last executing test programs:

8m52.731477179s ago: executing program 32 (id=245):
fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, 0x0)

8m1.378796443s ago: executing program 0 (id=374):
r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a44000010213010902640002010070080904000001020d0000052406000105240000000d240f0100000000000000000006241a00000808243b09f3b1118c0905810308000000000904010000020d00000904160102020d0000090582"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

7m57.0685021s ago: executing program 0 (id=389):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001900150000000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
gettimeofday(&(0x7f0000000080), 0x0)
r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000003c0)='./bus\x00')
io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80004000, 0xfefffffe})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b6a, &(0x7f0000000040)={0x200b, 0x200d, 0x2000d, 0x7, 0x200e, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83)
openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0)

7m55.446100192s ago: executing program 0 (id=395):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r2, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @random="2abcd265829d"}, 0x14)

7m55.18475324s ago: executing program 0 (id=396):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000580)={[{@fat=@discard}, {@shortname_winnt}, {@numtail}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@rodir}, {@shortname_lower}, {@fat=@nfs_stale_rw}, {@uni_xlateno}, {@utf8}, {@rodir}, {@utf8no}, {@numtail}]}, 0x0, 0x2be, &(0x7f0000002940)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

7m53.841429153s ago: executing program 33 (id=397):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000780)={[{@barrier}, {@nogrpid}, {@quota}, {@nobh}]}, 0xff, 0x511, &(0x7f0000000ac0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1e17}, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_LOCK(r0, 0xb)
shmat(r0, &(0x7f0000feb000/0x13000)=nil, 0x3000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x9, 0x18801)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x0, 0x220, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xff, 0xe, 0x10, {@mac=@random="164ea0362c4f", {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x8, 0x2, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'vlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @mangle={0x0, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @rand_addr=0x64010102, 0x0, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0xc, 0x0, {@empty, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xfffffffffffffd68)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = shmget(0x0, 0x1000, 0x54000000, &(0x7f0000fef000/0x1000)=nil)
shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000540)=""/254)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50)
r7 = socket$inet(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r7}, 0x20)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'})
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, r5, 0x300, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x30000050}, 0x4040044)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000e00)={0x18, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x40d8)

7m53.553869703s ago: executing program 0 (id=399):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0xffffffff, 0x2002)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000022c40)=@deltfilter={0x30, 0x2d, 0x1, 0xfffffffe, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {0x1, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0)
setrlimit(0x3, &(0x7f0000000040)={0x4, 0x7fffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000002540)=ANY=[@ANYBLOB='iocharset=maccyrillic,sys_tz,namecase=1,errors=remount-ro,keep_last_dots,discard,fmask=00000000000000000000001,keep_last_dots,errors=continue,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c006f1c218104527ef9e4843290e9ce4cae862d52ef28df840ab63cc422a76e45b61e627f2a8df7da9995d2ce9aa2dffc8dec3779e5e5055d50789297e33e1e934c9da079140b0d6f296135bef0239e794b5f8e095aac46e11cf7dd47e9"], 0x41, 0x1528, &(0x7f0000000580)="$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")
rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

7m52.220878435s ago: executing program 0 (id=405):
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0xfffffff7, 0x2, 0x3, 0x9, 0x4}, 0x20)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008f080300000000000000008085000000612dee670cf9c78c6d00000095550bacbf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r7, &(0x7f0000000080), &(0x7f0000001500)=@udp6=r6}, 0x20)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
shutdown(r3, 0x0)
recvmmsg(r8, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
sendmsg$nl_xfrm(r5, 0x0, 0x90)

7m51.679143402s ago: executing program 34 (id=405):
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0xfffffff7, 0x2, 0x3, 0x9, 0x4}, 0x20)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008f080300000000000000008085000000612dee670cf9c78c6d00000095550bacbf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r7, &(0x7f0000000080), &(0x7f0000001500)=@udp6=r6}, 0x20)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
shutdown(r3, 0x0)
recvmmsg(r8, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
sendmsg$nl_xfrm(r5, 0x0, 0x90)

5m36.823281273s ago: executing program 4 (id=744):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f"], 0x48)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m36.513075743s ago: executing program 4 (id=745):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0)

5m34.334195422s ago: executing program 4 (id=753):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x28}], 0x1}, 0x4)

5m32.913427267s ago: executing program 4 (id=758):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x8031, 0xffffffffffffffff, 0xa7ae6000)
unshare(0x22020400)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000200)=0x1, 0x4)

5m32.641034526s ago: executing program 4 (id=763):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd2(0x42000006, 0x801)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x5, 0x2, r2})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x9, 0x1, 0x41, 0x3, 0x58, 0x7, 0x5, 0xb, 0x7f}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xcb, 0xd, 0x2000000000004, 0x6b, 0x2, 0x4000000001002, 0x80000ef, 0x7f, 0x7fffffffffffc, 0x80008d, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffe, 0x5, 0x7, 0xbdf], 0x200000, 0x67a64fa265de9e51})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5m32.361888795s ago: executing program 4 (id=765):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
syz_usb_connect$midi(0x5, 0x44, &(0x7f0000001c00)=ANY=[@ANYBLOB="120100030000001099042810400001020301090232000101051004090400000201030008062402020cff0925040000047f0b060425010009050500ff"], &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]})
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
ioprio_set$pid(0x1, 0x0, 0x0)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x6, 0x9, 0x1})
io_uring_setup(0xb34, &(0x7f0000000080)={0x0, 0xb9d4, 0x2, 0x80, 0x21a})

5m16.073858073s ago: executing program 35 (id=765):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
syz_usb_connect$midi(0x5, 0x44, &(0x7f0000001c00)=ANY=[@ANYBLOB="120100030000001099042810400001020301090232000101051004090400000201030008062402020cff0925040000047f0b060425010009050500ff"], &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]})
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
ioprio_set$pid(0x1, 0x0, 0x0)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x6, 0x9, 0x1})
io_uring_setup(0xb34, &(0x7f0000000080)={0x0, 0xb9d4, 0x2, 0x80, 0x21a})

4m34.131157917s ago: executing program 3 (id=916):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newqdisc={0xd4, 0x24, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x6}, {0x10, 0x3}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x8, 0x4800, 0x2, 0x0, 0x8001, 0x6, 0x3}}, {0xa, 0x2, [0x5e9, 0x5, 0x210c]}}, {{0x1c, 0x1, {0x7, 0x0, 0x8f, 0x6, 0x2, 0x9, 0xf, 0x3}}, {0xa, 0x2, [0x7f, 0x6, 0x9]}}, {{0x1c, 0x1, {0xff, 0x3, 0x2, 0xc, 0x1, 0x0, 0x3}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0xc0, 0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000880}, 0x20048084)
close(0x3)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001400)=ANY=[@ANYBLOB="14000000520001f6"], 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x40)

4m33.877665125s ago: executing program 3 (id=918):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m33.663676372s ago: executing program 3 (id=919):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, 0x0)

4m33.089047691s ago: executing program 3 (id=921):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000580)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x3f2}}, {@noload}]}, 0x3, 0x482, &(0x7f0000001240)="$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")
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x404, &(0x7f0000000200)={[{@inlinecrypt}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e1, &(0x7f0000001200)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
epoll_create1(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000240)='./file0\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

4m32.059259734s ago: executing program 3 (id=922):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="120000000a0100000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000180), 0x0}, 0x20)

4m29.201062785s ago: executing program 3 (id=929):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m28.349119721s ago: executing program 36 (id=929):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m34.252479013s ago: executing program 7 (id=1096):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000300, 0x14, 0x0, &(0x7f0000000500)="c1ea5fdc7245bd4270f1b12ca9dec257d367db2d", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m31.977968645s ago: executing program 7 (id=1102):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000000c0), 0x3, 0x440, &(0x7f0000000280)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
syz_mount_image$f2fs(&(0x7f0000001080), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5515, &(0x7f0000001300)="$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")
pwrite64(r0, &(0x7f0000000b00)='K', 0x1, 0x3)

3m27.897328255s ago: executing program 7 (id=1110):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4f, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x1, 0x6, 0x9, 0x9, 0xc, 0x0, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x7fffffff, 0x0, 0x2, 0xfe1, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0x8, 0x1df, 0xffff, 0x3, 0x2, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x800086, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32e, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0xb, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x5, 0x1, 0x1, 0xe, 0x20, 0x9, 0x0, 0x81, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0x1, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0xc, 0xffff2d75, 0x283, 0x2, 0x4d, 0xf40d, 0x4, 0x1, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x4, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x0, 0x4, 0x3, 0x80, 0x50, 0x20000003, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xa, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0xffffffff, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x2d0, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x20000001, 0x7, 0xc, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x4, 0x7, 0xd, 0x56be]}, 0x45c)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x62, 0x5, 0x338, 0x2a0, 0x100, 0xffffffff, 0x100, 0x1a8, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @empty, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x14}, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @broadcast, @port=0x4e22, @port=0x4e22}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)

3m26.603854346s ago: executing program 7 (id=1114):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0xa)

3m26.17390964s ago: executing program 7 (id=1116):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000ec0), 0x1, 0xb87, &(0x7f00000017c0)="$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")
r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
socket$tipc(0x1e, 0x5, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000026000506", @ANYRESDEC=r1, @ANYRES8=r3, @ANYBLOB="2588c81128df6c709d2364c0fdd5f184e7e7a916ea2124c557582048475eb70f83d6a38146b07ffa418b409f1b0fc90d6581197c773e562b7bb3cb3734c8d1f8978c7fc58ea5c38864994015cfd9b356f60311dd5371b06a51efb274adaae4ce388a0cc24b7ea59c012aeed7f1009c86e70e12a60881981bbe824c04aa206a9d1f71fade095dcc30c7065efd244f5ece0de0a988"], 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x800)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$HIDIOCSUSAGE(r0, 0x40086610, &(0x7f0000000100)={0x2, 0x2, 0x9, 0x6, 0x1})
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000180))

3m22.202578896s ago: executing program 7 (id=1123):
r0 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0)

3m20.928187027s ago: executing program 37 (id=1123):
r0 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0)

1m47.984508894s ago: executing program 2 (id=1448):
socket$kcm(0x10, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000008000000000000009c0000cb859b002b6d278c39f20e707c52411de519a2000000000000000000"], 0x50)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f00000002c0))

1m47.653874435s ago: executing program 2 (id=1451):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

1m46.638613657s ago: executing program 2 (id=1453):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m46.410804844s ago: executing program 2 (id=1455):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000010, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x85, 0x7a5, &(0x7f00000007c0)="$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")
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x44000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)

1m43.904944004s ago: executing program 2 (id=1466):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m43.101193399s ago: executing program 2 (id=1469):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
socket(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x2c}}, 0x20000034)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})

1m42.658368064s ago: executing program 38 (id=1469):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
socket(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x2c}}, 0x20000034)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})

9.035175823s ago: executing program 6 (id=1908):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001900150000000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
gettimeofday(&(0x7f0000000080), 0x0)
r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000003c0)='./bus\x00')
io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80004000, 0xfefffffe})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b6a, &(0x7f0000000040)={0x200b, 0x200d, 0x2000d, 0x7, 0x200e, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000900)=@v1={0x0, @aes128, 0x0, @auto="e4c858f988c79593"})
openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0)

6.525901532s ago: executing program 9 (id=1918):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x8008af00, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xc185f000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x2208004, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c)
r4 = fcntl$dupfd(r0, 0x0, r0)
read$alg(r4, 0x0, 0x6c)
write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x2, 0x0, @tick, {0xfd, 0x1}, {0x0, 0x57}, @time=@time={0xbc}}, {0x0, 0x40, 0x0, 0x0, @time={0x7, 0x8}, {}, {}, @note={0x0, 0xfd}}], 0x38)
io_uring_setup(0x1b7b, 0x0)

5.853038344s ago: executing program 1 (id=1921):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a8000f5ffffffffffffaaaae8aaaaaa86dd"], 0x3a)

5.104835437s ago: executing program 5 (id=1922):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001900150000000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
gettimeofday(&(0x7f0000000080), 0x0)
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80004000, 0xfefffffe})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r3, 0x4b6a, &(0x7f0000000040)={0x200b, 0x200d, 0x2000d, 0x7, 0x200e, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000900)=@v1={0x0, @aes128, 0x0, @auto="e4c858f988c79593"})
openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0)

5.044122959s ago: executing program 9 (id=1923):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x43, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x4, 0x4)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="4137a29b582bd471798f15f967e7f8118e5abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12221cdaf45711a2535ae87e6ab62ecba71b6f2ac0f6c9ead0d952116d305204537900daaad0d625d0eb0ae4dd9d3ad654d231d709bf3cd4a0477ef446e7da5eaa15cc39e9c57d89217e33a93e080000000000000086448a8e871cf560229a3cc36317ac47bae1596458badc9ebde2c707dea2e18f859e20f7595cce", 0xc3}], 0x1}}], 0x1, 0x4000801)

4.660915132s ago: executing program 9 (id=1924):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f00002eb000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, 0xffffffffffffffff, 0xc8cfe000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = io_uring_setup(0x164b, &(0x7f0000000440)={0x0, 0xfc10, 0x800, 0x2, 0x316})
r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r6, 0xee01, 0x0)
keyctl$setperm(0x5, r6, 0x30925)
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000380), 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, 0x0, 0x0)

4.561077355s ago: executing program 5 (id=1925):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e12050021000a000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd5}], 0x1}, 0x0)

4.498592737s ago: executing program 1 (id=1926):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.116638239s ago: executing program 5 (id=1927):
r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x7b)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x5b)
keyctl$revoke(0x3, r0)

3.941024985s ago: executing program 8 (id=1928):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x17, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

3.940817065s ago: executing program 1 (id=1929):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa003, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)}, 0x4800)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_clone(0x8100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180))

3.793914629s ago: executing program 8 (id=1930):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x8b, &(0x7f00000002c0)={@local, @random, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x7d, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x4ea3, 0x0, 0x69, 0x0, @opaque="359121e7907e72e4099a38b2ce9800b377be4162d3346b2903cefc60029453dfd7f2924697863c096b5daafa3994c76fbf46d7431d7fd54d104d29e41e5fc8f4abcb54571378011e1c01205fd0715656130ba382068a40ad1f9bea006858221c6c"}}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000180)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe024, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x42}}}}}}}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x84, 0x2, 0x2, 0x1, 0x0, [@empty]}]}}}}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
dup(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x7, 0x1, r3}, 0x50)
close(r3)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4, &(0x7f0000000900)}, 0x20)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r1, 0x1, 0x0, 0x10, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffb, 0x1b}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)

3.787772689s ago: executing program 5 (id=1931):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r0}, 0xc)

3.710290312s ago: executing program 6 (id=1932):
r0 = timerfd_create(0x0, 0x80000)
timerfd_settime(r0, 0x3, &(0x7f0000000540)={{}, {0x77359400}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0x538d28a0, 0x0, 0x0, 0x6, 0x81, 0x190, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4})

3.683863373s ago: executing program 1 (id=1933):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

3.325461624s ago: executing program 9 (id=1934):
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0xd}, 0x94)
creat(&(0x7f0000000000)='./file1\x00', 0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x900, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r3 = syz_open_procfs(0x0, &(0x7f0000000380)='pagemap\x00')
readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/184, 0xb8}], 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
setuid(0xee01)
io_uring_setup(0x89d, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))

3.324987514s ago: executing program 8 (id=1935):
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
socket$l2tp6(0xa, 0x2, 0x73)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r1, 0xb5181000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000280)={{0x1, 0x6, 0x4, 0x0, 'syz0\x00', 0x4000}, 0x4000004, 0x100, 0x42, 0x0, 0x0, 0x2c, 'syz0\x00', 0x0})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
unshare(0x26020480)

3.262932456s ago: executing program 5 (id=1936):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001900150000000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
gettimeofday(&(0x7f0000000080), 0x0)
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80004000, 0xfefffffe})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r3, 0x4b6a, &(0x7f0000000040)={0x200b, 0x200d, 0x2000d, 0x7, 0x200e, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000900)=@v1={0x0, @aes128, 0x0, @auto="e4c858f988c79593"})
openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0)

3.217878648s ago: executing program 6 (id=1937):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e12050021000a000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97", 0xd7}], 0x1}, 0x0)

1.637849788s ago: executing program 9 (id=1938):
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x4040)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e040a260c"], 0x7)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

1.553777001s ago: executing program 1 (id=1939):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
readv(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
socket$packet(0x11, 0x3, 0x300)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
r2 = dup(r0)
write$cgroup_subtree(r2, &(0x7f00000005c0)=ANY=[], 0x32600)
process_mrelease(0xffffffffffffffff, 0x0)
write$P9_RCREATE(r2, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x20, 0x2, 0x6}, 0x1}}, 0x18)

1.504989382s ago: executing program 8 (id=1940):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.495888042s ago: executing program 6 (id=1941):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x17, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

1.416684815s ago: executing program 8 (id=1942):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x140, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_MASK={0xec, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40010}, 0x4048080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

1.344882347s ago: executing program 9 (id=1943):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001900150000000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
gettimeofday(&(0x7f0000000080), 0x0)
r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000003c0)='./bus\x00')
io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80004000, 0xfefffffe})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b6a, &(0x7f0000000040)={0x200b, 0x200d, 0x2000d, 0x7, 0x200e, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000900)=@v1={0x0, @aes128, 0x0, @auto="e4c858f988c79593"})
openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0)

1.151087023s ago: executing program 5 (id=1944):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f00002eb000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, 0xffffffffffffffff, 0xc8cfe000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = io_uring_setup(0x164b, &(0x7f0000000440)={0x0, 0xfc10, 0x800, 0x2, 0x316})
r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r6, 0xee01, 0x0)
keyctl$setperm(0x5, r6, 0x30925)
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000380), 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, 0x0, 0x0)

1.111013165s ago: executing program 6 (id=1945):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f00002eb000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, 0xffffffffffffffff, 0xc8cfe000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = io_uring_setup(0x164b, &(0x7f0000000440)={0x0, 0xfc10, 0x800, 0x2, 0x316})
r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r6, 0xee01, 0x0)
keyctl$setperm(0x5, r6, 0x30925)
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000380), 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, 0x0, 0x0)

1.013017868s ago: executing program 1 (id=1946):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r0}, 0xc)

940.49508ms ago: executing program 8 (id=1947):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
getpid()
syz_open_procfs$namespace(0x0, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4880)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
close(r0)
r3 = socket(0x2b, 0x1, 0x1)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x5)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)

0s ago: executing program 6 (id=1948):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f000000b5c0)=ANY=[@ANYBLOB="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"], 0x5bec}}, 0x2004c000)

kernel console output (not intermixed with test programs):

em being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  385.072414][ T8104] loop3: detected capacity change from 0 to 128
[  385.369931][ T8104] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  385.581205][ T8104] ext4 filesystem being mounted at /173/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  385.722096][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  386.277929][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  386.541468][ T7840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.583028][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  386.590010][ T8126] loop3: detected capacity change from 0 to 16
[  386.620437][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  386.631792][ T8126] erofs: (device loop3): mounted with root inode @ nid 36.
[  386.990048][ T8140] lo speed is unknown, defaulting to 1000
[  387.328578][ T8140] loop6: detected capacity change from 0 to 512
[  387.631202][ T5770] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  387.955920][   T26] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  388.072945][ T8109] loop7: detected capacity change from 0 to 40427
[  388.098993][ T8109] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  388.158147][ T8109] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  388.283050][   T26] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  388.295009][ T8109] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-4)
[  388.353666][   T26] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  388.649088][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.924618][   T26] usb 2-1: config 0 descriptor??
[  389.436419][   T26] usb 2-1: USB disconnect, device number 9
[  390.400350][ T8177] loop6: detected capacity change from 0 to 128
[  390.860032][ T8177] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  391.116333][ T8177] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  392.577542][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  392.583902][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  393.109625][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  393.152460][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  393.201083][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  393.256347][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  393.289310][ T7840] device veth0_vlan entered promiscuous mode
[  393.297530][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  393.329016][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  393.342344][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  393.348728][ T7840] device veth1_vlan entered promiscuous mode
[  393.608338][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  393.665924][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  393.908413][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  394.127591][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  394.183047][ T7840] device veth0_macvtap entered promiscuous mode
[  394.250998][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  394.317906][ T7840] device veth1_macvtap entered promiscuous mode
[  394.432410][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  394.471429][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  394.493948][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  394.526190][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  394.557401][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  394.586324][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  394.602748][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  394.618439][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  394.661650][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  394.704969][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  394.738133][ T7840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  394.777461][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  394.800460][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  394.816198][ T4357] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  394.866464][ T8214] ip6t_rpfilter: unknown options
[  394.911905][ T5319] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  395.114922][ T5319] usb 7-1: Using ep0 maxpacket: 32
[  395.114957][ T4357] usb 2-1: Using ep0 maxpacket: 32
[  395.141986][ T4357] usb 2-1: unable to get BOS descriptor or descriptor too short
[  395.258813][ T4357] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40
[  395.291495][ T5319] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[  395.408133][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.420995][ T5319] usb 7-1: config 0 has no interface number 0
[  395.429445][ T4357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.448949][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.473926][ T5319] usb 7-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  395.495726][ T4357] usb 2-1: Product: syz
[  395.506102][ T4357] usb 2-1: Manufacturer: syz
[  395.510031][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.520643][ T4357] usb 2-1: SerialNumber: syz
[  395.521385][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.531150][ T5319] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  395.546315][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.568688][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.583661][ T5319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.590211][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.612978][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.613447][ T5319] usb 7-1: Product: syz
[  395.637605][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.654203][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.659807][ T5319] usb 7-1: Manufacturer: syz
[  395.676293][ T7840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  395.690299][ T5319] usb 7-1: SerialNumber: syz
[  395.695680][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  395.719728][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  395.736436][ T5319] usb 7-1: config 0 descriptor??
[  395.788215][ T4357] usb 2-1: 1:1 : format type 0 is detected, processed as PCM
[  395.834984][ T4357] snd-usb-audio: probe of 2-1:1.0 failed with error -2
[  395.843401][ T7840] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.860237][ T7840] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.869445][ T7840] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.878191][ T7840] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.911136][ T4357] usb 2-1: 1:1 : format type 0 is detected, processed as PCM
[  395.944262][ T4357] snd-usb-audio: probe of 2-1:1.1 failed with error -2
[  396.004852][ T4357] usb 2-1: 1:1 : format type 0 is detected, processed as PCM
[  396.021500][ T4699] usb 7-1: USB disconnect, device number 3
[  396.047825][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.067064][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.090608][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  396.119406][ T4570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.127751][ T4570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.139547][ T4357] snd-usb-audio: probe of 2-1:1.2 failed with error -2
[  396.142786][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  396.179284][ T4357] usb 2-1: USB disconnect, device number 10
[  396.268865][ T3599] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  396.449021][ T8239] xt_SECMARK: invalid mode: 2
[  396.519766][ T5483] udevd[5483]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  397.135898][ T3599] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  397.166297][ T3599] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  397.192372][ T3599] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  397.222502][ T3599] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  397.280246][ T3599] usb 8-1: SerialNumber: syz
[  397.671154][ T3599] usb 8-1: 0:2 : does not exist
[  397.788919][ T3599] usb 8-1: USB disconnect, device number 7
[  398.085841][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  398.957298][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'.
[  401.313425][ T8276] lo speed is unknown, defaulting to 1000
[  402.458006][ T8293] siw: device registration error -23
[  403.887339][ T4704] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  403.942841][ T8308] loop7: detected capacity change from 0 to 4096
[  403.957697][ T8311] ip6t_rpfilter: unknown options
[  403.999638][ T8308] EXT4-fs: inline encryption not supported
[  404.061300][ T8308] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  404.093097][ T8308] EXT4-fs (loop7): Test dummy encryption mode enabled
[  404.101141][ T4704] usb 9-1: Using ep0 maxpacket: 32
[  404.108291][ T4704] usb 9-1: config 0 has an invalid interface number: 132 but max is 0
[  404.153424][ T8308] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c1a8, mo2=0003]
[  404.171349][ T4704] usb 9-1: config 0 has no interface number 0
[  404.212485][ T4704] usb 9-1: config 0 interface 132 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  404.260180][ T8308] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  404.295649][ T4704] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  404.336097][ T4704] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.376538][ T4704] usb 9-1: Product: syz
[  404.419707][ T4704] usb 9-1: Manufacturer: syz
[  404.447222][ T4704] usb 9-1: SerialNumber: syz
[  404.474127][ T4704] usb 9-1: config 0 descriptor??
[  404.775042][ T4704] usb 9-1: USB disconnect, device number 2
[  406.195487][ T4357] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  406.410785][ T4357] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  406.451900][ T4357] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  406.497648][ T4357] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  406.528438][ T4357] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.536544][ T4357] usb 8-1: Product: syz
[  406.573373][ T4357] usb 8-1: Manufacturer: syz
[  406.578002][ T4357] usb 8-1: SerialNumber: syz
[  406.623745][ T4357] cdc_mbim 8-1:1.0: skipping garbage
[  406.831780][ T8308] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  407.324764][ T8366] loop3: detected capacity change from 0 to 512
[  407.355531][ T8343] loop1: detected capacity change from 0 to 40427
[  407.407652][ T8343] F2FS-fs (loop1): invalid crc value
[  407.451286][ T8343] F2FS-fs (loop1): Found nat_bits in checkpoint
[  407.496371][ T8366] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  407.505789][ T8308] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  407.527145][ T4357] cdc_mbim 8-1:1.0: setting rx_max = 16384
[  407.603287][ T8366] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  407.729833][ T8343] F2FS-fs (loop1): Start checkpoint disabled!
[  407.787942][ T8343] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  407.812367][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  408.037335][ T8384] loop3: detected capacity change from 0 to 512
[  408.100068][ T8384] EXT4-fs: Ignoring removed nomblk_io_submit option
[  408.143435][ T8384] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  408.210439][ T8384] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.921: bad orphan inode 131083
[  408.264519][ T8384] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  408.570778][ T8384] overlayfs: upper fs needs to support d_type.
[  408.856586][ T4274] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /185/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  408.963354][ T8308] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  409.118368][ T4372] kworker/u4:10: attempt to access beyond end of device
[  409.118368][ T4372] loop1: rw=1, sector=77824, nr_sectors = 8 limit=40427
[  409.221459][ T4372] kworker/u4:10: attempt to access beyond end of device
[  409.221459][ T4372] loop1: rw=1, sector=77832, nr_sectors = 8 limit=40427
[  409.265470][ T4372] kworker/u4:10: attempt to access beyond end of device
[  409.265470][ T4372] loop1: rw=1, sector=77840, nr_sectors = 8 limit=40427
[  409.306307][ T4357] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device
[  409.330075][ T5887] EXT4-fs (loop7): unmounting filesystem.
[  409.332811][ T4372] kworker/u4:10: attempt to access beyond end of device
[  409.332811][ T4372] loop1: rw=1, sector=77848, nr_sectors = 8 limit=40427
[  409.425803][ T4372] kworker/u4:10: attempt to access beyond end of device
[  409.425803][ T4372] loop1: rw=1, sector=77856, nr_sectors = 8 limit=40427
[  409.494883][ T4372] kworker/u4:10: attempt to access beyond end of device
[  409.494883][ T4372] loop1: rw=1, sector=77864, nr_sectors = 8 limit=40427
[  409.524332][ T4364] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.559710][ T4372] kworker/u4:10: attempt to access beyond end of device
[  409.559710][ T4372] loop1: rw=1, sector=77872, nr_sectors = 8 limit=40427
[  409.600074][ T4372] kworker/u4:10: attempt to access beyond end of device
[  409.600074][ T4372] loop1: rw=1, sector=77880, nr_sectors = 8 limit=40427
[  409.611705][ T4357] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, 3e:7d:50:e2:43:3a
[  409.679309][ T4372] kworker/u4:10: attempt to access beyond end of device
[  409.679309][ T4372] loop1: rw=1, sector=77888, nr_sectors = 8 limit=40427
[  409.709779][ T4357] usb 8-1: USB disconnect, device number 8
[  409.733134][ T4357] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM
[  409.775344][ T4372] kworker/u4:10: attempt to access beyond end of device
[  409.775344][ T4372] loop1: rw=1, sector=77896, nr_sectors = 8 limit=40427
[  409.875781][ T4364] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.002308][ T4364] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.303897][ T4364] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.544267][ T8424] ip6t_rpfilter: unknown options
[  411.058417][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  414.580597][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  414.590114][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  414.598415][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  414.606347][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  414.614378][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  414.622043][ T4276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  414.745637][ T8458] xt_hashlimit: size too large, truncated to 1048576
[  414.865766][ T8455] lo speed is unknown, defaulting to 1000
[  415.084820][ T8467] xt_SECMARK: invalid mode: 2
[  415.951493][ T8475] loop6: detected capacity change from 0 to 128
[  416.049867][ T4364] device hsr_slave_0 left promiscuous mode
[  416.077796][ T4364] device hsr_slave_1 left promiscuous mode
[  416.091254][ T8475] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  416.171765][ T8475] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  416.807527][ T4283] Bluetooth: hci2: command 0x0409 tx timeout
[  417.597585][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  417.605482][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0
[  417.672926][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  417.680369][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  417.749392][ T4364] device bridge_slave_1 left promiscuous mode
[  417.755637][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.785976][ T4364] device bridge_slave_0 left promiscuous mode
[  417.792283][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.820026][ T4364] device veth1_macvtap left promiscuous mode
[  417.827169][ T4364] device veth0_macvtap left promiscuous mode
[  417.833478][ T4364] device veth1_vlan left promiscuous mode
[  417.839413][ T4364] device veth0_vlan left promiscuous mode
[  419.040098][ T4276] Bluetooth: hci2: command 0x041b tx timeout
[  421.225588][ T4364] team0 (unregistering): Port device team_slave_1 removed
[  421.252636][ T4283] Bluetooth: hci2: command 0x040f tx timeout
[  421.269306][ T4364] team0 (unregistering): Port device team_slave_0 removed
[  421.308742][ T4364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  421.349929][ T4364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  421.643599][ T4364] bond0 (unregistering): Released all slaves
[  421.853815][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  422.121074][ T8455] chnl_net:caif_netlink_parms(): no params data found
[  422.238160][ T4559] tipc: Subscription rejected, illegal request
[  422.542392][ T8455] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.584033][ T8455] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.620013][ T8455] device bridge_slave_0 entered promiscuous mode
[  422.660301][ T8455] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.709391][ T8455] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.739732][ T8535] loop1: detected capacity change from 0 to 2048
[  422.775412][ T8455] device bridge_slave_1 entered promiscuous mode
[  422.778301][ T8540] loop6: detected capacity change from 0 to 128
[  422.884541][ T8535] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  422.894002][ T8540] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  422.934263][ T8535] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  422.934781][ T8455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  422.956267][ T8455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  422.958163][ T8540] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  423.025303][ T8455] team0: Port device team_slave_0 added
[  423.039808][ T8535] fs-verity: sha512 using implementation "sha512-avx2"
[  423.064161][ T8455] team0: Port device team_slave_1 added
[  423.148804][ T8455] batman_adv: batadv0: Adding interface: batadv_slave_0
[  423.199144][ T8455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.257840][ T8455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.285051][ T8455] batman_adv: batadv0: Adding interface: batadv_slave_1
[  423.292160][ T8455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.320463][ T8455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  423.414181][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  423.474825][ T4283] Bluetooth: hci2: command 0x0419 tx timeout
[  423.514715][ T8455] device hsr_slave_0 entered promiscuous mode
[  423.577436][ T8455] device hsr_slave_1 entered promiscuous mode
[  423.605211][ T8455] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  423.640657][ T8455] Cannot create hsr debugfs directory
[  423.840680][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  424.124284][ T8455] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  424.171868][ T8455] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  424.214560][ T8455] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  424.254498][ T8455] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  424.566019][ T8455] 8021q: adding VLAN 0 to HW filter on device bond0
[  424.602699][ T8590] ip6t_rpfilter: unknown options
[  424.610741][ T8455] 8021q: adding VLAN 0 to HW filter on device team0
[  424.631655][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  424.660940][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  424.710734][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  424.733711][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  424.764120][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.771295][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state
[  424.812888][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  424.840994][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  424.865239][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.872390][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state
[  424.918757][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  424.958698][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  424.980609][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  425.005446][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  425.050864][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  425.094419][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  425.142803][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  425.171594][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  425.206784][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  425.234721][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  425.245489][ T8566] loop7: detected capacity change from 0 to 40427
[  425.265261][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  425.279196][ T8566] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  425.318829][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  425.340091][ T8566] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  425.351249][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  425.425628][ T8566] F2FS-fs (loop7): Found nat_bits in checkpoint
[  425.618822][ T8566] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  425.630658][ T8566] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  426.220237][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  426.233707][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  426.268211][ T8455] 8021q: adding VLAN 0 to HW filter on device batadv0
[  426.292557][ T8627] loop7: detected capacity change from 0 to 128
[  426.388187][ T8627] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  426.455830][ T8627] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  427.292431][ T5887] EXT4-fs (loop7): unmounting filesystem.
[  427.535522][ T5319] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  427.652187][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  427.675420][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  427.728001][ T5319] usb 7-1: Using ep0 maxpacket: 32
[  427.735015][ T5319] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  427.740362][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  427.776313][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  427.785742][ T5319] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  427.801270][ T8455] device veth0_vlan entered promiscuous mode
[  427.813599][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  427.831929][ T5319] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  427.835881][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  427.887003][ T5319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.891130][ T8455] device veth1_vlan entered promiscuous mode
[  427.925732][ T5319] usb 7-1: config 0 descriptor??
[  427.949724][ T5319] hub 7-1:0.0: USB hub found
[  428.004776][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  428.029693][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  428.057768][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  428.089109][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  428.136801][ T8455] device veth0_macvtap entered promiscuous mode
[  428.163651][ T8455] device veth1_macvtap entered promiscuous mode
[  428.166688][ T5319] hub 7-1:0.0: config failed, can't read hub descriptor (err -22)
[  428.233607][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.270468][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.293487][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.332237][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.368953][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.407305][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.421196][ T5319] hid-generic 0003:046D:C31C.0003: item fetching failed at offset 0/1
[  428.446461][ T5319] hid-generic: probe of 0003:046D:C31C.0003 failed with error -22
[  428.458760][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.505993][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.538247][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.560189][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.589541][ T8455] batman_adv: batadv0: Interface activated: batadv_slave_0
[  428.620154][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  428.638126][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  428.646324][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  428.662401][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  428.703305][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  428.734315][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.753775][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  428.772963][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.804891][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  428.818199][ T4699] usb 7-1: USB disconnect, device number 4
[  428.858506][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.887215][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  428.901995][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.918399][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  428.946484][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.983882][ T8455] batman_adv: batadv0: Interface activated: batadv_slave_1
[  428.997591][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  429.013824][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  429.033756][ T8455] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  429.057576][ T8455] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  429.093585][ T8455] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  429.134966][ T8455] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  429.329993][ T4566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.351165][ T4566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.392552][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  429.434148][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.464194][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.488300][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  429.499136][ T8685] loop6: detected capacity change from 0 to 256
[  429.564561][ T8685] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  429.640807][ T8685] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  429.720337][ T8685] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xdc69dc80, utbl_chksum : 0xe619d30d)
[  429.746533][ T8692] xt_hashlimit: size too large, truncated to 1048576
[  430.077706][ T8702] loop8: detected capacity change from 0 to 128
[  430.172463][ T8702] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  430.209106][ T8702] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  430.574403][ T8711] loop6: detected capacity change from 0 to 128
[  430.640865][ T8711] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  430.667683][ T8711] ext4 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  430.727514][ T7840] EXT4-fs (loop8): unmounting filesystem.
[  431.518703][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  431.574786][  T126] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  431.779445][  T126] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  431.796382][  T126] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  431.831081][ T8716] loop7: detected capacity change from 0 to 40427
[  431.853974][  T126] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  431.863098][  T126] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  431.870128][ T8716] F2FS-fs (loop7): Invalid log blocks per segment (1)
[  431.884244][ T8731] loop1: detected capacity change from 0 to 1024
[  431.901678][ T8716] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  431.919260][  T126] usb 9-1: SerialNumber: syz
[  431.931801][ T8716] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x35f7
[  431.950505][ T8731] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  431.959705][ T8716] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x3ffff
[  431.980475][  T126] usb-storage 9-1:1.0: USB Mass Storage device detected
[  432.072914][ T8716] F2FS-fs (loop7): invalid crc value
[  432.101861][  T126] usb-storage 9-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  432.217591][  T126] usb 9-1: USB disconnect, device number 3
[  432.266425][ T8716] F2FS-fs (loop7): Found nat_bits in checkpoint
[  432.303902][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  432.443534][ T8716] F2FS-fs (loop7): Start checkpoint disabled!
[  432.698014][ T8716] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  432.705612][ T8716] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  433.896500][ T8765] loop6: detected capacity change from 0 to 128
[  433.900008][    T9] bio_check_eod: 14 callbacks suppressed
[  433.900057][    T9] kworker/u4:0: attempt to access beyond end of device
[  433.900057][    T9] loop7: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  433.987976][ T8765] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  434.020276][ T8765] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  434.364575][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  434.368794][ T8773] loop8: detected capacity change from 0 to 128
[  434.409284][ T8773] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  434.567355][ T8773] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  435.480322][ T7840] EXT4-fs (loop8): unmounting filesystem.
[  435.741422][ T8785] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  435.815559][ T8789] siw: device registration error -23
[  435.946538][ T8785] overlayfs: missing 'lowerdir'
[  436.928160][ T8799] loop8: detected capacity change from 0 to 256
[  436.930837][ T8797] loop7: detected capacity change from 0 to 128
[  437.019684][ T8797] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  437.045649][ T8799] FAT-fs (loop8): Directory bread(block 64) failed
[  437.063646][ T3599] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  437.074041][ T8797] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  437.085731][ T8799] FAT-fs (loop8): Directory bread(block 65) failed
[  437.113726][ T8799] FAT-fs (loop8): Directory bread(block 66) failed
[  437.147963][ T8799] FAT-fs (loop8): Directory bread(block 67) failed
[  437.182450][ T8799] FAT-fs (loop8): Directory bread(block 68) failed
[  437.238824][ T8799] FAT-fs (loop8): Directory bread(block 69) failed
[  437.256336][ T8799] FAT-fs (loop8): Directory bread(block 70) failed
[  437.270673][ T3599] usb 7-1: Using ep0 maxpacket: 32
[  437.276648][ T8799] FAT-fs (loop8): Directory bread(block 71) failed
[  437.291868][ T8799] FAT-fs (loop8): Directory bread(block 72) failed
[  437.297453][ T8806] loop9: detected capacity change from 0 to 1024
[  437.307078][ T8799] FAT-fs (loop8): Directory bread(block 73) failed
[  437.307158][ T3599] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  437.365623][ T3599] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  437.397329][ T3599] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  437.439331][ T5887] EXT4-fs (loop7): unmounting filesystem.
[  437.450613][ T3599] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.494057][ T8806] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  437.546035][ T8806] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  437.587880][ T3599] usb 7-1: config 0 descriptor??
[  437.976531][   T27] audit: type=1800 audit(1779440423.745:105): pid=8806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1012" name="file1" dev="loop9" ino=15 res=0 errno=0
[  438.016842][ T8806] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.1012: bg 0: block 112: padding at end of block bitmap is not set
[  438.188077][ T3599] hub 7-1:0.0: USB hub found
[  438.274431][ T8455] EXT4-fs (loop9): unmounting filesystem.
[  438.448219][ T3599] hub 7-1:0.0: 1 port detected
[  439.008373][ T8825] loop9: detected capacity change from 0 to 256
[  439.448979][ T8825] exfat: Deprecated parameter 'namecase'
[  439.581102][ T8825] exfat: Deprecated parameter 'namecase'
[  439.715708][ T8825] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  440.048404][ T8842] siw: device registration error -23
[  440.192752][ T3599] hub 7-1:0.0: activate --> -90
[  440.409158][ T3599] hub 7-1:0.0: hub_ext_port_status failed (err = -71)
[  440.419251][ T4700] usb 7-1: USB disconnect, device number 5
[  441.247268][ T8858] loop1: detected capacity change from 0 to 128
[  441.381076][ T8864] siw: device registration error -23
[  441.483825][ T8858] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  441.584123][ T8858] ext4 filesystem being mounted at /202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  442.356232][ T8873] loop9: detected capacity change from 0 to 1024
[  442.741912][ T8873] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  442.764952][ T8873] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  442.925049][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  443.247301][ T8455] EXT4-fs (loop9): unmounting filesystem.
[  444.129339][ T8892] tap0: tun_chr_ioctl cmd 1074025675
[  444.141685][ T8892] tap0: persist disabled
[  444.455712][ T8906] device syzkaller0 entered promiscuous mode
[  445.582424][ T8916] loop7: detected capacity change from 0 to 128
[  445.674940][ T8916] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  445.691162][ T8916] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  445.730940][   T27] audit: type=1326 audit(1779440430.998:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8921 comm="syz.9.1044" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb9ce59 code=0x7ffc0000
[  445.813521][   T27] audit: type=1326 audit(1779440431.044:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8921 comm="syz.9.1044" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f208fb9ce59 code=0x7ffc0000
[  446.075838][   T27] audit: type=1326 audit(1779440431.044:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8921 comm="syz.9.1044" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb9ce59 code=0x7ffc0000
[  446.190760][   T27] audit: type=1326 audit(1779440431.044:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8921 comm="syz.9.1044" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208fb9ce59 code=0x7ffc0000
[  446.549641][ T5887] EXT4-fs (loop7): unmounting filesystem.
[  446.708391][ T8941] siw: device registration error -23
[  447.053382][ T8945] devpts: called with bogus options
[  448.590779][ T8951] xt_hashlimit: size too large, truncated to 1048576
[  448.630142][ T8953] fuse: Bad value for 'fd'
[  448.651684][ T8953] fuse: Bad value for 'fd'
[  448.908854][ T8965] siw: device registration error -23
[  449.487349][ T8971] overlayfs: missing 'lowerdir'
[  451.780304][ T8981] loop6: detected capacity change from 0 to 128
[  451.865306][ T8981] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  451.906470][ T8993] loop9: detected capacity change from 0 to 512
[  451.943228][ T8981] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  451.987037][ T8993] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  452.276881][ T9000] loop1: detected capacity change from 0 to 128
[  452.334957][ T8455] EXT4-fs (loop9): unmounting filesystem.
[  452.446667][ T9000] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  452.502148][ T9000] ext4 filesystem being mounted at /208/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  452.507294][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  452.735357][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  453.184921][ T9023] overlayfs: missing 'lowerdir'
[  453.825483][ T9020] siw: device registration error -23
[  454.210341][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1075'.
[  454.229523][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1075'.
[  454.918512][ T9041] random: crng reseeded on system resumption
[  455.973061][ T9047] loop1: detected capacity change from 0 to 128
[  456.046715][ T9047] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  456.056777][ T9047] ext4 filesystem being mounted at /212/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  457.837027][ T9038] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.844513][ T9038] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.930389][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  457.936721][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  457.954965][ T9060] loop6: detected capacity change from 0 to 128
[  458.031313][ T9060] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  458.110577][ T9060] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  458.289086][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  458.692092][ T9038] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  458.736128][ T9038] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  458.970513][ T9073] loop7: detected capacity change from 0 to 512
[  458.999718][ T9073] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  459.012114][ T9073] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  459.023248][ T9073] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  459.033544][ T9073] System zones: 1-12
[  459.039028][ T9073] EXT4-fs (loop7): orphan cleanup on readonly fs
[  459.050209][ T9073] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 33619980: comm syz.7.1083: invalid block
[  459.076388][ T9073] EXT4-fs (loop7): Remounting filesystem read-only
[  459.083067][ T9073] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1083: invalid indirect mapped block 2 (level 2)
[  459.100875][ T9073] EXT4-fs (loop7): Remounting filesystem read-only
[  459.109383][ T9073] EXT4-fs (loop7): 1 truncate cleaned up
[  459.115180][ T9073] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  459.166019][ T9073] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #2: block 5: comm syz.7.1083: lblock 0 mapped to illegal pblock 5 (length 1)
[  459.181666][ T9073] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.1083: error -117 reading directory block
[  459.196881][ T9073] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #2: block 5: comm syz.7.1083: lblock 0 mapped to illegal pblock 5 (length 1)
[  459.212161][ T9073] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.1083: error -117 reading directory block
[  459.257850][ T5887] EXT4-fs (loop7): unmounting filesystem.
[  459.377563][ T9038] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.386671][ T9038] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.395702][ T9038] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.405152][ T9038] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.752217][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  460.027225][ T9099] siw: device registration error -23
[  466.226392][ T9143] loop1: detected capacity change from 0 to 1024
[  466.657546][ T9143] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #3: block 5: comm syz.1.1092: lblock 5 mapped to illegal pblock 5 (length 1)
[  466.733173][ T9143] Quota error (device loop1): write_blk: dquota write failed
[  466.795997][ T9143] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  466.805204][ T9143] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  466.892188][ T9143] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.1092: Failed to acquire dquot type 0
[  466.946010][ T9143] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 5: comm syz.1.1092: lblock 5 mapped to illegal pblock 5 (length 1)
[  467.182249][ T9143] Quota error (device loop1): do_insert_tree: Can't read tree quota block 5
[  467.273278][ T9143] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  467.590724][ T9143] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.1092: Failed to acquire dquot type 0
[  467.800781][ T9143] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.1092: Freeing blocks not in datazone - block = 0, count = 4096
[  468.012943][ T9143] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 5: comm syz.1.1092: lblock 5 mapped to illegal pblock 5 (length 1)
[  468.429759][ T9143] Quota error (device loop1): do_insert_tree: Can't read tree quota block 5
[  468.570211][ T9143] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  468.580176][ T9143] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.1092: Failed to acquire dquot type 0
[  468.722570][ T9143] EXT4-fs (loop1): 1 orphan inode deleted
[  468.728416][ T9143] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  468.853633][ T9174] loop6: detected capacity change from 0 to 4096
[  468.912237][ T9174] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  468.933968][ T9143] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 5: comm syz.1.1092: lblock 5 mapped to illegal pblock 5 (length 1)
[  469.101491][ T9143] Quota error (device loop1): do_insert_tree: Can't read tree quota block 5
[  469.120054][ T9186] loop7: detected capacity change from 0 to 512
[  469.184032][ T9143] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  469.214660][ T9186] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  469.313990][ T9190] EXT4-fs warning (device loop6): ext4_resize_fs:2028: can't read last block, resize aborted
[  469.331285][ T9190] devpts: called with bogus options
[  470.030108][ T9143] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.1092: Failed to acquire dquot type 0
[  470.043306][ T9184] siw: device registration error -23
[  470.103252][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  470.131860][ T9186] EXT4-fs (loop7): 1 truncate cleaned up
[  470.137528][ T9186] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  470.285287][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  472.073696][ T9212] ip6t_rpfilter: unknown options
[  473.006424][ T4570] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm kworker/u4:27: Invalid inode table block 5 in block_group 0
[  473.114968][ T5887] EXT4-fs (loop7): unmounting filesystem.
[  474.293545][ T9261] loop9: detected capacity change from 0 to 128
[  474.335720][ T9267] xt_SECMARK: invalid mode: 2
[  474.457183][ T9261] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  474.466021][ T9261] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  474.620982][ T8455] EXT4-fs (loop9): unmounting filesystem.
[  475.006469][ T9277] loop9: detected capacity change from 0 to 4096
[  475.085247][ T9277] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  475.117015][ T4582] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.518990][ T9282] EXT4-fs warning (device loop9): ext4_resize_fs:2028: can't read last block, resize aborted
[  475.586965][ T9285] devpts: called with bogus options
[  475.595659][ T9284] siw: device registration error -23
[  476.436603][ T4582] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.206803][ T4582] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.465829][ T8455] EXT4-fs (loop9): unmounting filesystem.
[  477.662709][ T9302] overlayfs: failed to clone upperpath
[  478.510579][ T4582] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.191730][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'.
[  480.880780][ T9351] xt_hashlimit: size too large, truncated to 1048576
[  480.901643][ T9352] ip6t_rpfilter: unknown options
[  481.342612][ T9357] loop1: detected capacity change from 0 to 4096
[  481.441434][ T9357] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  481.566314][ T4276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  481.575618][ T4276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  481.584020][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  481.591855][ T4276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  481.599699][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  481.608496][ T4276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  482.216531][ T9371] EXT4-fs warning (device loop1): ext4_resize_fs:2028: can't read last block, resize aborted
[  482.333996][ T9372] devpts: called with bogus options
[  482.925413][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  483.019581][ T9366] lo speed is unknown, defaulting to 1000
[  483.831686][ T9366] chnl_net:caif_netlink_parms(): no params data found
[  483.836753][ T4276] Bluetooth: hci3: command 0x0409 tx timeout
[  484.038153][ T4582] device hsr_slave_0 left promiscuous mode
[  484.063728][ T4582] device hsr_slave_1 left promiscuous mode
[  484.142422][ T4582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  484.142811][ T9400] loop9: detected capacity change from 0 to 128
[  484.149826][ T4582] batman_adv: batadv0: Removing interface: batadv_slave_0
[  484.195609][ T9400] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  484.215893][ T4582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  484.223301][ T4582] batman_adv: batadv0: Removing interface: batadv_slave_1
[  484.241257][ T9400] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  484.283118][ T9403] xt_SECMARK: invalid mode: 2
[  484.344670][ T4582] device bridge_slave_1 left promiscuous mode
[  484.380377][ T4582] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.426277][ T4582] device bridge_slave_0 left promiscuous mode
[  484.462235][ T4582] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.640666][ T4582] device veth1_macvtap left promiscuous mode
[  484.682371][ T4582] device veth0_macvtap left promiscuous mode
[  484.701994][ T4582] device veth1_vlan left promiscuous mode
[  484.725919][ T4582] device veth0_vlan left promiscuous mode
[  485.047924][ T9395] loop1: detected capacity change from 0 to 40427
[  485.073462][ T9395] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  485.102069][ T9395] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  485.142195][ T9395] F2FS-fs (loop1): invalid crc value
[  485.200097][ T9395] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  485.363007][ T9395] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  485.379186][ T9395] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  486.062899][ T4276] Bluetooth: hci3: command 0x041b tx timeout
[  486.168227][ T4582] team0 (unregistering): Port device team_slave_1 removed
[  486.218680][ T4582] team0 (unregistering): Port device team_slave_0 removed
[  486.317474][ T4582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  486.413754][ T4582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  486.892344][ T9433] devpts: called with bogus options
[  487.607452][ T4582] bond0 (unregistering): Released all slaves
[  487.791120][ T8455] EXT4-fs (loop9): unmounting filesystem.
[  487.918593][ T9448] ip6t_rpfilter: unknown options
[  488.274913][ T4276] Bluetooth: hci3: command 0x040f tx timeout
[  490.521514][ T4276] Bluetooth: hci3: command 0x0419 tx timeout
[  491.401383][ T9473] loop1: detected capacity change from 0 to 1024
[  491.414278][ T9473] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  491.441655][ T9473] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (40000)
[  491.451709][ T9473] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  492.310459][ T9477] devpts: called with bogus options
[  494.723649][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1154'.
[  494.870096][ T9366] bridge0: port 1(bridge_slave_0) entered blocking state
[  494.877326][ T9366] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.903618][ T9366] device bridge_slave_0 entered promiscuous mode
[  494.964612][ T9366] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.982338][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.992337][ T9366] device bridge_slave_1 entered promiscuous mode
[  495.138808][ T9366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  495.160770][ T9499] loop6: detected capacity change from 0 to 512
[  495.199052][ T9499] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  495.202589][ T9366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  495.254540][ T9499] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  495.336094][ T9366] team0: Port device team_slave_0 added
[  495.346339][ T9499] EXT4-fs (loop6): 1 truncate cleaned up
[  495.359230][ T9499] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  495.424773][ T9507] xt_SECMARK: invalid mode: 2
[  495.543427][ T9366] team0: Port device team_slave_1 added
[  495.620223][ T9499] EXT4-fs (loop6): shut down requested (0)
[  495.779363][ T9366] batman_adv: batadv0: Adding interface: batadv_slave_0
[  495.801423][ T9366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  495.831931][ T9366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  495.832552][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  495.862565][ T9366] batman_adv: batadv0: Adding interface: batadv_slave_1
[  495.869658][ T9366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  495.953333][ T9366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  496.298772][ T9366] device hsr_slave_0 entered promiscuous mode
[  496.340262][ T9366] device hsr_slave_1 entered promiscuous mode
[  496.370792][ T9366] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  496.385967][ T9496] loop1: detected capacity change from 0 to 40427
[  496.393122][ T9366] Cannot create hsr debugfs directory
[  496.409622][ T9512] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  496.422428][ T9517] loop9: detected capacity change from 0 to 128
[  496.440108][ T9496] F2FS-fs (loop1): invalid crc value
[  496.449074][ T9512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  496.494666][ T9517] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  496.505913][ T9496] F2FS-fs (loop1): Found nat_bits in checkpoint
[  496.517497][ T9512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  496.575154][ T9517] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  496.867211][ T9496] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  497.130217][ T9366] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.323746][ T4272] syz-executor: attempt to access beyond end of device
[  497.323746][ T4272] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  497.382762][ T9366] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.521499][ T9366] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.808800][ T9538] loop6: detected capacity change from 0 to 512
[  497.835003][ T9538] EXT4-fs (loop6): Test dummy encryption mode enabled
[  497.841935][ T9538] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  498.001086][ T9538] EXT4-fs error (device loop6): __ext4_fill_super:5465: inode #2: comm syz.6.1169: iget: special inode unallocated
[  498.014990][ T9538] EXT4-fs (loop6): Remounting filesystem read-only
[  498.021880][ T9538] EXT4-fs (loop6): get root inode failed
[  498.027587][ T9538] EXT4-fs (loop6): mount failed
[  498.247404][ T9366] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.448237][ T4276] Bluetooth: hci4: command 0x0406 tx timeout
[  499.512981][ T9366] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  499.591611][ T9366] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  499.676614][ T9366] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  499.737374][ T9366] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  500.170698][ T9556] siw: device registration error -23
[  500.189498][ T9366] 8021q: adding VLAN 0 to HW filter on device bond0
[  500.288125][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  500.344531][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  500.383137][ T9366] 8021q: adding VLAN 0 to HW filter on device team0
[  500.393998][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  500.469533][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  500.510957][ T4570] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.518045][ T4570] bridge0: port 1(bridge_slave_0) entered forwarding state
[  500.565938][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  500.586698][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  500.612268][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  500.643995][ T4570] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.651144][ T4570] bridge0: port 2(bridge_slave_1) entered forwarding state
[  500.711376][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  500.755789][ T8455] EXT4-fs (loop9): unmounting filesystem.
[  500.764968][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  500.815313][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  500.885207][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  501.088699][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  501.158810][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  501.231151][ T9366] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  501.290363][ T9366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  502.000965][ T9568] loop6: detected capacity change from 0 to 40427
[  502.058822][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  502.079723][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  502.104274][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  502.105637][ T9568] F2FS-fs (loop6): invalid crc value
[  502.112807][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  502.145970][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  502.158281][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  502.616805][ T9568] F2FS-fs (loop6): Found nat_bits in checkpoint
[  502.627548][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  502.635621][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  502.711498][ T9366] 8021q: adding VLAN 0 to HW filter on device batadv0
[  502.782537][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  502.799950][ T9568] F2FS-fs (loop6): Start checkpoint disabled!
[  502.825897][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  502.838677][ T9568] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  502.936628][ T9366] device veth0_vlan entered promiscuous mode
[  502.951937][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  502.981908][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  503.033914][ T9366] device veth1_vlan entered promiscuous mode
[  503.061924][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  503.071321][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  503.108395][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  503.157749][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  503.221494][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  503.247010][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  503.255216][ T4440] kworker/u4:15: attempt to access beyond end of device
[  503.255216][ T4440] loop6: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  503.271187][ T9366] device veth0_macvtap entered promiscuous mode
[  503.305687][ T4395] kworker/u4:11: attempt to access beyond end of device
[  503.305687][ T4395] loop6: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  503.335085][ T9366] device veth1_macvtap entered promiscuous mode
[  503.364348][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.395131][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.435036][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.466993][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.522961][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.553679][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.588151][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.620037][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.653474][ T9366] batman_adv: batadv0: Interface activated: batadv_slave_0
[  503.663330][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  503.682314][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  503.728581][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  503.759986][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  503.792247][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  503.830029][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.876525][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  503.886964][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.967694][ T9612] loop1: detected capacity change from 0 to 512
[  503.970293][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  503.980945][ T9614] loop6: detected capacity change from 0 to 128
[  504.030861][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.044402][ T9612] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  504.101043][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.123030][ T9612] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  504.141564][ T9614] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  504.167082][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.214471][ T9614] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  504.240325][ T9366] batman_adv: batadv0: Interface activated: batadv_slave_1
[  504.278128][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  504.322342][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  504.371102][ T9366] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.413034][ T9366] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.471040][ T9366] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.515669][ T9366] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  504.598037][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  504.832505][ T9629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.857129][ T9636] loop1: detected capacity change from 0 to 512
[  504.865200][ T9629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.932306][ T9636] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  504.944249][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  504.958986][ T9629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.971016][ T9629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  505.147680][ T9629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  506.288843][ T9655] overlayfs: missing 'lowerdir'
[  508.162934][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  509.290365][ T9717] netlink: 'syz.6.1198': attribute type 10 has an invalid length.
[  509.611985][ T9717] team0 (unregistering): Port device team_slave_0 removed
[  509.699558][ T9717] team0 (unregistering): Port device team_slave_1 removed
[  509.838482][ T9729] overlayfs: missing 'lowerdir'
[  510.742568][ T9738] netlink: 'syz.6.1203': attribute type 10 has an invalid length.
[  510.991054][ T9745] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.1205'.
[  511.092603][ T9749] loop6: detected capacity change from 0 to 128
[  511.277026][ T9749] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  511.334940][ T9749] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  512.443928][ T9774] overlayfs: missing 'lowerdir'
[  513.190045][ T9778] syz.9.1214 uses obsolete (PF_INET,SOCK_PACKET)
[  513.577527][ T9790] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1217'.
[  513.622500][ T9790] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1217'.
[  513.645959][ T9794] netlink: 'syz.2.1219': attribute type 10 has an invalid length.
[  513.745457][ T9794] team0: Device hsr_slave_0 failed to register rx_handler
[  513.780515][ T9792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1217'.
[  515.302174][ T9823] netlink: 'syz.2.1227': attribute type 5 has an invalid length.
[  515.605956][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  516.529343][ T9856] netlink: 'syz.1.1239': attribute type 10 has an invalid length.
[  516.537208][ T9856] device netdevsim0 entered promiscuous mode
[  516.613739][ T9864] loop6: detected capacity change from 0 to 128
[  516.712823][ T9864] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  516.757939][ T9864] ext4 filesystem being mounted at /165/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  518.002571][ T9896] ip6t_rpfilter: unknown options
[  520.788490][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  520.983221][ T9929] loop6: detected capacity change from 0 to 1024
[  521.114155][ T9929] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  521.123381][ T9929] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  521.511856][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'.
[  522.334089][ T9945] ip6t_rpfilter: unknown options
[  522.364714][ T4577] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: comm kworker/u4:31: lblock 0 mapped to illegal pblock 0 (length 6)
[  522.425300][ T4577] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  522.479501][ T4577] EXT4-fs (loop6): This should not happen!! Data will be lost
[  522.479501][ T4577] 
[  522.530238][ T4577] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:31: lblock 8 mapped to illegal pblock 8 (length 8)
[  522.568834][ T4577] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  522.596236][ T4577] EXT4-fs (loop6): This should not happen!! Data will be lost
[  522.596236][ T4577] 
[  522.704722][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  522.851305][ T9956] lo speed is unknown, defaulting to 1000
[  523.129306][ T9970] hsr0: VLAN not yet supported
[  523.585930][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  523.597056][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  523.659337][ T9983] loop6: detected capacity change from 0 to 128
[  523.748318][ T9983] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  523.876251][ T9983] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  524.391418][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'.
[  525.422267][T10009] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1272'.
[  525.462382][T10009] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  525.806535][T10021] netlink: 'syz.1.1275': attribute type 10 has an invalid length.
[  525.946579][T10021] device veth0_vlan left promiscuous mode
[  525.986568][T10021] device veth0_vlan entered promiscuous mode
[  526.041927][T10021] team0: Device veth0_vlan failed to register rx_handler
[  527.456696][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  528.124443][T10061] xt_SECMARK: invalid mode: 2
[  529.678467][ T4357] kernel write not supported for file /input/event2 (pid: 4357 comm: kworker/1:6)
[  529.845361][T10082] loop6: detected capacity change from 0 to 1024
[  529.939104][T10082] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  529.947923][T10082] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  530.794418][ T4566] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: comm kworker/u4:25: lblock 0 mapped to illegal pblock 0 (length 6)
[  530.810609][ T4566] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  530.824417][ T4566] EXT4-fs (loop6): This should not happen!! Data will be lost
[  530.824417][ T4566] 
[  530.843349][ T4340] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8)
[  530.859483][ T4340] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  530.871807][ T4340] EXT4-fs (loop6): This should not happen!! Data will be lost
[  530.871807][ T4340] 
[  531.162706][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  531.590452][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'.
[  532.082696][T10114] ip6t_rpfilter: unknown options
[  532.367435][T10127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1305'.
[  533.089601][T10130] netlink: 'syz.1.1304': attribute type 10 has an invalid length.
[  533.392927][T10130] team0 (unregistering): Port device team_slave_0 removed
[  534.233885][T10130] team0 (unregistering): Port device team_slave_1 removed
[  537.964766][T10155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  537.997613][T10155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  538.232330][T10155] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  538.241210][T10155] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  538.250164][T10155] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  538.259390][T10155] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  538.282377][T10155] device netdevsim0 left promiscuous mode
[  538.346760][ T4709] lo speed is unknown, defaulting to 1000
[  538.346793][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1317'.
[  538.499394][T10187] netlink: 'syz.6.1320': attribute type 10 has an invalid length.
[  538.542288][T10187] device netdevsim0 entered promiscuous mode
[  538.563287][T10200] device batadv_slave_1 entered promiscuous mode
[  538.578687][T10200] device batadv_slave_1 left promiscuous mode
[  538.856993][T10220] ip6t_rpfilter: unknown options
[  539.457922][T10242] loop2: detected capacity change from 0 to 256
[  539.481228][T10242] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  539.503885][T10242] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  539.568083][T10242] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xdc69dc80, utbl_chksum : 0xe619d30d)
[  540.028120][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1334'.
[  542.860556][T10271] siw: device registration error -23
[  544.034899][T10313] overlayfs: missing 'lowerdir'
[  544.927789][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1350'.
[  547.700059][ T4276] Bluetooth: hci2: command 0x0406 tx timeout
[  547.918339][T10373] loop6: detected capacity change from 0 to 1024
[  547.960566][T10374] overlayfs: missing 'lowerdir'
[  548.378309][T10373] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  548.517629][T10373] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  548.937257][ T9622] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: comm kworker/u4:29: lblock 0 mapped to illegal pblock 0 (length 6)
[  549.010010][ T9622] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  549.039317][ T9622] EXT4-fs (loop6): This should not happen!! Data will be lost
[  549.039317][ T9622] 
[  549.070421][ T9622] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:29: lblock 8 mapped to illegal pblock 8 (length 8)
[  549.123616][ T9622] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  549.157964][ T9622] EXT4-fs (loop6): This should not happen!! Data will be lost
[  549.157964][ T9622] 
[  549.302284][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  551.336509][T10427] loop6: detected capacity change from 0 to 1024
[  551.668999][T10427] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  551.824067][T10427] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  553.072259][ T9627] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: comm kworker/u4:35: lblock 0 mapped to illegal pblock 0 (length 6)
[  553.187738][ T9627] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  553.236976][T10449] siw: device registration error -23
[  553.290554][ T9627] EXT4-fs (loop6): This should not happen!! Data will be lost
[  553.290554][ T9627] 
[  553.317700][ T9627] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:35: lblock 8 mapped to illegal pblock 8 (length 8)
[  553.374932][ T9627] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  553.469982][ T9627] EXT4-fs (loop6): This should not happen!! Data will be lost
[  553.469982][ T9627] 
[  553.607180][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  553.629905][T10457] ip6t_rpfilter: unknown options
[  556.065372][T10497] loop2: detected capacity change from 0 to 4096
[  556.194093][T10497] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  557.222195][ T9366] EXT4-fs (loop2): unmounting filesystem.
[  557.470146][T10489] loop6: detected capacity change from 0 to 40427
[  557.515123][T10489] F2FS-fs (loop6): Invalid log blocks per segment (1)
[  557.558794][T10489] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  557.582416][T10531] xt_SECMARK: invalid mode: 2
[  558.208115][T10489] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7
[  558.216968][T10489] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3ffff
[  558.239676][T10532] siw: device registration error -23
[  558.255131][T10489] F2FS-fs (loop6): invalid crc value
[  558.285616][T10489] F2FS-fs (loop6): Found nat_bits in checkpoint
[  558.429014][T10489] F2FS-fs (loop6): Start checkpoint disabled!
[  558.484311][T10539] loop9: detected capacity change from 0 to 128
[  558.490600][T10489] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  558.543936][T10489] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  558.558653][T10539] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  558.773293][T10539] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  559.864467][ T4562] kworker/u4:23: attempt to access beyond end of device
[  559.864467][ T4562] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  562.511088][T10584] ip6t_rpfilter: unknown options
[  562.561219][ T8455] EXT4-fs (loop9): unmounting filesystem.
[  562.636354][T10589] siw: device registration error -23
[  563.065315][T10596] xt_SECMARK: invalid mode: 2
[  566.526230][T10635] loop9: detected capacity change from 0 to 128
[  566.656068][T10635] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  566.712271][T10635] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  566.908834][T10650] xt_SECMARK: invalid mode: 2
[  569.012046][T10673] loop6: detected capacity change from 0 to 128
[  569.222494][T10673] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  569.231224][T10673] ext4 filesystem being mounted at /210/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  570.219301][T10704] xt_SECMARK: invalid mode: 2
[  571.076601][ T8455] EXT4-fs (loop9): unmounting filesystem.
[  571.487552][T10730] ip6t_rpfilter: unknown options
[  572.201734][T10735] siw: device registration error -23
[  573.429875][T10767] xt_SECMARK: invalid mode: 2
[  574.357511][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  574.601699][T10776] loop2: detected capacity change from 0 to 2048
[  576.213325][T10776] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  576.328992][T10776] loop2: detected capacity change from 2048 to 64
[  576.370130][T10798] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.1455: corrupted xattr entries
[  576.469571][T10798] EXT4-fs error (device loop2): get_max_inline_xattr_value_size:69: inode #15: comm syz.2.1455: corrupt xattr in inline inode
[  576.546134][T10798] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.1455: corrupted xattr entries
[  576.692791][T10798] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 1803188595: comm syz.2.1455: lblock 0 mapped to illegal pblock 1803188595 (length 1)
[  576.822605][T10798] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  576.867280][T10798] EXT4-fs (loop2): This should not happen!! Data will be lost
[  576.867280][T10798] 
[  577.087120][T10817] xt_SECMARK: invalid mode: 2
[  577.092620][ T4552] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm kworker/u4:18: corrupted xattr entries
[  577.142293][ T4421] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm kworker/u4:13: corrupted xattr entries
[  577.179043][ T9366] EXT4-fs (loop2): Inode 15 (ffff8880719b4638): i_reserved_data_blocks (1) not cleared!
[  577.215696][ T9366] EXT4-fs (loop2): unmounting filesystem.
[  577.276467][T10786] kmmpd-loop2: attempt to access beyond end of device
[  577.276467][T10786] loop2: rw=14337, sector=256, nr_sectors = 4 limit=64
[  577.299051][T10827] ip6t_rpfilter: unknown options
[  577.320418][T10786] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  577.391523][T10831] loop9: detected capacity change from 0 to 128
[  577.454779][T10831] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  577.474212][T10831] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  577.958686][ T4552] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.175382][ T4552] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.345858][ T4552] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.556620][ T4552] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.090799][ T4276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  579.103234][ T4276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  579.138641][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  579.156724][ T4276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  579.164292][ T4276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  579.172832][ T4276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  579.416500][T10857] lo speed is unknown, defaulting to 1000
[  580.236761][T10873] program syz.1.1480 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  580.822752][T10873] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  581.283487][T10857] chnl_net:caif_netlink_parms(): no params data found
[  581.371782][ T4276] Bluetooth: hci3: command 0x0409 tx timeout
[  582.040376][ T4276] Bluetooth: hci0: unexpected event for opcode 0x007f
[  582.195418][ T8455] EXT4-fs (loop9): unmounting filesystem.
[  582.231227][T10910] xt_SECMARK: invalid mode: 2
[  582.399519][T10857] bridge0: port 1(bridge_slave_0) entered blocking state
[  582.406625][T10857] bridge0: port 1(bridge_slave_0) entered disabled state
[  582.438573][T10857] device bridge_slave_0 entered promiscuous mode
[  582.499990][T10857] bridge0: port 2(bridge_slave_1) entered blocking state
[  582.510477][T10857] bridge0: port 2(bridge_slave_1) entered disabled state
[  582.525982][T10857] device bridge_slave_1 entered promiscuous mode
[  582.694184][T10857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  582.765645][T10857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  582.844593][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1490'.
[  583.598781][ T4276] Bluetooth: hci3: command 0x041b tx timeout
[  583.625271][T10857] team0: Port device team_slave_0 added
[  583.777590][T10857] team0: Port device team_slave_1 added
[  583.799803][ T4552] device hsr_slave_0 left promiscuous mode
[  583.817819][ T4552] device hsr_slave_1 left promiscuous mode
[  583.836459][ T4552] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  583.863522][ T4552] batman_adv: batadv0: Removing interface: batadv_slave_0
[  583.903888][ T4552] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  583.911498][ T4552] batman_adv: batadv0: Removing interface: batadv_slave_1
[  583.929454][ T4552] device bridge_slave_1 left promiscuous mode
[  583.942717][ T4552] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.959030][ T4552] device bridge_slave_0 left promiscuous mode
[  583.973743][ T4552] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.048514][ T4552] device veth1_macvtap left promiscuous mode
[  584.056894][ T4552] device veth0_macvtap left promiscuous mode
[  584.063033][ T4552] device veth1_vlan left promiscuous mode
[  584.075410][ T4552] device veth0_vlan left promiscuous mode
[  585.314678][ T4552] team0 (unregistering): Port device team_slave_1 removed
[  585.399107][ T4552] team0 (unregistering): Port device team_slave_0 removed
[  585.479757][ T4552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  585.533510][ T4552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  585.832020][ T4276] Bluetooth: hci3: command 0x040f tx timeout
[  585.908853][ T4552] bond0 (unregistering): Released all slaves
[  586.010972][T10857] batman_adv: batadv0: Adding interface: batadv_slave_0
[  586.018024][T10857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  586.043935][    C1] vkms_vblank_simulate: vblank timer overrun
[  586.074475][T10857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  586.091605][T10857] batman_adv: batadv0: Adding interface: batadv_slave_1
[  586.098823][T10857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  586.127569][T10857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  586.589218][T10857] device hsr_slave_0 entered promiscuous mode
[  586.638664][T10857] device hsr_slave_1 entered promiscuous mode
[  586.858123][T10857] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  586.891778][T10857] Cannot create hsr debugfs directory
[  586.898156][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1502'.
[  587.311820][T10989] loop1: detected capacity change from 0 to 128
[  587.385890][T10989] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  587.409516][T10989] ext4 filesystem being mounted at /313/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  587.441400][    C1] vkms_vblank_simulate: vblank timer overrun
[  587.473695][T10995] xt_SECMARK: invalid mode: 2
[  588.039881][ T4276] Bluetooth: hci3: command 0x0419 tx timeout
[  588.887101][T10857] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  588.925157][T10857] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  588.965141][T10857] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  589.003119][T10857] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  589.189237][T10857] 8021q: adding VLAN 0 to HW filter on device bond0
[  589.280249][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  589.301227][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  589.308827][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  589.386725][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  589.442287][T10857] 8021q: adding VLAN 0 to HW filter on device team0
[  589.505691][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  589.561053][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  589.625920][ T9628] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.633076][ T9628] bridge0: port 1(bridge_slave_0) entered forwarding state
[  589.654950][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  589.663750][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  589.687677][ T9628] bridge0: port 2(bridge_slave_1) entered blocking state
[  589.694811][ T9628] bridge0: port 2(bridge_slave_1) entered forwarding state
[  589.806426][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1515'.
[  589.999912][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  590.132167][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  590.467687][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  590.487603][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  590.524792][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  590.553125][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  590.572754][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  590.606675][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  590.614835][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  590.623329][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  590.651324][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  590.729069][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  590.749026][T10857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  590.949844][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  591.593082][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  591.608335][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  591.649975][T10857] 8021q: adding VLAN 0 to HW filter on device batadv0
[  592.530838][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1528'.
[  593.255571][T11039] overlayfs: failed to clone upperpath
[  593.714208][ T4319] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  593.725629][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  593.765243][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  593.832423][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  593.853416][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  593.881371][T10857] device veth0_vlan entered promiscuous mode
[  593.894737][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  593.910859][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  593.938555][ T4319] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  593.943966][T10857] device veth1_vlan entered promiscuous mode
[  593.946550][ T4319] usb 2-1: config 0 has no interface number 0
[  593.993346][ T4319] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  594.004477][ T9622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  594.012553][ T9622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  594.034673][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.055098][ T9622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  594.064373][ T4319] usb 2-1: Product: syz
[  594.084375][ T4319] usb 2-1: Manufacturer: syz
[  594.096079][ T9622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  594.100043][ T4319] usb 2-1: SerialNumber: syz
[  594.138658][T10857] device veth0_macvtap entered promiscuous mode
[  594.142388][ T4319] usb 2-1: config 0 descriptor??
[  594.167057][T10857] device veth1_macvtap entered promiscuous mode
[  594.186401][ T4319] usb 2-1: selecting invalid altsetting 1
[  594.208373][ T4319] dvb_ttusb_budget: ttusb_init_controller: error
[  594.221229][T10857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.227470][ T4319] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  594.263522][T10857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.291180][T10857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.351159][T10857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.403676][T10857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.462223][T10857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.507488][T10857] batman_adv: batadv0: Interface activated: batadv_slave_0
[  594.520872][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  594.551617][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  594.569772][ T4319] DVB: Unable to find symbol stv0299_attach()
[  594.603313][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  594.642346][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  594.679423][T10857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  594.718419][T10857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.748386][T10857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  594.769729][T10857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.779728][ T4319] DVB: Unable to find symbol tda8083_attach()
[  594.793434][ T4319] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  594.817863][T10857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  594.838877][ T4319] usb 2-1: USB disconnect, device number 11
[  594.868229][T10857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.901917][T10857] batman_adv: batadv0: Interface activated: batadv_slave_1
[  594.910977][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  594.935646][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  595.030784][T10857] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  595.050307][T10857] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  595.092782][T10857] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  595.146485][T10857] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  595.414790][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1539'.
[  596.026999][ T9622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.064536][ T9622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.099291][ T9622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  596.124445][ T9627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.206330][ T9627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.217811][ T9627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  596.404035][T11153] ip6t_rpfilter: unknown options
[  598.177034][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1552'.
[  601.258723][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1567'.
[  602.268622][T11242] tipc: Started in network mode
[  602.282265][T11242] tipc: Node identity 4, cluster identity 4711
[  602.305714][T11242] tipc: Node number set to 4
[  602.819713][T11263] ip6t_rpfilter: unknown options
[  604.989729][T11290] loop6: detected capacity change from 0 to 128
[  605.095642][T11290] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  605.126859][T11290] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  605.358784][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1584'.
[  606.380517][T11305] random: crng reseeded on system resumption
[  608.584811][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  609.577037][T11342] loop1: detected capacity change from 0 to 128
[  609.587245][T11342] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  609.598095][T11342] ext4 filesystem being mounted at /326/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  609.980911][T11352] ip6t_rpfilter: unknown options
[  610.297449][T11362] xt_SECMARK: invalid mode: 2
[  611.121982][T11368] siw: device registration error -23
[  611.374041][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  611.498153][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1597'.
[  612.082565][T11378] loop1: detected capacity change from 0 to 128
[  612.229475][T11378] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  612.259971][T11378] ext4 filesystem being mounted at /327/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  614.340190][T11415] siw: device registration error -23
[  614.539572][T11421] loop9: detected capacity change from 0 to 128
[  614.648835][T11421] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  614.723162][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1615'.
[  614.909224][T11421] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  616.890213][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  617.568489][T11482] xt_SECMARK: invalid mode: 2
[  618.240149][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1626'.
[  618.637925][T11485] ip6t_rpfilter: unknown options
[  619.224497][T11506] loop5: detected capacity change from 0 to 128
[  619.292034][T11506] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  619.339213][T11506] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  619.480915][ T8455] EXT4-fs (loop9): unmounting filesystem.
[  620.992986][T11548] xt_SECMARK: invalid mode: 2
[  622.097492][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1640'.
[  623.348636][T10857] EXT4-fs (loop5): unmounting filesystem.
[  623.360942][ T4276] Bluetooth: hci1: unexpected event for opcode 0x0000
[  623.743046][T11591] siw: device registration error -23
[  624.132000][T11607] xt_SECMARK: invalid mode: 2
[  625.669856][T11625] loop9: detected capacity change from 0 to 128
[  625.736643][T11625] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  625.761759][T11625] ext4 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  626.136576][T11639] siw: device registration error -23
[  627.152944][T11642] siw: device registration error -23
[  627.708932][ T4276] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  627.717749][ T4276] Bluetooth: hci1: Injecting HCI hardware error event
[  627.726140][ T4283] Bluetooth: hci1: hardware error 0x00
[  628.370372][ T8455] EXT4-fs (loop9): unmounting filesystem.
[  628.803407][T11681] siw: device registration error -23
[  629.378821][T11703] loop9: detected capacity change from 0 to 128
[  629.457572][T11703] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  629.491381][T11703] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  629.929133][ T4283] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  631.043987][ T8455] EXT4-fs (loop9): unmounting filesystem.
[  633.879357][T11809] loop1: detected capacity change from 0 to 128
[  633.967697][T11809] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  634.003693][T11809] ext4 filesystem being mounted at /352/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  634.355378][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  634.575778][T11836] siw: device registration error -23
[  636.732633][T11858] loop1: detected capacity change from 0 to 128
[  636.829452][T11858] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  636.912664][T11858] ext4 filesystem being mounted at /355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  637.012323][T11869] loop6: detected capacity change from 0 to 128
[  637.095303][T11869] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  637.158441][T11869] ext4 filesystem being mounted at /275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  637.972982][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  638.616325][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  640.205771][T11923] loop5: detected capacity change from 0 to 128
[  640.266069][T11923] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  640.355344][T11923] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  640.419684][T11930] loop8: detected capacity change from 0 to 8
[  640.680128][T11930] Dev loop8: unable to read RDB block 8
[  640.694763][T11930]  loop8: unable to read partition table
[  640.706990][T11930] loop8: partition table beyond EOD, truncated
[  640.721949][T11930] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  641.211817][T10857] EXT4-fs (loop5): unmounting filesystem.
[  643.555212][T11984] loop1: detected capacity change from 0 to 128
[  643.637238][T11984] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  643.670052][T11984] ext4 filesystem being mounted at /364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  644.743800][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  645.284794][T12025] loop6: detected capacity change from 0 to 128
[  645.513235][T12025] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  645.522286][T12025] ext4 filesystem being mounted at /283/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  647.201361][T12061] loop1: detected capacity change from 0 to 128
[  647.243477][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  647.282339][T12061] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  647.326710][T12061] ext4 filesystem being mounted at /369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  648.215251][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  648.562898][T12086] loop5: detected capacity change from 0 to 128
[  648.633261][T12086] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  648.731100][T12086] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  649.159367][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1786'.
[  650.167725][T12121] loop9: detected capacity change from 0 to 128
[  650.635261][T12121] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  650.906303][T12121] ext4 filesystem being mounted at /142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  651.361624][ T8455] EXT4-fs (loop9): unmounting filesystem.
[  652.149983][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1799'.
[  653.050589][T12166] binder: 12164:12166 ioctl c0306201 2000000003c0 returned -14
[  653.147237][T12175] loop9: detected capacity change from 0 to 128
[  653.329191][T12175] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  653.346539][T12175] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  654.264882][T10857] EXT4-fs (loop5): unmounting filesystem.
[  654.537542][ T8455] EXT4-fs (loop9): unmounting filesystem.
[  654.545735][T12196] xt_SECMARK: invalid mode: 2
[  654.804442][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'.
[  654.894792][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  654.901358][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  655.790754][T12218] binder: 12216:12218 ioctl 80286722 200000000240 returned -22
[  655.839376][T12218] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0
[  655.869423][T12218] binder: 12216:12218 ioctl 4018620d 200000000680 returned -1
[  655.984403][T12229] loop9: detected capacity change from 0 to 128
[  656.042512][T12231] siw: device registration error -23
[  656.106614][T12235] loop1: detected capacity change from 0 to 128
[  656.108113][T12229] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  656.172241][T12229] ext4 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  657.240935][T12235] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  657.285365][T12235] ext4 filesystem being mounted at /381/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  658.300989][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  658.708946][ T8455] EXT4-fs (loop9): unmounting filesystem.
[  658.732387][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1825'.
[  660.097525][T12299] loop5: detected capacity change from 0 to 128
[  660.184551][T12299] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  660.241875][T12299] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  660.309487][   T22] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  660.514217][   T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  660.557231][   T22] usb 2-1: config 0 interface 0 has no altsetting 0
[  660.597548][   T22] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  660.639153][   T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.710150][   T22] usb 2-1: Product: syz
[  660.731767][   T22] usb 2-1: Manufacturer: syz
[  660.736380][   T22] usb 2-1: SerialNumber: syz
[  660.792832][T10857] EXT4-fs (loop5): unmounting filesystem.
[  660.832005][   T22] usb 2-1: config 0 descriptor??
[  660.842469][   T22] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  660.923701][   T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  660.967475][   T22] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  660.993852][   T22] usb 2-1: media controller created
[  661.048458][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1844'.
[  661.114671][T12337] xt_SECMARK: invalid mode: 2
[  661.773141][   T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  662.380202][   T22] DVB: Unable to find symbol tda10046_attach()
[  662.403897][   T22] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  662.454053][   T22] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  662.797658][T12367] loop5: detected capacity change from 0 to 128
[  662.804087][ T4357] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  662.844719][T12367] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  662.881011][T12367] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  663.086820][   T22] dvb_usb_m920x: probe of 2-1:0.0 failed with error -71
[  663.096750][   T22] usb 2-1: USB disconnect, device number 12
[  663.200124][ T4357] usb 10-1: Using ep0 maxpacket: 32
[  663.207749][ T4357] usb 10-1: config 0 has an invalid interface number: 12 but max is 0
[  663.208257][T10857] EXT4-fs (loop5): unmounting filesystem.
[  663.215919][ T4357] usb 10-1: config 0 has no interface number 0
[  663.215954][ T4357] usb 10-1: config 0 interface 12 has no altsetting 0
[  663.238844][ T4357] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  663.260643][ T4357] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.280514][ T4357] usb 10-1: Product: syz
[  663.288604][ T4357] usb 10-1: Manufacturer: syz
[  663.298844][ T4357] usb 10-1: SerialNumber: syz
[  663.317681][ T4357] usb 10-1: config 0 descriptor??
[  663.380997][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1858'.
[  663.653590][T12392] xt_SECMARK: invalid mode: 2
[  665.245385][ T4357] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  665.266625][ T4357] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71
[  665.290763][ T4357] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  665.310321][ T4357] f81534: probe of 10-1:0.12 failed with error -71
[  665.331268][ T4357] usb 10-1: USB disconnect, device number 2
[  665.336763][T12425] loop5: detected capacity change from 0 to 128
[  665.461670][T12425] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  665.491993][T12425] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  665.850204][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1874'.
[  665.930025][T10857] EXT4-fs (loop5): unmounting filesystem.
[  666.340932][T12451] siw: device registration error -23
[  668.482776][T12488] loop6: detected capacity change from 0 to 128
[  668.493646][T12488] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  668.503493][T12488] ext4 filesystem being mounted at /309/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  669.356785][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1893'.
[  669.710365][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  671.793620][T12547] syz.6.1904[12547] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  671.793825][T12547] syz.6.1904[12547] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  671.995525][T12550] loop6: detected capacity change from 0 to 128
[  672.401474][T12558] loop5: detected capacity change from 0 to 128
[  672.424238][T12550] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  672.452487][T12550] ext4 filesystem being mounted at /312/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  672.501293][T12558] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  672.561639][T12558] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  673.543710][T10857] EXT4-fs (loop5): unmounting filesystem.
[  674.731897][T12593] syz.1.1920[12593] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  674.732038][T12593] syz.1.1920[12593] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  674.874002][T12595] xt_SECMARK: invalid mode: 2
[  675.891200][T12603] loop5: detected capacity change from 0 to 128
[  675.948690][T12603] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  675.975642][T12603] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  676.367122][T10857] EXT4-fs (loop5): unmounting filesystem.
[  677.192258][ T5865] EXT4-fs (loop6): unmounting filesystem.
[  677.241125][T12637] syz.5.1931[12637] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  677.241267][T12637] syz.5.1931[12637] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  677.580795][T12648] xt_SECMARK: invalid mode: 2
[  679.191475][T12653] loop5: detected capacity change from 0 to 128
[  679.299268][T12653] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  679.389514][T12653] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  679.619865][T12669] loop9: detected capacity change from 0 to 128
[  679.746175][T10857] EXT4-fs (loop5): unmounting filesystem.
[  679.838718][T12669] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  679.902859][T12669] ext4 filesystem being mounted at /172/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  680.082766][T12676] syz.1.1946[12676] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  680.082905][T12676] syz.1.1946[12676] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  680.961336][T12685] 
[  680.975046][T12685] ======================================================
[  680.982063][T12685] WARNING: possible circular locking dependency detected
[  680.989095][T12685] syzkaller #0 Not tainted
[  680.993507][T12685] ------------------------------------------------------
[  681.000519][T12685] syz.8.1947/12685 is trying to acquire lock:
[  681.006586][T12685] ffff888028a69458 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x10d/0xae0
[  681.018157][T12685] 
[  681.018157][T12685] but task is already holding lock:
[  681.025520][T12685] ffff888028a68130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530
[  681.034572][T12685] 
[  681.034572][T12685] which lock already depends on the new lock.
[  681.034572][T12685] 
[  681.044982][T12685] 
[  681.044982][T12685] the existing dependency chain (in reverse order) is:
[  681.053996][T12685] 
[  681.053996][T12685] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}:
[  681.061753][T12685]        lock_sock_nested+0x44/0x100
[  681.067119][T12685]        smc_listen_out+0x109/0x3d0
[  681.072375][T12685]        smc_listen_work+0x581/0xd70
[  681.077677][T12685]        process_one_work+0x8a2/0x1160
[  681.083151][T12685]        worker_thread+0xaa2/0x1270
[  681.088364][T12685]        kthread+0x29d/0x330
[  681.093010][T12685]        ret_from_fork+0x1f/0x30
[  681.097977][T12685] 
[  681.097977][T12685] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}:
[  681.108176][T12685]        __lock_acquire+0x2d07/0x7d10
[  681.113584][T12685]        lock_acquire+0x1bb/0x4a0
[  681.118628][T12685]        __flush_work+0x126/0xae0
[  681.123658][T12685]        __cancel_work_timer+0x3f4/0x560
[  681.129297][T12685]        smc_clcsock_release+0x5c/0xe0
[  681.134772][T12685]        __smc_release+0x661/0x7d0
[  681.139898][T12685]        smc_close_non_accepted+0xd1/0x1f0
[  681.145721][T12685]        smc_close_active+0xb00/0xea0
[  681.151124][T12685]        __smc_release+0x8d/0x7d0
[  681.156169][T12685]        smc_release+0x2ca/0x530
[  681.161119][T12685]        sock_close+0xd5/0x240
[  681.165896][T12685]        __fput+0x22c/0x920
[  681.170486][T12685]        task_work_run+0x1d0/0x260
[  681.175608][T12685]        exit_to_user_mode_loop+0xe6/0x110
[  681.181488][T12685]        exit_to_user_mode_prepare+0xee/0x180
[  681.187574][T12685]        syscall_exit_to_user_mode+0x16/0x40
[  681.193607][T12685]        do_syscall_64+0x58/0xa0
[  681.198576][T12685]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  681.205045][T12685] 
[  681.205045][T12685] other info that might help us debug this:
[  681.205045][T12685] 
[  681.215273][T12685]  Possible unsafe locking scenario:
[  681.215273][T12685] 
[  681.222722][T12685]        CPU0                    CPU1
[  681.228077][T12685]        ----                    ----
[  681.233433][T12685]   lock(sk_lock-AF_SMC/1);
[  681.237938][T12685]                                lock((work_completion)(&new_smc->smc_listen_work));
[  681.247383][T12685]                                lock(sk_lock-AF_SMC/1);
[  681.254397][T12685]   lock((work_completion)(&new_smc->smc_listen_work));
[  681.261319][T12685] 
[  681.261319][T12685]  *** DEADLOCK ***
[  681.261319][T12685] 
[  681.269442][T12685] 2 locks held by syz.8.1947/12685:
[  681.274619][T12685]  #0: ffff888054859a10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  681.284796][T12685]  #1: ffff888028a68130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530
[  681.294192][T12685] 
[  681.294192][T12685] stack backtrace:
[  681.300072][T12685] CPU: 0 PID: 12685 Comm: syz.8.1947 Not tainted syzkaller #0
[  681.307516][T12685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  681.317568][T12685] Call Trace:
[  681.320881][T12685]  <TASK>
[  681.323852][T12685]  dump_stack_lvl+0x188/0x24e
[  681.328557][T12685]  ? load_image+0x400/0x400
[  681.333063][T12685]  ? show_regs_print_info+0x12/0x12
[  681.338255][T12685]  ? print_circular_bug+0x12b/0x1a0
[  681.343446][T12685]  check_noncircular+0x296/0x330
[  681.348377][T12685]  ? look_up_lock_class+0x75/0x140
[  681.353476][T12685]  ? add_chain_block+0x940/0x940
[  681.358406][T12685]  ? lockdep_lock+0xf1/0x1f0
[  681.362990][T12685]  ? _find_first_zero_bit+0xcf/0x100
[  681.368298][T12685]  __lock_acquire+0x2d07/0x7d10
[  681.373147][T12685]  ? __bfs+0x2a3/0x5c0
[  681.377209][T12685]  ? verify_lock_unused+0x140/0x140
[  681.382399][T12685]  ? mark_lock+0x94/0x320
[  681.386722][T12685]  ? __lock_acquire+0x13cf/0x7d10
[  681.391739][T12685]  ? add_chain_block+0x940/0x940
[  681.396672][T12685]  ? lockdep_unlock+0x142/0x2e0
[  681.401514][T12685]  lock_acquire+0x1bb/0x4a0
[  681.406009][T12685]  ? __flush_work+0x10d/0xae0
[  681.410678][T12685]  ? __lock_acquire+0x13cf/0x7d10
[  681.415694][T12685]  ? read_lock_is_recursive+0x10/0x10
[  681.421062][T12685]  ? __flush_work+0x10d/0xae0
[  681.425729][T12685]  __flush_work+0x126/0xae0
[  681.430218][T12685]  ? __flush_work+0x10d/0xae0
[  681.434881][T12685]  ? verify_lock_unused+0x140/0x140
[  681.440076][T12685]  ? flush_work+0x20/0x20
[  681.444390][T12685]  ? try_to_grab_pending+0xfa/0x860
[  681.449575][T12685]  ? lockdep_hardirqs_off+0x70/0x100
[  681.454847][T12685]  ? mark_lock+0x94/0x320
[  681.459171][T12685]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  681.465143][T12685]  ? lock_chain_count+0x20/0x20
[  681.469985][T12685]  ? __cancel_work_timer+0x36a/0x560
[  681.475257][T12685]  __cancel_work_timer+0x3f4/0x560
[  681.480359][T12685]  ? cancel_work_sync+0x20/0x20
[  681.485195][T12685]  ? __smc_release+0x659/0x7d0
[  681.489948][T12685]  ? __local_bh_enable_ip+0x136/0x1c0
[  681.495347][T12685]  ? lockdep_hardirqs_on+0x94/0x140
[  681.500535][T12685]  ? __local_bh_enable_ip+0x136/0x1c0
[  681.505899][T12685]  ? _local_bh_enable+0xa0/0xa0
[  681.510741][T12685]  smc_clcsock_release+0x5c/0xe0
[  681.515674][T12685]  __smc_release+0x661/0x7d0
[  681.520257][T12685]  ? do_raw_spin_unlock+0x11d/0x230
[  681.525444][T12685]  smc_close_non_accepted+0xd1/0x1f0
[  681.530722][T12685]  smc_close_active+0xb00/0xea0
[  681.535566][T12685]  ? sock_no_sendpage_locked+0x1c0/0x1c0
[  681.541193][T12685]  __smc_release+0x8d/0x7d0
[  681.545687][T12685]  ? do_raw_spin_unlock+0x11d/0x230
[  681.550872][T12685]  smc_release+0x2ca/0x530
[  681.555284][T12685]  sock_close+0xd5/0x240
[  681.559516][T12685]  ? sock_mmap+0x90/0x90
[  681.563743][T12685]  __fput+0x22c/0x920
[  681.567716][T12685]  task_work_run+0x1d0/0x260
[  681.572298][T12685]  ? task_work_cancel+0x220/0x220
[  681.577312][T12685]  ? exit_to_user_mode_loop+0x3b/0x110
[  681.582763][T12685]  exit_to_user_mode_loop+0xe6/0x110
[  681.588041][T12685]  exit_to_user_mode_prepare+0xee/0x180
[  681.593580][T12685]  syscall_exit_to_user_mode+0x16/0x40
[  681.599027][T12685]  do_syscall_64+0x58/0xa0
[  681.603435][T12685]  ? clear_bhb_loop+0x60/0xb0
[  681.608116][T12685]  ? clear_bhb_loop+0x60/0xb0
[  681.612797][T12685]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  681.618689][T12685] RIP: 0033:0x7f4f27f9ce59
[  681.623150][T12685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  681.642784][T12685] RSP: 002b:00007f4f28e73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  681.651242][T12685] RAX: 0000000000000000 RBX: 00007f4f28215fa0 RCX: 00007f4f27f9ce59
[  681.659203][T12685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  681.667161][T12685] RBP: 00007f4f28032d6f R08: 0000000000000000 R09: 0000000000000000
[  681.675117][T12685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  681.683078][T12685] R13: 00007f4f28216038 R14: 00007f4f28215fa0 R15: 00007ffcf2246b18
[  681.691043][T12685]  </TASK>
[  681.752461][T12719] xt_SECMARK: invalid mode: 2
[  681.764693][ T8455] EXT4-fs (loop9): unmounting filesystem.