847495a41727f9371eaadedf39e85052c2846c6358e51ff743d3709cf0a68d3c4e6fa8eb9da74fb51c8d939848c7e45f9ae8bbfd9f966ab52e35d20c06961161c6a745d29e82383ee44fc181922da6544312aaad14a8d861cdfaa0c2efcf5d4f45cdd9ab00fa4bcd0e4a0f4ef7b04d54ca91997ef99ec6be6c37550e03bd254e7533ef2d9280511fdafe4d3b6fdfeba8221ef1ba8f45a61bfc960f3c98f9986353a0074cc00b8d54c57e48d39f84b5d7de6bf024b31768d45089d2b9804c2ec8f4fb5b01485781163b30ad3b528a93b4080e524e62677d7e42c3b963f7148acc9ea9653c50eb940182d6353e6806114e3ec7b3d143a35360a1c92a8a3f645ff78a19cd29182d90584975b8cb24daee6447eeb2b1acad72d3d1ca0d8c56742d586e0c96edb4953255e1beb8d74e716ca08d3c9c260258988a7b55ff26d4c8158f7bcb3d3e2ee57b1f9ee0a7ad2fc7763e6f6c355fcafa01c5e58b9b0644d1926115fe4a0f8b6537a305969dcd08e04e5d37a722fb5610fa12f8a716e1180cbb122d329c41436a93cdd56a75223b18967fcec928ddfd0e35e417dd52f7973e35e66ed23ff756539e5c1cac3a5fcfa0881c49551aa7a99a950b074657e8bf617c28d2e92511f83f01f5cfdd59a1a2acb3d2414ca797f21276a477719eaa8bc4e3628a6254323a055f9f3f806699a1aa7292c084751add4f0258f2cee8920189f2923098b26bac9046f70d6e3608390f5509df457b950ab2051cf9c4f0426c1b18ebef18264effadef6453520c88313aa17f704221d24b795e94ede4b8d2b08c762ad3dd5c383263cabd03278800cddc55f714e2bf518d58178dcb3cba0ae39b6e0ab2f5005c87b4312060c45ac4ee953464f5725192f49b6c8b7676239e73861c9ccce082c09295d606909c3f6fb90c6c560ae9203bd7be2fc203a7767bc85c7a5d17149bb760253d2a23d96ee5254d927909197f54a03eb55c46bd7f1a1f2cffcdda23002ba1e567a34516855fa90cc636ca7c681ea0befd6e2d14eb5d6ed7fb3906306a3a18433241a2b4ad0e7a677d05817c2ce377e0214c354eccff934a1dc642d7c135165a93d7c74ba28826b761c0fe20bd758305749780d027b65457d84a053a46b3ec9bd8405da70042dcffdf10ea315688b66d1c32281cc5f39ccc074018d58e72cdef8ad17b232320d8c1daa4e287ae9fdb95d47c863db1c7652dd3e010e20bc77f1da051038407eee5d20fb5e965a6bcf9fa9812ea7e40a1491bfda2619c60163836f15e3a3f5d720fe036a9c9590685193b10415c8fb31437ce8bd82138174f1152ddceb2ab4496433e8ae9c95c7466b161eb12a5bedfa3c6b7aea87743190ac9e7d1baf2e47a780a5d7a37750d1e564c9bf8504a6c07ad5c542ee36966bdbb89448cc2d8a2471665f557b9f23f0e57485e274a1ef5bc443cb05ddbd7b1738347163c3de87f9e8c901b56572b6d8f6acfab55ab1e1f3451e992e044ba2342a5b484fb3474da81da63083a1986acd248d653404fb1fc419c17b06259834e73909e060c5bc28eb6679e1f6ec7c49df05bb1c0387da063b524aacb540b3da4f34b30228cd1eacc45ead6ca27b3258c770689843a9a25f3c663fa0ecdeece0fb4965ae95efb64e6f671ebfa8b7de4836eab9f86dbdf42e3020e0e760b0a77158138f8e3f81368e48080e09dc5a0cae08994a728d098fb6cb63831a1393dded9a8fc2ae2825bd70083ce490b2ca42ad8e61da6366348312672fe0e26fa3717f7cdb0ec12a298ec89cbb0a9b8ba29cc99929569a906807a5f2e0f62e0526ece9de66e8c75885b238dead181cf2956e5570623b1fc7282fb5799bdb98fe9208a2b992150375eaac1937edd6eafc9bab11231e364a1f328495037e0b26e313059f0e6fa9c18a4e2f46efacc0384b5e3d5b021fb80cf5231aa8f7e49a1abe5a1af95c306a655980fc942ebdbec1c8c523bfb2a7650a4ba0db202729a42af043ced7c4063a251c488413646a353d91fb82024986b03771b87083aea833de33aa44363062c8b1a5846f26603dacfd92afd9225a56ccecd607e511abbf5aeb47dd682c6b808b24789d41cf35bac1a415722a3859692f6b3056cda27b1ccda46ad9e308aef1e449784ad779e9872de34c0b3801e8ce6ec0c53ff28af9e038f3590db51e3d8a3e84767b92bbef5614dfdca2bcb32f4a7d077983e1a0321a1993077a09a0e51c00b83b7656775df941b23b75e2d9881d5bd58879906c930cb318d9333117eddbb27e174dbca8076ade60a18336f58582f48b352c3d8a0a3277c51608d9559336901cd0d3ab1491c1e650803011f2f0092b20bf0b62efda4d57edc5146757e90df0b4be92ee833ece5927cc89ae9cfc526c6e2a1767482c26e53b632a2f693c536610fd2de15cea288a29cbaff3233beb7fcc397f8aab78abea623e458928570d58f5b9f4b3a96f582bfd667a36309dd318cece1bfd7e36755aad8202522582bf17c55ae6a53c0a9adb755b492119f268e951076c78089aca6f8d93f47c9114775cad41fcce3b9208e9154d65bcbeb887fdcc8e06325e1f72712873ba8f5643f1f9a62d37f4e9dc16abcb5d49279701bf7f67edbf88bea63ddbb056acf55fb496de85ff17422d289ea83eba76fccb40437643e61ef2ae89fe99e4878e6d155c6d4a4d11e8641b38234f6a5a845d4ab8ce565744ff8924af6c5ae4e288d3ca84060ca00b6c2599ddb038548871268b761f580fe74228f20249f43d3bd129bc0ba513f6bc5a5e57f4ed5e319aa0853289f55f5b3417d5d84184434884e6a85054a651d94c3514b969376db32862053bd0bc18a4969515dbd214821b403551fa36d7f93517522e62e96bb2eca805059cab32f6897dcb6a54e53e790f209f7f527cbb198fd57793d94546c8013c6c17d7e7e16433b5270d79faecf430f3b692273f43ac766acfd66818e016879a9df3e9c0725d29fcfada6f06a9ba15a44052d688e508f8b1c5387246d32128bb8faede2d2356a4c5f1a13c0d6191024c70943a567fc8ecbf79dae1059edd768743429c5fda75c3d0f288963651b657e464254267b98792ce9b76e71ef01e955ac5625be7e0dc951a9bd9b8a690c81287ba891367299e6f5ca3eb2f5ce1aa96c072c7ae3eff304822fae468896cb2743a73f6186919112f2fdf2b669a27d5c47995d8995a80c711e4af25ee07c02432c790b9ee49c071d637851954aa2c", 0x1000}}, 0x1006)

17m16.834301233s ago: executing program 0 (id=73):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000007001000df7f00006e45000041010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff"], 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40)
pipe2$9p(&(0x7f0000000500), 0x80000)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYRESOCT], 0x30}, 0x4, 0x700000000000000}, 0x40)
mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b7", @ANYBLOB=',rootmo'])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000", @ANYRESOCT], 0xb8}}, 0x20040014)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

17m15.218359892s ago: executing program 0 (id=78):
r0 = semget$private(0x0, 0x5, 0x0)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
userfaultfd(0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, 0x0, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4])
semctl$IPC_RMID(r0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00')
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x32}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000140)=0x4, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e26, @remote}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x883)
recvmmsg(r5, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0)

17m14.585166884s ago: executing program 32 (id=78):
r0 = semget$private(0x0, 0x5, 0x0)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
userfaultfd(0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, 0x0, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4])
semctl$IPC_RMID(r0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00')
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x32}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000140)=0x4, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e26, @remote}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x883)
recvmmsg(r5, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0)

5m32.702973074s ago: executing program 4 (id=1759):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40)
pipe2$9p(0x0, 0x80000)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x40)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup(r0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

5m31.522900559s ago: executing program 4 (id=1761):
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r3}, 0x38)

5m28.971860837s ago: executing program 4 (id=1766):
syz_pidfd_open(0x0, 0x0)
syz_io_uring_setup(0x90d, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="3496e30d08ab99810ea64b3ef6e82e"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
read$FUSE(r4, &(0x7f0000005200)={0x2020}, 0x2020)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000000f00000007"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=',\x00'/12, @ANYBLOB="bce9300a1e45e9eb347e47cf1ee5b9aef6b2b1e4bc05a1ab605b0496dd976808282dd02fbffa159709249a1a9a375e1c57cfbd3c445ae71232aa330d3333d7d4b3a1ad6de737f04b4567463c432dabbe91", @ANYRES64=0x0], 0x20)

5m26.551003782s ago: executing program 4 (id=1770):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
unshare(0x24060480)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000080)=0x3, 0x4)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper={0x40406300}], 0x1, 0x0, &(0x7f0000000040)="a1"})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

5m22.271206169s ago: executing program 4 (id=1778):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file1\x00', 0x1a00400, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db28915dbe6892bc3dce41ae76eaf528dc889820692d753009e30e567403a6c30e933de68a0a923eec1dccf226b58adb7d968bafe76628bceade8672fb893f87dc88", @ANYRES8=0x0, @ANYRESDEC, @ANYRES8], 0x1, 0xc5a, &(0x7f0000002080)="$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")
rseq(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
fallocate(r2, 0x16, 0x9, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff)
readlink(0x0, &(0x7f0000001200)=""/4096, 0x1000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
setpriority(0x0, 0x0, 0x7)
r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
preadv(r5, &(0x7f0000000380), 0x0, 0x2f, 0x0)

5m19.220660675s ago: executing program 4 (id=1784):
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/39, 0x27)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(0x0, 0xa, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x9}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0x1, 0x1, r2}, 0x50)

5m3.874745618s ago: executing program 33 (id=1784):
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/39, 0x27)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(0x0, 0xa, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x9}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0x1, 0x1, r2}, 0x50)

5m3.864153369s ago: executing program 5 (id=1811):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8000, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r3}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10)
syz_clone(0x40b39b80, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e21, @remote}})

4m56.011807923s ago: executing program 5 (id=1823):
syz_pidfd_open(0x0, 0x0)
syz_io_uring_setup(0x90d, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="3496e30d08ab99810ea64b3ef6e82e"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
read$FUSE(r4, &(0x7f0000005200)={0x2020}, 0x2020)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000000f00000007"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=',\x00'/12, @ANYBLOB="bce9300a1e45e9eb347e47cf1ee5b9aef6b2b1e4bc05a1ab605b0496dd976808282dd02fbffa159709249a1a9a375e1c57cfbd3c445ae71232aa330d3333d7d4b3a1ad6de737f04b4567463c432dabbe91", @ANYRES64=0x0], 0x20)

4m54.71534157s ago: executing program 5 (id=1824):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000)

4m52.492732906s ago: executing program 5 (id=1829):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313060004070c0000002a7f08870200000083253409120b09007a1583"], 0x0}, 0x0)

4m48.151444938s ago: executing program 5 (id=1839):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x0, 0x200040, 0x0, 0x8000, 0x200000, 0x1})
syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9})
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
fanotify_mark(0xffffffffffffffff, 0x2, 0x40000038, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x3ff, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}}, 0x0)
socket$inet6(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)

4m45.841414132s ago: executing program 5 (id=1843):
syz_pidfd_open(0x0, 0x0)
syz_io_uring_setup(0x90d, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="3496e30d08ab99810ea64b3ef6e82e"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r4, &(0x7f0000005200)={0x2020}, 0x2020)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000000f00000007"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=',\x00'/12, @ANYBLOB="bce9300a1e45e9eb347e47cf1ee5b9aef6b2b1e4bc05a1ab605b0496dd976808282dd02fbffa159709249a1a9a375e1c57cfbd3c445ae71232aa330d3333d7d4b3a1ad6de737f04b4567463c432dabbe91", @ANYRES64=0x0], 0x20)

4m29.033701588s ago: executing program 34 (id=1843):
syz_pidfd_open(0x0, 0x0)
syz_io_uring_setup(0x90d, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="3496e30d08ab99810ea64b3ef6e82e"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r4, &(0x7f0000005200)={0x2020}, 0x2020)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000000f00000007"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=',\x00'/12, @ANYBLOB="bce9300a1e45e9eb347e47cf1ee5b9aef6b2b1e4bc05a1ab605b0496dd976808282dd02fbffa159709249a1a9a375e1c57cfbd3c445ae71232aa330d3333d7d4b3a1ad6de737f04b4567463c432dabbe91", @ANYRES64=0x0], 0x20)

2m33.303557396s ago: executing program 3 (id=2001):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004000)
inotify_init1(0x80800)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f00000001c0)={[{@nogrpid}, {@nogrpid}, {@test_dummy_encryption}, {@debug}, {@nobarrier}, {@quota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}]}, 0x1, 0x43d, &(0x7f0000000780)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat2(0xffffffffffffffff, 0x0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000491ace510b79703f900000004000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f0000000840), &(0x7f0000004880)=@udp}, 0x20)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, r1, 0x1, 0x0, @void}, 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x2d, 0x0)

2m20.144425107s ago: executing program 3 (id=2015):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0xc0844123, &(0x7f0000002fc0))

2m17.568364547s ago: executing program 3 (id=2018):
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x7c0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8, r2}, 0x18)
r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r4 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000080))
read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

2m15.725565676s ago: executing program 3 (id=2020):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
unshare(0x24060480)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000080)=0x3, 0x4)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper={0x40406300}], 0x1, 0x0, &(0x7f0000000040)="a1"})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2m12.243972165s ago: executing program 3 (id=2022):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x94}}, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x40780)
msgget(0x3, 0x100)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002440)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x860, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0xffff, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x7, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x201, 0xe5, 0x2f, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0x84, 0x9, 0x3, 0x9, 0x80000001, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x20000004, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x4, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffffd, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x6, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x4, 0xe643, 0x2, 0x6, 0x100, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xb, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x80000004, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x20000008, 0x28, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x10000003, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xfffffffd, 0x5, 0x6042, 0x8b87, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x9, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffd}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x8a4}, 0x1, 0x0, 0x0, 0x50}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x22001, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000380)=ANY=[@ANYRES64=0x0], 0xf5, 0x2f0, &(0x7f0000000f80)="$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")

1m58.873742726s ago: executing program 3 (id=2036):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_012={0x0, 0x2, 0x2}, @main=@item_012={0x2, 0x0, 0x8, "7ccb"}, @main=@item_012={0x2, 0x0, 0xb, "35e0"}]}}, 0x0}, 0x0)

1m42.969957063s ago: executing program 35 (id=2036):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_012={0x0, 0x2, 0x2}, @main=@item_012={0x2, 0x0, 0x8, "7ccb"}, @main=@item_012={0x2, 0x0, 0xb, "35e0"}]}}, 0x0}, 0x0)

21.044366593s ago: executing program 7 (id=2171):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
fallocate(r3, 0x0, 0x1, 0x2000402)

19.669193127s ago: executing program 7 (id=2173):
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x7c0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040)=0x91, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8, r2}, 0x18)
r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r4 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000080))
read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

15.740090339s ago: executing program 7 (id=2181):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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")
socket(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x1a4)
r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
write$binfmt_format(r0, &(0x7f0000000180)='1\x00', 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='sched_switch\x00', r1}, 0x18)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = inotify_init()
fgetxattr(r4, 0x0, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x5)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08086, &(0x7f00000007c0)={[{@quota}]}, 0xfc, 0x49f, &(0x7f0000000ec0)="$eJzs3MtrHVUYAPDvTt59xkfVPtT4wuKjadOHXbhQUXChIOiiuotpUmJTK00EW4qpInUpBffiUvAvcKUbUVeCW125kUKRgLRawZGZO5NXb25zb29y297fD244Z+Zk5nxz5tx75szcG0DHGsr+VCI2RcSvWTrJs/PSolBW7src2bG/586OVSJNX/+zkq+7PHd2rCxb/t+mIrM7iUg+qcTOGvudPn3m+OjU1PipIj88c+K94enTZ56ePDF6bPzY+Lsjhw8f2L/vmUMjB1sS5+asrjs+PLlr+8tvXnh17MiFt3/8urus67I4WmUohpYcy8Uea/XO2mzzonSlu40VoSFdEZE1V0/e/7dGVyw03tZ46eO2Vg5YU2mapltWXn0uBW5jlWh3DYD2KD/oL88NRP8aXQffzC49X70AyuK+Uryqa7ojKcr0LLu+baX+Yt7kyLl/voj8+Pd11PEHANbft9n456nq+Kd8VdcMxj2Lyj2XzwdnSyPuiIg7I+KuiLg7IrZF5GXvjYj7Gtz/0LL8tePP5GJTga1SNv57tri3tXT8V4z+/ksHu4rc5hiIweipTExOje+NiC0RsTt6+iYmpwbq7eO7F3/5bMmCucvzA++hYuxXvrL9l2PBoh4Xu/uWbu/o6MxoK2LPXPoonwOcvTb+hTtXWWp7ROxoYvvZuHnyia92rbT++vHX0YL7TOmXEY9X2/9c1Il/+f3JssEPjRwc7o+p8b3DEz35hUINP/18/rWV9n9D8bdA1v4bap7/8/EPVhbfr51e6Bqrdf63T1e8pmng/H+rXJKd/72VN/J0b7Hsg9GZmVP7Inorr1y7fGRha2W+LH9p07aIR2r3/+w9LjvHsvh3RkR2Et8fEQ9ExINF3R+KiIcj30Qts1ci4ocXHn2nmfgbPMxNydr/6JL2j+u0f+OJruPff9NM/FVZ+x/IU7uLJat5/1ttBW/k2AEAAMCtIsmfga8ke+bTSbJnT8TGfG53QzJ1cnrmyYmT7189Wn1WfjB6knL+szofXJ0P3VfMDZf5kWX5/cW88eddA3l+Q3HvG2ifjYv7fz7hWO3/mT+62lw5YO35vhZ0rib6f90HHoBbh89/6FwN9H9vFXCbme/UffXLpetQF2B91fpQn21DPYD1Z1APnUv/h86l/0Pn0v+hI93I9/qbSVRW/c382yAxW/vw/r7yf/VHvQ323iRx5YlI8kQ628Zq/Fs8hraqwleLn7xcg/qUv5ZRLPlr5cLlT8TcDC1YP9G+9yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBW+j8AAP//HRbixA==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000066adbd4c7f618ce48810eec027624664ff5cdac1a369a4e176155a94370573a6e3621ef42efc9f64a331d29309c9cf"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000340)=""/136, 0x88}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100008400000000000000000200000000000001000000000000000604"], 0x0, 0x3e}, 0x28)

11.288579952s ago: executing program 2 (id=2191):
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
r2 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0xe0fd, 0x98, &(0x7f0000000940)=""/152}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0x5, 0x1, 0x3ff})
bind$packet(r2, &(0x7f0000001340)={0x11, 0xf5, 0x0, 0x1, 0x10, 0x6, @broadcast}, 0x14)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88)

9.402480096s ago: executing program 2 (id=2192):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0)
poll(&(0x7f0000000240)=[{r1, 0x181}], 0x1, 0x500)

8.160819446s ago: executing program 1 (id=2197):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=ANY=[], 0x50)
unshare(0x22020600)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50)
setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
tee(r0, 0xffffffffffffffff, 0x4b, 0x8)
socketpair$unix(0x1, 0x1, 0x0, 0x0)

7.286050481s ago: executing program 1 (id=2198):
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = memfd_create(0x0, 0x4)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ce, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r4], 0x1, 0x2c5, &(0x7f0000000dc0)="$eJzs3UGLG3UUAPA3m2QS9ZAcPInggB48lbZXL1mkBXFPlhzUgy42BUmC0IWFreLYk1cvHvwMguAH8eI3ELwK3qxQGJnJTCdpY3ZTmhXb3++w+3bmvZk3/wy7swv78unri9ntLO7c/+q3GAySOBjHOB4kMYqDaHwTa8bfBQDwf/agKOLPYmmXuiQiBvtrCwDYo4v9/O+24c+X0hYAsEe3Pvzo/cOjoxsfZNkgbi6+PZ2Uv9mXn5f7D+/E5zHvTuNqDONhRPWg0IvqaaEMbxZFkXez0ijeWuSnk7Jy8ckv9fEP/6j/WFAaVR8fPW1U9e8d3biWLa3U52UfL9fnH89jGtdjGK8+Kl6rv76hPiZpvP1m039M40oM49fP4ouYx+2qibb+62tZ9m7x/V9ffly2V9Yn+emkX+W1is4lviwAAAAAAAAAAAAAAAAAAAAAADznrtSzc/rtjL96/k7nYflFL7LGaH0+zzK5Ge2zNh+oKIq8GpeznK9zNcuyok5s67vxWnd1sCAAAAAAAAAAAAAAAAAAAAC8uE7O7s2O5/Pp3WcSNNMAuhHx962Ipz3OeGXLG7E9uV+f83g+P6jD9Zzu6pboNDlJxNY2yot4RstyXvDSEz3XwY8/7XrAwfk5vc3nOjnrPO3rla9uSc7uzZq7a3acbF7DfjRbBvVJf0gj2pw0Lnj29N92FbHL7Zdu3DXceTXSV6og35ITybbG3vl9uXLNYj5+FWm1qhvLe3WwUv7YvXGh+zkGy/Inv1ckpnUAAAAAAAAAAAAAAAAAAMBetf/9u2Hn/a2lB0V/b20BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKVq3/9/hyCPiF59gHOS07h78h9fIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+AfwIAAP///VxVMg==")
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x11, 0x6c3, &(0x7f0000001f80)="$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")
r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x2)
syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x40, 0x6, 0x38, {0x38, 0x3, "6c1f033845b2feb33f8bb63b6bd2709c6e4140eed41ce281d2cd712ffb8d0640388c5e789e7749851dcca5e780dafd87e267c5d9ab88"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc3b}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x17, 0x7c, "b1b271348a506ff609774b18482d9ffcdab795b1a06e5ea721b8cd9df4fcc0415618b1229fab0516a222f8d151f2819ca2159acc698083e1c408509621262c0ebecdcdfbd0f049ea65f073587e41c664a6e6b8df174794a372521387f2d02fba5609e6268253f965828a5ce9926c4ed6d9d0f23e0ed1ac5b6630de7c"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x5}, 0x0, &(0x7f0000000380)={0xc0, 0x5, 0x1, 'g'}, &(0x7f00000003c0)})
r7 = creat(&(0x7f0000000580)='./bus\x00', 0x8)
r8 = fanotify_init(0xf00, 0x2)
fanotify_mark(r8, 0x105, 0x8971, r7, 0x0)
utimes(&(0x7f0000001080)='./bus\x00', 0x0)
ftruncate(r5, 0x2007ffc)

6.149121872s ago: executing program 6 (id=2199):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000007001000df7f00006e45000041010000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x30}, 0x4, 0x700000000000000}, 0x40)
mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b7", @ANYBLOB=',rootmo'])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000000065788cbde2284831416d9300ab00d8a2957af482ed669aba7000000000991e000100"/77, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000008"], 0xb8}}, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

6.148540652s ago: executing program 7 (id=2200):
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x7c0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040)=0x91, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8, r2}, 0x18)
r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r4 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000080))
read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

5.509894684s ago: executing program 1 (id=2201):
write(0xffffffffffffffff, &(0x7f0000000200)="eac0649edf4bc2cf1e57e8f2f69be0342ba8bacec32584be00e075534165b94394e73609", 0x24)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="02c9200a000600050009"], 0xf)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff})
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0))
r1 = syz_open_pts(r0, 0x101000)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17)

5.004408123s ago: executing program 6 (id=2202):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==")
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x7ffffffffffffffe, 0x1, 0x5})

4.562346736s ago: executing program 7 (id=2203):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000080)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x0, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e24, 0x4000a, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80ad}, 0x1c)
syz_open_dev$hiddev(&(0x7f0000000000), 0x800, 0x5d1841)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1ff, 0x80000)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4002, &(0x7f0000000080)={[{@noquota}, {@errors_remount}]}, 0x3, 0xbc9, &(0x7f0000002380)="$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")

4.31535967s ago: executing program 1 (id=2204):
r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81, 0x0, 0xfffc}}}}}}}]}}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x19, @string={0x19, 0x3, "15b352ce33a9b912222db8eeaaa06dfa878dadf44f0783"}}}, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x80}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x82, 0x2, "ff3b"}, &(0x7f0000000400)={0x20, 0x83, 0x3, 'D`!'}, 0x0, 0x0})

4.10987754s ago: executing program 6 (id=2205):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)

3.920515729s ago: executing program 2 (id=2206):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_macvtap\x00', <r1=>0x0})
sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x26}, @local}}}], 0x20}}], 0x1, 0x4000)

3.457313344s ago: executing program 6 (id=2207):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000090095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
syz_usb_connect$uac1(0x1, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="eb010000000000086b1d01014000010203010902780003010000000904000000010300000a24010000000201020824080000000070090401"], &(0x7f0000011700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

3.325447076s ago: executing program 2 (id=2208):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="002104710400bbd6e76880000000005c786d17fd8beb29", 0x17}], 0x1, 0xee, 0x4000004)

2.364439921s ago: executing program 2 (id=2209):
prlimit64(0x0, 0xe, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1a, 0x4, 0xfc, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x850b}, 0x50)
rename(&(0x7f0000000000)='./file1\x00', 0x0)

2.16150676s ago: executing program 1 (id=2210):
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = memfd_create(0x0, 0x4)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ce, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r4], 0x1, 0x2c5, &(0x7f0000000dc0)="$eJzs3UGLG3UUAPA3m2QS9ZAcPInggB48lbZXL1mkBXFPlhzUgy42BUmC0IWFreLYk1cvHvwMguAH8eI3ELwK3qxQGJnJTCdpY3ZTmhXb3++w+3bmvZk3/wy7swv78unri9ntLO7c/+q3GAySOBjHOB4kMYqDaHwTa8bfBQDwf/agKOLPYmmXuiQiBvtrCwDYo4v9/O+24c+X0hYAsEe3Pvzo/cOjoxsfZNkgbi6+PZ2Uv9mXn5f7D+/E5zHvTuNqDONhRPWg0IvqaaEMbxZFkXez0ijeWuSnk7Jy8ckv9fEP/6j/WFAaVR8fPW1U9e8d3biWLa3U52UfL9fnH89jGtdjGK8+Kl6rv76hPiZpvP1m039M40oM49fP4ouYx+2qibb+62tZ9m7x/V9ffly2V9Yn+emkX+W1is4lviwAAAAAAAAAAAAAAAAAAAAAADznrtSzc/rtjL96/k7nYflFL7LGaH0+zzK5Ge2zNh+oKIq8GpeznK9zNcuyok5s67vxWnd1sCAAAAAAAAAAAAAAAAAAAAC8uE7O7s2O5/Pp3WcSNNMAuhHx962Ipz3OeGXLG7E9uV+f83g+P6jD9Zzu6pboNDlJxNY2yot4RstyXvDSEz3XwY8/7XrAwfk5vc3nOjnrPO3rla9uSc7uzZq7a3acbF7DfjRbBvVJf0gj2pw0Lnj29N92FbHL7Zdu3DXceTXSV6og35ITybbG3vl9uXLNYj5+FWm1qhvLe3WwUv7YvXGh+zkGy/Inv1ckpnUAAAAAAAAAAAAAAAAAAMBetf/9u2Hn/a2lB0V/b20BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKVq3/9/hyCPiF59gHOS07h78h9fIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+AfwIAAP///VxVMg==")
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x11, 0x6c3, &(0x7f0000001f80)="$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")
r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x2)
syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x40, 0x6, 0x38, {0x38, 0x3, "6c1f033845b2feb33f8bb63b6bd2709c6e4140eed41ce281d2cd712ffb8d0640388c5e789e7749851dcca5e780dafd87e267c5d9ab88"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc3b}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x17, 0x7c, "b1b271348a506ff609774b18482d9ffcdab795b1a06e5ea721b8cd9df4fcc0415618b1229fab0516a222f8d151f2819ca2159acc698083e1c408509621262c0ebecdcdfbd0f049ea65f073587e41c664a6e6b8df174794a372521387f2d02fba5609e6268253f965828a5ce9926c4ed6d9d0f23e0ed1ac5b6630de7c"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x5}, 0x0, &(0x7f0000000380)={0xc0, 0x5, 0x1, 'g'}, &(0x7f00000003c0)})
r7 = creat(&(0x7f0000000580)='./bus\x00', 0x8)
r8 = fanotify_init(0xf00, 0x2)
fanotify_mark(r8, 0x105, 0x8971, r7, 0x0)
utimes(&(0x7f0000001080)='./bus\x00', 0x0)
ftruncate(r5, 0x2007ffc)

1.817345354s ago: executing program 6 (id=2211):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000007001000df7f00006e45000041010000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x30}, 0x4, 0x700000000000000}, 0x40)
mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b7", @ANYBLOB=',rootmo'])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000000065788cbde2284831416d9300ab00d8a2957af482ed669aba7000000000991e000100"/77, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000008"], 0xb8}}, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

973.471275ms ago: executing program 8 (id=2055):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000700), 0x0}, 0x20)

765.105596ms ago: executing program 7 (id=2212):
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x7c0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040)=0x91, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8, r3}, 0x18)
r4 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r5 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000000080))
read$FUSE(r4, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

712.458491ms ago: executing program 2 (id=2213):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000003f80), 0x1, 0x44f, &(0x7f00000002c0)="$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")
removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'system.posix_acl_access\x00'})

564.092605ms ago: executing program 1 (id=2214):
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18)
recvmsg(0xffffffffffffffff, 0x0, 0x6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)}, 0x41)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

544.785417ms ago: executing program 8 (id=2215):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80800)
sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)="d2", 0x1}], 0x1}}], 0x1, 0x408d4)
io_setup(0xff, &(0x7f0000000380)=<r2=>0x0)
io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}])

0s ago: executing program 6 (id=2216):
userfaultfd(0x80801)
dup(0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

kernel console output (not intermixed with test programs):

5 subj=unconfined pid=10523 comm="syz.5.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c658efc9 code=0x7ffc0000
[  791.629804][   T26] audit: type=1326 audit(1761188065.606:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10523 comm="syz.5.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25c658efc9 code=0x7ffc0000
[  795.486291][T10578] loop1: detected capacity change from 0 to 16
[  795.573728][T10578] erofs: (device loop1): mounted with root inode @ nid 36.
[  795.588766][T10580] loop4: detected capacity change from 0 to 1024
[  795.719037][T10580] EXT4-fs error (device loop4): __ext4_fill_super:5404: comm syz.4.1731: inode #2: comm syz.4.1731: iget: illegal inode #
[  795.765254][T10580] EXT4-fs (loop4): get root inode failed
[  795.808195][T10580] EXT4-fs (loop4): mount failed
[  795.885118][T10586] syz.1.1730: attempt to access beyond end of device
[  795.885118][T10586] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[  795.900200][T10586] syz.1.1730: attempt to access beyond end of device
[  795.900200][T10586] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[  795.919747][ T4368] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  796.639585][ T4368] usb 4-1: Using ep0 maxpacket: 16
[  796.646748][ T4368] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  796.681874][ T4368] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  796.746340][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'.
[  796.792287][ T4368] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  796.801903][ T4368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  797.072610][ T4368] usb 4-1: config 0 descriptor??
[  797.281557][ T4368] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  797.630751][T10599] bond0: (slave bond_slave_1): Releasing backup interface
[  797.996157][T10607] loop2: detected capacity change from 0 to 8192
[  798.932529][ T2183] usb 4-1: USB disconnect, device number 14
[  804.733225][T10638] loop3: detected capacity change from 0 to 16
[  804.775013][T10638] erofs: (device loop3): mounted with root inode @ nid 36.
[  805.035509][T10640] syz.3.1748: attempt to access beyond end of device
[  805.035509][T10640] loop3: rw=0, sector=8, nr_sectors = 16 limit=16
[  805.049237][T10640] syz.3.1748: attempt to access beyond end of device
[  805.049237][T10640] loop3: rw=0, sector=8, nr_sectors = 16 limit=16
[  806.351733][T10648] loop3: detected capacity change from 0 to 1024
[  807.610392][T10648] EXT4-fs: Ignoring removed oldalloc option
[  807.616424][T10648] ext4: Unknown parameter 'nouser_xattr'
[  808.997568][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  809.004002][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  812.148178][T10672] loop1: detected capacity change from 0 to 512
[  812.156796][T10672] EXT4-fs (loop1): Test dummy encryption mode enabled
[  812.163716][T10672] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  812.173702][T10672] EXT4-fs (loop1): ea_inode feature is not supported for Hurd
[  813.021309][T10675] loop1: detected capacity change from 0 to 16
[  813.059319][T10675] erofs: (device loop1): mounted with root inode @ nid 36.
[  813.338025][T10678] syz.1.1760: attempt to access beyond end of device
[  813.338025][T10678] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[  813.351645][T10678] syz.1.1760: attempt to access beyond end of device
[  813.351645][T10678] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[  815.410361][T10692] loop1: detected capacity change from 0 to 1024
[  815.897683][T10692] EXT4-fs error (device loop1): __ext4_fill_super:5404: comm syz.1.1762: inode #2: comm syz.1.1762: iget: illegal inode #
[  815.994073][T10692] EXT4-fs (loop1): get root inode failed
[  815.995995][T10697] loop5: detected capacity change from 0 to 16
[  816.016487][T10697] erofs: (device loop5): mounted with root inode @ nid 36.
[  816.034763][T10692] EXT4-fs (loop1): mount failed
[  816.275563][T10703] syz.5.1756: attempt to access beyond end of device
[  816.275563][T10703] loop5: rw=0, sector=8, nr_sectors = 16 limit=16
[  816.289583][T10703] syz.5.1756: attempt to access beyond end of device
[  816.289583][T10703] loop5: rw=0, sector=8, nr_sectors = 16 limit=16
[  821.491198][T10730] loop2: detected capacity change from 0 to 16
[  821.530912][T10730] erofs: (device loop2): mounted with root inode @ nid 36.
[  821.815997][T10731] syz.2.1773: attempt to access beyond end of device
[  821.815997][T10731] loop2: rw=0, sector=8, nr_sectors = 16 limit=16
[  821.829955][T10731] syz.2.1773: attempt to access beyond end of device
[  821.829955][T10731] loop2: rw=0, sector=8, nr_sectors = 16 limit=16
[  822.605632][T10743] loop2: detected capacity change from 0 to 16
[  822.729686][ T4368] usb 4-1: new low-speed USB device number 15 using dummy_hcd
[  822.762226][T10743] erofs: (device loop2): mounted with root inode @ nid 36.
[  823.151316][ T4368] usb 4-1: config 1 has an invalid interface descriptor of length 6, skipping
[  823.470749][T10754] syz.2.1777: attempt to access beyond end of device
[  823.470749][T10754] loop2: rw=0, sector=8, nr_sectors = 16 limit=16
[  823.512482][T10754] syz.2.1777: attempt to access beyond end of device
[  823.512482][T10754] loop2: rw=0, sector=8, nr_sectors = 16 limit=16
[  823.539782][ T4368] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  823.567274][ T4368] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  823.585561][ T4368] usb 4-1: config 1 has no interface number 1
[  823.617977][ T4368] usb 4-1: string descriptor 0 read error: -22
[  823.923035][ T4368] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  823.925358][T10750] loop4: detected capacity change from 0 to 2048
[  823.959290][ T4368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  824.011615][T10750] UDF-fs: bad mount option "ÿÿ0xffffffffffffffff" or missing value
[  824.058126][ T4368] usb 4-1: MIDIStreaming interface descriptor not found
[  825.751873][ T4368] snd-usb-audio: probe of 4-1:1.2 failed with error -16
[  825.777151][ T4368] usb 4-1: USB disconnect, device number 15
[  826.032836][T10779] netlink: 'syz.1.1785': attribute type 3 has an invalid length.
[  826.119776][   T48] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3
[  828.545091][T10798] loop1: detected capacity change from 0 to 1024
[  828.608790][T10798] EXT4-fs: Ignoring removed oldalloc option
[  828.658379][T10798] ext4: Unknown parameter 'nouser_xattr'
[  837.799752][T10846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  839.944503][T10848] loop1: detected capacity change from 0 to 512
[  840.134349][T10848] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.1808: bad orphan inode 15
[  840.168436][T10848] EXT4-fs (loop1): Remounting filesystem read-only
[  840.175134][T10848] ext4_test_bit(bit=14, block=18) = 1
[  840.180593][T10848] is_bad_inode(inode)=0
[  840.184797][T10848] NEXT_ORPHAN(inode)=1023
[  840.189142][T10848] max_ino=32
[  840.192692][T10848] i_nlink=0
[  840.201770][T10848] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2935: inode #15: comm syz.1.1808: corrupted xattr block 19
[  840.219880][T10848] EXT4-fs (loop1): Remounting filesystem read-only
[  840.226444][T10848] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117)
[  840.235751][T10848] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  840.260153][T10848] ext4 filesystem being mounted at /344/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  840.278001][T10848] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.1808: path /344/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0
[  840.302315][T10848] EXT4-fs (loop1): Remounting filesystem read-only
[  840.578853][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  841.333945][ T4285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  841.349594][T10865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  841.358699][T10865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  841.381179][T10865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  841.388854][T10865] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  841.396556][T10865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  842.989502][ T4347] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  843.021162][T10863] chnl_net:caif_netlink_parms(): no params data found
[  843.070521][T10885] loop3: detected capacity change from 0 to 256
[  843.077625][T10885] exfat: Unknown parameter '"'
[  843.239513][ T4347] usb 3-1: Using ep0 maxpacket: 16
[  843.253341][ T4347] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  843.326335][ T4347] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  844.322052][T10865] Bluetooth: hci5: command 0x0409 tx timeout
[  844.779544][ T4347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.847077][ T4347] usb 3-1: config 0 descriptor??
[  844.925809][ T4347] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  845.096032][T10895] loop3: detected capacity change from 0 to 16
[  845.156741][T10895] erofs: (device loop3): mounted with root inode @ nid 36.
[  845.515205][T10901] syz.3.1817: attempt to access beyond end of device
[  845.515205][T10901] loop3: rw=0, sector=8, nr_sectors = 16 limit=16
[  845.531700][T10901] syz.3.1817: attempt to access beyond end of device
[  845.531700][T10901] loop3: rw=0, sector=8, nr_sectors = 16 limit=16
[  846.164417][ T4347] usb 3-1: USB disconnect, device number 15
[  846.320573][T10863] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.327688][T10863] bridge0: port 1(bridge_slave_0) entered disabled state
[  846.358236][T10863] device bridge_slave_0 entered promiscuous mode
[  846.365996][T10865] Bluetooth: hci5: command 0x041b tx timeout
[  847.054776][T10904] loop1: detected capacity change from 0 to 4096
[  847.095841][T10905] loop2: detected capacity change from 0 to 1024
[  847.110408][T10905] EXT4-fs: Ignoring removed oldalloc option
[  847.116439][T10905] ext4: Unknown parameter 'nouser_xattr'
[  847.135392][T10904] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  848.603773][T10865] Bluetooth: hci5: command 0x040f tx timeout
[  848.741115][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  849.008275][T10863] bridge0: port 2(bridge_slave_1) entered blocking state
[  849.034865][T10863] bridge0: port 2(bridge_slave_1) entered disabled state
[  849.111940][T10863] device bridge_slave_1 entered promiscuous mode
[  850.224479][T10863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  850.437477][T10865] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3
[  850.543118][ T7802] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  850.803378][T10865] Bluetooth: hci5: command 0x0419 tx timeout
[  852.154116][T10923] netlink: 'syz.1.1825': attribute type 3 has an invalid length.
[  852.165112][T10863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  852.425890][ T7802] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.491953][T10863] team0: Port device team_slave_0 added
[  852.525026][T10863] team0: Port device team_slave_1 added
[  852.706834][ T7802] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.909511][ T4347] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  853.119558][ T4347] usb 6-1: Using ep0 maxpacket: 16
[  853.131343][ T4347] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  853.177951][ T4347] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  853.187434][ T4347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  853.242891][ T4347] usb 6-1: config 0 descriptor??
[  853.343903][ T4347] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  853.591941][T10863] batman_adv: batadv0: Adding interface: batadv_slave_0
[  853.598965][T10863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  853.745758][T10863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  853.852226][ T7802] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.877939][T10948] loop2: detected capacity change from 0 to 1024
[  853.902108][T10863] batman_adv: batadv0: Adding interface: batadv_slave_1
[  853.909105][T10863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  853.960700][T10948] EXT4-fs: Ignoring removed nobh option
[  853.966330][T10948] EXT4-fs: Ignoring removed bh option
[  854.010908][T10948] EXT4-fs: Ignoring removed nobh option
[  854.037447][T10863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  854.448859][T10948] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  854.642000][T10863] device hsr_slave_0 entered promiscuous mode
[  854.727490][T10863] device hsr_slave_1 entered promiscuous mode
[  854.821123][T10863] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  854.888490][T10863] Cannot create hsr debugfs directory
[  855.153113][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  855.174775][T10958] loop1: detected capacity change from 0 to 16
[  855.213049][T10958] erofs: (device loop1): mounted with root inode @ nid 36.
[  855.460070][T10959] syz.1.1834: attempt to access beyond end of device
[  855.460070][T10959] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[  856.662868][ T4368] usb 6-1: USB disconnect, device number 7
[  856.768830][T10973] loop3: detected capacity change from 0 to 512
[  856.994094][T10865] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3
[  856.995467][T10973] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  857.032237][T10973] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  857.048809][T10974] netlink: 'syz.1.1837': attribute type 3 has an invalid length.
[  857.150584][T10863] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  857.203105][T10863] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  857.447766][T10863] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  858.392106][T10863] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  858.711990][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  860.494439][T10995] loop1: detected capacity change from 0 to 2048
[  860.567774][T10995] UDF-fs: bad mount option "ÿÿ0xffffffffffffffff" or missing value
[  860.749271][ T4425] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  861.829324][T11015] loop3: detected capacity change from 0 to 16
[  861.920331][T11015] erofs: (device loop3): mounted with root inode @ nid 36.
[  862.221784][T11022] syz.3.1846: attempt to access beyond end of device
[  862.221784][T11022] loop3: rw=0, sector=8, nr_sectors = 16 limit=16
[  864.599754][T10863] 8021q: adding VLAN 0 to HW filter on device bond0
[  864.846358][T11040] loop2: detected capacity change from 0 to 512
[  864.871466][T11040] EXT4-fs (loop2): Test dummy encryption mode enabled
[  864.871575][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  864.878291][T11040] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  864.895439][T11040] EXT4-fs (loop2): ea_inode feature is not supported for Hurd
[  865.720148][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  865.733809][T10863] 8021q: adding VLAN 0 to HW filter on device team0
[  865.801206][T11043] loop2: detected capacity change from 0 to 8
[  866.077882][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  866.120544][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  866.187418][ T4410] bridge0: port 1(bridge_slave_0) entered blocking state
[  866.194643][ T4410] bridge0: port 1(bridge_slave_0) entered forwarding state
[  867.572753][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  867.585677][T11050] loop1: detected capacity change from 0 to 1024
[  867.597059][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  867.610204][T11050] EXT4-fs: Ignoring removed oldalloc option
[  867.614908][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  867.616221][T11050] ext4: Unknown parameter 'nouser_xattr'
[  867.648431][ T4410] bridge0: port 2(bridge_slave_1) entered blocking state
[  867.655685][ T4410] bridge0: port 2(bridge_slave_1) entered forwarding state
[  867.754425][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'.
[  869.250050][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  869.260062][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  869.484178][T11055] loop3: detected capacity change from 0 to 1024
[  869.613714][T11055] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  869.739611][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  869.762831][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  869.780595][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  869.822598][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  869.840693][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  869.869998][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  869.938779][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  869.974733][T10863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  870.018145][T10863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  870.071508][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  870.078211][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  870.104398][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  870.214264][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  870.221865][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  871.571621][T11070] loop1: detected capacity change from 0 to 1024
[  871.579308][T11070] EXT4-fs: Ignoring removed oldalloc option
[  871.585533][T11070] ext4: Unknown parameter 'nouser_xattr'
[  873.173653][T11076] loop3: detected capacity change from 0 to 512
[  873.181888][T11076] EXT4-fs (loop3): Test dummy encryption mode enabled
[  873.191285][T11076] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  873.201246][T11076] EXT4-fs (loop3): ea_inode feature is not supported for Hurd
[  873.381920][ T7802] device hsr_slave_0 left promiscuous mode
[  873.401990][ T7802] device hsr_slave_1 left promiscuous mode
[  873.434472][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  873.509467][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_0
[  873.610320][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  873.617846][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_1
[  874.180243][ T7802] device bridge_slave_1 left promiscuous mode
[  874.186523][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state
[  875.859925][ T7802] device bridge_slave_0 left promiscuous mode
[  875.866189][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state
[  876.135118][ T7802] device veth1_macvtap left promiscuous mode
[  876.169634][ T7802] device veth0_macvtap left promiscuous mode
[  876.213220][ T7802] device veth1_vlan left promiscuous mode
[  876.275242][ T7802] device veth0_vlan left promiscuous mode
[  876.947082][T11097] loop3: detected capacity change from 0 to 2048
[  877.100621][   T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  877.118921][   T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  877.127605][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  877.138830][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  877.147898][   T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  877.155712][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  877.256106][T11103] loop1: detected capacity change from 0 to 1024
[  877.466562][T11097] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  877.537029][T11103] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  878.130851][T11110] EXT4-fs (loop3): shut down requested (2)
[  878.313527][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  878.520196][T11115] loop1: detected capacity change from 0 to 1024
[  878.598656][T11115] EXT4-fs error (device loop1): __ext4_fill_super:5404: comm syz.1.1864: inode #2: comm syz.1.1864: iget: illegal inode #
[  878.709611][T11115] EXT4-fs (loop1): get root inode failed
[  878.716437][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  878.745876][T11115] EXT4-fs (loop1): mount failed
[  878.829531][ T4333] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  879.084417][ T4333] usb 3-1: Using ep0 maxpacket: 16
[  880.411289][T10865] Bluetooth: hci3: command 0x0409 tx timeout
[  880.437178][ T4333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  880.459425][ T4333] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  880.479479][ T4333] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  880.488840][ T4333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  880.499175][ T4333] usb 3-1: config 0 descriptor??
[  880.512831][ T4333] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  882.951465][T10865] Bluetooth: hci3: command 0x041b tx timeout
[  883.059855][ T4326] usb 3-1: USB disconnect, device number 16
[  883.777971][ T7802] team0 (unregistering): Port device team_slave_1 removed
[  883.858684][T10865] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3
[  884.014397][ T7802] team0 (unregistering): Port device team_slave_0 removed
[  884.309256][ T7802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  884.484927][ T7802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  884.933413][T11145] loop3: detected capacity change from 0 to 512
[  884.944841][T11145] EXT4-fs (loop3): Test dummy encryption mode enabled
[  884.952296][T11145] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  884.962258][T11145] EXT4-fs (loop3): ea_inode feature is not supported for Hurd
[  885.097400][T10865] Bluetooth: hci3: command 0x040f tx timeout
[  886.233479][T11149] loop3: detected capacity change from 0 to 1024
[  886.382967][T11149] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  887.089719][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  887.159807][T10865] Bluetooth: hci3: command 0x0419 tx timeout
[  887.351954][ T7802] bond0 (unregistering): Released all slaves
[  887.369044][T11155] loop3: detected capacity change from 0 to 512
[  887.412948][T11155] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  887.431253][T11155] EXT4-fs (loop3): 1 truncate cleaned up
[  887.449505][T11155] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  887.478579][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1873'.
[  887.807415][T11138] netlink: 'syz.2.1870': attribute type 3 has an invalid length.
[  887.920478][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  887.928089][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  887.995011][T11164] loop2: detected capacity change from 0 to 1024
[  888.013872][T10863] 8021q: adding VLAN 0 to HW filter on device batadv0
[  888.049540][T11164] EXT4-fs error (device loop2): __ext4_fill_super:5404: comm syz.2.1874: inode #2: comm syz.2.1874: iget: illegal inode #
[  888.130100][T11164] EXT4-fs (loop2): get root inode failed
[  888.136531][T11164] EXT4-fs (loop2): mount failed
[  888.343596][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  893.537279][T11098] chnl_net:caif_netlink_parms(): no params data found
[  893.656596][T11201] loop3: detected capacity change from 0 to 1024
[  893.997595][T11201] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  894.640441][T11098] bridge0: port 1(bridge_slave_0) entered blocking state
[  894.647622][T11098] bridge0: port 1(bridge_slave_0) entered disabled state
[  894.683345][T11098] device bridge_slave_0 entered promiscuous mode
[  894.747412][T11098] bridge0: port 2(bridge_slave_1) entered blocking state
[  894.760050][T11098] bridge0: port 2(bridge_slave_1) entered disabled state
[  894.794384][T11098] device bridge_slave_1 entered promiscuous mode
[  894.878222][ T7802] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  894.996137][T11098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  895.058817][ T7802] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  895.153136][T11098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  895.180961][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  895.221703][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  895.273664][T10863] device veth0_vlan entered promiscuous mode
[  895.452427][ T7802] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  895.474366][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  895.507218][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  895.543425][T11098] team0: Port device team_slave_0 added
[  895.610333][ T7802] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  895.662391][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  895.678168][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  895.710978][T11098] team0: Port device team_slave_1 added
[  895.771692][T10863] device veth1_vlan entered promiscuous mode
[  895.853566][T11098] batman_adv: batadv0: Adding interface: batadv_slave_0
[  895.879095][T11098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  895.911526][T11098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  895.939214][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  895.953880][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  895.986201][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  895.997678][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  896.054664][T10863] device veth0_macvtap entered promiscuous mode
[  896.066189][T11098] batman_adv: batadv0: Adding interface: batadv_slave_1
[  896.082233][T11098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  896.115442][T11098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  896.298597][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  896.815090][T10863] device veth1_macvtap entered promiscuous mode
[  897.247277][T10863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  897.358494][T10863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  897.436079][T10863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  897.499621][T10863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  897.527781][T10863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  897.554070][T10863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  897.583543][T10863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  897.607693][T10865] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3
[  897.657046][T10863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  897.879575][T10863] batman_adv: batadv0: Interface activated: batadv_slave_0
[  897.913133][T11098] device hsr_slave_0 entered promiscuous mode
[  898.186770][T11098] device hsr_slave_1 entered promiscuous mode
[  898.208626][T11098] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  899.019901][T11098] Cannot create hsr debugfs directory
[  899.030451][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  899.052650][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  899.088980][T11238] netlink: 'syz.2.1884': attribute type 3 has an invalid length.
[  899.101550][T10863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  899.138511][T10863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.171998][T10863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  899.242957][T10863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.269306][T10863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  899.304031][T10863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.334535][T10863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  899.354757][T10863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.381290][T10863] batman_adv: batadv0: Interface activated: batadv_slave_1
[  899.488713][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  899.528475][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  899.722128][T10863] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  900.157988][T10863] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  900.234914][T10863] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  900.317477][T10863] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  900.663973][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  905.002940][   T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  905.013340][   T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  905.023324][   T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  905.041219][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  905.048971][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  905.059250][   T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  905.442705][T11285] loop1: detected capacity change from 0 to 1024
[  905.502103][T11285] EXT4-fs error (device loop1): __ext4_fill_super:5404: comm syz.1.1891: inode #2: comm syz.1.1891: iget: illegal inode #
[  905.528838][T11285] EXT4-fs (loop1): get root inode failed
[  905.535314][T11285] EXT4-fs (loop1): mount failed
[  905.615471][T11098] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  905.623012][T11288] loop2: detected capacity change from 0 to 1024
[  905.648191][T11288] EXT4-fs: Ignoring removed oldalloc option
[  905.730051][T11288] ext4: Unknown parameter 'nouser_xattr'
[  907.159675][T10865] Bluetooth: hci2: command 0x0409 tx timeout
[  907.314833][T11098] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  907.384028][T11098] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  908.857244][T11098] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  909.009199][ T7802] device hsr_slave_0 left promiscuous mode
[  909.030243][ T7802] device hsr_slave_1 left promiscuous mode
[  909.049619][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  909.057101][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_0
[  909.090508][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  909.098006][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_1
[  909.160332][ T7802] device bridge_slave_1 left promiscuous mode
[  909.166650][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state
[  909.190920][ T7802] device bridge_slave_0 left promiscuous mode
[  909.197237][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state
[  909.239670][   T48] Bluetooth: hci2: command 0x041b tx timeout
[  909.352628][ T7802] device veth1_macvtap left promiscuous mode
[  909.358751][ T7802] device veth0_macvtap left promiscuous mode
[  909.394370][ T7802] device veth1_vlan left promiscuous mode
[  909.442031][ T7802] device veth0_vlan left promiscuous mode
[  911.321926][   T48] Bluetooth: hci2: command 0x040f tx timeout
[  911.751417][T10993] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  911.860280][   T48] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3
[  913.404875][T10993] usb 2-1: Using ep0 maxpacket: 32
[  913.408993][   T48] Bluetooth: hci2: command 0x0419 tx timeout
[  913.426727][T10993] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  913.461905][T10993] usb 2-1: config 0 has no interface number 0
[  913.489530][T10993] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  913.521685][T10993] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  913.555237][T10993] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  913.589510][T10993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  913.607811][T10993] usb 2-1: Product: syz
[  913.617931][T10993] usb 2-1: Manufacturer: syz
[  913.628044][T10993] usb 2-1: SerialNumber: syz
[  913.655327][T10993] usb 2-1: config 0 descriptor??
[  913.718793][T10993] usb 2-1: can't set config #0, error -71
[  913.769614][T10993] usb 2-1: USB disconnect, device number 18
[  915.298169][   T26] kauditd_printk_skb: 16 callbacks suppressed
[  915.298190][   T26] audit: type=1326 audit(1761188190.766:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11337 comm="syz.1.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5358efc9 code=0x7fc00000
[  915.800576][ T7802] team0 (unregistering): Port device team_slave_1 removed
[  915.950956][ T7802] team0 (unregistering): Port device team_slave_0 removed
[  916.017146][T11343] loop2: detected capacity change from 0 to 1024
[  916.046224][T11343] EXT4-fs: Ignoring removed oldalloc option
[  916.052528][T11343] ext4: Unknown parameter 'nouser_xattr'
[  919.304686][T11356] loop2: detected capacity change from 0 to 1024
[  919.321797][T11356] EXT4-fs: Ignoring removed oldalloc option
[  919.327931][T11356] ext4: Unknown parameter 'nouser_xattr'
[  920.819772][T11331] netlink: 'syz.3.1900': attribute type 3 has an invalid length.
[  921.076514][T11365] loop1: detected capacity change from 0 to 128
[  921.124637][T11365] EXT4-fs (loop1): Test dummy encryption mode enabled
[  921.175509][T11365] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  921.194816][T11365] ext4 filesystem being mounted at /377/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  922.134526][T11281] chnl_net:caif_netlink_parms(): no params data found
[  923.011841][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  923.015034][T11098] 8021q: adding VLAN 0 to HW filter on device bond0
[  923.119716][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  924.571874][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  924.583788][T11098] 8021q: adding VLAN 0 to HW filter on device team0
[  924.679607][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  924.700414][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  924.722761][ T4409] bridge0: port 1(bridge_slave_0) entered blocking state
[  924.730019][ T4409] bridge0: port 1(bridge_slave_0) entered forwarding state
[  924.776836][T11281] bridge0: port 1(bridge_slave_0) entered blocking state
[  924.784838][T11281] bridge0: port 1(bridge_slave_0) entered disabled state
[  924.801382][T11281] device bridge_slave_0 entered promiscuous mode
[  924.823195][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  924.840673][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  924.860129][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  924.879931][ T4409] bridge0: port 2(bridge_slave_1) entered blocking state
[  924.887099][ T4409] bridge0: port 2(bridge_slave_1) entered forwarding state
[  924.919507][T11281] bridge0: port 2(bridge_slave_1) entered blocking state
[  924.926764][T11281] bridge0: port 2(bridge_slave_1) entered disabled state
[  924.990768][T11281] device bridge_slave_1 entered promiscuous mode
[  925.124261][T11281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  925.261890][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  925.331959][T11281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  925.374727][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  925.966300][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  926.059440][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  926.144445][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  926.375043][ T7802] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  926.509540][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  926.529113][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  926.559807][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  926.570369][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  926.589899][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  926.614241][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  926.712539][ T7802] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  926.757081][T11098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  926.782084][T11281] team0: Port device team_slave_0 added
[  926.788248][   T48] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3
[  926.794233][T11418] netlink: 'syz.1.1917': attribute type 3 has an invalid length.
[  926.842944][ T7802] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  926.860044][T11281] team0: Port device team_slave_1 added
[  927.080604][ T7802] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  927.421038][T11281] batman_adv: batadv0: Adding interface: batadv_slave_0
[  927.428083][T11281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  927.471793][T11427] loop3: detected capacity change from 0 to 1024
[  927.538098][T11281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  927.690120][   T32] hfsplus: b-tree write err: -5, ino 8
[  927.700245][T11281] batman_adv: batadv0: Adding interface: batadv_slave_1
[  927.707357][T11281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  927.800062][T11281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  927.986684][T11281] device hsr_slave_0 entered promiscuous mode
[  928.026748][T11281] device hsr_slave_1 entered promiscuous mode
[  928.050331][T11281] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  928.088793][T11281] Cannot create hsr debugfs directory
[  928.775700][T11098] 8021q: adding VLAN 0 to HW filter on device batadv0
[  928.794970][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  928.819794][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  929.043916][T11441] loop1: detected capacity change from 0 to 1024
[  929.103497][T11441] EXT4-fs: Ignoring removed oldalloc option
[  929.133950][T11441] ext4: Unknown parameter 'nouser_xattr'
[  931.643542][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  931.650078][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  933.067557][ T7802] device hsr_slave_0 left promiscuous mode
[  933.086528][ T7802] device hsr_slave_1 left promiscuous mode
[  933.126163][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  933.180715][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_0
[  933.248692][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  933.276014][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_1
[  934.056114][ T7802] device bridge_slave_1 left promiscuous mode
[  934.064048][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.087157][ T7802] device bridge_slave_0 left promiscuous mode
[  934.095022][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state
[  934.200130][ T7802] device veth1_macvtap left promiscuous mode
[  934.216785][ T7802] device veth0_macvtap left promiscuous mode
[  934.223788][ T7802] device veth1_vlan left promiscuous mode
[  934.229924][ T7802] device veth0_vlan left promiscuous mode
[  934.804047][   T48] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3
[  935.141915][T11491] loop2: detected capacity change from 0 to 1024
[  935.221569][T11491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  937.304128][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  937.479594][T11502] loop2: detected capacity change from 0 to 1024
[  937.501742][T11502] EXT4-fs: Ignoring removed oldalloc option
[  937.520368][T11502] ext4: Unknown parameter 'nouser_xattr'
[  939.447435][T10865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  939.459616][T10865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  939.470135][T10865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  939.470400][ T7802] team0 (unregistering): Port device team_slave_1 removed
[  939.491150][T10865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  939.498826][T10865] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  939.506561][T10865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  939.728572][ T7802] team0 (unregistering): Port device team_slave_0 removed
[  940.022225][ T7802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  940.153067][T11514] loop2: detected capacity change from 0 to 256
[  940.454981][   T26] audit: type=1800 audit(1761188216.206:1221): pid=11514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1935" name="file1" dev="loop2" ino=1048660 res=0 errno=0
[  940.498680][T11514] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  940.523991][T11514] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  940.540498][T11514] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  940.593547][ T7802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  941.983724][T11517] loop2: detected capacity change from 0 to 8192
[  942.621417][T10865] Bluetooth: hci5: command 0x0409 tx timeout
[  942.661558][ T7802] bond0 (unregistering): Released all slaves
[  942.926058][T11488] netlink: 'syz.3.1930': attribute type 3 has an invalid length.
[  943.249116][T11281] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  943.288715][T11521] loop3: detected capacity change from 0 to 1024
[  943.399727][T11521] EXT4-fs error (device loop3): __ext4_fill_super:5404: comm syz.3.1939: inode #2: comm syz.3.1939: iget: illegal inode #
[  943.459412][T11521] EXT4-fs (loop3): get root inode failed
[  943.465382][T11521] EXT4-fs (loop3): mount failed
[  943.484322][T11281] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  943.560900][T11281] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  943.616917][T11281] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  944.405298][T11281] 8021q: adding VLAN 0 to HW filter on device bond0
[  944.496852][T11505] chnl_net:caif_netlink_parms(): no params data found
[  944.543265][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  944.575427][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  944.680122][T10865] Bluetooth: hci5: command 0x041b tx timeout
[  944.770385][T11281] 8021q: adding VLAN 0 to HW filter on device team0
[  944.878311][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  945.982184][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  946.017401][ T4409] bridge0: port 1(bridge_slave_0) entered blocking state
[  946.024677][ T4409] bridge0: port 1(bridge_slave_0) entered forwarding state
[  946.157792][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  946.186721][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  946.230626][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  946.241635][ T4409] bridge0: port 2(bridge_slave_1) entered blocking state
[  946.248943][ T4409] bridge0: port 2(bridge_slave_1) entered forwarding state
[  946.258248][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  946.279797][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  946.364156][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  946.418499][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  946.451904][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  946.484003][T11505] bridge0: port 1(bridge_slave_0) entered blocking state
[  946.544785][T11505] bridge0: port 1(bridge_slave_0) entered disabled state
[  946.570946][T11505] device bridge_slave_0 entered promiscuous mode
[  946.740279][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  946.759542][T10865] Bluetooth: hci5: command 0x040f tx timeout
[  946.842457][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  946.893419][T11505] bridge0: port 2(bridge_slave_1) entered blocking state
[  946.905238][T11505] bridge0: port 2(bridge_slave_1) entered disabled state
[  946.960703][T11505] device bridge_slave_1 entered promiscuous mode
[  947.006184][T11281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  947.036674][T11281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  947.052521][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  947.062157][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  947.072323][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  948.116421][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  948.264296][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  948.495078][T11505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  948.629175][T11505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  948.824361][T11505] team0: Port device team_slave_0 added
[  948.839737][T10865] Bluetooth: hci5: command 0x0419 tx timeout
[  948.970718][T11505] team0: Port device team_slave_1 added
[  949.092254][T11505] batman_adv: batadv0: Adding interface: batadv_slave_0
[  949.138155][T11505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  949.252774][T11505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  949.345688][T11505] batman_adv: batadv0: Adding interface: batadv_slave_1
[  949.371560][T11505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  949.509484][T11505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  949.743823][T11505] device hsr_slave_0 entered promiscuous mode
[  949.775168][T11505] device hsr_slave_1 entered promiscuous mode
[  949.814794][T11505] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  949.884321][T11581] loop3: detected capacity change from 0 to 2048
[  949.979366][T11582] loop2: detected capacity change from 0 to 256
[  950.185878][   T26] audit: type=1800 audit(1761188225.936:1222): pid=11582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1945" name="file1" dev="loop2" ino=1048663 res=0 errno=0
[  950.242319][T11583] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  950.265855][T11583] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  950.279028][T11583] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  950.362925][T11505] Cannot create hsr debugfs directory
[  950.398170][T11581] UDF-fs: bad mount option "ÿÿ0xffffffffffffffff" or missing value
[  950.539709][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  950.547352][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  950.618643][T10778] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  952.192651][T11281] 8021q: adding VLAN 0 to HW filter on device batadv0
[  954.820635][T11622] loop2: detected capacity change from 0 to 1024
[  954.848402][T11622] EXT4-fs: quotafile must be on filesystem root
[  955.750026][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  955.790438][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  955.811560][T11624] loop2: detected capacity change from 0 to 512
[  955.867462][T11624] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1953: iget: bad i_size value: 38620345925642
[  955.925135][T11624] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1953: couldn't read orphan inode 15 (err -117)
[  955.942442][T10865] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3
[  955.957427][T11633] netlink: 'syz.3.1947': attribute type 3 has an invalid length.
[  955.982201][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  956.007853][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  956.031743][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  956.041778][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  956.068903][T11281] device veth0_vlan entered promiscuous mode
[  956.122520][T11624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  956.362570][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  956.470918][T11281] device veth1_vlan entered promiscuous mode
[  956.625915][T11505] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  956.788595][T11505] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  956.819642][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  956.835958][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  956.881539][ T7802] device hsr_slave_0 left promiscuous mode
[  956.974998][ T7802] device hsr_slave_1 left promiscuous mode
[  956.995589][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_0
[  957.026413][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_1
[  957.067415][ T7802] device bridge_slave_1 left promiscuous mode
[  957.079064][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state
[  957.206925][ T7802] device bridge_slave_0 left promiscuous mode
[  957.218396][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state
[  958.784458][ T7802] team0 (unregistering): Port device team_slave_1 removed
[  958.884875][ T7802] team0 (unregistering): Port device team_slave_0 removed
[  958.991039][ T7802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  959.079192][ T7802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  961.429039][ T7802] bond0 (unregistering): Released all slaves
[  961.615357][T11505] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  961.653505][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  961.670723][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  961.720724][T11505] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  961.752251][T11281] device veth0_macvtap entered promiscuous mode
[  961.766132][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  961.852389][T11281] device veth1_macvtap entered promiscuous mode
[  961.874880][T11697] loop1: detected capacity change from 0 to 16
[  961.892905][T11281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  961.905475][T11281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  961.913639][T11693] loop2: detected capacity change from 0 to 512
[  961.916435][T11281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  961.934119][T11281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  961.947064][T11693] EXT4-fs (loop2): Test dummy encryption mode enabled
[  961.953116][T11697] erofs: (device loop1): mounted with root inode @ nid 36.
[  961.970017][T11693] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  961.992302][T11281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  962.003564][T11693] EXT4-fs (loop2): ea_inode feature is not supported for Hurd
[  962.011427][T11281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  962.043167][T11281] batman_adv: batadv0: Interface activated: batadv_slave_0
[  962.055127][T11697] syz.1.1966: attempt to access beyond end of device
[  962.055127][T11697] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[  962.069110][T11697] syz.1.1966: attempt to access beyond end of device
[  962.069110][T11697] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[  962.119842][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  962.146685][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  962.248259][T11281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  962.275013][T11281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  962.329487][T11281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  962.360003][T11281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  962.389474][T11281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  962.449458][T11281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  962.529618][T11281] batman_adv: batadv0: Interface activated: batadv_slave_1
[  962.560273][T11703] loop3: detected capacity change from 0 to 1024
[  962.571786][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  962.977805][T11707] loop1: detected capacity change from 0 to 8192
[  963.313512][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  963.395531][T11703] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  965.320532][T11505] 8021q: adding VLAN 0 to HW filter on device bond0
[  965.360577][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  965.409401][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  965.438215][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  965.514927][T11505] 8021q: adding VLAN 0 to HW filter on device team0
[  965.605055][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  965.630378][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  965.688418][ T4442] bridge0: port 1(bridge_slave_0) entered blocking state
[  965.695656][ T4442] bridge0: port 1(bridge_slave_0) entered forwarding state
[  965.784780][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  965.999864][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  966.008717][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  966.068776][ T4442] bridge0: port 2(bridge_slave_1) entered blocking state
[  966.076014][ T4442] bridge0: port 2(bridge_slave_1) entered forwarding state
[  966.110185][ T2183] usb 4-1: new low-speed USB device number 16 using dummy_hcd
[  966.160771][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  966.195100][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  966.227246][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  966.239544][   T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  966.250644][   T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  966.259420][   T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  966.268691][   T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  966.276619][   T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  966.284121][   T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  966.303420][ T2183] usb 4-1: config 1 has an invalid interface descriptor of length 6, skipping
[  966.312748][ T2183] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  966.316618][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  966.332092][ T2183] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  966.351252][ T2183] usb 4-1: config 1 has no interface number 1
[  966.367989][ T2183] usb 4-1: string descriptor 0 read error: -22
[  966.381117][ T2183] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  966.390786][ T2183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.416588][ T2183] usb 4-1: MIDIStreaming interface descriptor not found
[  966.431436][ T2183] snd-usb-audio: probe of 4-1:1.2 failed with error -16
[  966.435909][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  966.485608][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  966.516360][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  966.542404][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  966.568742][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  966.607048][T11505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  966.607937][ T4795] usb 4-1: USB disconnect, device number 16
[  966.649095][T11505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  966.795780][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  966.816266][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  968.993836][   T48] Bluetooth: hci2: command 0x0409 tx timeout
[  970.682007][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  970.719906][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  970.746654][T11505] 8021q: adding VLAN 0 to HW filter on device batadv0
[  970.790127][T11731] chnl_net:caif_netlink_parms(): no params data found
[  971.089866][   T48] Bluetooth: hci2: command 0x041b tx timeout
[  971.115210][T11785] loop3: detected capacity change from 0 to 512
[  971.259663][T11785] EXT4-fs (loop3): Test dummy encryption mode enabled
[  971.304105][T11731] bridge0: port 1(bridge_slave_0) entered blocking state
[  971.319789][T11731] bridge0: port 1(bridge_slave_0) entered disabled state
[  971.327784][T11731] device bridge_slave_0 entered promiscuous mode
[  971.418418][T11785] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  971.439075][T11731] bridge0: port 2(bridge_slave_1) entered blocking state
[  971.449245][T11731] bridge0: port 2(bridge_slave_1) entered disabled state
[  971.465321][T11731] device bridge_slave_1 entered promiscuous mode
[  971.502638][T11785] EXT4-fs (loop3): ea_inode feature is not supported for Hurd
[  971.912901][T11731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  972.994991][T11731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  973.159416][   T48] Bluetooth: hci2: command 0x040f tx timeout
[  973.384105][T11731] team0: Port device team_slave_0 added
[  973.415422][T11731] team0: Port device team_slave_1 added
[  973.559663][ T2183] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  973.621234][T11731] batman_adv: batadv0: Adding interface: batadv_slave_0
[  973.628358][T11731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  973.740158][T11731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  973.779538][ T2183] usb 3-1: Using ep0 maxpacket: 16
[  973.808271][ T2183] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  973.849384][ T2183] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  973.897380][ T2183] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  973.989510][ T2183] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  974.009549][ T2183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  974.020167][ T2183] usb 3-1: Product: syz
[  974.033495][ T2183] usb 3-1: Manufacturer: syz
[  974.040444][ T2183] usb 3-1: SerialNumber: syz
[  974.068710][T11731] batman_adv: batadv0: Adding interface: batadv_slave_1
[  974.085225][T11731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  974.217151][T11731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  974.476561][ T2183] usb 3-1: 0:2 : does not exist
[  974.588501][ T2183] usb 3-1: USB disconnect, device number 17
[  974.660019][T10778] udevd[10778]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  974.803112][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  974.844772][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  974.945181][T11731] device hsr_slave_0 entered promiscuous mode
[  974.972310][T11731] device hsr_slave_1 entered promiscuous mode
[  974.989431][T11731] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  975.160467][T11731] Cannot create hsr debugfs directory
[  975.239504][   T48] Bluetooth: hci2: command 0x0419 tx timeout
[  975.941673][ T7802] device hsr_slave_0 left promiscuous mode
[  975.989708][ T7802] device hsr_slave_1 left promiscuous mode
[  976.089632][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  976.097176][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_0
[  976.150246][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  976.193724][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_1
[  976.356797][ T7802] device bridge_slave_1 left promiscuous mode
[  976.384555][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state
[  977.036055][ T7802] device bridge_slave_0 left promiscuous mode
[  977.043347][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state
[  977.133614][ T7802] device veth1_macvtap left promiscuous mode
[  977.143198][ T7802] device veth0_macvtap left promiscuous mode
[  977.161124][ T7802] device veth1_vlan left promiscuous mode
[  977.167029][ T7802] device veth0_vlan left promiscuous mode
[  981.460467][ T7802] team0 (unregistering): Port device team_slave_1 removed
[  981.537756][ T7802] team0 (unregistering): Port device team_slave_0 removed
[  981.620333][ T7802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  983.086362][ T7802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  983.567652][T11848] loop1: detected capacity change from 0 to 512
[  983.578990][T11848] EXT4-fs (loop1): Test dummy encryption mode enabled
[  983.586092][T11848] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  983.596262][T11848] EXT4-fs (loop1): ea_inode feature is not supported for Hurd
[  985.569292][T11854] loop1: detected capacity change from 0 to 16
[  985.588123][T11854] erofs: (device loop1): mounted with root inode @ nid 36.
[  985.606780][T11854] syz.1.1993: attempt to access beyond end of device
[  985.606780][T11854] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[  985.620752][T11854] syz.1.1993: attempt to access beyond end of device
[  985.620752][T11854] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[  985.783766][ T7802] bond0 (unregistering): Released all slaves
[  986.765053][T11862] loop1: detected capacity change from 0 to 1024
[  986.810660][T11862] EXT4-fs: Ignoring removed oldalloc option
[  986.817372][T11862] ext4: Unknown parameter 'nouser_xattr'
[  988.414615][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  988.441468][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  988.494012][T11505] device veth0_vlan entered promiscuous mode
[  988.515465][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  988.535620][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  988.573181][T11505] device veth1_vlan entered promiscuous mode
[  988.777537][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  990.300310][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  990.319250][T11505] device veth0_macvtap entered promiscuous mode
[  990.353442][T11505] device veth1_macvtap entered promiscuous mode
[  991.560405][T11505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  991.590008][T11505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  991.629421][T11505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  991.673629][T11505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  991.701565][T11505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  991.741539][T11505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  991.775359][T11505] batman_adv: batadv0: Interface activated: batadv_slave_0
[  991.810658][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  991.820763][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  991.951898][T11505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  991.985464][T11505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.026159][T11505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.045815][T11505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.085975][T11505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.125829][T11505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.183702][T11505] batman_adv: batadv0: Interface activated: batadv_slave_1
[  992.212324][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  992.257305][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  992.329877][T11505] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  992.338686][T11505] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  992.421085][T11505] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  993.440701][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  993.447076][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  993.481949][T11505] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  993.828926][ T4743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  993.869606][ T4743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  994.040118][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  994.083986][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  994.113233][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  994.163106][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  994.730086][T11731] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  994.743874][T11900] loop3: detected capacity change from 0 to 512
[  994.777725][T11731] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  994.801298][T11900] EXT4-fs (loop3): Test dummy encryption mode enabled
[  994.819474][T11900] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  994.832203][T11731] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  994.863973][T11731] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  994.879470][T11900] EXT4-fs (loop3): ea_inode feature is not supported for Hurd
[  994.926502][T11904] loop7: detected capacity change from 0 to 512
[  995.049778][T11904] EXT4-fs warning (device loop7): dx_probe:893: inode #2: comm syz.7.1861: dx entry: limit 1024 != root limit 124
[  995.079595][T11904] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1861: Corrupt directory, running e2fsck is recommended
[  995.146384][T11904] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  995.190214][T11904] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2196: inode #15: comm syz.7.1861: corrupted in-inode xattr
[  995.254018][T11904] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1861: couldn't read orphan inode 15 (err -117)
[  995.334835][T11904] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  995.467222][T11731] 8021q: adding VLAN 0 to HW filter on device bond0
[  995.490013][ T4333] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  995.500231][T11904] EXT4-fs error (device loop7): ext4_xattr_set_entry:1629: inode #2: comm syz.7.1861: corrupted xattr entries
[  995.548526][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  995.580100][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  995.627625][T11731] 8021q: adding VLAN 0 to HW filter on device team0
[  995.661042][T11505] EXT4-fs (loop7): unmounting filesystem.
[  995.699760][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  995.709765][ T4333] usb 3-1: Using ep0 maxpacket: 16
[  995.729516][ T4333] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  995.742986][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  995.758730][ T4333] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  995.769891][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  995.777418][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  995.785230][ T4333] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  995.831647][ T4333] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  995.854286][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  995.890181][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  995.899137][ T4333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  995.953040][ T4333] usb 3-1: Product: syz
[  995.957662][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  995.972773][ T4333] usb 3-1: Manufacturer: syz
[  995.979365][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  995.986596][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  995.994679][ T4333] usb 3-1: SerialNumber: syz
[  996.025588][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  996.052023][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  996.078525][T11927] loop1: detected capacity change from 0 to 512
[  996.080930][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  996.090107][T11927] EXT4-fs (loop1): Test dummy encryption mode enabled
[  996.099800][T11927] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  996.109735][T11927] EXT4-fs (loop1): ea_inode feature is not supported for Hurd
[  996.143759][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  997.569566][ T4333] usb 3-1: 0:2 : does not exist
[  997.913426][ T4333] usb 3-1: USB disconnect, device number 18
[  997.994061][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  998.071722][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  998.161172][T10778] udevd[10778]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  998.258470][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  999.080363][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  999.140658][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  999.196798][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  999.208265][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  999.227104][T11731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1002.206537][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1002.226828][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1002.288753][T11731] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1004.680218][ T4368] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1006.459440][ T4368] usb 3-1: Using ep0 maxpacket: 32
[ 1007.182044][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1007.215982][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1007.256424][ T4368] usb 3-1: device descriptor read/all, error -71
[ 1007.501357][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1007.514938][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1007.574193][T11731] device veth0_vlan entered promiscuous mode
[ 1007.595899][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1007.756695][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1008.465405][T11731] device veth1_vlan entered promiscuous mode
[ 1008.484572][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1009.166772][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1009.200372][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1009.267943][T11731] device veth0_macvtap entered promiscuous mode
[ 1009.294522][T11731] device veth1_macvtap entered promiscuous mode
[ 1009.401508][T11731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1009.444467][T11731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1009.486989][T11731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1009.536259][T11731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1009.573596][T11731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1009.583436][T12020] loop1: detected capacity change from 0 to 512
[ 1009.598176][T12020] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1009.605131][T12020] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1009.615261][T12020] EXT4-fs (loop1): ea_inode feature is not supported for Hurd
[ 1011.083735][T11731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1011.119395][ T4368] usb 8-1: new low-speed USB device number 2 using dummy_hcd
[ 1011.125528][T11731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1012.576634][T11731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1012.600484][ T4368] usb 8-1: device descriptor read/all, error -71
[ 1012.676481][T11731] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1012.712439][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1012.722060][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1012.759797][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1012.841453][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1012.877739][T11731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1012.933780][T11731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1012.988583][T11731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1013.065763][T11731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1013.134678][T11731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1013.185250][T11731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1013.249602][T11731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1014.319372][T11731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1014.335876][T11731] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1014.398308][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1014.414164][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1014.465271][T11731] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1014.507461][T11731] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1014.539385][T11731] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1014.548159][T11731] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1014.832497][ T4442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1014.923243][ T4442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1014.980934][ T4410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1014.999179][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1015.029373][ T4410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1015.087390][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1016.896718][T12061] loop6: detected capacity change from 0 to 16
[ 1018.389585][T12061] erofs: (device loop6): mounted with root inode @ nid 36.
[ 1018.760753][T12069] syz.6.2029: attempt to access beyond end of device
[ 1018.760753][T12069] loop6: rw=0, sector=8, nr_sectors = 16 limit=16
[ 1018.777825][T12069] syz.6.2029: attempt to access beyond end of device
[ 1018.777825][T12069] loop6: rw=0, sector=8, nr_sectors = 16 limit=16
[ 1018.855341][T12066] loop2: detected capacity change from 0 to 2048
[ 1018.951809][T12066] UDF-fs: bad mount option "ÿÿ0xffffffffffffffff" or missing value
[ 1023.879959][T12102] loop3: detected capacity change from 0 to 128
[ 1026.023968][T12112] loop1: detected capacity change from 0 to 16
[ 1026.126385][T12112] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1027.089520][ T4346] usb 3-1: new low-speed USB device number 21 using dummy_hcd
[ 1027.281286][ T4346] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping
[ 1027.306793][ T4346] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1027.449557][ T4346] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1027.495512][ T4346] usb 3-1: config 1 has no interface number 1
[ 1028.220090][T12133] syz.1.2035: attempt to access beyond end of device
[ 1028.220090][T12133] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[ 1028.252244][ T4346] usb 3-1: string descriptor 0 read error: -22
[ 1028.258571][ T4346] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1028.329484][ T4346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1028.336650][T12130] syz.1.2035: attempt to access beyond end of device
[ 1028.336650][T12130] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[ 1028.385036][ T4346] usb 3-1: MIDIStreaming interface descriptor not found
[ 1028.440182][ T4346] snd-usb-audio: probe of 3-1:1.2 failed with error -16
[ 1028.574473][ T4368] usb 3-1: USB disconnect, device number 21
[ 1030.203037][T12153] loop2: detected capacity change from 0 to 1024
[ 1030.270470][T12153] EXT4-fs: Ignoring removed oldalloc option
[ 1030.461146][T12153] ext4: Unknown parameter 'nouser_xattr'
[ 1033.382264][T12167] loop7: detected capacity change from 0 to 16
[ 1033.436439][T12167] erofs: (device loop7): mounted with root inode @ nid 36.
[ 1033.725566][T12167] syz.7.2046: attempt to access beyond end of device
[ 1033.725566][T12167] loop7: rw=0, sector=8, nr_sectors = 16 limit=16
[ 1033.747337][T12167] syz.7.2046: attempt to access beyond end of device
[ 1033.747337][T12167] loop7: rw=0, sector=8, nr_sectors = 16 limit=16
[ 1034.659132][T12180] loop7: detected capacity change from 0 to 128
[ 1037.109537][ T4385] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[ 1037.341325][ T4385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1037.384236][ T4385] usb 4-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00
[ 1037.916568][ T4385] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1038.444199][ T4385] usb 4-1: config 0 descriptor??
[ 1039.896923][ T4385] wacom 0003:056A:00E3.0006: hidraw0: USB HID v0.02 Device [HID 056a:00e3] on usb-dummy_hcd.3-1/input0
[ 1040.034968][T12211] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2053'.
[ 1040.090689][ T4333] usb 4-1: USB disconnect, device number 17
[ 1040.181127][T12209] fido_id[12209]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1041.982214][T12222] loop1: detected capacity change from 0 to 1024
[ 1042.088676][T12222] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[ 1043.435150][ T4269] EXT4-fs (loop1): unmounting filesystem.
[ 1043.793795][T12238] loop1: detected capacity change from 0 to 256
[ 1043.801926][T12238] exfat: Unknown parameter '"'
[ 1043.852064][ T5239] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1043.899245][T10778] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1046.900828][   T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1046.912704][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1046.922002][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1046.931591][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1046.948474][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1047.075290][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1047.427848][T12259] loop1: detected capacity change from 0 to 128
[ 1048.161600][ T5239] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1049.027122][T12266] loop6: detected capacity change from 0 to 512
[ 1049.216696][T10865] Bluetooth: hci1: command 0x0409 tx timeout
[ 1049.287380][ T5239] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1049.469390][T12266] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.2063: casefold flag without casefold feature
[ 1050.089846][T12266] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2063: couldn't read orphan inode 15 (err -117)
[ 1050.203192][ T5239] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1050.393048][T12266] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1051.239372][T10865] Bluetooth: hci1: command 0x041b tx timeout
[ 1051.501721][T12284] loop2: detected capacity change from 0 to 1024
[ 1051.514716][T11731] EXT4-fs (loop6): unmounting filesystem.
[ 1051.656239][T12284] EXT4-fs: Ignoring removed oldalloc option
[ 1051.704669][T12284] ext4: Unknown parameter 'nouser_xattr'
[ 1053.210594][ T5239] tipc: Disabling bearer <udp:syz2>
[ 1053.229774][ T5239] tipc: Disabling bearer <udp:syz0>
[ 1053.251077][ T5239] tipc: Left network mode
[ 1053.319666][T10865] Bluetooth: hci1: command 0x040f tx timeout
[ 1053.421325][T12299] loop6: detected capacity change from 0 to 16
[ 1053.433528][T12295] loop7: detected capacity change from 0 to 256
[ 1053.468723][T12295] exfat: Unknown parameter '"'
[ 1053.512633][ T4425] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1053.535672][T12299] erofs: (device loop6): mounted with root inode @ nid 36.
[ 1053.983174][T12240] chnl_net:caif_netlink_parms(): no params data found
[ 1054.523199][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.529723][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.902757][T12320] syz.6.2071: attempt to access beyond end of device
[ 1054.902757][T12320] loop6: rw=0, sector=8, nr_sectors = 16 limit=16
[ 1055.399611][ T4285] Bluetooth: hci1: command 0x0419 tx timeout
[ 1055.411387][T12326] loop7: detected capacity change from 0 to 16
[ 1056.821594][   T26] audit: type=1326 audit(1761188332.036:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12323 comm="syz.2.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692c18efc9 code=0x7fc00000
[ 1056.955096][T12326] erofs: (device loop7): mounted with root inode @ nid 36.
[ 1057.114793][T12326] syz.7.2073: attempt to access beyond end of device
[ 1057.114793][T12326] loop7: rw=0, sector=8, nr_sectors = 16 limit=16
[ 1057.139218][T12326] syz.7.2073: attempt to access beyond end of device
[ 1057.139218][T12326] loop7: rw=0, sector=8, nr_sectors = 16 limit=16
[ 1057.257039][T12240] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1057.273783][T12240] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1057.330167][T12240] device bridge_slave_0 entered promiscuous mode
[ 1057.463340][T12240] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1057.478455][T12240] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1057.580529][T12240] device bridge_slave_1 entered promiscuous mode
[ 1059.076558][T12340] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2076'.
[ 1059.179629][T12340] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2076'.
[ 1059.249945][T12340] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2076'.
[ 1059.285637][T12340] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2076'.
[ 1059.587498][T12240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1059.695653][T12240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1061.677723][T12356] loop1: detected capacity change from 0 to 256
[ 1061.685481][T12356] exfat: Unknown parameter '"'
[ 1061.719465][T10865] Bluetooth: hci5: command 0x0406 tx timeout
[ 1061.800993][T10778] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1064.108213][T12240] team0: Port device team_slave_0 added
[ 1065.721355][T12240] team0: Port device team_slave_1 added
[ 1065.848292][T12380] loop6: detected capacity change from 0 to 1024
[ 1065.931957][T12380] EXT4-fs: Ignoring removed oldalloc option
[ 1065.954276][T12380] ext4: Unknown parameter 'nouser_xattr'
[ 1068.076154][T12240] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1068.094684][T12240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1068.189648][T12240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1068.227426][T12240] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1068.255831][T12240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1068.340152][T12240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1069.279571][ T5239] device hsr_slave_0 left promiscuous mode
[ 1069.304745][ T5239] device hsr_slave_1 left promiscuous mode
[ 1069.419661][ T5239] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1069.427165][ T5239] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1069.530179][ T5239] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1069.537671][ T5239] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1069.564527][T12402] loop2: detected capacity change from 0 to 128
[ 1069.572347][ T5239] device bridge_slave_1 left promiscuous mode
[ 1069.578634][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1069.640038][ T5239] device bridge_slave_0 left promiscuous mode
[ 1069.646343][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1069.889725][ T5239] device veth1_macvtap left promiscuous mode
[ 1069.896008][ T5239] device veth0_macvtap left promiscuous mode
[ 1069.969702][ T5239] device veth1_vlan left promiscuous mode
[ 1069.975590][ T5239] device veth0_vlan left promiscuous mode
[ 1073.625216][T12425] loop2: detected capacity change from 0 to 2048
[ 1073.652500][T12425] UDF-fs: bad mount option "ÿÿ0xffffffffffffffff" or missing value
[ 1073.677845][T12426] loop7: detected capacity change from 0 to 1024
[ 1074.743775][T12426] EXT4-fs: Ignoring removed oldalloc option
[ 1074.928881][T12426] ext4: Unknown parameter 'nouser_xattr'
[ 1076.872566][ T5239] team0 (unregistering): Port device team_slave_1 removed
[ 1077.294429][ T5239] team0 (unregistering): Port device team_slave_0 removed
[ 1077.453718][ T5239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1077.569125][ T5239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1079.984724][T10993] usb 3-1: new low-speed USB device number 22 using dummy_hcd
[ 1080.159566][T10993] usb 3-1: device descriptor read/64, error -71
[ 1080.413240][ T5239] bond0 (unregistering): Released all slaves
[ 1080.464896][T10993] usb 3-1: new low-speed USB device number 23 using dummy_hcd
[ 1080.629539][T10993] usb 3-1: device descriptor read/64, error -71
[ 1080.650399][T12240] device hsr_slave_0 entered promiscuous mode
[ 1080.687818][T12240] device hsr_slave_1 entered promiscuous mode
[ 1080.749730][T10993] usb usb3-port1: attempt power cycle
[ 1080.883983][T12451] loop1: detected capacity change from 0 to 256
[ 1081.012285][T12451] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1081.170611][T10993] usb 3-1: new low-speed USB device number 24 using dummy_hcd
[ 1081.480405][T12457] exFAT-fs (loop1): hint_cluster is invalid (17)
[ 1082.207856][T10993] usb 3-1: device descriptor read/8, error -71
[ 1083.932232][T12240] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1083.966023][T12240] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1084.072188][T12240] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1084.118223][T12240] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1084.445155][T12477] loop2: detected capacity change from 0 to 256
[ 1084.646609][   T26] audit: type=1800 audit(1761188360.396:1224): pid=12477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2110" name="file1" dev="loop2" ino=1048674 res=0 errno=0
[ 1084.702878][T12478] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1084.829224][T12478] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1084.873159][T12478] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1086.131382][T12240] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1086.240604][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1086.275710][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1086.337682][T12240] 8021q: adding VLAN 0 to HW filter on device team0
[ 1086.362327][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1086.433897][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1086.500811][ T4421] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1086.507954][ T4421] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1086.598238][T12499] loop2: detected capacity change from 0 to 1024
[ 1086.605512][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1086.634370][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1086.637927][T12499] EXT4-fs: Ignoring removed oldalloc option
[ 1086.679786][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1086.708905][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1086.716148][ T4421] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1086.754617][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1086.807640][T12499] ext4: Unknown parameter 'nouser_xattr'
[ 1086.841084][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1087.996476][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1088.129502][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1088.175392][T12508] loop7: detected capacity change from 0 to 1024
[ 1088.179242][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1088.246893][T12508] EXT4-fs: Ignoring removed oldalloc option
[ 1088.251370][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1088.299406][T12508] ext4: Unknown parameter 'nouser_xattr'
[ 1088.363131][T12240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1088.397321][T12240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1088.640525][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1089.200843][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1089.265690][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1089.301880][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1089.354623][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1089.390457][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1089.430046][T12521] loop6: detected capacity change from 0 to 16
[ 1089.485089][T12521] erofs: (device loop6): mounted with root inode @ nid 36.
[ 1089.861233][T12527] syz.6.2109: attempt to access beyond end of device
[ 1089.861233][T12527] loop6: rw=0, sector=8, nr_sectors = 16 limit=16
[ 1089.900593][T12527] syz.6.2109: attempt to access beyond end of device
[ 1089.900593][T12527] loop6: rw=0, sector=8, nr_sectors = 16 limit=16
[ 1090.069406][ T4368] usb 8-1: new low-speed USB device number 4 using dummy_hcd
[ 1090.239519][ T4368] usb 8-1: device descriptor read/64, error -71
[ 1090.512999][ T4368] usb 8-1: new low-speed USB device number 5 using dummy_hcd
[ 1090.709444][ T4368] usb 8-1: device descriptor read/64, error -71
[ 1090.840354][ T4368] usb usb8-port1: attempt power cycle
[ 1091.190208][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1091.197758][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1091.245420][T12240] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1091.259794][ T4368] usb 8-1: new low-speed USB device number 6 using dummy_hcd
[ 1091.305637][ T4368] usb 8-1: device descriptor read/8, error -71
[ 1091.629352][ T4368] usb 8-1: new low-speed USB device number 7 using dummy_hcd
[ 1091.676219][ T4368] usb 8-1: device descriptor read/8, error -71
[ 1091.802434][ T4368] usb usb8-port1: unable to enumerate USB device
[ 1092.439526][ T4285] Bluetooth: hci2: command 0x0406 tx timeout
[ 1092.533607][T12559] loop2: detected capacity change from 0 to 256
[ 1092.738768][T12559] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1092.755132][T12559] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1092.771903][T12559] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1092.879845][   T26] audit: type=1800 audit(1761188368.466:1225): pid=12559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2121" name="file1" dev="loop2" ino=1048676 res=0 errno=0
[ 1093.814431][T12570] loop2: detected capacity change from 0 to 512
[ 1093.822968][T12570] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1093.829889][T12570] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1093.840615][T12570] EXT4-fs (loop2): ea_inode feature is not supported for Hurd
[ 1095.259463][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1095.274396][T12575] loop1: detected capacity change from 0 to 256
[ 1095.307288][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1096.490268][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1097.228812][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1097.244580][T12575] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d)
[ 1097.254178][T12240] device veth0_vlan entered promiscuous mode
[ 1097.270095][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1097.278714][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1097.305977][T12240] device veth1_vlan entered promiscuous mode
[ 1098.044030][   T26] audit: type=1800 audit(1761188373.646:1226): pid=12583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2118" name="file1" dev="loop1" ino=1048678 res=0 errno=0
[ 1099.682095][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1099.710484][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1099.752584][T12240] device veth0_macvtap entered promiscuous mode
[ 1101.119241][T12589] loop1: detected capacity change from 0 to 16
[ 1101.148935][T12589] erofs: (device loop1): erofs_read_inode: unsupported chunk format ffff of nid 36
[ 1101.183199][T12240] device veth1_macvtap entered promiscuous mode
[ 1101.228745][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1101.255848][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1101.438054][T12240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1101.499361][T12240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1101.554547][T12240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1101.614655][T12240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1101.649370][T12240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1101.679433][T12240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1101.699499][T12240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1101.743353][T12240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1101.791123][T12240] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1101.798754][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1101.830248][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1101.871758][T12240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1101.894825][T12240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1101.939363][T12240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1101.969638][T12240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1101.994808][T12240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1102.035714][T12240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1102.084217][T12240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1102.129360][T12240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1102.208110][T12240] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1102.239868][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1102.289561][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1102.835198][T12605] loop2: detected capacity change from 0 to 1024
[ 1102.924041][T12605] EXT4-fs (loop2): revision level too high, forcing read-only mode
[ 1103.065017][T10865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1103.068528][T12605] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 1103.075496][T10865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1103.086563][T12608] loop6: detected capacity change from 0 to 16
[ 1103.093864][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1103.105800][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1103.119460][   T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1103.129809][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1103.141625][T12605] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz.2.2126: Freeing blocks not in datazone - block = 0, count = 4096
[ 1103.167348][T12608] erofs: (device loop6): mounted with root inode @ nid 36.
[ 1103.210288][T12605] EXT4-fs (loop2): 1 orphan inode deleted
[ 1103.216067][T12605] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1103.536117][ T4280] EXT4-fs (loop2): unmounting filesystem.
[ 1104.349349][ T4795] usb 3-1: new low-speed USB device number 26 using dummy_hcd
[ 1104.411420][T12628] syz.6.2128: attempt to access beyond end of device
[ 1104.411420][T12628] loop6: rw=0, sector=8, nr_sectors = 16 limit=16
[ 1104.529455][ T4795] usb 3-1: device descriptor read/64, error -71
[ 1105.239624][ T4285] Bluetooth: hci3: command 0x0409 tx timeout
[ 1105.681027][ T4795] usb 3-1: new low-speed USB device number 27 using dummy_hcd
[ 1105.839608][ T4795] usb 3-1: device descriptor read/64, error -71
[ 1105.942904][T12609] chnl_net:caif_netlink_parms(): no params data found
[ 1105.959857][ T4795] usb usb3-port1: attempt power cycle
[ 1106.367551][T12647] loop1: detected capacity change from 0 to 128
[ 1106.380290][ T4795] usb 3-1: new low-speed USB device number 28 using dummy_hcd
[ 1106.458452][T12609] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1106.508784][T12647] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[ 1106.511095][ T4795] usb 3-1: device descriptor read/8, error -71
[ 1106.536498][T12609] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1106.570888][T12609] device bridge_slave_0 entered promiscuous mode
[ 1106.619925][T12609] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1106.628684][T12647] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1106.674915][T12609] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1106.755628][T12609] device bridge_slave_1 entered promiscuous mode
[ 1106.763277][T12647] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.2135: checksumming directory block 0
[ 1106.849602][ T4795] usb 3-1: new low-speed USB device number 29 using dummy_hcd
[ 1106.890216][ T4795] usb 3-1: device descriptor read/8, error -71
[ 1107.018954][T12609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1107.019656][ T4795] usb usb3-port1: unable to enumerate USB device
[ 1107.037610][T12609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1107.280526][ T4269] EXT4-fs (loop1): unmounting filesystem.
[ 1107.329604][ T4285] Bluetooth: hci3: command 0x041b tx timeout
[ 1109.122554][T12609] team0: Port device team_slave_0 added
[ 1109.221862][T12609] team0: Port device team_slave_1 added
[ 1109.399839][ T4285] Bluetooth: hci3: command 0x040f tx timeout
[ 1109.488449][T12681] loop6: detected capacity change from 0 to 1024
[ 1109.540819][T12609] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1109.547842][T12609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1109.580313][T12681] EXT4-fs: Ignoring removed oldalloc option
[ 1109.589637][T12681] ext4: Unknown parameter 'nouser_xattr'
[ 1110.800595][T12609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1111.579766][ T4285] Bluetooth: hci3: command 0x0419 tx timeout
[ 1111.664497][T12609] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1111.697949][T12609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1111.783847][T12609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1112.278446][T12609] device hsr_slave_0 entered promiscuous mode
[ 1112.324462][T12609] device hsr_slave_1 entered promiscuous mode
[ 1112.346220][T12609] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1113.739357][T12609] Cannot create hsr debugfs directory
[ 1113.744867][   T26] audit: type=1326 audit(1761188389.506:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12705 comm="syz.7.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ad8efc9 code=0x7ffc0000
[ 1113.859687][   T26] audit: type=1326 audit(1761188389.506:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12705 comm="syz.7.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ad8efc9 code=0x7ffc0000
[ 1113.996377][   T26] audit: type=1326 audit(1761188389.506:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12705 comm="syz.7.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ad8efc9 code=0x7ffc0000
[ 1115.039918][   T26] audit: type=1326 audit(1761188389.506:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12705 comm="syz.7.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ad8efc9 code=0x7ffc0000
[ 1115.167786][   T26] audit: type=1326 audit(1761188389.506:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12705 comm="syz.7.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f329ad8efc9 code=0x7ffc0000
[ 1115.193517][ T9003] device hsr_slave_0 left promiscuous mode
[ 1115.246675][   T26] audit: type=1326 audit(1761188389.506:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12705 comm="syz.7.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ad8efc9 code=0x7ffc0000
[ 1115.296100][ T9003] device hsr_slave_1 left promiscuous mode
[ 1115.347592][   T26] audit: type=1326 audit(1761188389.506:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12705 comm="syz.7.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ad8efc9 code=0x7ffc0000
[ 1115.383808][ T9003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1115.393816][ T9003] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1115.449423][   T26] audit: type=1326 audit(1761188389.506:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12705 comm="syz.7.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ad8efc9 code=0x7ffc0000
[ 1115.472990][ T9003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1115.520188][ T9003] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1115.570091][ T9003] device bridge_slave_1 left promiscuous mode
[ 1115.576419][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1115.595285][   T26] audit: type=1326 audit(1761188389.506:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12705 comm="syz.7.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ad8efc9 code=0x7ffc0000
[ 1115.636098][   T26] audit: type=1326 audit(1761188389.506:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12705 comm="syz.7.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f329ad8efc9 code=0x7ffc0000
[ 1115.684410][ T9003] device bridge_slave_0 left promiscuous mode
[ 1115.704510][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1115.804538][ T9003] device veth1_macvtap left promiscuous mode
[ 1115.879867][ T9003] device veth0_macvtap left promiscuous mode
[ 1115.886066][ T9003] device veth1_vlan left promiscuous mode
[ 1115.899556][T10993] usb 7-1: new low-speed USB device number 2 using dummy_hcd
[ 1115.929518][ T9003] device veth0_vlan left promiscuous mode
[ 1115.963596][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.970644][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.069596][T10993] usb 7-1: device descriptor read/64, error -71
[ 1116.339512][T10993] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[ 1116.509458][T10993] usb 7-1: device descriptor read/64, error -71
[ 1116.629657][T10993] usb usb7-port1: attempt power cycle
[ 1117.043801][T10993] usb 7-1: new low-speed USB device number 4 using dummy_hcd
[ 1117.089941][T10993] usb 7-1: device descriptor read/8, error -71
[ 1117.459645][T10993] usb 7-1: new low-speed USB device number 5 using dummy_hcd
[ 1117.867317][T10993] usb 7-1: device descriptor read/8, error -71
[ 1118.401095][T10993] usb usb7-port1: unable to enumerate USB device
[ 1118.703555][T12728] loop2: detected capacity change from 0 to 4096
[ 1119.138007][T12728] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1121.376392][ T9003] team0 (unregistering): Port device team_slave_1 removed
[ 1121.550571][ T9003] team0 (unregistering): Port device team_slave_0 removed
[ 1121.811696][ T9003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1122.072375][T12757] loop6: detected capacity change from 0 to 1024
[ 1122.147544][T12757] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1122.169743][ T9003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1122.546787][T11731] EXT4-fs (loop6): unmounting filesystem.
[ 1122.789429][ T4280] EXT4-fs (loop2): unmounting filesystem.
[ 1123.190379][T12771] loop6: detected capacity change from 0 to 256
[ 1123.466949][T12772] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1123.512383][T12772] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1123.538560][T12772] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1123.564278][   T26] kauditd_printk_skb: 4 callbacks suppressed
[ 1123.577295][   T26] audit: type=1800 audit(1761188399.156:1241): pid=12771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2169" name="file1" dev="loop6" ino=1048679 res=0 errno=0
[ 1127.897342][ T9003] bond0 (unregistering): Released all slaves
[ 1128.869116][T12800] loop6: detected capacity change from 0 to 1024
[ 1129.066458][T12800] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1129.349666][ T7218] usb 3-1: new low-speed USB device number 30 using dummy_hcd
[ 1129.589371][ T7218] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1129.642903][ T7218] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1129.716750][ T7218] usb 3-1: string descriptor 0 read error: -22
[ 1129.731839][T11731] EXT4-fs (loop6): unmounting filesystem.
[ 1129.748486][ T7218] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1129.774013][ T7218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1129.846636][T12609] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1130.087681][T12609] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1130.116524][ T4346] usb 3-1: USB disconnect, device number 30
[ 1130.151584][T12609] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1130.288054][T12609] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1130.472552][T12835] loop1: detected capacity change from 0 to 2048
[ 1130.534925][T12835] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1131.015404][T12842] loop6: detected capacity change from 0 to 256
[ 1131.586251][   T26] audit: type=1800 audit(1761188407.346:1242): pid=12841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2183" name="file1" dev="loop6" ino=1048681 res=0 errno=0
[ 1131.614738][T12841] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1131.698963][T12841] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1131.729876][T12841] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1132.018653][T12852] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2186'.
[ 1132.119183][T12609] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1132.223005][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1132.270415][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1132.302531][T12609] 8021q: adding VLAN 0 to HW filter on device team0
[ 1132.330579][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1132.395729][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1132.427021][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1132.434260][ T4408] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1132.498161][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1132.536692][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1132.668882][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1132.698547][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1132.705790][ T4408] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1132.749921][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1132.874381][ T4347] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1132.940621][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1133.004976][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1133.093487][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1133.106435][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1133.109611][ T4347] usb 2-1: Using ep0 maxpacket: 16
[ 1133.162213][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1133.164672][ T4347] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1133.212881][ T4347] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1133.249345][ T4347] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1133.267268][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1133.300739][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1133.325496][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1133.334025][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1133.368548][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1133.369225][ T4347] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1133.412375][T12609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1133.459508][ T4347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1133.512403][ T4347] usb 2-1: Product: syz
[ 1133.516654][ T4347] usb 2-1: Manufacturer: syz
[ 1133.542794][ T4347] usb 2-1: SerialNumber: syz
[ 1135.142980][ T4347] usb 2-1: 0:2 : does not exist
[ 1135.464296][  T126] usb 2-1: USB disconnect, device number 19
[ 1135.979126][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1136.059802][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1136.102870][T12609] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1137.585817][T12887] loop6: detected capacity change from 0 to 8192
[ 1138.073319][T12895] loop1: detected capacity change from 0 to 256
[ 1138.281661][T12895] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1138.294656][T12895] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1138.307240][   T26] audit: type=1800 audit(1761188414.016:1243): pid=12895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2198" name="file1" dev="loop1" ino=1048684 res=0 errno=0
[ 1138.621973][T12895] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1138.784132][T11731] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1)
[ 1138.841390][T11731] FAT-fs (loop6): Filesystem has been set read-only
[ 1139.563406][ T4285] Bluetooth: hci0: ACL packet for unknown connection handle 201
[ 1139.873446][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1139.911325][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1140.001616][T12429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1140.046106][T12429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1140.089834][T12609] device veth0_vlan entered promiscuous mode
[ 1140.110735][T12429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1140.136109][T12429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1140.164388][T12609] device veth1_vlan entered promiscuous mode
[ 1140.275090][T12429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1140.286300][T12913] loop6: detected capacity change from 0 to 4096
[ 1140.300919][T12429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1140.361585][T12429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1140.424913][T12429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1140.426586][T12913] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1140.446898][T12609] device veth0_macvtap entered promiscuous mode
[ 1140.485184][T12609] device veth1_macvtap entered promiscuous mode
[ 1140.582507][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1140.636089][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1140.669449][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1140.699399][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1140.736117][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1140.797917][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1140.809343][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1140.829893][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1140.882605][T12609] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1140.891253][T11731] EXT4-fs (loop6): unmounting filesystem.
[ 1140.919556][ T4368] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1140.942178][T12429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1140.960497][T12429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1140.998154][T12429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1141.040227][T12429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1141.080985][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1141.111847][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1141.132206][ T4368] usb 2-1: Using ep0 maxpacket: 16
[ 1141.140958][ T4368] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1141.174700][ T4368] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1141.190601][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1141.211421][ T4368] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1141.249330][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1141.269928][ T4368] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1141.316856][ T4368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1141.338776][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1141.354463][ T4368] usb 2-1: Product: syz
[ 1141.358750][ T4368] usb 2-1: Manufacturer: syz
[ 1141.401030][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1141.408847][ T4368] usb 2-1: SerialNumber: syz
[ 1141.431462][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1141.477811][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1141.579486][T12609] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1141.605772][T12429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1141.687036][T12429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1141.712580][T12609] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1141.757354][T12609] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1141.766973][  T126] usb 7-1: new low-speed USB device number 6 using dummy_hcd
[ 1141.809582][T12609] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1141.838916][T12609] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1141.862548][ T4368] usb 2-1: 0:2 : does not exist
[ 1141.951881][  T126] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1141.972583][  T126] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1142.002711][  T126] usb 7-1: string descriptor 0 read error: -22
[ 1142.029794][  T126] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1142.049138][  T126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1142.080402][ T4385] usb 2-1: USB disconnect, device number 20
[ 1142.304079][ T8147] usb 7-1: USB disconnect, device number 6
[ 1142.477725][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1142.516711][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1142.556372][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1142.564398][T12429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1142.630264][T12429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1142.674016][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1143.131672][T12945] loop1: detected capacity change from 0 to 256
[ 1143.351784][   T26] audit: type=1800 audit(1761188419.096:1244): pid=12945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2210" name="file1" dev="loop1" ino=1048696 res=0 errno=0
[ 1143.392107][T12945] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1143.412317][T12945] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1143.429704][T12945] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1144.434694][T12956] loop2: detected capacity change from 0 to 512
[ 1144.619531][T12956] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1144.867398][T12956] EXT4-fs (loop2): 1 truncate cleaned up
[ 1249.899229][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1249.906235][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P12799/1:b..l
[ 1249.914711][    C1] 	(detected by 1, t=10502 jiffies, g=75897, q=54 ncpus=2)
[ 1249.921994][    C1] task:syz.7.2173      state:R  running task     stack:23392 pid:12799 ppid:11505  flags:0x00004002
[ 1249.933940][    C1] Call Trace:
[ 1249.937232][    C1]  <TASK>
[ 1249.940174][    C1]  __schedule+0x10ec/0x40b0
[ 1249.944779][    C1]  ? unwind_next_frame+0x1880/0x20b0
[ 1249.950112][    C1]  ? __sched_text_start+0x8/0x8
[ 1249.954974][    C1]  ? lock_chain_count+0x20/0x20
[ 1249.959885][    C1]  ? preempt_schedule_irq+0xa6/0x150
[ 1249.965183][    C1]  preempt_schedule_irq+0xb1/0x150
[ 1249.970299][    C1]  ? preempt_schedule_notrace+0x110/0x110
[ 1249.976108][    C1]  ? rcu_is_watching+0x11/0xa0
[ 1249.980934][    C1]  ? rcu_irq_exit_check_preempt+0xdb/0x210
[ 1249.986749][    C1]  irqentry_exit+0x63/0x70
[ 1249.991253][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1249.997250][    C1] RIP: 0010:lock_acquire+0x20f/0x490
[ 1250.002548][    C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b
[ 1250.022257][    C1] RSP: 0018:ffffc900037e6f60 EFLAGS: 00000206
[ 1250.028330][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 85e60ade584cbc00
[ 1250.036302][    C1] RDX: 0000000000000000 RSI: ffffffff8a8c1700 RDI: ffffffff8adef3a0
[ 1250.044278][    C1] RBP: ffffc900037e7070 R08: dffffc0000000000 R09: fffffbfff215c449
[ 1250.052260][    C1] R10: fffffbfff215c449 R11: 1ffffffff215c448 R12: 0000000000000000
[ 1250.060233][    C1] R13: 1ffff920006fcdf8 R14: 0000000000000246 R15: dffffc0000000000
[ 1250.068225][    C1]  ? read_lock_is_recursive+0x10/0x10
[ 1250.073609][    C1]  ? page_ext_put+0x98/0xb0
[ 1250.078201][    C1]  ? page_ext_get+0x1e/0x2a0
[ 1250.082796][    C1]  page_ext_get+0x3a/0x2a0
[ 1250.087221][    C1]  ? page_ext_get+0x1e/0x2a0
[ 1250.091842][    C1]  __page_table_check_zero+0x134/0x4b0
[ 1250.097313][    C1]  free_unref_page_prepare+0x8c4/0x9a0
[ 1250.102838][    C1]  free_unref_page_list+0xbb/0x8e0
[ 1250.107963][    C1]  release_pages+0x1f92/0x2200
[ 1250.112796][    C1]  ? lru_cache_disable+0x30/0x30
[ 1250.117737][    C1]  ? preempt_schedule_thunk+0x16/0x18
[ 1250.123180][    C1]  ? do_raw_spin_unlock+0x11d/0x230
[ 1250.128397][    C1]  __pagevec_release+0x6d/0xe0
[ 1250.133179][    C1]  shmem_undo_range+0x75b/0x2050
[ 1250.138182][    C1]  ? shmem_truncate_range+0xb0/0xb0
[ 1250.143417][    C1]  ? do_raw_spin_lock+0x11d/0x280
[ 1250.148456][    C1]  ? percpu_counter_add_batch+0x13b/0x160
[ 1250.154269][    C1]  shmem_evict_inode+0x248/0xa40
[ 1250.159313][    C1]  ? _raw_spin_unlock+0x24/0x40
[ 1250.164183][    C1]  ? inode_wait_for_writeback+0x1b0/0x200
[ 1250.169954][    C1]  ? shmem_free_in_core_inode+0xb0/0xb0
[ 1250.175505][    C1]  ? do_raw_spin_lock+0x11d/0x280
[ 1250.180539][    C1]  ? bit_waitqueue+0x30/0x30
[ 1250.185137][    C1]  ? do_raw_spin_unlock+0x11d/0x230
[ 1250.190349][    C1]  ? shmem_free_in_core_inode+0xb0/0xb0
[ 1250.195916][    C1]  evict+0x485/0x870
[ 1250.199869][    C1]  ? __lock_acquire+0x7c50/0x7c50
[ 1250.204904][    C1]  ? proc_nr_inodes+0x2f0/0x2f0
[ 1250.209760][    C1]  ? do_raw_spin_unlock+0x11d/0x230
[ 1250.214975][    C1]  ? _raw_spin_unlock+0x24/0x40
[ 1250.219841][    C1]  ? iput+0x768/0x980
[ 1250.223855][    C1]  __dentry_kill+0x431/0x650
[ 1250.228459][    C1]  dentry_kill+0xb8/0x290
[ 1250.232797][    C1]  ? dput+0x37/0x1d0
[ 1250.236725][    C1]  dput+0xfa/0x1d0
[ 1250.240469][    C1]  __fput+0x5e0/0x920
[ 1250.244547][    C1]  task_work_run+0x1ca/0x250
[ 1250.249197][    C1]  ? task_work_cancel+0x230/0x230
[ 1250.254260][    C1]  ? do_raw_spin_unlock+0x11d/0x230
[ 1250.259490][    C1]  do_exit+0x93e/0x2400
[ 1250.263683][    C1]  ? put_task_struct+0x80/0x80
[ 1250.268464][    C1]  ? lock_chain_count+0x20/0x20
[ 1250.273326][    C1]  do_group_exit+0x217/0x2d0
[ 1250.277934][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[ 1250.283171][    C1]  get_signal+0x1272/0x1350
[ 1250.287754][    C1]  arch_do_signal_or_restart+0xb7/0x1240
[ 1250.293439][    C1]  ? get_sigframe_size+0x10/0x10
[ 1250.298410][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1250.304410][    C1]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1250.309939][    C1]  exit_to_user_mode_loop+0x70/0x110
[ 1250.315235][    C1]  exit_to_user_mode_prepare+0xee/0x180
[ 1250.320791][    C1]  irqentry_exit_to_user_mode+0x5/0x30
[ 1250.326262][    C1]  exc_page_fault+0x88/0x100
[ 1250.330868][    C1]  asm_exc_page_fault+0x22/0x30
[ 1250.335724][    C1] RIP: 0033:0x7f329ad8efd1
[ 1250.340150][    C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[ 1250.346220][    C1] RAX: 0000000000000000 RBX: 00007f329afe6090 RCX: 00007f329ad8efc9
[ 1250.354199][    C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[ 1250.362207][    C1] RBP: 00007f329ae11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1250.370200][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1250.378176][    C1] R13: 00007f329afe6128 R14: 00007f329afe6090 R15: 00007ffc6d5422c8
[ 1250.386166][    C1]  </TASK>
[ 1250.389211][    C1] rcu: rcu_preempt kthread starved for 10547 jiffies! g75897 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1250.400441][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1250.410413][    C1] rcu: RCU grace-period kthread stack dump:
[ 1250.416296][    C1] task:rcu_preempt     state:R  running task     stack:27720 pid:16    ppid:2      flags:0x00004000
[ 1250.427070][    C1] Call Trace:
[ 1250.430350][    C1]  <TASK>
[ 1250.433286][    C1]  __schedule+0x10ec/0x40b0
[ 1250.437809][    C1]  ? __sched_text_start+0x8/0x8
[ 1250.442673][    C1]  schedule+0xb9/0x180
[ 1250.446742][    C1]  schedule_timeout+0x15c/0x280
[ 1250.451611][    C1]  ? console_conditional_schedule+0x40/0x40
[ 1250.457512][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1250.463499][    C1]  ? update_process_times+0x1b0/0x1b0
[ 1250.468885][    C1]  ? prepare_to_swait_event+0x335/0x350
[ 1250.474442][    C1]  rcu_gp_fqs_loop+0x2f2/0x1310
[ 1250.479301][    C1]  ? rcu_gp_kthread+0x380/0x380
[ 1250.484154][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1250.490141][    C1]  ? rcu_gp_init+0x14b0/0x14b0
[ 1250.494906][    C1]  ? rcu_gp_cleanup+0xb4c/0xca0
[ 1250.499760][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1250.504965][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[ 1250.510171][    C1]  rcu_gp_kthread+0x95/0x380
[ 1250.514766][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 1250.519904][    C1]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 1250.525819][    C1]  ? __kthread_parkme+0x162/0x1c0
[ 1250.530886][    C1]  kthread+0x29d/0x330
[ 1250.534960][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 1250.540074][    C1]  ? kthread_blkcg+0xd0/0xd0
[ 1250.544686][    C1]  ret_from_fork+0x1f/0x30
[ 1250.549116][    C1]  </TASK>
[ 1250.552134][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1250.558454][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1250.563693][    C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10