last executing test programs:

2m38.120272385s ago: executing program 2 (id=2069):
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000007c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000800)=0x40)

2m37.974080215s ago: executing program 2 (id=2073):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x99, {0x97, "581df367d195aa718cf0cc21f5d02a879a0ad04091b44d997036a1dbab9a3b16928489b84dd2ed8a79b8fface77ac6ae820eec907822fba37afc229aa3183fa2ce89c3ad74f9a51592f631064f50406eff1af6144c554b2e593940903c26bf994940d9d1c041a9e6274ac2a6cb2319166423167d3ea44320513e54c8affe27f9a87640db2e4ce69b14bf0b2627e30a0eb01a045d5fdcec"}}, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")

2m34.902423534s ago: executing program 2 (id=2095):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x500a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="4011372aa10625dc9c123ec187bb7e30030636c4"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

2m32.624003166s ago: executing program 2 (id=2106):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m32.609288426s ago: executing program 2 (id=2107):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x44)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\a\x00\x00\x00\b'], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, 0x0, &(0x7f0000000200)=r0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='swiotlb_bounced\x00'}, 0x18)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440), 0x10)
listen(r3, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="f8", 0x1}], 0x1)
shutdown(0xffffffffffffffff, 0x1)

2m32.579672756s ago: executing program 2 (id=2108):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$evdev(0x0, 0x1, 0x206c2)
write$char_usb(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, &(0x7f0000000180), 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x2083)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r0)

2m16.971175422s ago: executing program 32 (id=2108):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$evdev(0x0, 0x1, 0x206c2)
write$char_usb(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, &(0x7f0000000180), 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x2083)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r0)

2m12.958505479s ago: executing program 0 (id=2192):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000000440)='./file0\x00', 0x80, &(0x7f0000000100), 0x1, 0x9833, &(0x7f0000025f00)="$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")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ppoll(&(0x7f0000000200), 0x0, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)={[0x8]}, 0x8)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
fstat(r0, 0x0)

2m11.890333345s ago: executing program 0 (id=2197):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0)
mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)

2m10.782548451s ago: executing program 0 (id=2209):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
unshare(0x2040400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
connect$unix(r4, &(0x7f0000000440)=@file={0x0, './file0/file0\x00'}, 0x6e)

2m10.58241217s ago: executing program 0 (id=2211):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x140)

2m10.187657139s ago: executing program 0 (id=2214):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
rt_sigqueueinfo(r0, 0x18, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ptrace$setopts(0x4200, r0, 0x200, 0x100028)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28093}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0xf}]}}}]}, 0x3c}}, 0x20000000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x42001)
io_setup(0x6, &(0x7f0000000540))

2m9.580434227s ago: executing program 0 (id=2221):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0x9, "b2938f8d"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/95)

2m9.487581766s ago: executing program 33 (id=2221):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0x9, "b2938f8d"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/95)

1m55.194986837s ago: executing program 4 (id=2269):
memfd_create(0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0x75, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r3)

1m54.938204177s ago: executing program 4 (id=2272):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0xc0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x79}, {0x9, "9b319f1c889e864d"}}}}, 0xf)
syz_open_dev$evdev(0x0, 0xb4, 0x40000)
r3 = msgget$private(0x0, 0x0)
syz_io_uring_setup(0x2a70, &(0x7f0000000080)={0x0, 0x5016, 0x1000, 0x1, 0xfa}, 0x0, 0x0)
io_setup(0x2, &(0x7f0000000340)=<r4=>0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40015)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r6, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x107, 0x7, 0x3, 0xfa, 0x4}, 0xc)
listen(r6, 0xffffffff)
msgsnd(r3, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], 0x1008, 0x0)
io_submit(r4, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r5, 0x0}])
msgsnd(r3, 0x0, 0x8, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4)

1m53.406723501s ago: executing program 4 (id=2275):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000200)={'wlan1\x00', @random='\x00\x00\x00 \x00'})

1m46.933985009s ago: executing program 4 (id=2289):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@nogrpid}]}, 0x1, 0x792, &(0x7f0000000f80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2008480, &(0x7f0000000000), 0xfc, 0x798, &(0x7f0000001840)="$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")
chdir(0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x841c00, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x185102, 0x4c)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0)
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000", @ANYRES64], 0x1, 0x1a1, &(0x7f0000000440)="$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")
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
clock_gettime(0x0, &(0x7f00000001c0))

1m45.857988965s ago: executing program 4 (id=2300):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x442, 0x1080}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000055}, 0x64040100)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x30)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
unshare(0x80)

1m43.911874288s ago: executing program 4 (id=2307):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pread64(r2, &(0x7f0000000300)=""/150, 0x96, 0x0)

1m42.043665342s ago: executing program 34 (id=2307):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pread64(r2, &(0x7f0000000300)=""/150, 0x96, 0x0)

1m23.287030757s ago: executing program 7 (id=2430):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x759, &(0x7f00000001c0)={[{@noload}, {@dioread_nolock}, {@noblock_validity}, {@errors_remount}, {@nolazytime, 0x0}, {@journal_async_commit}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4e}}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@dax}, {@noacl}, {@noauto_da_alloc}, {@mblk_io_submit}], [], 0x2c}, 0x2, 0x507, &(0x7f0000000c00)="$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")
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r2 = fspick(r1, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)

1m22.117131433s ago: executing program 7 (id=2436):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xe4, &(0x7f0000000580)=""/228}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000)

1m21.698095792s ago: executing program 7 (id=2441):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080))

1m21.521280761s ago: executing program 7 (id=2444):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@nogrpid}]}, 0x1, 0x792, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbJKmSfu+yQsvaD0FBA2UbkyNrYKHigcRLBT0bLtstqFmky3ZTWlCwBYRvAgqHgS99OyPevPqj6v+Fx6kpWparHiQyGx2222zm27a/RHJ5wOTfZ6Z2TzPd5+ZZ57ZGXYC2LMm0j+ZiEMR8UESMVabn0TEUDU1GHFic73b62v5dEpiY+P135LqOrfW1/LR8J7UgVrm8Yj4/t2Iw5mt5ZZXVudzxWJhqZafqiycnyqvrB45t5CbK8wVFo9Nz8wcPf7c8WOdi/WPn1YPXv/wlae/OvHXO49dff+HJE7Ewdqyxjg6ZSImap/JUPoR3uPlThfWZ0m/K8BDSXfNgc29PA7FWAxUUy2M9LJmAEC3vB0RGwDAHpM4/gPAHlP/HuDW+lq+PvX3G4neuvFSROzfjL9+fXNzyWDtmt3+6nXQ0VvJPVdGkogY70D5ExHx2TdvfpFO0aXrkADNXLocEWfGJ7b2/8mWexZ26pntFm4MV18m7put/4Pe+TYd/zzfbPyXuTP+iSbjn+Em++7DePD+n7nWgWJaSsd/Lzbc23a7If6a8YFa7j/VMd9QcvZcsZD2bf+NiMkYGk7z09VVm98FNXnz75utym8c//3+0Vufp+Wnr3fXyFwbHL73PbO5Su5R4667cTniicFm8Sd32j9pMf491WYZr77w3qetlqXxp/HWp63xd9fGlYinmrb/3bZMtr0/caq6OUzVN4omvv75k9FW5Te2fzql5dfPBXohbf/R7eMfTxrv1yzvvIwfr4x912rZg+Nvvv3vS96opvfV5l3MVSpL0xH7kte2zj969731fH39NP7JJ5vv/9tt/+k54Zk24x+8/uuXDx9/d6Xxz+6o/XeeuHp7fqBV+e21/0w1NVmb007/124FH+WzAwAAAAAAAAAAAAAAAAAAAAAAAIB2ZSLiYCSZ7J10JpPNbj7D+/8xmimWypXDZ0vLi7NRfVb2eAxl6j91Odbwe6jTtd/Dr+eP3pd/NiL+FxEfD49U89l8qTjb7+ABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOZAi+f/p34Z7nftAICu2d/vCgAAPef4DwB7z86O/yNdqwcA0DvO/wFg72n7+H+mu/UAAHrH+T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABddurkyXTa+HN9LZ/mZy+sLM+XLhyZLZTnswvL+Wy+tHQ+O1cqzRUL2XxpoeU/urT5UiyVzs/E4vLFqUqhXJkqr6yeXigtL1ZOn1vIzRVOF4Z6FhkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtK+8sjqfKxYLS51LDEZER//hbkiM7I5q7JrEYOyKanQkkXRjL/jXJxp7iZH+dVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9w/AQAA//8PEihV")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2008480, &(0x7f0000000000), 0xfc, 0x798, &(0x7f0000001840)="$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")
chdir(0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x841c00, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x185102, 0x4c)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0)
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000", @ANYRES64], 0x1, 0x1a1, &(0x7f0000000440)="$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")
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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")
clock_gettime(0x0, &(0x7f00000001c0))

1m20.950019309s ago: executing program 1 (id=2452):
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x2f)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4, 0xfffffffc, @dev, 0x8}, 0x1c)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8)
close(0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000030000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x1162, [{@any, 0x9, 0x81, 0x9, "25ed62", 0xe, 0x9}, {@none, 0x2, 0xfe, 0x40, "768e0d", 0xc1a6, 0x1}]}}}, 0x22)

1m20.881322409s ago: executing program 7 (id=2453):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_read_part_table(0x5df, &(0x7f0000000000)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000200", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb}, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @private1, @mcast2, {[], {0x4e22, 0xe22, 0x8}}}}}}, 0x0)

1m20.663088778s ago: executing program 1 (id=2456):
semget$private(0x0, 0x7, 0x3c5)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0x4, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x11000000, 0x3}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a001)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x200000, &(0x7f0000000140)=ANY=[@ANYBLOB='max=00000000000000000010000,stats=global,stvts=glo'])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)=@x86={0x5, 0x1, 0x2, 0x0, 0x40, 0x6, 0xfb, 0x89, 0x1c, 0xd, 0x7, 0x4, 0x0, 0x1000, 0x1, 0x2, 0xe, 0x7, 0x19, '\x00', 0x3, 0x8000000000000001})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m20.380045877s ago: executing program 1 (id=2458):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)=0x1)
ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)=0x20000002)

1m20.249109897s ago: executing program 7 (id=2461):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x141842, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380))
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
writev(r0, &(0x7f0000000040), 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4)
readv(r0, &(0x7f0000000040), 0x10)

1m20.031645096s ago: executing program 35 (id=2461):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x141842, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380))
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
writev(r0, &(0x7f0000000040), 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4)
readv(r0, &(0x7f0000000040), 0x10)

1m19.987873106s ago: executing program 1 (id=2463):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@nogrpid}]}, 0x1, 0x792, &(0x7f0000000f80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2008480, &(0x7f0000000000), 0xfc, 0x798, &(0x7f0000001840)="$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")
chdir(0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x841c00, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x185102, 0x4c)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0)
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000", @ANYRES64], 0x1, 0x1a1, &(0x7f0000000440)="$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")
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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")
clock_gettime(0x0, &(0x7f00000001c0))

1m19.355655594s ago: executing program 1 (id=2469):
read$FUSE(0xffffffffffffffff, &(0x7f0000001e40)={0x2020, 0x0, 0x0, <r0=>0x0}, 0x2020)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000001e00)='./file0\x00', 0x2000002, &(0x7f0000000240)={[], [{@uid_eq={'uid', 0x3d, r0}}, {@subj_type={'subj_type', 0x3d, '.(].-[,-,-$'}}, {@smackfshat}, {@uid_eq={'uid', 0x3d, r0}}, {@permit_directio}, {@appraise}]}, 0x1, 0x55c, &(0x7f0000001500)="$eJzs3c9vHFcdAPDvjH9t07ROoAeogAQoBBRlN960UdVLwwWEqkqIwgH10Bp7Y5mssyHrlNpEwvkbQAKJE9zhwAGJA1JPCHHjiMQBIcoBqUAESpCQGDTjsbO1d5tJvd6tvZ+PNJ0f781839vtzHv71tkXwMQ6GxFbETEbEa9HxHx5PCmXuLK95Pnu3b29dP/u7aUksuyVfyRFen4ses7JPV5esxYRX/1SxDeT/XG7G5vXFtvt1s1yv7G+dqPR3di8sLq2uNJaaV1vNi8vXL74/KXnmkOr65m1X7zzxdWXvv7rX3387d9vff67ebFOlmm99Rim7arP7MbJTUfES4cRbAymyvVshbxXDrksPLo0Ij4UEZ8q7v/5mCr+7wQAjrMsm49svncfADju0mIMLEnrEZGmZSegvj2G91ScSNud7vr5q51b15e3x8pOxUx6dbXdunh67o/fLjLPJPn+QpFWpBf7zT37lyLidET8YO6xYr++1Gkvj6fLAwAT7/He9j8i/j2XpvV6pVP7fKsHABwZtXEXAAAYOe0/AEwe7T8ATJ4K7X/5Zf9W1fwAwAec9hwAJo/2HwAmj/YfACbKV15+OV+y++XvXy+/sXHrWueNC8ut7rX62q2l+lLn5o36SqezUvxmz9rDrtfudG4sPBu33myst7rrje7G5mu//fnPXs2TFldar7VmRlEpAOA9nT7z1h+SiNh64bFiiZ65HLTVcLylQ8wFHC1TBzlZBwGONLN9weSq1IQXnYTfHXpZgPHo+2Petb6b7/ajRwji74zgA+XcR6uP/1eZ4xk4Oozsw+R6f+P/Lw69HMDoGf+HyZVlyd45/2d3kwCAY+kAf8KXfW9YnRBgrB42mfdQvv8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAY+ZkRHwrkrRezAWe5v9N6/WIJyLiVMwkV1fbrYsR8WSciYiZuXx/YdyFBgAOKP1bUs7/dW7+mZN7U2eT/8wV64j4zo9f+eGbi+vrNxfy4//cPT63M31Y88F5B5hXEACo7i9VMhXtd7Nc93yQv3f39tLOcohl3OedL+xOPrp0/+7tYtlOmY4sy7KIWtGXOPGvJKbLc2oR8XRETA0h/tadiPhIv/onxdjIqXLm0974UcZ+YqTx03fFT4u07XX+8n14CGWBSfNW/vy50u/+S+Nsse5//9eKJ9TBFc+/WsTOs+9+T/zpMtJUn/j5PX+2aoxnf/PlfQez+e20OxFPT/eLn+zGTwbEf6Zi/D997BPff3FAWvaTiHPRP35vrMb62o1Gd2Pzwura4kprpXW92by8cPni85eeazaKMerGzkj1fn9/4fyTg8qW1//EgPi1vvWf3T33MxXr/9P/vv7qJx/szu2N/7lP93//n+obP/6XlZ+vP1sx/uKJXw6cvjuPvzyg/g97/89XjP/2XzeXK2YFAEagu7F5bbHdbt080Eb+KXQY19m3kRexWuad7uLBgv45io0hvSwDNvLOWJXMM4f1qh76xvRuX3EIF7zz4EX4Rn7FEVcnHU4tHmHja/Pv8b7fG1UxxvdMAkbjwU0/7pIAAAAAAAAAAAAAAACDjOJfNY27jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABxf/w8AAP//9jbDXA==")
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x1000a05, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x24, 0xc44, &(0x7f0000004340)="$eJzs3V9sneddB/Df89rOsVNGvHVkLaxwCtJIvaakSVZnDSon1DVMSlNrjnc3ySe2E47q2JbtsLQa4HHDBReTEOJiV5agQhpiqiiauDRQpO2mF2hXXFmgVhPiwqBJk5AqT+97npMcO07jxbHjtJ/P5nzfP8/znuf94/d1LT/vEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO++cuHU8+lhtwIAOEiXxr966rTnPwB8olz23/8AAAAAAAAAAAAAAHDYpSji8UixcGkjTVbzbf0XW3M3bk6MjO5cbSBVNXuq8uVX//Onz5z90gvD5zr50fUftCfjtfHLF+ovz19fWJxZWpqZrk/Mtabmp4tdb2Hn+jP33aKh8gDUIuLG9NWrS/XTz53Zsvrm4Ae1x44Pnh9+5uRT7bI36xMjo6PjXWV6++770+9wtx4eR6KIk5Hi2e/9ODUjojpgezwW97h29ttAtRND1U5MjIxWOzLbas4tlyvHOgeiiKh3VWp0jtEBnIs9aUSslM0vGzxU7t74QnOxeWV2pj7WXFxuLbfm58ZSu7Xl/tSjiHMpYjUi1mt3bq4viuiNFN85tpGuRERP5zh8seoYfPd27P47a1+U7az3RawWj8A5O8RqUcSrkeIn756IqfKY5a/4QsSrZX4/4q0yX4pI5YVxNuL9Ha4jHk29UcSfl+f//Eaaru4HnfvKxa/VvzJ3db6rbOe+srfnw2a+eg78+TCwLQ/GIb839UcRzeqOv5Hu/4cdAAAAAAAAAAAAAAAAAB60gSjiyUjxyr//YdWvOKp+6cfOD//e4Kdu9RlPEU/cYzsp/j+ei4iVYnd9co/kLsRjaSylh9yX+JOsP4r4o9z/71sPuzEAAAAAAAAAAAAAAAAAAACfaEX8KFK8+N6JtBrdY4q35q7VLzevzLZHhe2M/dsZM31zc3OzntrZyDmZcyXnas61nOs5o8j1czZyTuZcyblaRNQiYi3Pr+eMnlw/ZyPnZM6VnKs513Ku54zeXD9nI+dkzpWcqznXcq7njEMydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMdJEUV8GCm+/Y2NFCkiGhGT0c612sNuHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQqqUi3okU9d9v3FrWGxGp+n/bifKfs9E4UuZnojFc5kvRuJCzWWVv41sPof3sTV8q4oeRotb/9q0T/qn2+e9rz926DOKtb96e++XedvZ0Vg5+UHvs+LHzw6O/+sTdptNODRi62Jq7cbM+MTI6Ot61uDd/+me6lg3mzy0ezK4TEUtvvPl6c3Z2ZvH+J8pLYA/VH9bEwIPY94OdOPIoHufDMLGZr/aft3r0HoLGP6SJh3xj4kCUz//3I8VvvfcfnQd+5+e/X2jP3XrCx0//+Pbz/8XtG9qn5//jXctezD+N9PVG9C9fX+g7HtG/9MabJ1vXm9dmrs3MnT116svDw18+c6rvSET/1davRUR7anbm1J4PFQAAAAAAAAAAAAAAAMDBSkX8TqRo/nAj1SPiZtVfa/D88DMnn+qJnqq/1ZZ+W6+NX75Qf3n++sLizNLSzHR9Yq41NT89s9uP66+6e02MjO7LztzTwD63f6D/5fmFNxZb1/5gecf1R/svXFlaXmxO7bw6BqKIaHQvGaoaPDEyWjV6ttWcq6qO7diZ7ufXl4r4z0gxdbaens7Lcv+/7T38t/T/X9m+oX3q//fprmXlZ6ZUxE8jxW/+xRPxdNXOo3HHMcvl/iZSDJ37fC4XR8pynTa03yvQ7hlYlv3fSPEPH24t2+kP+fjtss/v+sA+IsrzfyxSvPNn341fz8t6t7z/Yefzf3T7hnZ5/jf/ZFu9e5z/z3YtO7rlfQUPZv8/6crzfzJSvPT42/EbeVnvR7z/o/PujRO58K33c+zT9/9mV6XB6nO9/QMAAAAAAAAAACDy33/9baR4arQ3vZCX7ebv/6a3b2if/v7rc13Lph/MeEX3nAhDTAEAAADwMdGXivhRpLi2/PatPtRb+3939f/87du/GBtJ29ZWv+f7xeq9AQ/y93/dBvPnTu59twEAAAAAAAAAAAAAAAAAAOBQSamIF/J46pM7jKc+ELFU5HJrkeKV/342l0vHy3KdceAHq3/7L83PnbwwOzs/1VxuXpmdqY8vNKdmyrqfjRQbf/35XLeoxld/eltbOmOxL0aK0b/rlG2Pxd4Zm7w9Hnh7LPay7KcjxX/9/daynXGsf+l22dNl2b+KFF//p53LHr9d9kxZ9ruR4gdfr3fKHi3Ldt6P+rnbZZ+bmveqUAAAAAAAAAAAAAAAAAAAAPauLxXxp5Hif66v3urLn8f/7+uarbz1za7x/re5WY3zP1iN/3+36fsZ/3/wzhofbrZFbB67z70GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDDLUURb0aKhUsbaa1Wzrf1X2zN3bg5MTK6c7WBVNXsqcqXX/3Pnz5z9ksvDJ/r5EfXf9CejNfGL1+ovzx/fWFxZmlpZro+Mdeamp+e2fUW9lp/u6HqANSvv35j+urVpfrp585sWX1z8IPaY8cHzw8/c/KpTtmJkdHR8a4yvX33/el3SHdZfiSK+MtI8ez3fpz+uRZRxN6PxT2unf02UO3EULUTEyOj1Y7Mtppzy+XKsc6BKCLqXZUanWN0AOdiTxoRK2XzywYPlbs3vtBcbF6ZnamPNReXW8ut+bmx1G5tuT/1KOJciliNiPXanZvriyJejxTfObaR/qUW0dM5Dl+8NP7VU6fv3o5iH/dxF8p21vsiVotH4JwdYrUo4h8jxU/ePRH/WovojfZXfCHi1TK/H/FWtM93Ki+MsxHv73Ad8WjqjSL+rzz/5zfSu7XyftC5r1z8Wv0ry+90l+3cVx7558NBOuT3pv4o4gfVHX8j/ZvvawAAAAAAAAAAAAAAAIBDpIhfiRQvvnciVf2DO52iF1tz1+qXm1dm2936On3/Oqs3Nzc366mdjdReMpnnV3Ku5lzLuZ4zilw/Z6PM/s3NyTy/knM151rO9ZzRk+vnbOSczLmSczXnWs71nNGb6+ds5JzMuZJzNedazvWccUj67gEAAAAAAAAAAAAAAAAAAB8vRfW/FN/+xkbarLXHl56Mdq4ZD/Rj72cBAAD//z1c9n4=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

1m18.756389161s ago: executing program 1 (id=2473):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, 0x0, 0x438100)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x2000, 0x3}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL)
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
r6 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x3f, &(0x7f0000000080)=0x1, 0x4)
chdir(&(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r7 = socket$caif_seqpacket(0x25, 0x5, 0x2)
connect$caif(r7, &(0x7f0000000000)=@util={0x25, "8474f12002f862273317dfcc2400058a"}, 0x18)
rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00')

1m18.459465491s ago: executing program 36 (id=2473):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, 0x0, 0x438100)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x2000, 0x3}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL)
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
r6 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x3f, &(0x7f0000000080)=0x1, 0x4)
chdir(&(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r7 = socket$caif_seqpacket(0x25, 0x5, 0x2)
connect$caif(r7, &(0x7f0000000000)=@util={0x25, "8474f12002f862273317dfcc2400058a"}, 0x18)
rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00')

19.310634046s ago: executing program 3 (id=2832):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsu(&(0x7f0000000280), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

19.107898816s ago: executing program 3 (id=2834):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000100085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93)

18.855059415s ago: executing program 3 (id=2837):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r1, @ANYRESHEX=r0], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f00000002c0)={0xfffffffffffffffb, 0x8, 0x2, 0x3, 0x5})
r4 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x13e0, 0xffffffff, 0x154, 0x124c, 0x154, 0xfeffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x130, 0x154, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, @mcast2}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0x10d4, 0x10f8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x143c)
flock(r7, 0x5)
gettid()
r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2})
ioctl$TUNSETOFFLOAD(r9, 0x400454c9, 0x9)
ioctl$TUNSETNOCSUM(r9, 0x400454c8, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

18.678916064s ago: executing program 3 (id=2840):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x68060200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0xfffffffc, 0x0, 0xed, 0x6]}, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, 0x0, &(0x7f0000000440))
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x78)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ff9000/0x4000)=nil)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)

9.974977794s ago: executing program 8 (id=2897):
socket$netlink(0x10, 0x3, 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd)
keyctl$setperm(0x5, r1, 0x0)
keyctl$revoke(0x6, 0x0)
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket$pptp(0x18, 0x1, 0x2)
r2 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f00000032c0)=""/4103, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0)

6.398792262s ago: executing program 8 (id=2912):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0, &(0x7f0000000240)={[{@subvolid={'subvolid', 0x3d, 0x5}}, {@discard_async}, {@noflushoncommit}, {@usebackuproot}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@autodefrag}, {@ssd_spread}, {@space_cache}]}, 0x0, 0x55a0, &(0x7f000000ac40)="$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")
chdir(&(0x7f0000000380)='./file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
syz_mount_image$btrfs(&(0x7f00000003c0), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard_sync}]}, 0x0, 0x55b0, &(0x7f0000002100)="$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")
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000))

4.008111314s ago: executing program 9 (id=2924):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)

3.917315783s ago: executing program 9 (id=2925):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000140)={0x0, 0x10, 0x5001, 0x1})

3.719906642s ago: executing program 9 (id=2926):
socket$nl_route(0x10, 0x3, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
syz_io_uring_setup(0xd3, &(0x7f0000000480)={0x0, 0x0, 0x1}, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]})
r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0})
ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.207719741s ago: executing program 9 (id=2931):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

3.111643811s ago: executing program 6 (id=2933):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "2b777d4d823a2f7d678ac9761f1c96dda441e67d4e41caeeab9208496a641870a5030c49bc920545ebde9e1343139f8df6a3035723523bfcbfe13f452d85c690a349bfe63933019c0450cef9b5f45b4353e702a6c5018d39e02f9a660ee5bc56b915318dee8bfe979a32cb310d0351c1e65359009f797e39a5f3c7646c906c6bc85e6e17c505ea3587e6d41b21da433a6cf23d6af8b7e48352be9c645f39025243a95fba7f2b8d34d7e09cae7106f689907594a60e3f11026deedb2456be3f1d8eb0bd2aeb85f4ce5c825cd6fbe4770bcaeb0e0f60eec31891307e689642b266eb6f600c47e51a622542992b06ba1add8732d51fc969ecac84ee6a015542e440"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x4, 0x2, 0x9, 0x8, 0x6, 0x7}}]}}]}, 0x148}}, 0x0)

3.0944636s ago: executing program 9 (id=2934):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x50}}], 0x1, 0x40000)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8924, 0x0)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r2, 0x20000005)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10)
r5 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, 0x0, 0x4800)
ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x40, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400006}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}, @CTA_STATUS={0x8}]}, 0x40}}, 0x0)
write$nbd(r5, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xd6)

2.113645237s ago: executing program 9 (id=2935):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000240)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @echo_reply}}}}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x10000000, 0x1, 0x200a, 0xb}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000))
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
close(r3)
ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000040)={0xa, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}})
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c64656275673d307816303030"])
read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents(r4, 0x0, 0x58)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0xffffff1f, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6558}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_TTL={0x5, 0x8, 0xd8}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x8001}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x3d}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1f}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1.890102766s ago: executing program 6 (id=2936):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f00000001c0)={[{@data_err_ignore}, {@nouid32}, {@minixdf}]}, 0x1, 0x51c, &(0x7f0000000780)="$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")
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

1.844035216s ago: executing program 8 (id=2938):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x42040, 0x0)

1.642291815s ago: executing program 6 (id=2940):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93)

1.567938315s ago: executing program 5 (id=2941):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2643, 0x4)
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x1)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
dup3(r0, r1, 0x0)

1.428232205s ago: executing program 5 (id=2942):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000004b"], 0x8)

1.362918775s ago: executing program 8 (id=2943):
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x802, r1, 0x1, 0x0, 0x6, @local}, 0x14)
syz_emit_ethernet(0x0, 0x0, 0x0)

1.361406624s ago: executing program 6 (id=2944):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0xc, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\xf4\xb5\xb2\xed\xc6;\xc7,4\\xev/bus/us\xae\xd1\x93\xc1\bm\xe9\xf3#\x00:\xbem\x02H;\x90\xa5\x1f\x8d\xc6\xae\xcc\x95a7\xc3\x168%\xc3\xc6\n\x8d\xbc\x81\x1a\x80\x16jY\x9f~\x12\x94]\x1e\x8c\x1d\xe7\xfe\"y\xa6O\xf5\xa2\xb6\xe7\xe3]%)l\x90\xe9\x026\xe4\xabX\xa0+\x86\nB&\xab\xef\xea\xa3\tUc\xc3\xad\x84\xa3vK{\xb2\xa3\xfc\x1f', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0xaf)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0)
preadv(r0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000500)=""/97, 0x61}], 0x2, 0x0, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

1.317304974s ago: executing program 3 (id=2851):
socket$tipc(0x1e, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002780)={<r2=>0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
write$P9_RVERSION(r4, 0x0, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000100)={0x6500}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
read$alg(0xffffffffffffffff, &(0x7f0000000240)=""/4096, 0xfffffdef)
r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r4}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x3, r1, 0x5})

1.260047864s ago: executing program 5 (id=2945):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

1.114613783s ago: executing program 8 (id=2946):
syz_emit_vhci(0x0, 0x0)
pause()
syz_emit_vhci(&(0x7f0000001580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x4}}, 0x9)
syz_emit_vhci(&(0x7f0000001600)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4)

1.114192984s ago: executing program 5 (id=2947):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)

265.499781ms ago: executing program 6 (id=2948):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, 0x0, &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0}}], 0x2, 0x0)

156.25478ms ago: executing program 5 (id=2949):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f00000001c0)={[{@data_err_ignore}, {@nouid32}, {@minixdf}]}, 0x1, 0x51c, &(0x7f0000000780)="$eJzs3c9vI1cdAPCvvXHiZNMmLT0AgnZpCwtarZN426jqgZYTQqgSokeQtiHxRlHsOIqd0oSVmp65IlGJExz5Azhw6ok7FwQ3LuWAxI8I1CBxGDTjSdabtTcWSewo/nyk2Zk3bzLf74t33lu/bPwCGFu3IuIgIiYj4r2ImMvPF/It3u5s6XWfHT5cPTp8uFqIJHn3H4WsPj0XXV+TupnfsxwR3/92xI8KT8Zt7e1vrtTrtZ28vNBubC+09vbvbjRW1mvrta1qdXlpefGNe69XL6ytLzUm86Mvf/r7g2/8JE1rNj/T3Y6L1Gl66SROaiIivnsZwUbgRt6eyVEnwv+lGBHPR8TL2fM/FzeyVxMAuM6SZC6Sue4yAHDdFbM5sEKxks8FzEaxWKl05vBeiJlivdlq33nQ3N1a68yVzUep+GCjXlvM5wrno1RIy0vZ8aNy9VT5XkQ8FxE/m5rOypXVZn1tlP/wAYAxdvPU+P/vqc74HxHJh6NODgC4POVRJwAADJ3xHwDGj/EfAMaP8R8Axk9n/J8e4MKdy08GABgK7/8BYPwY/wFgrHzvnXfSLTnKP/967f293c3m+3fXaq3NSmN3tbLa3NmurDeb69ln9jTOul+92dxeei12P5j/5narvdDa27/faO5ute9nn+t9v1bKrjoYQssAgH6ee+mTPxXSEfnN6WyLrrUcSiPNDLhsxVEnAIzMjVEnAIyM1b5gfJ3jPb7pAbgmeizR+5hyr18QSpIkubyUgEt2+wvm/2Fcdc3/+1/AMGbM/8P4Mv8P4ytJCoOu+R+DXggAXG3m+IE+P/9/Pt//Ov/hwA/XHtX9Nvvz455fd5B3LxebJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwxx+v/VvK1wGejWKxUIp6JiPkoFR5s1GuLEfFsRPxxqjSVlpdGnDMAcF7Fvxby9b9uz706+1jVizdPDicj4se/ePfnH6y02zt/iJgs/HPq+Hz74/x8dfjZAwBnOx6ns33XG/nPDh+uHm/DzOdv34qIcif+0eFkHJ3En4iJbF+OUkTM/KuQlzsKXXMX53HwUUR8vlf7CzGbzYF0Vj49HT+N/cxQ4xcfi1/M6jr79HvxuQvIBcbNJ2n/83av568Yt7J97+e/nPVQ55f3f+mtVo+yPvBR/OP+70af/u/WoDFe+913OkfTT9Z9FPHFiYjj2Edd/c9x/EKf+K8OGP/PX3rx5X51yS8jbkfv+N2xFtqN7YXW3v7djcbKem29tlWtLi8tL75x7/XqQjZHvdB/NPj7m3ee7VeXtn+mT/zyGe3/6oDt/9V/3/vBV54S/+uv9IpfjBeeEj8dE782YPyVmd+U+9Wl8df6tP+s1//OgPE//cv+2oCXAgBD0Nrb31yp12s7Dp48SJLkw/SbdFXycZC+GlcgjZ4Hbw0r1mSfv5A/faXzTJ+qSpKn3/Ct3lX9eoyLmHUDroKThz4i/jPqZAAAAAAAAAAAAAAAgJ6G8RtLo24jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA19f/AgAA//99m9kb")
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)

156.1023ms ago: executing program 8 (id=2950):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x3, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000060018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1}, 0x24}}, 0x0)

50.38646ms ago: executing program 5 (id=2951):
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd\x00')
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101102)
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x402)
r1 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0205710, &(0x7f0000000100)={0x0, 0x21, 0x40, 0x1, 0x3})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x3011, 0x0, 0x0, 0x0, 0x0, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x5, &(0x7f0000000680)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6(0xa, 0x5, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x14, r4, 0x1}, 0x14}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000240)={@multicast, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @mss={0x2, 0x4, 0x1}, @window={0x3, 0x3, 0xf8}]}}}}}}}}, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x51)
read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x36ac, 0x0)

49.94634ms ago: executing program 6 (id=2952):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0)

0s ago: executing program 3 (id=2953):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x10, 0x3f5, 0x200, 0x70bd27, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x890}, 0xc0)
recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000026c0)=""/4103, 0x1007}], 0x1}}], 0x1, 0x41, 0x0)

kernel console output (not intermixed with test programs):

158] loop5: detected capacity change from 0 to 32768
[  273.852274][ T4210] pwc: recv_control_msg error -32 req 04 val 1000
[  273.870231][T10138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.902699][ T4210] pwc: recv_control_msg error -32 req 04 val 1300
[  273.909832][T10158] XFS (loop5): Mounting V5 Filesystem
[  273.918748][ T4242] Bluetooth: hci0: command 0x0409 tx timeout
[  273.943161][ T4210] pwc: recv_control_msg error -32 req 04 val 1400
[  273.979617][T10138] device hsr_slave_0 entered promiscuous mode
[  273.983835][T10158] XFS (loop5): Ending clean mount
[  273.988970][ T4210] pwc: recv_control_msg error -32 req 02 val 2000
[  274.013440][T10138] device hsr_slave_1 entered promiscuous mode
[  274.034833][ T4210] pwc: recv_control_msg error -32 req 02 val 2100
[  274.052403][T10138] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  274.060925][T10138] Cannot create hsr debugfs directory
[  274.067759][ T9975] XFS (loop5): Unmounting Filesystem
[  274.077340][ T4210] pwc: recv_control_msg error -32 req 04 val 1500
[  274.147079][ T4210] pwc: recv_control_msg error -32 req 02 val 2500
[  274.193053][ T4210] pwc: recv_control_msg error -32 req 02 val 2400
[  274.232987][ T4210] pwc: recv_control_msg error -32 req 02 val 2600
[  274.492734][ T4210] pwc: recv_control_msg error -71 req 02 val 2800
[  274.513219][ T4210] pwc: recv_control_msg error -71 req 04 val 1100
[  274.542774][ T4210] pwc: recv_control_msg error -71 req 04 val 1200
[  274.594900][ T4210] pwc: Registered as video103.
[  274.619540][ T4210] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9
[  274.649159][ T4293] device hsr_slave_0 left promiscuous mode
[  274.701393][ T4210] usb 2-1: USB disconnect, device number 10
[  274.721580][ T4293] device hsr_slave_1 left promiscuous mode
[  274.760241][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  274.770674][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.770912][T10210] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  274.804156][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  274.811845][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_1
[  274.828785][ T4293] device bridge_slave_1 left promiscuous mode
[  274.837012][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.857463][ T4293] device bridge_slave_0 left promiscuous mode
[  274.864652][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.887066][ T4293] device veth1_macvtap left promiscuous mode
[  274.893741][ T4293] device veth0_macvtap left promiscuous mode
[  274.899824][ T4293] device veth1_vlan left promiscuous mode
[  274.907775][ T4293] device veth0_vlan left promiscuous mode
[  275.088130][T10215] loop3: detected capacity change from 0 to 512
[  275.152700][T10215] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  275.177409][T10215] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  275.229291][T10218] loop1: detected capacity change from 0 to 1024
[  275.244100][T10215] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e12c, mo2=0002]
[  275.264079][T10215] EXT4-fs (loop3): orphan cleanup on readonly fs
[  275.271465][T10215] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2234: bg 0: block 361: padding at end of block bitmap is not set
[  275.299796][T10215] EXT4-fs (loop3): Remounting filesystem read-only
[  275.348503][T10215] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem
[  275.373038][T10215] EXT4-fs (loop3): Remounting filesystem read-only
[  275.379893][T10215] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2234: invalid indirect mapped block 2185560079 (level 1)
[  275.399610][T10215] EXT4-fs (loop3): Remounting filesystem read-only
[  275.413802][T10218] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  275.441320][T10215] EXT4-fs (loop3): 1 truncate cleaned up
[  275.451881][T10218] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.480601][T10215] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,dioread_nolock,noblock_validity,errors=remount-ro,nolazytime. Quota mode: none.
[  275.563823][T10215] EXT4-fs error (device loop3): ext4_remount:5855: comm syz.3.2234: Abort forced by user
[  275.751698][T10224] loop5: detected capacity change from 0 to 1024
[  275.767997][ T4293] team0 (unregistering): Port device team_slave_1 removed
[  275.798064][ T4293] team0 (unregistering): Port device team_slave_0 removed
[  276.707220][    T7] Bluetooth: hci0: command 0x041b tx timeout
[  276.740196][ T4293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  276.804079][T10229] hfsplus: xattr searching failed
[  276.822769][T10229] hfsplus: xattr searching failed
[  277.019384][ T4293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  277.385753][ T4293] bond0 (unregistering): Released all slaves
[  277.579509][T10217] loop4: detected capacity change from 0 to 65536
[  277.614270][T10138] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  277.651288][T10138] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  277.681424][T10138] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  277.715177][T10138] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  277.770245][T10217] XFS (loop4): Mounting V5 Filesystem
[  277.960930][T10138] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.973267][T10217] XFS (loop4): Ending clean mount
[  277.979175][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  278.007536][T10231] loop5: detected capacity change from 0 to 32768
[  278.010043][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  278.086260][T10138] 8021q: adding VLAN 0 to HW filter on device team0
[  278.127165][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  278.168549][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  278.192217][T10231] XFS (loop5): Mounting V5 Filesystem
[  278.208987][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.216136][ T4292] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.236834][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  278.270382][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  278.302350][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  278.319337][ T4171] XFS (loop4): Unmounting Filesystem
[  278.343473][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.350657][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.378329][T10231] XFS (loop5): Ending clean mount
[  278.395880][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  278.461475][ T9975] XFS (loop5): Unmounting Filesystem
[  278.508961][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  278.615495][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  278.730683][T10250] loop3: detected capacity change from 0 to 32768
[  278.783148][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  278.803108][ T1108] Bluetooth: hci0: command 0x040f tx timeout
[  278.879080][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  278.934355][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  278.947715][T10250] XFS (loop3): Mounting V5 Filesystem
[  279.004707][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  279.061076][T10250] XFS (loop3): Ending clean mount
[  279.084039][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  279.128699][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  279.161788][ T4173] XFS (loop3): Unmounting Filesystem
[  279.178802][T10138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  279.234065][T10138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  279.256895][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  279.283817][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  279.477517][T10281] loop4: detected capacity change from 0 to 512
[  279.652777][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  279.660638][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  279.687996][T10281] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  279.712698][T10281] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.730839][T10138] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.969207][T10302] loop4: detected capacity change from 0 to 512
[  280.080986][T10302] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  280.093854][ T4210] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  280.129710][T10302] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  280.152206][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  280.164641][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  280.174301][T10302] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e12c, mo2=0002]
[  280.196544][T10302] EXT4-fs (loop4): orphan cleanup on readonly fs
[  280.210856][T10138] device veth0_vlan entered promiscuous mode
[  280.217456][T10302] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2245: bg 0: block 361: padding at end of block bitmap is not set
[  280.227875][T10138] device veth1_vlan entered promiscuous mode
[  280.253702][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  280.270459][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  280.279580][T10302] EXT4-fs (loop4): Remounting filesystem read-only
[  280.300791][T10302] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem
[  280.306660][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  280.333726][T10302] EXT4-fs (loop4): Remounting filesystem read-only
[  280.342357][T10302] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2245: invalid indirect mapped block 2185560079 (level 1)
[  280.405906][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  280.438031][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  280.445507][T10302] EXT4-fs (loop4): Remounting filesystem read-only
[  280.463258][T10302] EXT4-fs (loop4): 1 truncate cleaned up
[  280.468933][T10302] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,dioread_nolock,noblock_validity,errors=remount-ro,nolazytime. Quota mode: none.
[  280.487348][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  280.498253][T10302] EXT4-fs error (device loop4): ext4_remount:5855: comm syz.4.2245: Abort forced by user
[  280.509304][ T4210] usb 4-1: unable to get BOS descriptor or descriptor too short
[  280.601429][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  280.622893][ T4210] usb 4-1: config 6 has an invalid interface number: 96 but max is 0
[  280.623552][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  280.638840][ T4210] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  280.670800][ T4210] usb 4-1: config 6 has no interface number 0
[  280.698321][ T4210] usb 4-1: config 6 interface 96 has no altsetting 0
[  280.814850][T10138] device veth0_macvtap entered promiscuous mode
[  280.827090][T10318] loop4: detected capacity change from 0 to 256
[  280.851358][T10138] device veth1_macvtap entered promiscuous mode
[  280.873077][   T13] Bluetooth: hci0: command 0x0419 tx timeout
[  280.935509][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.946363][ T4210] usb 4-1: string descriptor 0 read error: -22
[  280.956155][ T4210] usb 4-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=4f.2b
[  280.993344][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.012879][ T4210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.047047][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.078430][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.117480][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.135821][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.149709][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.170507][   T26] audit: type=1326 audit(1737996663.552:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10324 comm="syz.5.2250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff2d812d29 code=0x0
[  281.181290][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.243028][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.264496][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.287048][T10138] batman_adv: batadv0: Interface activated: batadv_slave_0
[  281.302749][ T4210] dvb-usb: found a 'DiBcom TFE7790P reference design' in warm state.
[  281.338921][ T4210] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  281.402964][ T4210] dvbdev: DVB: registering new adapter (DiBcom TFE7790P reference design)
[  281.430581][ T4210] usb 4-1: media controller created
[  281.459994][ T4210] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  281.474995][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  281.491460][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  281.525327][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.553596][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.575139][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.583351][ T4210] DVB: Unable to find symbol dib7000p_attach()
[  281.592620][ T4210] dvb-usb: no frontend was attached by 'DiBcom TFE7790P reference design'
[  281.598114][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.632208][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.670244][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.683268][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.692640][ T4210] rc_core: IR keymap rc-dib0700-rc5 not found
[  281.693924][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.699829][ T4210] Registered IR keymap rc-empty
[  281.710219][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.729371][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.746669][ T4210] dvb-usb: could not initialize remote control.
[  281.746996][T10138] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.761163][ T4210] dvb-usb: DiBcom TFE7790P reference design successfully initialized and connected.
[  281.772414][T10138] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.789395][T10138] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.801056][T10138] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.817085][T10138] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.910601][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  281.923274][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  282.245620][ T4210] usb 4-1: USB disconnect, device number 9
[  282.271606][ T4806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.322476][ T4806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.365143][ T4210] dvb-usb: DiBcom TFE7790P reference design successfully deinitialized and disconnected.
[  282.374385][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  282.417423][ T9892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.475557][ T9892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.551750][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  282.764767][T10362] loop6: detected capacity change from 0 to 512
[  282.897052][T10367] loop5: detected capacity change from 0 to 1024
[  282.948404][T10344] loop4: detected capacity change from 0 to 32768
[  282.961631][T10362] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  282.985806][T10362] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.152427][T10344] XFS (loop4): Mounting V5 Filesystem
[  283.213028][T10382] loop6: detected capacity change from 0 to 512
[  283.257943][T10344] XFS (loop4): Ending clean mount
[  283.303983][T10367] EXT4-fs (loop5): Test dummy encryption mode enabled
[  283.318658][T10367] EXT4-fs (loop5): Ignoring removed orlov option
[  283.356043][T10382] EXT4-fs (loop6): Ignoring removed orlov option
[  283.370569][T10382] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  283.371138][ T4171] XFS (loop4): Unmounting Filesystem
[  283.448297][T10367] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,grpjquota=,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  283.550174][T10382] EXT4-fs (loop6): 1 orphan inode deleted
[  283.614179][T10382] EXT4-fs (loop6): 1 truncate cleaned up
[  283.663016][T10382] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,max_batch_time=0x00000000000003c0,,errors=continue. Quota mode: none.
[  284.070016][   T26] audit: type=1804 audit(1737996666.452:75): pid=10382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2256" name="/newroot/1/bus/bus" dev="loop6" ino=18 res=1 errno=0
[  284.152015][T10418] loop3: detected capacity change from 0 to 2048
[  284.299559][T10418] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,,errors=continue. Quota mode: none.
[  285.146975][T10437] loop4: detected capacity change from 0 to 164
[  286.175300][T10470] loop3: detected capacity change from 0 to 1024
[  287.582380][T10487] loop5: detected capacity change from 0 to 2048
[  288.837381][T10470] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  288.882778][T10470] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  290.439615][T10524] loop5: detected capacity change from 0 to 256
[  290.530825][T10524] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  290.552427][T10527] loop6: detected capacity change from 0 to 512
[  290.610121][T10527] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  290.669174][T10527] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  290.703220][T10527] EXT4-fs (loop6): 1 truncate cleaned up
[  290.709015][T10527] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,jqfmt=vfsv0,nombcache,quota,,errors=continue. Quota mode: writeback.
[  294.263021][T10546] loop4: detected capacity change from 0 to 2048
[  294.469935][T10546] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,nogrpid,,errors=continue. Quota mode: none.
[  295.137865][T10574] loop5: detected capacity change from 0 to 1024
[  295.258308][T10574] EXT4-fs (loop5): Test dummy encryption mode enabled
[  295.270315][ T4171] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5806: Out of memory
[  295.281848][T10580] Process accounting resumed
[  295.298540][T10574] EXT4-fs (loop5): Ignoring removed orlov option
[  295.336220][ T4171] EXT4-fs error (device loop4): __ext4_unlink:3327: inode #2: comm syz-executor: mark_inode_dirty error
[  295.351027][T10583] loop6: detected capacity change from 0 to 512
[  295.382660][T10574] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  295.492990][T10583] EXT4-fs (loop6): Unrecognized mount option "obj_type=T¯…" or missing value
[  295.511107][ T9599] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5806: Out of memory
[  296.611672][ T9599] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #18: comm syz.4.2058: mark_inode_dirty error
[  296.679859][T10574] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  297.055295][T10611] loop3: detected capacity change from 0 to 1
[  297.160519][ T4171] syz-executor (4171) used greatest stack depth: 18776 bytes left
[  297.176737][T10611] squashfs: Unknown parameter 'KµêÀ@HÄHæ¹[£2þÏM6Su{ŽÕ£�Øó¦5ÁWuBƒñâ8'
[  298.232546][    C1] sched: RT throttling activated
[  298.700184][T10626] trusted_key: encrypted_key: master key parameter is missing
[  299.483941][T10636] Process accounting resumed
[  299.956741][T10647] loop6: detected capacity change from 0 to 512
[  300.286688][T10647] EXT4-fs (loop6): Test dummy encryption mode enabled
[  300.320338][T10647] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  300.437955][T10647] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002]
[  300.492706][T10647] System zones: 1-12
[  300.524272][T10647] EXT4-fs (loop6): 1 truncate cleaned up
[  300.530094][T10647] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,nogrpid,test_dummy_encryption,debug,nobarrier,quota,,errors=continue. Quota mode: writeback.
[  300.809691][T10654] chnl_net:caif_netlink_parms(): no params data found
[  300.979482][T10674] loop3: detected capacity change from 0 to 128
[  301.292841][ T4210] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  301.492800][ T4210] usb 2-1: device descriptor read/64, error -71
[  301.545764][T10674] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  301.562764][T10674] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  301.635429][T10654] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.673800][T10654] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.681716][T10654] device bridge_slave_0 entered promiscuous mode
[  301.734439][T10654] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.772768][ T4210] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  301.788590][T10654] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.852898][T10654] device bridge_slave_1 entered promiscuous mode
[  301.924574][T10654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  301.975717][T10654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  301.985533][ T4210] usb 2-1: device descriptor read/64, error -71
[  302.102874][ T4210] usb usb2-port1: attempt power cycle
[  302.104936][T10654] team0: Port device team_slave_0 added
[  302.130234][T10677] loop5: detected capacity change from 0 to 32768
[  302.147209][T10654] team0: Port device team_slave_1 added
[  302.203419][T10654] batman_adv: batadv0: Adding interface: batadv_slave_0
[  302.213045][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  302.232714][ T8497] Bluetooth: hci1: command 0x0409 tx timeout
[  302.239192][T10654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  302.268150][T10654] batman_adv: batadv0: Adding interface: batadv_slave_1
[  302.276453][T10677] XFS (loop5): Mounting V5 Filesystem
[  302.287496][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  302.350206][T10654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  302.366165][T10677] XFS (loop5): Ending clean mount
[  302.418078][ T9975] XFS (loop5): Unmounting Filesystem
[  302.512768][ T4210] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  302.564883][T10654] device hsr_slave_0 entered promiscuous mode
[  302.591479][T10654] device hsr_slave_1 entered promiscuous mode
[  302.604081][T10654] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  302.614063][T10654] Cannot create hsr debugfs directory
[  302.622974][ T4210] usb 2-1: device descriptor read/8, error -71
[  302.892745][ T4210] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  302.966350][T10709] fuse: Bad value for 'fd'
[  302.982793][ T4210] usb 2-1: device descriptor read/8, error -71
[  302.996494][T10709] Process accounting resumed
[  303.099580][T10654] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  303.102958][ T4210] usb usb2-port1: unable to enumerate USB device
[  303.137463][T10654] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  303.150818][T10717] loop5: detected capacity change from 0 to 512
[  303.173418][T10654] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  303.216521][T10654] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  303.367710][T10717] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  303.383158][T10717] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  303.589831][T10654] 8021q: adding VLAN 0 to HW filter on device bond0
[  303.608205][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  303.626388][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  303.647498][T10654] 8021q: adding VLAN 0 to HW filter on device team0
[  303.703213][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  303.712049][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  303.727046][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.734188][ T4252] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.765183][   T26] audit: type=1326 audit(1737996686.152:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.3.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3686f2d29 code=0x7ffc0000
[  303.787457][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  303.788205][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  303.811520][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.818695][ T4252] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.828255][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  303.848070][T10737] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2329'.
[  303.859453][   T26] audit: type=1326 audit(1737996686.152:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.3.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3686f2d29 code=0x7ffc0000
[  303.886240][   T26] audit: type=1326 audit(1737996686.192:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.3.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff3686f2d29 code=0x7ffc0000
[  303.909355][   T26] audit: type=1326 audit(1737996686.192:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.3.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3686f2d29 code=0x7ffc0000
[  303.942248][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  303.972152][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  304.002800][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  304.040792][   T26] audit: type=1326 audit(1737996686.192:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.3.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3686f2d29 code=0x7ffc0000
[  304.066410][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  304.084465][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  304.105440][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  304.119909][   T26] audit: type=1326 audit(1737996686.192:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.3.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3686f2d29 code=0x7ffc0000
[  304.154634][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  304.174610][   T26] audit: type=1326 audit(1737996686.192:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.3.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3686f2d29 code=0x7ffc0000
[  304.211341][   T26] audit: type=1326 audit(1737996686.192:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.3.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7ff3686f2d29 code=0x7ffc0000
[  304.219995][T10654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  304.291848][   T26] audit: type=1326 audit(1737996686.192:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.3.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3686f2d29 code=0x7ffc0000
[  304.296087][T10654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  304.325307][ T4159] Bluetooth: hci1: command 0x041b tx timeout
[  304.366823][   T26] audit: type=1326 audit(1737996686.192:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.3.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3686f2d29 code=0x7ffc0000
[  304.394037][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  304.413622][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  304.423611][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  304.448009][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  304.479647][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  304.643795][T10769] loop3: detected capacity change from 0 to 1024
[  304.835176][T10769] hfsplus: xattr searching failed
[  304.841285][T10769] hfsplus: xattr searching failed
[  304.894779][T10654] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.904152][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  304.914182][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  305.213012][T10754] loop6: detected capacity change from 0 to 32768
[  305.658665][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2339'.
[  305.669724][T10801] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2339'.
[  305.682149][T10801] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2339'.
[  305.877458][T10754] XFS (loop6): Mounting V5 Filesystem
[  305.996021][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  306.027218][T10754] XFS (loop6): Ending clean mount
[  306.031521][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  306.156636][T10138] XFS (loop6): Unmounting Filesystem
[  306.175986][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  306.186708][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  306.237999][T10654] device veth0_vlan entered promiscuous mode
[  306.256697][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  306.286440][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  306.317160][T10654] device veth1_vlan entered promiscuous mode
[  306.392683][ T4159] Bluetooth: hci1: command 0x040f tx timeout
[  306.397424][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  306.419143][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  306.447176][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  306.486782][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  306.671983][T10654] device veth0_macvtap entered promiscuous mode
[  306.725791][T10654] device veth1_macvtap entered promiscuous mode
[  306.885094][T10654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.950444][T10654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.973308][T10654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.992302][T10654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.024327][T10654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.066228][T10654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.088890][T10654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.100637][T10654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.116616][T10654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.128318][T10654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.141663][T10654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.165104][T10654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.213523][T10654] batman_adv: batadv0: Interface activated: batadv_slave_0
[  307.241379][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  307.267408][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  307.293928][T10872] loop3: detected capacity change from 0 to 764
[  307.302416][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  307.334801][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  307.370881][T10823] loop1: detected capacity change from 0 to 65536
[  307.398475][T10654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.427494][T10654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.441975][T10872] rock: directory entry would overflow storage
[  307.442200][T10654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.459931][T10654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.469189][T10872] rock: sig=0x4f50, size=4, remaining=3
[  307.477719][T10654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.492097][T10872] iso9660: Corrupted directory entry in block 6 of inode 1792
[  307.499428][T10654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.525673][T10654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.542594][T10654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.570931][T10654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.595705][T10654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.605636][T10654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.616111][T10654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.644955][T10654] batman_adv: batadv0: Interface activated: batadv_slave_1
[  307.706811][T10823] XFS (loop1): Mounting V5 Filesystem
[  307.730418][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  307.739994][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  307.748024][T10896] loop3: detected capacity change from 0 to 512
[  307.773821][T10654] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.791935][T10654] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.796980][T10823] XFS (loop1): Ending clean mount
[  307.801507][T10654] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.816644][T10654] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.849931][T10896] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  307.886863][T10896] UDF-fs: Scanning with blocksize 512 failed
[  307.962728][T10896] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  307.992882][T10896] UDF-fs: Scanning with blocksize 1024 failed
[  308.011396][T10896] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  308.037429][ T4177] XFS (loop1): Unmounting Filesystem
[  308.073441][T10896] UDF-fs: Scanning with blocksize 2048 failed
[  308.113365][T10896] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  308.146575][T10896] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  308.190127][ T9892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.218180][ T9892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.301594][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  308.331437][ T4292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.356157][ T4292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.418118][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  308.474843][ T4180] Bluetooth: hci1: command 0x0419 tx timeout
[  308.705810][T10921] loop1: detected capacity change from 0 to 512
[  308.925345][   T26] kauditd_printk_skb: 76 callbacks suppressed
[  308.925381][   T26] audit: type=1326 audit(1737996691.312:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10905 comm="syz.6.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6b30bd29 code=0x7fc00000
[  309.488181][T10935] loop3: detected capacity change from 0 to 1764
[  309.789842][T10921] EXT4-fs (loop1): inline encryption not supported
[  309.812768][T10921] EXT4-fs (loop1): Ignoring removed orlov option
[  309.819143][T10921] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  310.019218][T10921] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2361: bg 0: block 64: padding at end of block bitmap is not set
[  310.133404][T10921] Quota error (device loop1): write_blk: dquota write failed
[  310.152966][T10921] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  310.206352][T10921] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.2361: Failed to acquire dquot type 0
[  310.309765][T10921] EXT4-fs (loop1): 1 truncate cleaned up
[  310.335768][T10921] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,inlinecrypt,delalloc,noload,delalloc,noload,mb_optimize_scan=0x0000000000000001,orlov,,errors=continue. Quota mode: writeback.
[  310.664495][T10967] loop3: detected capacity change from 0 to 512
[  311.924221][T10983] loop3: detected capacity change from 0 to 2048
[  311.982870][ T8497] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  312.342904][ T8497] usb 2-1: config index 0 descriptor too short (expected 3133, got 61)
[  312.361451][ T8497] usb 2-1: config 0 has an invalid interface number: 156 but max is 1
[  312.380699][T10988] loop7: detected capacity change from 0 to 1024
[  312.488767][ T8497] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  312.572130][ T8497] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  312.605728][ T8497] usb 2-1: config 0 has no interface number 0
[  312.612322][ T8497] usb 2-1: config 0 interface 156 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  312.679751][ T8497] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  312.694888][T10988] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  312.712702][ T8497] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.754160][ T8497] usb 2-1: config 0 descriptor??
[  312.759657][T10988] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  312.794741][ T8497] gspca_main: spca561-2.14.0 probing abcd:cdee
[  312.875433][T11001] 9pnet: Insufficient options for proto=fd
[  313.263231][ T8497] spca561: probe of 2-1:0.156 failed with error -22
[  313.290897][ T8497] usb 2-1: MIDIStreaming interface descriptor not found
[  314.057114][ T8497] usb 2-1: USB disconnect, device number 15
[  314.102692][ T4212] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  314.235090][T11021] loop6: detected capacity change from 0 to 2048
[  314.342691][ T4212] usb 8-1: Using ep0 maxpacket: 16
[  314.462905][ T4212] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  314.494632][ T4212] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  314.536437][ T4212] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  314.733084][ T4212] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  314.753443][ T4212] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.808028][ T4212] usb 8-1: Product: syz
[  314.843317][ T4212] usb 8-1: Manufacturer: syz
[  314.848007][ T4212] usb 8-1: SerialNumber: syz
[  315.123183][ T4213] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  315.259028][T11037] loop1: detected capacity change from 0 to 8192
[  315.382842][ T4213] usb 4-1: Using ep0 maxpacket: 8
[  315.384149][ T4212] usb 8-1: 2:1 : format type 0 is detected, processed as PCM
[  315.425660][T11053] loop6: detected capacity change from 0 to 1024
[  315.502914][ T4213] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  315.538931][ T4213] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  315.565006][T11053] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,init_itable=0x0000000000000003,discard,max_batch_time=0x0000000004000000,block_validity,i_version,bsddf,min_batch_time=0x0000000000000008,max_batch_time=0x0000000000000006,noquota,stripe=0x00000000000000ff,discard,errors=continue. Quota mode: none.
[  315.634275][ T4213] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  315.674726][ T4213] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  315.710073][ T4213] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  315.749976][ T4213] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  315.779745][ T4213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.982771][T11061] loop6: detected capacity change from 0 to 2048
[  316.092747][ T4213] usb 4-1: usb_control_msg returned -32
[  316.100563][ T4213] usbtmc 4-1:16.0: can't read capabilities
[  316.252873][ T4212] usb 8-1: current rate 9338622 is different from the runtime rate 9338507
[  316.292508][T11068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  316.502797][ T4213] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  316.616132][ T4212] usb 8-1: USB disconnect, device number 2
[  316.762753][ T4213] usb 7-1: Using ep0 maxpacket: 32
[  316.903064][ T4213] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[  316.919297][ T4213] usb 7-1: config 0 has no interface number 0
[  316.935388][ T4213] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  316.964856][T11087] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.024215][T11087] bond0: (slave rose0): Enslaving as an active interface with an up link
[  317.039810][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  317.046209][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  317.060390][T11089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2417'.
[  317.084105][T11091] bond0: (slave rose0): Releasing backup interface
[  317.152812][ T4213] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  317.166487][ T4213] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.206844][ T4213] usb 7-1: Product: syz
[  317.235403][ T4213] usb 7-1: Manufacturer: syz
[  317.263762][ T4213] usb 7-1: SerialNumber: syz
[  317.301873][ T4213] usb 7-1: config 0 descriptor??
[  317.309328][T11108] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2421'.
[  317.365274][ T4213] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  317.395879][ T4213] em28xx 7-1:0.132: Video interface 132 found:
[  317.579642][T11122] fuseblk: Unknown parameter '0'
[  317.793427][ T4213] em28xx 7-1:0.132: unknown em28xx chip ID (0)
[  317.851795][ T4212] usb 4-1: USB disconnect, device number 10
[  317.912851][ T4213] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  317.926017][T11132] loop7: detected capacity change from 0 to 512
[  317.989653][ T4213] em28xx 7-1:0.132: board has no eeprom
[  318.034725][T11132] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  318.063731][T11132] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  318.122725][ T4213] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  318.147719][ T4213] em28xx 7-1:0.132: analog set to bulk mode.
[  318.154235][T11132] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e12c, mo2=0002]
[  318.164765][T11132] EXT4-fs (loop7): orphan cleanup on readonly fs
[  318.171469][T11132] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2430: bg 0: block 361: padding at end of block bitmap is not set
[  318.193580][T11132] EXT4-fs (loop7): Remounting filesystem read-only
[  318.211651][ T4159] em28xx 7-1:0.132: Registering V4L2 extension
[  318.229342][ T4213] usb 7-1: USB disconnect, device number 2
[  318.244590][T11132] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6183: Corrupt filesystem
[  318.324481][ T4159] em28xx 7-1:0.132: failed to trigger read from i2c address 0x4a (error=-19)
[  318.361783][T11132] EXT4-fs (loop7): Remounting filesystem read-only
[  318.371248][ T4213] em28xx 7-1:0.132: Disconnecting em28xx
[  318.376168][T11132] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.2430: invalid indirect mapped block 2185560079 (level 1)
[  318.403312][T11132] EXT4-fs (loop7): Remounting filesystem read-only
[  318.410222][T11132] EXT4-fs (loop7): 1 truncate cleaned up
[  318.432377][T11132] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,dioread_nolock,noblock_validity,errors=remount-ro,nolazytime. Quota mode: none.
[  318.692306][T11132] EXT4-fs error (device loop7): ext4_remount:5855: comm syz.7.2430: Abort forced by user
[  318.716550][ T4159] em28xx 7-1:0.132: Config register raw data: 0xffffffed
[  318.728824][ T4159] em28xx 7-1:0.132: AC97 chip type couldn't be determined
[  318.746308][ T4159] em28xx 7-1:0.132: No AC97 audio processor
[  318.816368][ T4159] usb 7-1: Decoder not found
[  318.826687][ T4159] em28xx 7-1:0.132: failed to create media graph
[  318.841146][ T4159] em28xx 7-1:0.132: V4L2 device video103 deregistered
[  318.872291][ T4159] em28xx 7-1:0.132: Remote control support is not available for this card.
[  318.915934][ T4213] em28xx 7-1:0.132: Closing input extension
[  319.066913][ T4213] em28xx 7-1:0.132: Freeing device
[  319.252773][ T4180] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  319.502726][ T4180] usb 4-1: Using ep0 maxpacket: 8
[  319.622854][ T4180] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  319.631079][ T4180] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  319.660573][ T4180] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  319.682138][ T4180] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  319.702864][ T4180] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  319.719596][T11193] loop7: detected capacity change from 0 to 2048
[  319.726187][ T4180] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  319.753979][ T4180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.877284][T11193] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv0,nogrpid,,errors=continue. Quota mode: none.
[  320.053872][ T4180] usb 4-1: usb_control_msg returned -32
[  320.063731][ T4180] usbtmc 4-1:16.0: can't read capabilities
[  320.227259][T10654] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5806: Out of memory
[  320.284185][T10654] EXT4-fs error (device loop7): __ext4_unlink:3327: inode #2: comm syz-executor: mark_inode_dirty error
[  320.323601][T11218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  320.430731][T11218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  320.471316][T11218] bond0 (unregistering): Released all slaves
[  320.851243][ T9892] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.966877][ T9892] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.094207][ T9892] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.182592][T11258] loop1: detected capacity change from 0 to 2048
[  321.206756][ T9892] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.299704][T11258] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,nogrpid,,errors=continue. Quota mode: none.
[  321.526381][   T13] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  321.540983][   T13] Bluetooth: hci5: Injecting HCI hardware error event
[  321.603292][ T4184] Bluetooth: hci5: hardware error 0x00
[  321.668733][ T4213] usb 4-1: USB disconnect, device number 11
[  321.764689][ T4177] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Out of memory
[  321.852946][ T4177] EXT4-fs error (device loop1): __ext4_unlink:3327: inode #2: comm syz-executor: mark_inode_dirty error
[  322.006712][T11290] loop3: detected capacity change from 0 to 2048
[  322.030957][T11295] loop6: detected capacity change from 0 to 16
[  322.193326][T11295] erofs: (device loop6): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version
[  322.504939][T11279] chnl_net:caif_netlink_parms(): no params data found
[  322.873559][T11279] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.882194][T11313] loop3: detected capacity change from 0 to 4096
[  322.936594][T11313] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  322.952677][T11279] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.971189][T11279] device bridge_slave_0 entered promiscuous mode
[  323.023312][T11279] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.052871][T11279] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.081825][T11279] device bridge_slave_1 entered promiscuous mode
[  323.259262][T11279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  323.271435][T11279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  323.422882][T11279] team0: Port device team_slave_0 added
[  323.429484][T11325] tc_dump_action: action bad kind
[  323.482718][T11279] team0: Port device team_slave_1 added
[  323.600362][T11279] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.637235][T11279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.704556][T11279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.722237][T11346] loop6: detected capacity change from 0 to 2048
[  323.740561][ T9892] device hsr_slave_0 left promiscuous mode
[  323.754833][ T9892] device hsr_slave_1 left promiscuous mode
[  323.764171][ T4213] Bluetooth: hci1: command 0x0409 tx timeout
[  323.779622][ T9892] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  323.792337][ T9892] batman_adv: batadv0: Removing interface: batadv_slave_0
[  323.812334][ T9892] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  323.820907][ T9892] batman_adv: batadv0: Removing interface: batadv_slave_1
[  323.848445][ T9892] device bridge_slave_1 left promiscuous mode
[  323.856850][T11346] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  323.869350][ T9892] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.880329][ T9892] device bridge_slave_0 left promiscuous mode
[  323.887614][ T9892] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.906207][T11346] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2482: bg 0: block 362: padding at end of block bitmap is not set
[  323.930382][ T9892] device veth1_macvtap left promiscuous mode
[  323.936534][ T9892] device veth0_macvtap left promiscuous mode
[  323.946863][ T9892] device veth1_vlan left promiscuous mode
[  323.952905][T11346] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  323.953494][ T9892] device veth0_vlan left promiscuous mode
[  323.982976][T11346] EXT4-fs (loop6): This should not happen!! Data will be lost
[  323.982976][T11346] 
[  323.993980][T11346] EXT4-fs (loop6): Total free blocks count 0
[  324.000316][T11346] EXT4-fs (loop6): Free/Dirty block details
[  324.008934][T11346] EXT4-fs (loop6): free_blocks=0
[  324.015792][T11346] EXT4-fs (loop6): dirty_blocks=64
[  324.020934][T11346] EXT4-fs (loop6): Block reservation details
[  324.028670][T11346] EXT4-fs (loop6): i_reserved_data_blocks=4
[  324.095994][ T4292] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  324.120087][ T4292] EXT4-fs (loop6): This should not happen!! Data will be lost
[  324.120087][ T4292] 
[  324.259626][T11352] loop6: detected capacity change from 0 to 2048
[  324.289090][ T9892] team0 (unregistering): Port device team_slave_1 removed
[  324.302778][ T9892] team0 (unregistering): Port device team_slave_0 removed
[  324.320966][ T9892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  324.336146][ T9892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  324.459138][T11354] binder: 11353:11354 ioctl c0306201 20000680 returned -14
[  324.469994][ T9892] bond0 (unregistering): Released all slaves
[  324.605222][T11279] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.612204][T11279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.786638][T11279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.497801][T11368] loop6: detected capacity change from 0 to 512
[  325.698615][T11373] loop3: detected capacity change from 0 to 1024
[  325.718274][T11368] EXT4-fs (loop6): 1 orphan inode deleted
[  325.733895][T11368] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  325.793124][T11368] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.811756][T11279] device hsr_slave_0 entered promiscuous mode
[  325.952391][T11279] device hsr_slave_1 entered promiscuous mode
[  325.961401][T11368] Process accounting resumed
[  326.078206][T11383] hfsplus: xattr searching failed
[  326.093101][T11383] hfsplus: xattr searching failed
[  326.157876][T11279] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  326.387446][T11279] Cannot create hsr debugfs directory
[  326.424820][T11368] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback.
[  326.506641][ T4242] Bluetooth: hci4: command 0x0409 tx timeout
[  326.516826][ T4242] Bluetooth: hci1: command 0x041b tx timeout
[  326.867496][T11322] chnl_net:caif_netlink_parms(): no params data found
[  327.173997][T11403] binder: BINDER_SET_CONTEXT_MGR already set
[  327.180918][T11403] binder: 11400:11403 ioctl 4018620d 200002c0 returned -16
[  327.265997][T11403] binder: 11400:11403 ioctl c0306201 20000680 returned -11
[  327.402857][ T4169] Bluetooth: hci5: unexpected event for opcode 0x0804
[  327.552882][T11414] loop3: detected capacity change from 0 to 512
[  327.611410][T11419] fuse: Bad value for 'fd'
[  327.663970][T11414] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2501: invalid indirect mapped block 11 (level 0)
[  327.697095][T11322] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.722788][T11322] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.740390][T11414] EXT4-fs (loop3): Remounting filesystem read-only
[  327.761949][T11322] device bridge_slave_0 entered promiscuous mode
[  327.788692][T11414] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.2501: attempt to clear invalid blocks 1024 len 1
[  327.859608][T11322] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.886744][T11322] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.903126][T11414] EXT4-fs (loop3): Remounting filesystem read-only
[  327.923175][T11414] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  327.938868][T11322] device bridge_slave_1 entered promiscuous mode
[  327.991820][T11279] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  328.015013][T11414] EXT4-fs (loop3): Remounting filesystem read-only
[  328.039558][T11414] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2501: invalid indirect mapped block 1819239214 (level 0)
[  328.066726][T11279] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  328.123420][T11414] EXT4-fs (loop3): Remounting filesystem read-only
[  328.126760][T11279] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  328.129954][T11414] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2501: invalid indirect mapped block 33554432 (level 2)
[  328.205913][T11279] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  328.228427][T11322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  328.247938][T11414] EXT4-fs (loop3): Remounting filesystem read-only
[  328.285921][T11322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  328.301234][  T146] Bluetooth: hci6: sending frame failed (-49)
[  328.309824][T11414] EXT4-fs (loop3): 1 truncate cleaned up
[  328.315933][T11414] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x000000000000000e,usrquota,nodelalloc,errors=remount-ro,max_batch_time=0x00000000000000ea,nodiscard,. Quota mode: writeback.
[  328.545072][T11322] team0: Port device team_slave_0 added
[  328.600363][T11322] team0: Port device team_slave_1 added
[  328.664646][ T4159] Bluetooth: hci1: command 0x040f tx timeout
[  328.958474][   T26] audit: type=1326 audit(1737996711.342:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11445 comm="syz.3.2508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3686f2d29 code=0x0
[  329.502584][ T4159] Bluetooth: hci4: command 0x041b tx timeout
[  329.667493][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2511'.
[  329.902831][ T8497] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  329.991564][T11322] batman_adv: batadv0: Adding interface: batadv_slave_0
[  330.028042][T11322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.092343][T11322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  330.142012][T11322] batman_adv: batadv0: Adding interface: batadv_slave_1
[  330.165410][T11322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.211851][T11322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.289487][T11279] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.313305][ T4242] Bluetooth: hci6: command 0x1003 tx timeout
[  330.314093][ T8497] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  330.330075][  T146] Bluetooth: hci6: sending frame failed (-49)
[  330.345507][ T8497] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  330.394351][T11322] device hsr_slave_0 entered promiscuous mode
[  330.417054][T11322] device hsr_slave_1 entered promiscuous mode
[  330.432987][ T8497] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  330.451792][ T8497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  330.460381][T11322] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  330.470369][ T8497] usb 4-1: SerialNumber: syz
[  330.475289][T11322] Cannot create hsr debugfs directory
[  330.483423][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  330.491336][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  330.547407][T11279] 8021q: adding VLAN 0 to HW filter on device team0
[  330.672394][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  330.697883][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  330.756497][T11458] loop3: detected capacity change from 0 to 16
[  330.792868][ T7001] Bluetooth: hci1: command 0x0419 tx timeout
[  330.803445][T10151] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.810611][T10151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.844130][T11458] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  330.885344][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  330.898148][T11458] cramfs: unsupported filesystem features
[  330.943498][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  330.993654][T10151] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.000780][T10151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.103113][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  331.155206][ T8497] usb 4-1: 0:2 : does not exist
[  331.215733][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  331.255238][ T8497] usb 4-1: USB disconnect, device number 12
[  331.303296][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  331.362872][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  331.383425][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  331.424848][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  331.469071][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  331.512770][   T21] Bluetooth: hci4: command 0x040f tx timeout
[  331.527311][T11279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  331.583221][T11279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  331.935866][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  331.963755][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  331.994508][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  332.013017][T11497] loop3: detected capacity change from 0 to 1024
[  332.033370][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  332.042153][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  332.064480][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  332.083329][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  332.265625][T11497] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  332.342467][T11497] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.374452][T11505] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  332.399445][ T7001] Bluetooth: hci6: command 0x1001 tx timeout
[  332.406569][ T4184] Bluetooth: hci6: sending frame failed (-49)
[  332.428438][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  332.439217][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  332.465148][ T9892] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.541910][T11279] 8021q: adding VLAN 0 to HW filter on device batadv0
[  332.620748][ T9892] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.745860][ T9892] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.962151][ T9892] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.351218][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  333.376103][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  333.463680][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  333.483717][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  333.492717][ T8497] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  333.538007][T11279] device veth0_vlan entered promiscuous mode
[  333.555110][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  333.576019][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  333.592919][ T8499] Bluetooth: hci4: command 0x0419 tx timeout
[  333.628658][T11279] device veth1_vlan entered promiscuous mode
[  333.740269][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  333.773690][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  333.802494][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  333.813774][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  333.852872][ T8497] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  333.866903][T11279] device veth0_macvtap entered promiscuous mode
[  333.907518][ T8497] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  333.924594][T11279] device veth1_macvtap entered promiscuous mode
[  333.955800][ T8497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.992805][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  334.033096][ T8497] usb 4-1: config 0 descriptor??
[  334.053764][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  334.078301][ T8497] pwc: Askey VC010 type 2 USB webcam detected.
[  334.141260][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  334.166398][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.188050][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  334.213962][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.224401][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  334.235836][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.246741][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  334.257711][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.269662][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  334.288022][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.298509][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  334.309501][ T8497] pwc: send_video_command error -71
[  334.309732][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.316308][ T8497] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  334.338165][ T8497] Philips webcam: probe of 4-1:0.0 failed with error -71
[  334.347687][T11279] batman_adv: batadv0: Interface activated: batadv_slave_0
[  334.364144][ T8497] usb 4-1: USB disconnect, device number 13
[  334.381528][T11577] netlink: 'syz.5.2536': attribute type 19 has an invalid length.
[  334.399578][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  334.413700][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  334.446156][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.465553][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.479546][ T4242] Bluetooth: hci6: command 0x1009 tx timeout
[  334.511202][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.541352][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.571659][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.622597][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.644965][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.666608][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.694884][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.746507][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.836098][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.880375][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.901392][T11279] batman_adv: batadv0: Interface activated: batadv_slave_1
[  334.953045][ T8497] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  335.030284][T11322] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  335.050762][T11322] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  335.069876][T11322] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  335.092018][T11322] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  335.272353][T11322] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.315920][T11322] 8021q: adding VLAN 0 to HW filter on device team0
[  335.323241][ T8497] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  335.342286][ T8497] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  335.372431][ T8497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.408293][ T8497] usb 4-1: config 0 descriptor??
[  335.464936][ T8497] pwc: Askey VC010 type 2 USB webcam detected.
[  335.733291][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  335.743933][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  335.763269][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  335.771116][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  335.779934][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  335.788829][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  335.797532][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.804736][ T4292] bridge0: port 1(bridge_slave_0) entered forwarding state
[  335.812746][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  335.821645][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  335.830899][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.838021][ T4292] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.849817][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  335.858868][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  335.867933][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  335.877132][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  335.889970][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  335.892811][ T8497] pwc: recv_control_msg error -32 req 02 val 2b00
[  335.899512][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  335.914223][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  335.926783][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  335.936835][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  335.945584][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  335.952747][ T8497] pwc: recv_control_msg error -32 req 02 val 2700
[  335.966063][T11322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  335.986925][T11322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  336.015924][T11279] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.022762][ T8497] pwc: recv_control_msg error -32 req 02 val 2c00
[  336.035408][T11279] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.064031][T11279] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.074677][ T8497] pwc: recv_control_msg error -32 req 04 val 1000
[  336.075851][T11279] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.112778][ T8497] pwc: recv_control_msg error -32 req 04 val 1300
[  336.126502][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  336.144696][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  336.153608][ T8497] pwc: recv_control_msg error -32 req 04 val 1400
[  336.192754][ T8497] pwc: recv_control_msg error -32 req 02 val 2000
[  336.233074][ T8497] pwc: recv_control_msg error -32 req 02 val 2100
[  336.272814][ T8497] pwc: recv_control_msg error -32 req 04 val 1500
[  336.323055][ T8497] pwc: recv_control_msg error -32 req 02 val 2500
[  336.392949][ T8497] pwc: recv_control_msg error -32 req 02 val 2400
[  336.436228][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.453533][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  336.461147][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  336.469585][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.535301][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  336.627192][T11322] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.647706][ T4381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.659824][ T8497] pwc: recv_control_msg error -32 req 02 val 2900
[  336.673946][ T4381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.785247][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  336.942705][ T8497] pwc: recv_control_msg error -71 req 04 val 1100
[  336.962821][ T8497] pwc: recv_control_msg error -71 req 04 val 1200
[  337.042028][ T8497] pwc: Registered as video103.
[  337.084038][ T8497] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11
[  337.203291][T11641] loop8: detected capacity change from 0 to 164
[  337.213952][ T8497] usb 4-1: USB disconnect, device number 14
[  337.598326][T11641] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  338.030177][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  338.058305][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  338.125518][T11322] device veth0_vlan entered promiscuous mode
[  338.612872][T11689] loop8: detected capacity change from 0 to 256
[  338.700070][T11689] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  339.116331][T11701] loop8: detected capacity change from 0 to 736
[  339.167096][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  339.185255][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  339.284987][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  339.322959][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  339.399437][T11322] device veth1_vlan entered promiscuous mode
[  339.537971][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  339.565211][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  339.602252][T11322] device veth0_macvtap entered promiscuous mode
[  339.632827][ T8497] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  339.778359][T11322] device veth1_macvtap entered promiscuous mode
[  339.883677][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  339.902803][ T8497] usb 9-1: Using ep0 maxpacket: 16
[  339.986772][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.033756][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.045041][ T8497] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 215, changing to 11
[  340.066909][ T8497] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58555, setting to 1024
[  340.097241][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.119606][ T8497] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  340.136773][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.160061][ T8497] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.179635][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.209792][ T8497] usb 9-1: config 0 descriptor??
[  340.225048][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.252949][T11701] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  340.274704][ T8497] usb 9-1: Found UVC 0.00 device <unnamed> (10c4:ea90)
[  340.290026][ T8497] usb 9-1: No valid video chain found.
[  340.296762][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.346276][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.392219][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.439611][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.487115][ T8497] usb 9-1: USB disconnect, device number 2
[  340.517327][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.564981][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.614015][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.636658][T11322] batman_adv: batadv0: Interface activated: batadv_slave_0
[  340.882817][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  340.893843][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.903922][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  340.914685][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.924559][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  340.949046][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.996092][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.027096][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.052699][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.068249][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.078343][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.101462][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.111458][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.122405][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.139237][T11322] batman_adv: batadv0: Interface activated: batadv_slave_1
[  341.169453][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  341.184826][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  341.218933][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  341.233968][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  341.246362][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  341.257330][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  341.323809][T11322] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  341.325845][T11745] loop8: detected capacity change from 0 to 8192
[  341.348017][T11322] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  341.365652][T11322] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  341.378567][T11322] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.571354][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.582183][   T21] usb 3-1: USB disconnect, device number 4
[  341.583906][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.670590][ T4292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.693544][ T4292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.742816][ T9892] device hsr_slave_0 left promiscuous mode
[  341.755747][ T9892] device hsr_slave_1 left promiscuous mode
[  341.781213][ T9892] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  341.798607][ T9892] batman_adv: batadv0: Removing interface: batadv_slave_0
[  343.080390][T11761] loop8: detected capacity change from 0 to 16
[  343.115341][T11761] erofs: (device loop8): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version
[  343.129191][ T9892] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  343.157201][ T9892] batman_adv: batadv0: Removing interface: batadv_slave_1
[  343.214062][ T9892] device bridge_slave_1 left promiscuous mode
[  343.220350][ T9892] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.229949][ T9892] device bridge_slave_0 left promiscuous mode
[  343.237777][ T9892] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.253076][ T9892] device veth1_macvtap left promiscuous mode
[  343.259127][ T9892] device veth0_macvtap left promiscuous mode
[  343.265702][ T9892] device veth1_vlan left promiscuous mode
[  343.271520][ T9892] device veth0_vlan left promiscuous mode
[  343.999908][ T9892] team0 (unregistering): Port device team_slave_1 removed
[  344.019048][ T9892] team0 (unregistering): Port device team_slave_0 removed
[  344.031960][ T9892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  344.048657][ T9892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  344.123788][ T9892] bond0 (unregistering): Released all slaves
[  344.171380][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  344.186430][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  344.263614][T11786] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2581'.
[  345.031690][T11786] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.041747][T11786] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.332917][T11800] xt_CT: You must specify a L4 protocol and not use inversions on it
[  345.481103][T11786] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  345.517852][T11786] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  345.808750][T11786] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.818412][T11786] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.829907][T11786] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.840374][T11786] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  347.652899][T11833] fuse: Bad value for 'group_id'
[  348.852634][ T8497] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  348.950810][T11866] loop9: detected capacity change from 0 to 1024
[  348.974108][T11871] capability: warning: `syz.3.2613' uses deprecated v2 capabilities in a way that may be insecure
[  349.792740][ T8497] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  349.857674][T11866] EXT4-fs (loop9): Ignoring removed orlov option
[  349.886701][ T8497] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  349.893441][T11883] fuse: Bad value for 'group_id'
[  349.914183][ T8497] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  349.933675][ T8497] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.944999][T11866] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option
[  349.996017][T11866] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  350.003075][T11858] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  350.218014][T11866] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002]
[  350.400524][T11866] EXT4-fs (loop9): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  350.903296][T11906] loop9: detected capacity change from 0 to 1024
[  351.708155][ T4213] usb 9-1: USB disconnect, device number 3
[  351.979172][T11906] hfsplus: xattr searching failed
[  351.985800][T11906] hfsplus: xattr searching failed
[  352.203534][T11924] xt_CT: You must specify a L4 protocol and not use inversions on it
[  352.970531][T11929] loop8: detected capacity change from 0 to 2048
[  354.380053][T11929] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv0,nogrpid,,errors=continue. Quota mode: none.
[  354.726950][   T26] audit: type=1800 audit(1737996737.112:164): pid=11929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2625" name="bus" dev="loop8" ino=19 res=0 errno=0
[  354.767091][T11929] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  356.118975][T11975] loop8: detected capacity change from 0 to 512
[  356.244672][T11975] EXT4-fs (loop8): inline encryption not supported
[  356.297884][T11975] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal
[  356.422605][T11984] fuse: Bad value for 'group_id'
[  356.800634][ T4213] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  357.692654][ T4212] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  357.799200][T12008] netlink: 'syz.5.2639': attribute type 4 has an invalid length.
[  357.823560][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2640'.
[  357.863085][T12008] netlink: 'syz.5.2639': attribute type 4 has an invalid length.
[  357.902757][ T4213] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 229, changing to 11
[  357.942570][ T4213] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 17323, setting to 1024
[  358.132986][ T4212] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  358.152152][ T4212] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  358.180490][ T4212] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.209209][ T4213] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  358.222643][ T4213] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.226888][ T4212] usb 10-1: config 0 descriptor??
[  358.251325][ T4213] usb 9-1: Product: syz
[  358.266076][ T4213] usb 9-1: Manufacturer: syz
[  358.285132][ T4213] usb 9-1: SerialNumber: syz
[  358.294666][ T4212] pwc: Askey VC010 type 2 USB webcam detected.
[  358.319684][ T4213] usb 9-1: config 0 descriptor??
[  358.425491][ T9892] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.506767][ T9892] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.517412][ T4212] pwc: send_video_command error -71
[  358.523227][ T4212] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  358.530794][ T4212] Philips webcam: probe of 10-1:0.0 failed with error -71
[  358.567116][ T4212] usb 10-1: USB disconnect, device number 2
[  358.674754][ T4213] usb 9-1: USB disconnect, device number 4
[  358.711579][ T9892] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.820875][ T9892] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.987778][ T4573] udevd[4573]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  359.104398][ T4212] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  359.151153][T12056] loop8: detected capacity change from 0 to 16
[  359.243481][T12056] erofs: Unknown parameter '0xffffffffffffffff)|'
[  359.365690][T12056] loop8: detected capacity change from 0 to 512
[  359.411946][T12056] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled
[  359.462815][ T4212] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  359.480562][ T4212] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  359.511568][T12056] EXT4-fs error (device loop8): ext4_orphan_get:1401: inode #15: comm syz.8.2652: casefold flag without casefold feature
[  359.518083][ T4212] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.535064][ T4212] usb 10-1: config 0 descriptor??
[  359.566715][T12056] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.2652: couldn't read orphan inode 15 (err -117)
[  359.585740][ T4212] pwc: Askey VC010 type 2 USB webcam detected.
[  359.694292][T12056] EXT4-fs (loop8): mounted filesystem without journal. Opts: resuid=0x0000000000000000,grpjquota=,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[  359.735726][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2659'.
[  360.032727][ T4212] pwc: recv_control_msg error -32 req 02 val 2b00
[  360.072881][ T4212] pwc: recv_control_msg error -32 req 02 val 2700
[  360.085339][T12094] loop8: detected capacity change from 0 to 2048
[  360.112785][ T4212] pwc: recv_control_msg error -32 req 02 val 2c00
[  360.160096][ T4212] pwc: recv_control_msg error -32 req 04 val 1000
[  360.212751][ T4212] pwc: recv_control_msg error -32 req 04 val 1300
[  360.233048][T12094] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  360.293778][ T4212] pwc: recv_control_msg error -32 req 04 val 1400
[  360.294830][T12104] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2663'.
[  360.358474][ T4212] pwc: recv_control_msg error -32 req 02 val 2000
[  360.400653][    T9] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  360.423105][ T4212] pwc: recv_control_msg error -32 req 02 val 2100
[  360.467004][ T4212] pwc: recv_control_msg error -32 req 04 val 1500
[  360.483465][    T9] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  360.512807][ T4212] pwc: recv_control_msg error -32 req 02 val 2500
[  360.519315][    T9] EXT4-fs (loop8): This should not happen!! Data will be lost
[  360.519315][    T9] 
[  360.553060][ T4212] pwc: recv_control_msg error -32 req 02 val 2400
[  360.586588][    T9] EXT4-fs (loop8): Total free blocks count 0
[  360.603306][    T9] EXT4-fs (loop8): Free/Dirty block details
[  360.627525][ T9892] device hsr_slave_0 left promiscuous mode
[  360.634306][ T9892] device hsr_slave_1 left promiscuous mode
[  360.641005][ T9892] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  360.649216][ T9892] batman_adv: batadv0: Removing interface: batadv_slave_0
[  360.657706][ T9892] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  360.665677][ T9892] batman_adv: batadv0: Removing interface: batadv_slave_1
[  360.680307][ T9892] device bridge_slave_1 left promiscuous mode
[  360.782589][    T9] EXT4-fs (loop8): free_blocks=2415919504
[  360.792931][    T9] EXT4-fs (loop8): dirty_blocks=16
[  360.798088][    T9] EXT4-fs (loop8): Block reservation details
[  360.812956][    T9] EXT4-fs (loop8): i_reserved_data_blocks=1
[  361.294566][ T9892] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.344761][ T9892] device bridge_slave_0 left promiscuous mode
[  361.353464][ T9892] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.362156][ T4212] pwc: recv_control_msg error -32 req 02 val 2900
[  361.423486][ T9892] device veth1_macvtap left promiscuous mode
[  361.429556][ T9892] device veth0_macvtap left promiscuous mode
[  361.454744][ T9892] device veth1_vlan left promiscuous mode
[  361.460575][ T9892] device veth0_vlan left promiscuous mode
[  361.622755][ T4212] pwc: recv_control_msg error -71 req 04 val 1100
[  361.653058][ T4212] pwc: recv_control_msg error -71 req 04 val 1200
[  361.669202][ T4212] pwc: Registered as video103.
[  361.687672][ T4212] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input12
[  361.728994][ T4212] usb 10-1: USB disconnect, device number 3
[  362.077644][ T4169] Bluetooth: hci4: unknown advertising packet type: 0x07
[  362.181340][T12161] loop9: detected capacity change from 0 to 512
[  362.256923][T12161] EXT4-fs (loop9): Test dummy encryption mode enabled
[  362.278259][T12161] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  362.307200][T12161] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2c028, mo2=0002]
[  362.362735][T12161] EXT4-fs (loop9): 1 orphan inode deleted
[  362.368550][T12161] EXT4-fs (loop9): 1 truncate cleaned up
[  362.374399][T12161] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc=0x00000000000000b5,noblock_validity,debug,nolazytime,noinit_itable,test_dummy_encryption=v1,. Quota mode: none.
[  362.630823][ T9892] team0 (unregistering): Port device team_slave_1 removed
[  362.651611][ T9892] team0 (unregistering): Port device team_slave_0 removed
[  362.668475][ T9892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  362.702980][ T9892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  362.874580][ T9892] bond0 (unregistering): Released all slaves
[  362.963482][T12171] device vlan0 entered promiscuous mode
[  364.055861][T12233] fuse: Unknown parameter 'grou00000000000000000000'
[  365.989638][T12292] batman_adv: batadv0: Adding interface: dummy0
[  366.029974][T12292] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  366.111751][T12302] loop9: detected capacity change from 0 to 16
[  366.206870][T12292] batman_adv: batadv0: Interface activated: dummy0
[  366.504753][T12302] erofs: (device loop9): mounted with root inode @ nid 36.
[  366.849636][T12307] loop8: detected capacity change from 0 to 1024
[  366.919536][T12303] batadv0: mtu less than device minimum
[  366.989663][T12303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  367.002792][T12303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  367.015232][T12303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  367.027693][T12303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  367.040196][T12303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  367.052637][T12303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  367.065122][T12303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  367.077779][T12303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  367.090132][T12303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  367.310510][T12307] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  367.322797][T12307] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  367.618991][T12346] loop9: detected capacity change from 0 to 1764
[  367.700466][T12351] sctp: [Deprecated]: syz.6.2733 (pid 12351) Use of int in max_burst socket option.
[  367.700466][T12351] Use struct sctp_assoc_value instead
[  368.172735][ T8497] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  368.543040][ T8497] usb 10-1: config index 0 descriptor too short (expected 45, got 36)
[  368.565338][T12397] syz.3.2745[12397] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  368.565431][T12397] syz.3.2745[12397] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  368.566296][ T8497] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  368.606785][ T8497] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  368.629769][ T8497] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  368.691413][ T8497] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  368.753035][ T8497] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.795482][ T8497] usb 10-1: config 0 descriptor??
[  368.823247][T12346] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  369.088791][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2751'.
[  369.196635][T12424] fuseblk: Unknown parameter '0'
[  369.288801][ T8497] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd
[  369.325133][ T8497] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  369.364630][T12433] 9pnet: Could not find request transport: fd0x0000000000000003
[  369.425994][ T8497] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  369.670639][ T4169] Bluetooth: Wrong link type (-22)
[  369.676455][ T4169] Bluetooth: hci0: link tx timeout
[  369.684204][ T4169] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  369.856291][ T4213] usb 10-1: USB disconnect, device number 4
[  369.944845][T12447] netlink: 'syz.3.2758': attribute type 1 has an invalid length.
[  370.096878][T12447] 8021q: adding VLAN 0 to HW filter on device bond1
[  370.231397][T12449] bond1: (slave veth43): Enslaving as an active interface with a down link
[  370.732733][T12475] netlink: 'syz.3.2766': attribute type 1 has an invalid length.
[  370.795339][T12475] device bond2 entered promiscuous mode
[  370.820075][T12475] bond2: (slave ip6erspan0): making interface the new active one
[  370.828129][T12475] device ip6erspan0 entered promiscuous mode
[  370.841159][T12475] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[  370.953313][T12459] loop8: detected capacity change from 0 to 32768
[  371.086057][T12459] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.2762 (12459)
[  371.214346][   T26] audit: type=1326 audit(1737996753.602:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12485 comm="syz.3.2767" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3686f2d29 code=0x0
[  371.279797][T12459] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm
[  371.332371][T12459] BTRFS info (device loop8): use no compression
[  371.372897][T12459] BTRFS info (device loop8): turning on flush-on-commit
[  371.417157][T12459] BTRFS info (device loop8): turning on sync discard
[  371.463870][T12459] BTRFS info (device loop8): force clearing of disk cache
[  371.471039][T12459] BTRFS info (device loop8): enabling auto defrag
[  371.543487][T12459] BTRFS info (device loop8): turning off discard
[  371.573738][T12459] BTRFS error (device loop8): unrecognized mount option 'obj_type=)*'
[  371.672807][T12459] BTRFS error (device loop8): open_ctree failed
[  371.752753][   T21] Bluetooth: hci0: command 0x0406 tx timeout
[  372.367155][T12524] Process accounting resumed
[  373.524756][T12544] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2780'.
[  373.883637][ T4169] Bluetooth: Wrong link type (-22)
[  374.804215][T12572] Process accounting resumed
[  376.027007][T12553] loop8: detected capacity change from 0 to 40427
[  376.417332][T12553] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  376.504290][T12553] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  376.651411][T12553] F2FS-fs (loop8): invalid crc value
[  376.731108][T12553] F2FS-fs (loop8): Found nat_bits in checkpoint
[  376.948163][T12553] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  376.990767][T12553] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  377.158009][T12629] fuse: Bad value for 'user_id'
[  377.217875][T12630] Process accounting resumed
[  378.487355][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  378.493825][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  379.068387][T12680] fuse: Bad value for 'group_id'
[  379.093266][T12680] Process accounting resumed
[  379.308153][T12666] loop9: detected capacity change from 0 to 32768
[  379.512164][T12666] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.2808 (12666)
[  379.600381][T12666] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm
[  379.620103][T12666] BTRFS info (device loop9): force clearing of disk cache
[  379.662837][T12666] BTRFS info (device loop9): force zlib compression, level 3
[  379.690704][T12666] BTRFS info (device loop9): enabling auto defrag
[  379.718001][T12666] BTRFS info (device loop9): max_inline at 0
[  379.755994][T12666] BTRFS info (device loop9): using free space tree
[  379.776115][T12666] BTRFS info (device loop9): has skinny extents
[  380.089981][T12666] BTRFS info (device loop9): enabling ssd optimizations
[  380.138161][T12666] BTRFS info (device loop9): clearing free space tree
[  380.193527][T12666] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  380.239608][T12666] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  380.487496][T12666] BTRFS info (device loop9): creating free space tree
[  380.490606][T12742] fuse: Bad value for 'group_id'
[  380.515726][T12666] BTRFS info (device loop9): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  380.539348][T12742] Process accounting resumed
[  380.553020][T12666] BTRFS info (device loop9): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  380.847035][T12666] BTRFS warning (device loop9): 'nologreplay' is deprecated, use 'rescue=nologreplay' instead
[  380.893750][T12666] BTRFS info (device loop9): disabling log replay at mount time
[  380.992759][T12666] BTRFS error (device loop9): nologreplay must be used with ro mount option
[  382.143878][T12801] fuse: Bad value for 'group_id'
[  382.174194][T12801] Process accounting resumed
[  382.329922][T12805] 9pnet_virtio: no channels available for device syz
[  382.390450][T12809] ALSA: mixer_oss: invalid OSS volume ''
[  382.430391][T12809] ALSA: mixer_oss: invalid OSS volume ''
[  382.631389][T12820] loop9: detected capacity change from 0 to 512
[  383.114280][T12820] EXT4-fs (loop9): mounted filesystem without journal. Opts: data_err=ignore,nouid32,minixdf,,errors=continue. Quota mode: writeback.
[  383.141252][T12820] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  383.187070][T12820] EXT4-fs (loop9): re-mounted. Opts: (null). Quota mode: writeback.
[  383.242047][T12838] Process accounting resumed
[  384.217493][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2859'.
[  384.245025][T12872] Process accounting resumed
[  384.866162][T12862] chnl_net:caif_netlink_parms(): no params data found
[  385.176330][T12862] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.192733][T12862] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.229561][T12862] device bridge_slave_0 entered promiscuous mode
[  385.277936][T12862] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.297100][T12862] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.315481][T12862] device bridge_slave_1 entered promiscuous mode
[  385.437256][T12862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  385.479565][T12862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  385.544248][T12862] team0: Port device team_slave_0 added
[  385.582312][T12862] team0: Port device team_slave_1 added
[  385.729558][T10151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.881879][T12862] batman_adv: batadv0: Adding interface: batadv_slave_0
[  385.899163][T12862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.956433][T12862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  385.993402][T12862] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.000404][T12862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.027181][ T1108] Bluetooth: hci3: command 0x0409 tx timeout
[  386.081547][T12862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.102657][   T13] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  386.116719][T10151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.186133][T12862] device hsr_slave_0 entered promiscuous mode
[  386.202902][T12862] device hsr_slave_1 entered promiscuous mode
[  386.209760][T12862] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  386.219154][T12862] Cannot create hsr debugfs directory
[  386.245291][T10151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.305585][T10151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.483529][   T13] usb 9-1: config index 0 descriptor too short (expected 23569, got 27)
[  386.491952][   T13] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  386.612956][   T13] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  386.622028][   T13] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  386.652836][   T13] usb 9-1: Manufacturer: syz
[  386.707851][   T13] usb 9-1: config 0 descriptor??
[  386.722891][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880631a0000: rx timeout, send abort
[  386.735512][    C1] vcan0: j1939_tp_rxtimer: 0xffff88806146a400: rx timeout, send abort
[  386.744341][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880631a0000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  386.761071][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806146a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  386.954463][   T13] rc_core: IR keymap rc-hauppauge not found
[  386.960398][   T13] Registered IR keymap rc-empty
[  386.968986][   T13] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  387.012918][   T13] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input14
[  387.093037][   T13] usb 9-1: USB disconnect, device number 5
[  387.443350][T12940] Process accounting resumed
[  387.482106][T10151] bond2: (slave ip6erspan0): Releasing active interface
[  387.515910][T10151] device ip6erspan0 left promiscuous mode
[  388.072803][ T1108] Bluetooth: hci3: command 0x041b tx timeout
[  388.244773][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2878'.
[  388.490981][T12990] Process accounting resumed
[  388.607373][T12994] syz.9.2882 sent an empty control message without MSG_MORE.
[  388.879211][ T1108] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  388.912683][ T1108] Bluetooth: hci1: Injecting HCI hardware error event
[  388.920451][ T4184] Bluetooth: hci1: hardware error 0x00
[  388.949124][T12862] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  389.077634][T12862] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  389.091142][T12862] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  389.756322][T12862] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  390.883771][T12769] Bluetooth: hci3: command 0x040f tx timeout
[  390.971006][T12862] 8021q: adding VLAN 0 to HW filter on device bond0
[  391.006232][T13033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2895'.
[  391.082192][T12862] 8021q: adding VLAN 0 to HW filter on device team0
[  391.098363][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  391.115927][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  391.180954][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  391.239102][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  391.289139][   T26] audit: type=1326 audit(2000000007.189:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13046 comm="syz.9.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df95b6d29 code=0x7ffc0000
[  391.317410][ T1272] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.324542][ T1272] bridge0: port 1(bridge_slave_0) entered forwarding state
[  391.348049][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  391.362488][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  391.378282][ T1272] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.385405][ T1272] bridge0: port 2(bridge_slave_1) entered forwarding state
[  391.407669][T10151] device hsr_slave_0 left promiscuous mode
[  391.433002][   T26] audit: type=1326 audit(2000000007.219:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13046 comm="syz.9.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df95b6d29 code=0x7ffc0000
[  391.472493][T10151] device hsr_slave_1 left promiscuous mode
[  391.501191][T10151] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  391.547671][T10151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  391.572672][   T26] audit: type=1326 audit(2000000007.219:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13046 comm="syz.9.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9df95b6d29 code=0x7ffc0000
[  391.628823][T10151] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  391.628920][T10151] batman_adv: batadv0: Removing interface: batadv_slave_1
[  391.631009][T10151] device bridge_slave_1 left promiscuous mode
[  391.631127][T10151] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.635794][T10151] device bridge_slave_0 left promiscuous mode
[  391.635916][T10151] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.715227][T10151] device veth1_macvtap left promiscuous mode
[  391.715288][T10151] device veth0_macvtap left promiscuous mode
[  391.715379][T10151] device veth1_vlan left promiscuous mode
[  391.715447][T10151] device veth0_vlan left promiscuous mode
[  391.719709][   T26] audit: type=1326 audit(2000000007.219:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13046 comm="syz.9.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df95b6d29 code=0x7ffc0000
[  391.736130][   T26] audit: type=1326 audit(2000000007.219:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13046 comm="syz.9.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df95b6d29 code=0x7ffc0000
[  391.736156][   T26] audit: type=1326 audit(2000000007.239:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.9.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9df95e95e5 code=0x7ffc0000
[  391.736177][   T26] audit: type=1326 audit(2000000007.389:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13046 comm="syz.9.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f9df95b6d29 code=0x7ffc0000
[  391.736197][   T26] audit: type=1326 audit(2000000007.389:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.9.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9df9552f29 code=0x7ffc0000
[  391.736215][   T26] audit: type=1326 audit(2000000007.389:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.9.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f9df95b6d29 code=0x7ffc0000
[  391.736233][   T26] audit: type=1326 audit(2000000007.389:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13046 comm="syz.9.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df95b6d29 code=0x7ffc0000
[  391.823510][    C0] vkms_vblank_simulate: vblank timer overrun
[  391.869007][    C0] vkms_vblank_simulate: vblank timer overrun
[  391.969633][    C0] vkms_vblank_simulate: vblank timer overrun
[  392.274306][T10151] bond2 (unregistering): Released all slaves
[  392.297019][T10151] bond1 (unregistering): (slave veth43): Releasing active interface
[  392.332205][T10151] bond1 (unregistering): Released all slaves
[  392.642466][T13066] input: syz0 as /devices/virtual/input/input15
[  392.954224][T12770] Bluetooth: hci3: command 0x0419 tx timeout
[  393.688611][T10151] team0 (unregistering): Port device team_slave_1 removed
[  393.711339][T10151] team0 (unregistering): Port device team_slave_0 removed
[  393.739850][T10151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  393.788869][T10151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  393.889356][T10151] bond0 (unregistering): Released all slaves
[  394.471556][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  394.481549][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  394.491796][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  394.501347][T13048] netlink: 'syz.8.2897': attribute type 10 has an invalid length.
[  394.529711][T13048] batman_adv: batadv0: Adding interface: team0
[  394.547748][T13089] fuseblk: Unknown parameter '0'
[  394.553203][T13048] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.604909][T13048] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  394.662495][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  394.730792][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  394.857758][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  394.882476][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  395.387142][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  395.403615][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  395.422386][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  395.474792][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  395.524142][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  395.592378][T12862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  395.665886][T13104] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2914'.
[  395.919341][T12769] Bluetooth: hci0: command 0x0406 tx timeout
[  396.780077][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  396.798982][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  396.843054][T12862] 8021q: adding VLAN 0 to HW filter on device batadv0
[  396.865690][T13094] loop8: detected capacity change from 0 to 32768
[  396.900278][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  396.917200][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  396.971042][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  396.993427][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  397.016064][T13094] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.2912 (13094)
[  397.050625][T12862] device veth0_vlan entered promiscuous mode
[  397.064784][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  397.098335][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  397.135770][T12862] device veth1_vlan entered promiscuous mode
[  397.145206][T13094] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[  397.172883][T13094] BTRFS info (device loop8): turning on async discard
[  397.200048][T13094] BTRFS warning (device loop8): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  397.237677][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  397.247442][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  397.262942][T13094] BTRFS info (device loop8): trying to use backup root at mount time
[  397.276965][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  397.291966][T13094] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8)
[  397.313476][T11012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  397.321848][T13094] BTRFS info (device loop8): use lzo compression, level 0
[  397.343209][T12862] device veth0_macvtap entered promiscuous mode
[  397.355346][T13094] BTRFS info (device loop8): enabling auto defrag
[  397.361800][T13094] BTRFS info (device loop8): enabling ssd optimizations
[  397.380838][T12862] device veth1_macvtap entered promiscuous mode
[  397.403335][T13094] BTRFS info (device loop8): using spread ssd allocation scheme
[  397.430422][T13094] BTRFS info (device loop8): enabling disk space caching
[  397.441148][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.462155][T13094] BTRFS error (device loop8): cannot disable free space tree
[  397.482411][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.496197][T13152] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  397.513108][T13094] BTRFS error (device loop8): open_ctree failed
[  397.543399][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.592562][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.607889][T13152] kvm: pic: level sensitive irq not supported
[  397.608345][T13152] kvm: pic: non byte read
[  397.630956][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.662148][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.678001][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.701113][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.732345][T12862] batman_adv: batadv0: Interface activated: batadv_slave_0
[  397.807358][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.880610][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.915138][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.959976][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.996333][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  398.159294][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.169320][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  398.180563][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.191859][T12862] batman_adv: batadv0: Interface activated: batadv_slave_1
[  398.199746][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  398.208649][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  398.217143][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  398.227402][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  398.245214][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  398.256779][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  398.283289][T13187] net_ratelimit: 11 callbacks suppressed
[  398.283307][T13187] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(61606130751391) <= P.seqno(0) <= S.SWH(61606130751465)) and (P.ackno exists or LAWL(146059853098810) <= P.ackno(146059853098811) <= S.AWH(146059853098811), sending SYNC...
[  399.187941][T12862] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  399.201142][T12862] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  399.210507][T12862] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  399.219555][T12862] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  399.466845][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.522901][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.557256][ T4806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.589204][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  399.609877][ T4806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.684376][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  399.838271][T13221] fuse: Bad value for 'fd'
[  401.070689][T13249] ------------[ cut here ]------------
[  401.102212][T13249] trace type BPF program uses run-time allocation
[  401.123853][T13257] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2950'.
[  401.144562][T13249] WARNING: CPU: 1 PID: 13249 at kernel/bpf/verifier.c:11729 check_map_prog_compatibility+0x720/0x8c0
[  401.172920][T13249] Modules linked in:
[  401.200418][T13249] CPU: 0 PID: 13249 Comm: syz.8.2950 Not tainted 5.15.177-syzkaller #0
[  401.229256][T13249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  401.258080][T13249] RIP: 0010:check_map_prog_compatibility+0x720/0x8c0
[  401.292833][T13249] Code: ed e9 ec fc ff ff e8 3f b8 ee ff 31 ed e9 e0 fc ff ff e8 33 b8 ee ff c6 05 36 1f 65 0c 01 48 c7 c7 a0 3a b1 8a e8 c0 51 ba ff <0f> 0b e9 4a fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4f f9 ff
[  401.350698][T13249] RSP: 0018:ffffc9000359f348 EFLAGS: 00010246
[  401.362049][T13249] RAX: 1fd9800b0ebd2600 RBX: 0000000000000011 RCX: 0000000000080000
[  401.391133][T13249] RDX: ffffc90010fd2000 RSI: 000000000000483f RDI: 0000000000004840
[  401.414986][T13249] RBP: ffff88801f899828 R08: ffffffff8166aa8c R09: ffffed10171e67a8
[  401.435265][T13249] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900015cb038
[  401.467489][T13249] R13: ffff88801f899800 R14: ffff88807cda8000 R15: dffffc0000000000
[  401.498693][T13249] FS:  00007fad5d95e6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  401.528553][T13249] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  401.539742][T13249] CR2: 00007f0cc1485dd0 CR3: 0000000055b49000 CR4: 00000000003506e0
[  401.567425][T13249] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  401.590733][T13249] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  401.612980][T13249] Call Trace:
[  401.632420][T13249]  <TASK>
[  401.637137][T13249]  ? __warn+0x15b/0x300
[  401.641452][T13249]  ? check_map_prog_compatibility+0x720/0x8c0
[  401.656329][T13249]  ? report_bug+0x1b7/0x2e0
[  401.661046][T13249]  ? handle_bug+0x3d/0x70
[  401.668999][T13249]  ? exc_invalid_op+0x16/0x40
[  401.682787][T13249]  ? asm_exc_invalid_op+0x16/0x20
[  401.698044][T13249]  ? __wake_up_klogd+0xcc/0x100
[  401.708713][T13249]  ? check_map_prog_compatibility+0x720/0x8c0
[  401.720902][T13249]  ? check_map_prog_compatibility+0x720/0x8c0
[  401.731837][T13249]  resolve_pseudo_ldimm64+0x682/0x1240
[  401.740243][T13249]  ? check_attach_btf_id+0xf20/0xf20
[  401.750480][T13249]  ? __mark_reg_known+0x1a0/0x1a0
[  401.758518][T13249]  bpf_check+0x433a/0x12d40
[  401.768197][T13249]  ? validate_chain+0x112/0x5930
[  401.775800][T13249]  ? unwind_next_frame+0x1437/0x1fa0
[  401.781298][T13249]  ? reacquire_held_locks+0x660/0x660
[  401.799896][T13249]  ? reacquire_held_locks+0x660/0x660
[  401.819358][T13249]  ? bpf_get_btf_vmlinux+0x10/0x10
[  401.849601][T13249]  ? mark_lock+0x98/0x340
[  401.876272][T13249]  ? __lock_acquire+0x1295/0x1ff0
[  401.889553][T13249]  ? mark_lock+0x98/0x340
[  401.898213][T13249]  ? __lock_acquire+0x1295/0x1ff0
[  401.907174][T13249]  ? ktime_get_with_offset+0x101/0x320
[  401.916766][T13249]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  401.932434][T13249]  ? print_irqtrace_events+0x210/0x210
[  401.947900][T13249]  ? ktime_get_with_offset+0x101/0x320
[  401.970930][T13249]  ? seqcount_lockdep_reader_access+0x153/0x220
[  401.987029][T13249]  ? lockdep_hardirqs_on+0x94/0x130
[  402.002450][T13249]  ? seqcount_lockdep_reader_access+0x1d3/0x220
[  402.019749][T13249]  ? ktime_get_real_ts64+0x460/0x460
[  402.025317][T13249]  ? __might_fault+0xb4/0x110
[  402.030025][T13249]  ? memset+0x1f/0x40
[  402.045614][T13249]  ? bpf_obj_name_cpy+0x186/0x1d0
[  402.050699][T13249]  bpf_prog_load+0x12b3/0x1b60
[  402.072728][T13249]  ? map_freeze+0x360/0x360
[  402.077295][T13249]  ? __might_fault+0xb8/0x110
[  402.082000][T13249]  ? __might_fault+0xb4/0x110
[  402.101507][T13249]  ? bpf_lsm_bpf+0x5/0x10
[  402.112586][T13249]  ? security_bpf+0x7d/0xa0
[  402.117157][T13249]  __sys_bpf+0x343/0x670
[  402.121426][T13249]  ? bpf_link_show_fdinfo+0x300/0x300
[  402.150878][T13249]  ? syscall_enter_from_user_mode+0x2e/0x240
[  402.164101][T13249]  ? lockdep_hardirqs_on+0x94/0x130
[  402.188712][T13249]  __x64_sys_bpf+0x78/0x90
[  402.198973][T13249]  do_syscall_64+0x3b/0xb0
[  402.208243][T13249]  ? clear_bhb_loop+0x15/0x70
[  402.218741][T13249]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  402.231550][T13249] RIP: 0033:0x7fad5faf4d29
[  402.240833][T13249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  402.284883][T13249] RSP: 002b:00007fad5d95e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  402.303482][T13249] RAX: ffffffffffffffda RBX: 00007fad5fd0dfa0 RCX: 00007fad5faf4d29
[  402.320553][T13249] RDX: 0000000000000090 RSI: 0000000020000200 RDI: 0000000000000005
[  402.336495][T13249] RBP: 00007fad5fb762a0 R08: 0000000000000000 R09: 0000000000000000
[  402.355800][T13249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  402.383170][T13249] R13: 0000000000000000 R14: 00007fad5fd0dfa0 R15: 00007ffd8a6975a8
[  402.409114][T13249]  </TASK>
[  402.415605][T13249] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  402.422897][T13249] CPU: 0 PID: 13249 Comm: syz.8.2950 Not tainted 5.15.177-syzkaller #0
[  402.431144][T13249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  402.441202][T13249] Call Trace:
[  402.444483][T13249]  <TASK>
[  402.447419][T13249]  dump_stack_lvl+0x1e3/0x2d0
[  402.452099][T13249]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  402.457730][T13249]  ? panic+0x860/0x860
[  402.461821][T13249]  ? check_map_prog_compatibility+0x6b0/0x8c0
[  402.467910][T13249]  ? check_map_prog_compatibility+0x6b0/0x8c0
[  402.473997][T13249]  panic+0x318/0x860
[  402.477910][T13249]  ? __warn+0x16a/0x300
[  402.482078][T13249]  ? fb_is_primary_device+0xd0/0xd0
[  402.487289][T13249]  ? check_map_prog_compatibility+0x720/0x8c0
[  402.493373][T13249]  __warn+0x2b2/0x300
[  402.497370][T13249]  ? check_map_prog_compatibility+0x720/0x8c0
[  402.503446][T13249]  report_bug+0x1b7/0x2e0
[  402.507792][T13249]  handle_bug+0x3d/0x70
[  402.511970][T13249]  exc_invalid_op+0x16/0x40
[  402.516500][T13249]  asm_exc_invalid_op+0x16/0x20
[  402.521449][T13249] RIP: 0010:check_map_prog_compatibility+0x720/0x8c0
[  402.528145][T13249] Code: ed e9 ec fc ff ff e8 3f b8 ee ff 31 ed e9 e0 fc ff ff e8 33 b8 ee ff c6 05 36 1f 65 0c 01 48 c7 c7 a0 3a b1 8a e8 c0 51 ba ff <0f> 0b e9 4a fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4f f9 ff
[  402.547765][T13249] RSP: 0018:ffffc9000359f348 EFLAGS: 00010246
[  402.553854][T13249] RAX: 1fd9800b0ebd2600 RBX: 0000000000000011 RCX: 0000000000080000
[  402.561834][T13249] RDX: ffffc90010fd2000 RSI: 000000000000483f RDI: 0000000000004840
[  402.569811][T13249] RBP: ffff88801f899828 R08: ffffffff8166aa8c R09: ffffed10171e67a8
[  402.577775][T13249] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900015cb038
[  402.585757][T13249] R13: ffff88801f899800 R14: ffff88807cda8000 R15: dffffc0000000000
[  402.593748][T13249]  ? __wake_up_klogd+0xcc/0x100
[  402.598625][T13249]  ? check_map_prog_compatibility+0x720/0x8c0
[  402.604704][T13249]  resolve_pseudo_ldimm64+0x682/0x1240
[  402.610190][T13249]  ? check_attach_btf_id+0xf20/0xf20
[  402.615491][T13249]  ? __mark_reg_known+0x1a0/0x1a0
[  402.620646][T13249]  bpf_check+0x433a/0x12d40
[  402.625187][T13249]  ? validate_chain+0x112/0x5930
[  402.630132][T13249]  ? unwind_next_frame+0x1437/0x1fa0
[  402.635439][T13249]  ? reacquire_held_locks+0x660/0x660
[  402.640832][T13249]  ? reacquire_held_locks+0x660/0x660
[  402.646230][T13249]  ? bpf_get_btf_vmlinux+0x10/0x10
[  402.651368][T13249]  ? mark_lock+0x98/0x340
[  402.655718][T13249]  ? __lock_acquire+0x1295/0x1ff0
[  402.660762][T13249]  ? mark_lock+0x98/0x340
[  402.665105][T13249]  ? __lock_acquire+0x1295/0x1ff0
[  402.670160][T13249]  ? ktime_get_with_offset+0x101/0x320
[  402.675630][T13249]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  402.681620][T13249]  ? print_irqtrace_events+0x210/0x210
[  402.687087][T13249]  ? ktime_get_with_offset+0x101/0x320
[  402.692533][T13249]  ? seqcount_lockdep_reader_access+0x153/0x220
[  402.698780][T13249]  ? lockdep_hardirqs_on+0x94/0x130
[  402.703974][T13249]  ? seqcount_lockdep_reader_access+0x1d3/0x220
[  402.710233][T13249]  ? ktime_get_real_ts64+0x460/0x460
[  402.715521][T13249]  ? __might_fault+0xb4/0x110
[  402.720205][T13249]  ? memset+0x1f/0x40
[  402.724178][T13249]  ? bpf_obj_name_cpy+0x186/0x1d0
[  402.729208][T13249]  bpf_prog_load+0x12b3/0x1b60
[  402.733972][T13249]  ? map_freeze+0x360/0x360
[  402.738473][T13249]  ? __might_fault+0xb8/0x110
[  402.743173][T13249]  ? __might_fault+0xb4/0x110
[  402.747858][T13249]  ? bpf_lsm_bpf+0x5/0x10
[  402.752175][T13249]  ? security_bpf+0x7d/0xa0
[  402.756674][T13249]  __sys_bpf+0x343/0x670
[  402.760946][T13249]  ? bpf_link_show_fdinfo+0x300/0x300
[  402.766370][T13249]  ? syscall_enter_from_user_mode+0x2e/0x240
[  402.772343][T13249]  ? lockdep_hardirqs_on+0x94/0x130
[  402.777534][T13249]  __x64_sys_bpf+0x78/0x90
[  402.781969][T13249]  do_syscall_64+0x3b/0xb0
[  402.786393][T13249]  ? clear_bhb_loop+0x15/0x70
[  402.791054][T13249]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  402.796934][T13249] RIP: 0033:0x7fad5faf4d29
[  402.801368][T13249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  402.820959][T13249] RSP: 002b:00007fad5d95e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  402.829369][T13249] RAX: ffffffffffffffda RBX: 00007fad5fd0dfa0 RCX: 00007fad5faf4d29
[  402.837355][T13249] RDX: 0000000000000090 RSI: 0000000020000200 RDI: 0000000000000005
[  402.845332][T13249] RBP: 00007fad5fb762a0 R08: 0000000000000000 R09: 0000000000000000
[  402.853290][T13249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  402.861256][T13249] R13: 0000000000000000 R14: 00007fad5fd0dfa0 R15: 00007ffd8a6975a8
[  402.869219][T13249]  </TASK>
[  402.872478][T13249] Kernel Offset: disabled
[  402.876834][T13249] Rebooting in 86400 seconds..