last executing test programs:

7m38.587495257s ago: executing program 3 (id=91):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x0, @any, 0xf5, 0x1}, 0xfe2a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
lseek(0xffffffffffffffff, 0xffffffffffffeffa, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000004c0)={0x0, 0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000003147df800000000fedbdf250900020073797b300000000008004100736977001400330076657468305f6d616376746170"], 0x38}}, 0x0)

7m36.662990739s ago: executing program 3 (id=94):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000040))
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x30, 0x3d, 0x9, 0x7fff, 0x6, 0xfffffffffffffff0, 0x3}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f0000000300), 0x20000000}, 0x20)
recvmsg$unix(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/219, 0xdb}], 0x1, 0x0, 0x58}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000100)}, 0x36)
write$binfmt_script(r6, &(0x7f00000009c0), 0x75)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000deff000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a010400000000000000000100000008000b40000000000900010073797a3000000000540004802c0001800e000100696d6d6564696174650000001800028008000140000000010c000280050001004c00000024000180090001006d65746100000000140002800800014000000012080002"], 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newqdisc={0xf4, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc4, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7fffffffffffffff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x94, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffffc}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x80}]}, {0x4}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xfd}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xfffffffd}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xf}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x6}]}}]}, 0xf4}, 0x1, 0x8100000018000000}, 0x0)

7m31.00430571s ago: executing program 3 (id=101):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0x10, 0x400000000080803, 0x0)
fcntl$dupfd(r5, 0x0, r5)
openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000600), 0x3, 0x30000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = getpid()
process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)

7m28.962168834s ago: executing program 3 (id=105):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000102, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0)
syz_clone3(&(0x7f00000004c0)={0x8000000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=':/,\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3/\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xaeqKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_\xc0\xe1\x9d><T+\xfe\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xaeP\f0\xf6Dfz\xf0.\xff\xc2a\x16\xd9\xdc1\xa4\xdf\xafZ\b\xb4IE\x1a\xb6\x8e\xa2\x1c}\x8d\x9e\x87\x96\xe41\xe2\xa3\x9ad\x90\x94\v\xcc', 0xfeffffff00000000)
socket(0x1, 0x2, 0x0)

7m24.635194743s ago: executing program 2 (id=110):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x0, @any, 0xf5, 0x1}, 0xfe2a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xd, 'veth1_to_batadv\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
lseek(0xffffffffffffffff, 0xffffffffffffeffa, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000004c0)={0x0, 0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000003147df800000000fedbdf250900020073797b300000000008004100736977001400330076657468305f6d616376746170"], 0x38}}, 0x0)

7m24.627285983s ago: executing program 3 (id=111):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x18, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})

7m24.455619033s ago: executing program 3 (id=113):
prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
gettid()
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})

7m23.601561894s ago: executing program 2 (id=114):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x0, @any, 0xf5, 0x1}, 0xfe2a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xd, 'veth1_to_batadv\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
lseek(0xffffffffffffffff, 0xffffffffffffeffa, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000004c0)={0x0, 0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000003147df800000000fedbdf250900020073797b300000000008004100736977001400330076657468305f6d616376746170"], 0x38}}, 0x0)

7m22.536493797s ago: executing program 2 (id=115):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setregid(0xffffffffffffffff, 0x0)
setgroups(0x0, &(0x7f0000002300))
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000002200)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x100018}}, 0x50)
setxattr$system_posix_acl(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)='system.posix_acl_default\x00', &(0x7f00000021c0), 0x24, 0x0)

7m21.366446229s ago: executing program 2 (id=117):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x0, @any, 0xf5, 0x1}, 0xfe2a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xd, 'veth1_to_batadv\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
lseek(0xffffffffffffffff, 0xffffffffffffeffa, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000004c0)={0x0, 0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000003147df800000000fedbdf250900020073797b300000000008004100736977001400330076657468305f6d616376746170"], 0x38}}, 0x0)

7m19.905155672s ago: executing program 2 (id=119):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x1})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0)

7m17.037204217s ago: executing program 2 (id=123):
socket$alg(0x26, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2000003, 0x82012, r1, 0x83000000)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000001d40)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @rand_addr=0x64010100}, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x8, 0x1})
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x8000003d)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x8000003d)
close_range(r3, r4, 0x0)

7m9.317910752s ago: executing program 32 (id=113):
prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
gettid()
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})

7m1.817077547s ago: executing program 33 (id=123):
socket$alg(0x26, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2000003, 0x82012, r1, 0x83000000)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000001d40)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @rand_addr=0x64010100}, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x8, 0x1})
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x8000003d)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x8000003d)
close_range(r3, r4, 0x0)

2m39.323730039s ago: executing program 1 (id=935):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180), &(0x7f00000001c0)=0x8)

2m39.150224009s ago: executing program 1 (id=938):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)

2m38.94204506s ago: executing program 1 (id=942):
syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8, 0xfc, 0xe9, 0x10, 0xb05, 0x18f0, 0x992f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd}, {0x6}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x7, 0x5e, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x7, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x0, "bf24"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x4, 0x9, 0x4}, [@ncm={0x6, 0x24, 0x1a, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x1ff, 0x8, 0x3, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x2, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x10, 0xe9}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x5, 0x12, 0x3, 0xff, 0x1}, 0x11, &(0x7f0000000140)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0xf, 0x0, 0x9, 0xf00, 0xaee}]}, 0xa, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc1a}}, {0x87, &(0x7f00000008c0)=@string={0x87, 0x3, "339a2df059eaab1fd251ebf9cee57a141f01c12f80c6644983ba26dc9b336f02a0fcb3053e00bc32d4bcdd2df21ae0215c1318b857eb84e7d58302d3805ce3fcc269d74d7f87617349d8ea82ccef284fc77d2eca16508ea12e07652a4dc7aaa320e81a9c715b2a2b57ada783f70c950793498e56ecacdff44adc7a6044f04e40b9af8e04af"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x416}}, {0x8a, &(0x7f00000003c0)=@string={0x8a, 0x3, "dcf46aa09d9b8ec253bb8fe6244d7787c961048a21d6690d3d6df9a66fa8df13243d7847bfa005c8a2f007349cada8cf1c3a9ad3e6f9fcdb55be3908bb3120aa7f05707171ce376b609ec0005895ae2aec64a0dbefc2e201e387191532a813c87fbb2a43f420f680266c67c8fffd56b06c37d454805d1fa5c735c8f9e515053fc56d2027c2595568"}}, {0x80, &(0x7f00000000c0)=@string={0x80, 0x3, "eec1e77740fd2697446f5126e1875cf91a377bd953994467c7f032ab2f92c0cead87e4eedd315e56ea91b6d08141c5454a6dec45a4a4e9d67d74e6ae5a8b344a2365d0da88cbab0f84a10827337c6042c1a19f96028c8721d2f4885ecd6a05b2726dd78970e1910428f6f0d218635902727f13c145271d45fbea0e002b08"}}, {0xd9, &(0x7f0000000980)=@string={0xd9, 0x3, "5460b9888c3a63e8b4397145b1d8c4aac78f5271720fd4af395a0843bce1aeb3347a601ab1d6d68d5ef27085be9d4aba2adb91e03d09a32787c1e7ec9d0b94bea872e93ee6a61c27cf7c0437eb41b42affff09ee02e1eeb5a0b53c4f838cc3ae6c61f8386b02f40db78b0ec3718861ce32dd889ac403639289e6251eef4a5e113830f69540e56f90bf34f0103d98e7937c837f70ac9365622a5bdc249c8e78ca9484b43a74d868bdfeae74eec478a3e5a4997eb734387edf64fd01106105538d83fef1f3cd9202846b9f38e86b3f762f6ff83ac52f8e7c"}}]})
r0 = syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000005ec0)={0x4, 0x1, 0x2002, 0x8, "00196bf0c39008ced3900813726203000437b065c6b388e3cdf73cc88bfd1b04"})

2m37.501349973s ago: executing program 1 (id=960):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x200)

2m37.316609523s ago: executing program 1 (id=962):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

2m37.110803973s ago: executing program 1 (id=965):
syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010000000080007000000000018000180140002006e657464657673696d300000000000000800060000100000080008"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)

2m22.088521642s ago: executing program 34 (id=965):
syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010000000080007000000000018000180140002006e657464657673696d300000000000000800060000100000080008"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)

46.631030999s ago: executing program 5 (id=1932):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x9)
connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000"], 0x28}}, 0x0)

46.339068639s ago: executing program 5 (id=1933):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f00000002c0), &(0x7f0000000200)}, 0x20)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'macvlan1\x00'}}, 0x1e)
write$binfmt_aout(r3, &(0x7f0000001640)=ANY=[], 0x5ea)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05000000000000000000"], 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000280)={0x7, 0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)=""/91, 0x5b}, {&(0x7f0000000800)=""/121, 0x79}, {&(0x7f0000000b00)=""/254, 0xfe}, {&(0x7f0000000c00)=""/255, 0xff}, {&(0x7f0000000d00)=""/222, 0xde}, {&(0x7f0000000e00)=""/192, 0xc0}, {&(0x7f0000000080)=""/53, 0x35}], &(0x7f00000001c0)=[0x7ff, 0x86a5, 0x1, 0x5, 0x8, 0x3]}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
socket$key(0xf, 0x3, 0x2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x890)

45.499819011s ago: executing program 5 (id=1934):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
fgetxattr(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x0)

45.283087841s ago: executing program 5 (id=1935):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000300)='./file0/../file0\x00', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb)

44.253938933s ago: executing program 5 (id=1940):
unshare(0x6a040000)
unshare(0x5060180)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x6, 0x36c, &(0x7f00000002c0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x280900, 0x0)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
listen(r3, 0x6)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbd}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
truncate(&(0x7f0000000140)='./file2\x00', 0x5c00)
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfe36)

43.998121284s ago: executing program 5 (id=1943):
r0 = syz_clone(0x4d004000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x8072}, &(0x7f0000000240)=0x8)
ptrace(0x10, r0)
wait4(0x0, 0xfffffffffffffffd, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x1a0000, &(0x7f0000001e80), 0x1, 0x549, &(0x7f0000000640)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xffffffc1, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r5)
futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000f80)=ANY=[@ANYBLOB="80030000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf25880000000800030075449a14298b117c29a09095377c1258f2537547ae627f", @ANYRES32=0x0, @ANYBLOB="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"], 0x380}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'})

43.548096795s ago: executing program 35 (id=1943):
r0 = syz_clone(0x4d004000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x8072}, &(0x7f0000000240)=0x8)
ptrace(0x10, r0)
wait4(0x0, 0xfffffffffffffffd, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x1a0000, &(0x7f0000001e80), 0x1, 0x549, &(0x7f0000000640)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xffffffc1, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r5)
futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000f80)=ANY=[@ANYBLOB="80030000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf25880000000800030075449a14298b117c29a09095377c1258f2537547ae627f", @ANYRES32=0x0, @ANYBLOB="0a000600ffffffffffff0000ee023300d88a8100080211000000505050505050c88a7cf602325200b900601c0800080211000001ffffffffffffb500a9def10b83fc651f676e782b4e4fd98fdc6aef61fd79992ce96ac5b4028fcf135ce0854b0b3c5bb0327e9bf717d47e5a4094bbd093c1a04a520e70b86703c24fb47c77690875954f58a27c03664373500206c984f49243b684b7e5a57b519a795460a02332e95663382e6126965a1707196c0cba2b2cd7b6e23d9b56785efa6ea3c6ee8bb360914cc359abe24b1c0587d0958e2be96b6d3960493d829cfe0e42fdfb9169ac1875efb41ad671932f673f70c880dca000ffffffffffffffffffffffff5400abed093773bf79c74f161293f47f9cefa9afa4babd91d98e39d1af1a235c24e7237f4e658d1442c3d3a7cab91b2a89f9e4253f4290af43d87617be461d481d5f0e685ff797e1456b0ea59192b24f5192c662d50f0000080211000001080211000001e800e0f78523af68c773f55a48a34f1160928a65d86f8583ae32c2c62a8c1724a6c88b7d6d1bf786c514a34e46471349c9155b5ffb950f6655c7539002becc0ede71572dbfdb1b6531fbcddce78e915d58ec07edc70b5a2067f5b27b14c5300c507a2bdf81f4e4d1bef2bc886e11313e9a30c70327826ab1d829bc8f3e7271631126742953ab96f3ee4d4bda1edb7aecfef9a26cc03befa64553c92c15b4b0267a60f278245ac2613b4347b38ac3e101ce8ffd5f5fdf5869d9c9e249e2b61d0bbabce274a1f5687022bfa45a03d3755e0b7fa10aefd94bc41c71ff3711965483bb0a1912ac4b9761b3700000ffffffffffff0802110000019c00d7fcc43e360a7edccdb25bed803ca5c1adf48402969791df3af7e1f17dbf817e641aa498943f2309c7c7026f025d"], 0x380}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'})

37.692195346s ago: executing program 7 (id=1988):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000380)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
dup(0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmmsg(r2, 0x0, 0x0, 0x40004042, 0x0)

37.524705377s ago: executing program 7 (id=1991):
socket$rds(0x15, 0x5, 0x0)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xcc0984f9ead32b32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)

36.609429868s ago: executing program 7 (id=2001):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0xc056, 0x8, 0x0, 0x42}, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
pselect6(0x2a00, 0x0, 0x0, &(0x7f0000000140)={0x7f, 0x0, 0x0, 0x0, 0x1, 0x3fffc00000000000, 0x0, 0x4}, &(0x7f0000000180)={0x0, 0x989680}, 0x0)

36.316876519s ago: executing program 7 (id=2004):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb)

36.078978719s ago: executing program 7 (id=2008):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000600)={r1}, &(0x7f00000003c0)=0x8)

35.595004691s ago: executing program 7 (id=2015):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1414bb000000000000000000000000ac1414aa0000000000000000000000000000000000000f000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000100000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0)

35.050354351s ago: executing program 36 (id=2015):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1414bb000000000000000000000000ac1414aa0000000000000000000000000000000000000f000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000100000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0)

7.112620386s ago: executing program 4 (id=2354):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
rt_sigqueueinfo(0x0, 0x9, 0x0)

6.951924266s ago: executing program 4 (id=2357):
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103000000", @ANYBLOB="8fcfd07ad08828f27b6ea5ef0a534aa1287d331f9c2847200e2fd84d16f1f754da038d1479772550"], 0x0)
syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8, 0xfc, 0xe9, 0x10, 0xb05, 0x18f0, 0x992f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd}, {0x6}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x7, 0x5e, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x7, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x0, "bf24"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x4, 0x9, 0x4}, [@ncm={0x6, 0x24, 0x1a, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x1ff, 0x8, 0x3, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x2, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x10, 0xe9}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x5, 0x12, 0x3, 0xff, 0x1}, 0x11, &(0x7f0000000140)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0xf, 0x0, 0x9, 0xf00, 0xaee}]}, 0xa, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc1a}}, {0x87, &(0x7f00000008c0)=@string={0x87, 0x3, "339a2df059eaab1fd251ebf9cee57a141f01c12f80c6644983ba26dc9b336f02a0fcb3053e00bc32d4bcdd2df21ae0215c1318b857eb84e7d58302d3805ce3fcc269d74d7f87617349d8ea82ccef284fc77d2eca16508ea12e07652a4dc7aaa320e81a9c715b2a2b57ada783f70c950793498e56ecacdff44adc7a6044f04e40b9af8e04af"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x416}}, {0x8a, &(0x7f00000003c0)=@string={0x8a, 0x3, "dcf46aa09d9b8ec253bb8fe6244d7787c961048a21d6690d3d6df9a66fa8df13243d7847bfa005c8a2f007349cada8cf1c3a9ad3e6f9fcdb55be3908bb3120aa7f05707171ce376b609ec0005895ae2aec64a0dbefc2e201e387191532a813c87fbb2a43f420f680266c67c8fffd56b06c37d454805d1fa5c735c8f9e515053fc56d2027c2595568"}}, {0x80, &(0x7f00000000c0)=@string={0x80, 0x3, "eec1e77740fd2697446f5126e1875cf91a377bd953994467c7f032ab2f92c0cead87e4eedd315e56ea91b6d08141c5454a6dec45a4a4e9d67d74e6ae5a8b344a2365d0da88cbab0f84a10827337c6042c1a19f96028c8721d2f4885ecd6a05b2726dd78970e1910428f6f0d218635902727f13c145271d45fbea0e002b08"}}, {0xd9, &(0x7f0000000980)=@string={0xd9, 0x3, "5460b9888c3a63e8b4397145b1d8c4aac78f5271720fd4af395a0843bce1aeb3347a601ab1d6d68d5ef27085be9d4aba2adb91e03d09a32787c1e7ec9d0b94bea872e93ee6a61c27cf7c0437eb41b42affff09ee02e1eeb5a0b53c4f838cc3ae6c61f8386b02f40db78b0ec3718861ce32dd889ac403639289e6251eef4a5e113830f69540e56f90bf34f0103d98e7937c837f70ac9365622a5bdc249c8e78ca9484b43a74d868bdfeae74eec478a3e5a4997eb734387edf64fd01106105538d83fef1f3cd9202846b9f38e86b3f762f6ff83ac52f8e7c"}}]})
r1 = syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000005ec0)={0x4, 0x1, 0x2002, 0x8, "00196bf0c39008ced3900813726203000437b065c6b388e3cdf73cc88bfd1b04"})

3.776307712s ago: executing program 4 (id=2381):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000c50000000ea20000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c"], 0x48)

3.319846803s ago: executing program 4 (id=2388):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$inet(0x2, 0x3, 0x8d)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$unix(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x120, 0x0, 0x0, 0x900, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

3.156856424s ago: executing program 4 (id=2391):
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300000009", @ANYBLOB="8fcfd07ad08828f27b6ea5ef0a534aa1287d331f9c2847200e2fd84d16f1f754da038d1479772550"], 0x0)
syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8, 0xfc, 0xe9, 0x10, 0xb05, 0x18f0, 0x992f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd}, {0x6}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x7, 0x5e, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x7, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x0, "bf24"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x4, 0x9, 0x4}, [@ncm={0x6, 0x24, 0x1a, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x1ff, 0x8, 0x3, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x2, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x10, 0xe9}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x5, 0x12, 0x3, 0xff, 0x1}, 0x11, &(0x7f0000000140)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0xf, 0x0, 0x9, 0xf00, 0xaee}]}, 0xa, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc1a}}, {0x87, &(0x7f00000008c0)=@string={0x87, 0x3, "339a2df059eaab1fd251ebf9cee57a141f01c12f80c6644983ba26dc9b336f02a0fcb3053e00bc32d4bcdd2df21ae0215c1318b857eb84e7d58302d3805ce3fcc269d74d7f87617349d8ea82ccef284fc77d2eca16508ea12e07652a4dc7aaa320e81a9c715b2a2b57ada783f70c950793498e56ecacdff44adc7a6044f04e40b9af8e04af"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x416}}, {0x8a, &(0x7f00000003c0)=@string={0x8a, 0x3, "dcf46aa09d9b8ec253bb8fe6244d7787c961048a21d6690d3d6df9a66fa8df13243d7847bfa005c8a2f007349cada8cf1c3a9ad3e6f9fcdb55be3908bb3120aa7f05707171ce376b609ec0005895ae2aec64a0dbefc2e201e387191532a813c87fbb2a43f420f680266c67c8fffd56b06c37d454805d1fa5c735c8f9e515053fc56d2027c2595568"}}, {0x80, &(0x7f00000000c0)=@string={0x80, 0x3, "eec1e77740fd2697446f5126e1875cf91a377bd953994467c7f032ab2f92c0cead87e4eedd315e56ea91b6d08141c5454a6dec45a4a4e9d67d74e6ae5a8b344a2365d0da88cbab0f84a10827337c6042c1a19f96028c8721d2f4885ecd6a05b2726dd78970e1910428f6f0d218635902727f13c145271d45fbea0e002b08"}}, {0xd9, &(0x7f0000000980)=@string={0xd9, 0x3, "5460b9888c3a63e8b4397145b1d8c4aac78f5271720fd4af395a0843bce1aeb3347a601ab1d6d68d5ef27085be9d4aba2adb91e03d09a32787c1e7ec9d0b94bea872e93ee6a61c27cf7c0437eb41b42affff09ee02e1eeb5a0b53c4f838cc3ae6c61f8386b02f40db78b0ec3718861ce32dd889ac403639289e6251eef4a5e113830f69540e56f90bf34f0103d98e7937c837f70ac9365622a5bdc249c8e78ca9484b43a74d868bdfeae74eec478a3e5a4997eb734387edf64fd01106105538d83fef1f3cd9202846b9f38e86b3f762f6ff83ac52f8e7c"}}]})
r1 = syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000005ec0)={0x4, 0x1, 0x2002, 0x8, "00196bf0c39008ced3900813726203000437b065c6b388e3cdf73cc88bfd1b04"})

2.447104725s ago: executing program 9 (id=2400):
connect(0xffffffffffffffff, &(0x7f0000000380)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0x80)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x45)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = dup(r1)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

2.175200636s ago: executing program 9 (id=2404):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0xc056, 0x8, 0x0, 0x42}, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}]}}}]}, 0x44}}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
pselect6(0x2a00, 0x0, 0x0, &(0x7f0000000140)={0x7f, 0x0, 0x0, 0x0, 0x1, 0x3fffc00000000000, 0x0, 0x4}, &(0x7f0000000180)={0x0, 0x989680}, 0x0)

1.815398356s ago: executing program 9 (id=2410):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvndhx0uwmu+wBEOwuuwsFVXUSdzda7QGWEwK0EmKPIHVD4kZR7DiKndKEHtIzVyQqcYIjfwDnnrhzQXDjUg5I/IhADRIHoxlPUje1m6hJ7Cj+fKTRvDdv6u97Tee9+pvEL4CR9XZE7EVEMSI+i4iZ7HouO+LjzpHc92T//vLB/v3lXLTbn/4zl7Yn16LrzySuZa9ZiogffifiJ7nn4zZ3dteXarXqVlafa9U355o7uzfX6kur1dXqRqWyuLA4/+GtDyrnNta36sWs9OXHf9j7xs+Sbk1nV7rHcZ46Qy8cxUmMR8T3LyLYEIxl4ykOuyO8lHxEvB4R76TP/0yMpV9NAOAqa7dnoj3TXQcArrp8mgPL5ctZLmA68vlyuZPDeyOm8rVGs3XjTmN7Y6WTK5uNQv7OWq06n+UKZ6OQS+oLaflpvXKsfisiXouIX0xMpvXycqO2Msz/+ADACLt2bP3/z0Rn/QcArrjSsDsAAAyc9R8ARo/1HwBGj/UfAEZPZ/2fHHY3AIAB8v4fAEaP9R8ARsoPPvkkOdoH2edfr9zd2V5v3L25Um2ul+vby+XlxtZmebXRWE0/s6d+0uvVGo3Nhfdj+97sNzebrbnmzu7temN7o3U7/Vzv29VCetfeAEYGAPTz2luP/pxLVuSPJtMjuvZyKAy1Z8BFyw+7A8DQjA27A8DQ2O0LRtcZ3uNLD8AV0WOL3meUev2CULvdbl9cl4ALdv0L8v8wqrry/34KGEaM/D+MLvl/GF3tdu60e/7HaW8EAC43OX6gz/f/X8/Ov82+OfDjleN3PLzIXgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDldrj/bznbC3w68vlyOeKViJiNQu7OWq06HxGvRsSfJgoTSX1hyH0GAM4q/7dctv/X9Zn3pp9pevPaUbEYET/91ae/vLfUam39MaKY+9fE4fXWw+x6ZfC9BwBOdrhOJ+dHXW/kn+zfXz48Btmfv387Ikqd+Af7xTg4ij8e4+m5FIWImPp3Lqt35LpyF2ex9yAiPt9r/LmYTnMgnZ1Pj8dPYr8y0Pj5Z+Ln07bOOfm7+Nw59AVGzaNk/vm41/OXj7fTc+/nv5TOUGeXzX/JSy0fpHPg0/iH899Yn/nv1DHe//13O6XJ59seRHxxPOIw9kHX/HMYP9cn/nunjP+XL735Tr+29q8jrkfv+N2x5lr1zbnmzu7NtfrSanW1ulGpLC4szn9464PKXJqjnuu/Gvzjoxuv9mtLxj/VJ37phPF/9ZTj/83/PvvRV14Q/+vv9oqfjzdeED9ZE792yvhLU78r9WtL4q/0Gf9JX/8bLw77vWJWePzX3ee2DQcAhqe5s7u+VKtVtxQULn8h+Sd7CbrRs/CtQcUqRu+mn7/beaaPNbXbLxWr34xxHlk34DI4eugj4r/D7gwAAAAAAAAAAAAAANDTIH5jadhjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Or6fwAAAP//sUPPoQ==")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107242, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
pwritev2(r2, &(0x7f0000000200)=[{&(0x7f0000001b40)="a7", 0x1}], 0x1, 0x8000, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000240)={0x3920e, r2, 0x2, 0x0, 0x28})

1.561615806s ago: executing program 9 (id=2414):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
r3 = socket$kcm(0x2, 0xa, 0x2)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100)
read(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
rt_sigsuspend(&(0x7f0000000200)={[0x3]}, 0x8)
poll(0x0, 0x0, 0x5)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
ioctl$sock_SIOCETHTOOL(r3, 0x8923, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures})

1.461702737s ago: executing program 0 (id=2416):
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x18, 0x8, 0x40, 0x46, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

1.331226827s ago: executing program 0 (id=2419):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x4031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000d0a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
mmap(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0)

1.207404677s ago: executing program 0 (id=2421):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)

1.143015168s ago: executing program 6 (id=2424):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107242, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
pwritev2(r2, &(0x7f0000000200)=[{&(0x7f0000001b40)="a7", 0x1}], 0x1, 0x8000, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000240)={0x3920e, r2, 0x2, 0x0, 0x28})

1.091383408s ago: executing program 0 (id=2425):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x4040)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$eJzs3T9oJGUcBuB3ZnfN5W6RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h13WysZCa5WrbILYGS0lTbBRBKuoKWIjaLAwWKiwsjtZjZsVY3bdkczzwMx8s/vN/GbYeb/ZZnYDNNbpJGeTtJIsJekkKfZ3uKuaTu+tXl/cuJj0+4//WAz7VeuV0XankvSSPJhkvSzyYju5tvb09s+bj977xtXOPe+tPbU415Pcs7O99djuu+df//DcA9c+//L780XOpvuX85q9YsJr7SK5+b8o9j9RtOs+Ag7jwqsffDXI/S1J7h7mv5My1Yf35pUb1ju5/52/2/atH764bZ7HCsxev98Z3AN7faBxyiTdFOVykqpdlsvL1Xf4r1sny5cuX3ll6YXLVy89X/dIBcxKN9l65OOFj06N5f+7VpV/4Pga5P+JC6vfDNq7rbqPBpiL26vFIP9Lz67cF/mHZlkYzuUfGsr9H5pL/qG55B+aS/7huFg5bMffRg35h2OsM2r0Jr4t/9Bc8g/NJf/QXPvzDwA0S3+h7ieQgbrUPf4AAAAAAAAAAAAAAAAAAAAHXV/cuDia5lXz07eTnYeTtCfVbw3/jzg5MZyf/KkYdPtDUW02lWfunHIHU3q/5qevb/y23vqf3VFv/ZVLSe+1JGfa7YPXX7F3/f1LJ/5s3vQPXTvPHaXA0RVj6w89Od/6435dncVexs/q8M5tJp8Mxp8zk8afMrcOl5PHn+7+n1g+opd/mXIHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzM3vAQAA///m829L")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0)
mount(0x0, 0x0, 0x0, 0x1000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}}}, 0x48)
close_range(r1, 0xffffffffffffffff, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

1.029911598s ago: executing program 0 (id=2426):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x5}, 0x18)
r2 = socket(0x2, 0x5, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0)

941.309888ms ago: executing program 8 (id=2427):
syz_read_part_table(0x59c, &(0x7f0000000000)="$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")

896.827928ms ago: executing program 6 (id=2428):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)}], 0x1, 0x4044040)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000007c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a620e00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095e3c988c79b290be1e1ceadf623f7e12d70155e9e15ee93f015f373898464cfef2fc5925b703adcfb5a31e045b34ece1924217ea2a4083416a669ccbeeb2ac4707e029e2401bac0cd7e784a6866f05ed1d3648ab53d383acf258a6a574a1bbd396e29b10e72b4be0861de54bd31d7ff68a256a1b46bcfa59d45933ba0746c540550b7c959765259f57ce512decea99f872354d0b092b5e9f052ba8bf88b506b8d6dbded3e3d"], &(0x7f00000005c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000440), 0x6, 0x56a, &(0x7f00000015c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000300)=ANY=[], 0x835, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x7}, {0x12, 0x2, 0x3, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
stat(&(0x7f0000000900)='./file1\x00', &(0x7f0000001180))
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x0, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0x0, 0x30, 0x0, 0x0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

743.440598ms ago: executing program 8 (id=2429):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$inet(0x2, 0x3, 0x8d)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$unix(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000380), &(0x7f0000000200)}, 0x32)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x120, 0x0, 0x0, 0x900, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

703.814648ms ago: executing program 6 (id=2430):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x8004745a, 0x2000000c)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@stripe={'stripe', 0x3d, 0x3}}, {@abort}, {@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@dioread_lock}, {@dioread_lock}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x565, &(0x7f0000001080)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC+If4N2Dh+I/4NG/oKCFIiXowcvKbGbTbbObX90kW/fzgWnfmzeb996++b59s7PLBtC3RrN/ChEvR8TXScSRlrLByAtHV45bfnRjKtuSqNc/+SuJJN/XPD7J/z+UZ16KiF+/jDhVWFtvdXFptlQup/N5fqw2d3Wsurh0+vJcaSadSa9MTE6efWty4t133u5aX1+/8M93H9/74OxXJ5a//enB0TtJnIvDeVlrP57BzdbMaIzmz8lQnHvqwPEuVNZLkr1uANsykMf5UGRzwJEYyKMe+P/7IiLqQJ9KxD/0qeY6oHlt36Xr4OfGw/dXLoDW9n9w5b2RGG5cGx1cTp64Msqud0e6UH9Wx89/3r2TbdG99yEANnTzVkScGRxcO/8l+fy3fWeyyXMDT9dh/oPdcy9b/7zRbv1TWF3/RJv1z6E2sbsdG8d/4UEXqukoW/+913b9u3rTamQgz73QWPMNJZcul9MzEfFiRJyMof1Zfr37OWeX79c7lbWu/7Itq7+5Fszb8WBw/5OPmS7VSs/S51YPb0W80nb9m6yOf9Jm/LPn48Im6zie3n21U9nG/d9Z9R8jXms7/o/vaCXr358ca5wPY82zYq2/bx//rVP9e93/bPwPrt//kaT1fm1163X8MPxv2qlsu+f/vuTTRnpfvu96qVabH4/Yl3y0dv/E48c2883js/6fPLH+/Nfu/D8QEZ9tsv+3j93ueGgvjP/0lsZ/64n7H37+faf6Nzf+bzZSJ/M9m5n/NtvAZ3nuAAAAAAAAoNcUIuJwJIXiarpQKBZXPt9xLA4WypVq7dSlysKV6Wh8V3YkhgrNO91HWj4PMZ5/HraZn3gqPxkRRyPim4EDjXxxqlKe3uvOAwAAAAAAAAAAAAAAAAAAQI84FDHc7vv/mT8G9rp1wI7zk9/Qv9rH/y+/1+t5STd+6QnoSV7/oX+Jf+hf4h/6l/iH/iX+oX+Jf+hfW4j/4Z1sB7D7vP4DAAAAAAAAAAAAAAAAAAAAAAAAAABAV104fz7b6suPbkxl+elriwuzlWunp9PqbHFuYao4VZm/WpypVGbKaXGqMrfR3ytXKlfHJ2Lh+lgtrdbGqotLF+cqC1dqFy/PlWbSi+nQrvQKAAAAAAAAAAAAAAAAAAAAni/VxaXZUrmczkvsaCLpjWbsQGKwN5oh0eXEXs9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDYfwEAAP//2HA78g==")
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x54a)

652.017379ms ago: executing program 8 (id=2431):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
mlock2(&(0x7f00001e7000/0x1000)=nil, 0x1000, 0x1)

558.672529ms ago: executing program 9 (id=2432):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x4031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000d0a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
mmap(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0)

558.031079ms ago: executing program 8 (id=2433):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xab0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x20, 0x2fffffbff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
sendto$inet6(r2, 0x0, 0x0, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, r2, 0x8871b000)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x937, @ipv4={'\x00', '\xff\xff', @local}, 0x7f}, 0x1c)

377.477529ms ago: executing program 8 (id=2434):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)

376.061409ms ago: executing program 6 (id=2435):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000004000000000000000000008500000036000000850000002a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r1, 0x25, 0x0, @val=@tracing}, 0x40)

253.61671ms ago: executing program 9 (id=2436):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
get_robust_list(0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280))
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085000000230000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xc7ca}, 0x18)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
close(r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050000000100010009000000010000008324d6e2acfda2331d6e2e139664f57da48762749e1f6bd9620141f05ff824063f239ddb9f095485f00310f541b4b1f0f63cdb62603e05e685cfd145fdb577dac9e56036406535950bc9a62c896325a456ce229dc4c96032a589009790acbab22d827e0d855d592449ca5acb04416af6ff746ffc62776fb10f01fb4594d1c8c84240", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000200181100006e7edccc767947b237d25fc748270da8468f9aa8eaf605ad4873c1bd34b2b3994e7e9284d25b5f26db5667c29e7ff4a8006368b26489a980b19b12c911ad36201c45567e204209c55575d38918188a9f90fdce5063fb1c1dcba00f008016b48d0f8fd922e82e859e2ecd68854568dff524b4fef7ef4b93d9da2fd00e2ad249d746c717e5f54db5935c039048cbe9afb1f05f65b9a13e357a1369f3719863b2bc3887eb15d5e46d673c6a2a2b473245bb8421d0aa12410089430546021cb8c6a7a9a55732fd95cc", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffbfffe}, 0x18)
setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4)
connect$inet6(r5, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x4, 0x0, 0x0, 0x0)
fcntl$getown(r3, 0x9)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
open(0x0, 0x141a42, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x6254, 0x40010060, 0x0)
unshare(0x68040200)
socket$inet6(0xa, 0x1, 0x84)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

227.016459ms ago: executing program 6 (id=2437):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'})

101.19381ms ago: executing program 6 (id=2438):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000001b40)="a7", 0x1}], 0x1, 0x8000, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x3920e, r3, 0x2, 0x0, 0x28})

98.98401ms ago: executing program 8 (id=2439):
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb)

612.31µs ago: executing program 0 (id=2440):
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000082980408000800f6b86b2aacab19fc00000763b620"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023022301020905000000"])
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdf252500000005002a00e8f38472050029000100000008000200", @ANYRES8=r5], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r7, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000000400)={<r9=>0x0, <r10=>0x0})
ppoll(&(0x7f00000003c0)=[{r0, 0x10010}, {r1}, {r0}, {r7, 0x402}, {r3, 0x4100}, {r7, 0x202}, {r7, 0x4238}, {r8, 0x100}], 0x8, &(0x7f0000000440)={r9, r10+60000000}, &(0x7f0000000480)={[0x80000000000]}, 0x8)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600000000054060000000000000000000000ffff07000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50e2000090780000080a0000000000000000030a0000000000000000fe08f989e8e82b840502000b317275"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0)

0s ago: executing program 4 (id=2441):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

has an invalid bInterval 0, changing to 7
[  521.231104][ T9881] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  521.239968][ T4516] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  521.260428][ T4516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  521.279619][ T9881] EXT4-fs (loop5): 1 truncate cleaned up
[  521.286856][ T4516] usb 1-1: config 0 descriptor??
[  521.296156][ T9881] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  521.313142][ T4516] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  521.333494][ T9886] tipc: Started in network mode
[  521.339211][ T9886] tipc: Node identity 7638709c640c, cluster identity 4711
[  521.347333][ T9886] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  521.365870][ T4516] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  521.384975][ T9888] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1731'.
[  521.443216][    C1] cm109 7-1:0.8: cm109_urb_irq_callback: urb status -71
[  521.450774][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  521.458285][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  521.465583][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  521.472765][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  521.479874][ T4516] usb 7-1: USB disconnect, device number 33
[  521.501923][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -2
[  521.507892][ T6385] EXT4-fs (loop5): unmounting filesystem.
[  521.509179][ T4516] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  521.633935][ T9893] loop7: detected capacity change from 0 to 2048
[  521.645562][ T9893] journal_path: Lookup failure for './file1'
[  521.653024][ T9893] EXT4-fs: error: could not find journal device path
[  521.727700][   T22] usb 1-1: USB disconnect, device number 7
[  521.755076][ T9895] smc: net device bond0 applied user defined pnetid SYZ0
[  521.765043][   T22] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  521.782949][ T9895] smc: net device bond0 erased user defined pnetid SYZ0
[  521.783121][ T9901] syz.5.1737[9901] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  521.794576][ T9901] syz.5.1737[9901] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  521.848897][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1738'.
[  521.957036][ T9905] loop7: detected capacity change from 0 to 128
[  522.223086][ T9911] loop7: detected capacity change from 0 to 512
[  522.265610][ T9911] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  522.284384][ T9911] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  522.300683][ T9914] loop6: detected capacity change from 0 to 128
[  522.307238][ T9911] EXT4-fs (loop7): 1 truncate cleaned up
[  522.317111][ T9911] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  522.333042][ T9911] fscrypt (loop7, inode 2): Error -61 getting encryption context
[  522.340938][   T26] kauditd_printk_skb: 100 callbacks suppressed
[  522.340956][   T26] audit: type=1800 audit(1733627337.489:3468): pid=9914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1743" name="bus" dev="loop6" ino=1048686 res=0 errno=0
[  522.375116][ T8299] EXT4-fs (loop7): unmounting filesystem.
[  522.401370][ T9914] syz.6.1743: attempt to access beyond end of device
[  522.401370][ T9914] loop6: rw=2049, sector=177, nr_sectors = 1 limit=128
[  522.431515][   T26] audit: type=1326 audit(1733627337.549:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.0.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  522.481334][ T1169] tipc: Node number set to 305426588
[  522.491064][ T9914] syz.6.1743: attempt to access beyond end of device
[  522.491064][ T9914] loop6: rw=2049, sector=153, nr_sectors = 24 limit=128
[  522.509975][   T26] audit: type=1326 audit(1733627337.549:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.0.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  522.537617][ T9914] syz.6.1743: attempt to access beyond end of device
[  522.537617][ T9914] loop6: rw=2049, sector=177, nr_sectors = 1 limit=128
[  522.563567][   T26] audit: type=1326 audit(1733627337.549:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.0.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  522.616331][   T26] audit: type=1326 audit(1733627337.549:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.0.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  522.617870][ T9914] Buffer I/O error on dev loop6, logical block 177, lost async page write
[  522.642519][   T26] audit: type=1326 audit(1733627337.549:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.0.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  522.715861][   T26] audit: type=1326 audit(1733627337.549:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.0.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  522.761475][   T26] audit: type=1326 audit(1733627337.569:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.0.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  522.808535][   T26] audit: type=1326 audit(1733627337.569:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.0.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  522.860252][   T26] audit: type=1326 audit(1733627337.569:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.0.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  522.860287][ T9923] ebtables: ebtables: counters copy to user failed while replacing table
[  523.348010][ T1169] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  523.486240][   T22] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  523.510791][ T1169] usb 1-1: device descriptor read/64, error -71
[  523.691576][   T22] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  523.703477][   T22] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  523.712633][   T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.730754][   T22] usb 8-1: config 0 descriptor??
[  523.791348][ T1169] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  523.950846][   T22] usbhid 8-1:0.0: can't add hid device: -71
[  523.956216][ T1169] usb 1-1: device descriptor read/64, error -71
[  523.957131][   T22] usbhid: probe of 8-1:0.0 failed with error -71
[  523.972295][   T22] usb 8-1: USB disconnect, device number 12
[  524.082311][ T1169] usb usb1-port1: attempt power cycle
[  524.497477][ T1169] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  524.546664][ T1169] usb 1-1: device descriptor read/8, error -71
[  524.816261][ T1169] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  524.873478][ T1169] usb 1-1: device descriptor read/8, error -71
[  525.003063][ T1169] usb usb1-port1: unable to enumerate USB device
[  525.192260][ T9907] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  525.204517][ T9935] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1753'.
[  525.579309][ T9965] netlink: 'syz.6.1767': attribute type 1 has an invalid length.
[  525.596324][ T9965] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1767'.
[  525.883708][ T9978] loop6: detected capacity change from 0 to 512
[  525.923617][ T9980] loop7: detected capacity change from 0 to 512
[  525.931738][ T9978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  525.946284][ T9978] System zones: 1-12
[  525.952330][ T9978] EXT4-fs (loop6): orphan cleanup on readonly fs
[  525.970340][ T9978] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1774: bg 0: block 328: padding at end of block bitmap is not set
[  525.990095][ T9978] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  525.999545][ T9978] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1774: invalid indirect mapped block 65280 (level 0)
[  526.021426][ T9978] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.1774: attempt to clear invalid blocks 33619980 len 1
[  526.055887][ T9980] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  526.080205][ T9978] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1774: invalid indirect mapped block 1819239214 (level 0)
[  526.102673][ T9980] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  526.150455][ T9978] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1774: invalid indirect mapped block 1819239214 (level 1)
[  526.189803][ T9978] EXT4-fs (loop6): 1 orphan inode deleted
[  526.195608][ T9978] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  526.293108][ T8299] EXT4-fs (loop7): unmounting filesystem.
[  526.332884][ T9978] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1774'.
[  526.438871][ T6397] EXT4-fs (loop6): unmounting filesystem.
[  526.445408][ T9997] loop7: detected capacity change from 0 to 512
[  526.517786][ T9997] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 2: comm syz.7.1778: invalid block
[  526.593316][ T9997] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1778: invalid indirect mapped block 10 (level 1)
[  526.625892][ T9997] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1778: invalid indirect mapped block 8 (level 1)
[  526.640880][ T9997] EXT4-fs (loop7): 1 truncate cleaned up
[  526.672664][ T9997] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  526.781430][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1785'.
[  526.799623][ T8299] EXT4-fs (loop7): unmounting filesystem.
[  526.874656][T10010] loop6: detected capacity change from 0 to 8192
[  527.196601][ T1169] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  527.359393][ T1169] usb 8-1: device descriptor read/64, error -71
[  527.636283][ T1169] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  527.796187][ T1169] usb 8-1: device descriptor read/64, error -71
[  527.926529][ T1169] usb usb8-port1: attempt power cycle
[  528.120387][T10029] loop5: detected capacity change from 0 to 8192
[  528.274090][T10042] loop5: detected capacity change from 0 to 128
[  528.292933][   T26] kauditd_printk_skb: 39 callbacks suppressed
[  528.292949][   T26] audit: type=1326 audit(1733627343.439:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  528.336267][ T1169] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  528.373597][   T26] audit: type=1326 audit(1733627343.479:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  528.376850][ T1169] usb 8-1: device descriptor read/8, error -71
[  528.452850][   T26] audit: type=1326 audit(1733627343.479:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  528.502438][   T26] audit: type=1326 audit(1733627343.479:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  528.548785][   T26] audit: type=1326 audit(1733627343.479:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  528.604686][   T26] audit: type=1326 audit(1733627343.479:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  528.661833][   T26] audit: type=1326 audit(1733627343.479:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  528.706238][ T1169] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  528.714839][T10051] loop4: detected capacity change from 0 to 512
[  528.719041][   T26] audit: type=1326 audit(1733627343.479:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  528.749294][ T1169] usb 8-1: device descriptor read/8, error -71
[  528.771066][   T26] audit: type=1326 audit(1733627343.479:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  528.805607][   T26] audit: type=1326 audit(1733627343.479:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10043 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  528.857755][T10053] loop5: detected capacity change from 0 to 512
[  528.876516][ T1169] usb usb8-port1: unable to enumerate USB device
[  528.902793][T10051] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  528.918831][T10051] ext4 filesystem being mounted at /462/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  528.952156][T10053] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  528.993477][T10053] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  529.084557][T10053] EXT4-fs (loop5): unmounting filesystem.
[  529.092111][T10048] ext4: Unknown parameter ''
[  529.186962][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  529.213563][T10050] syz.5.1801 (10050): attempted to duplicate a private mapping with mremap.  This is not supported.
[  529.372121][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1805'.
[  529.382842][T10070] loop4: detected capacity change from 0 to 1024
[  529.437061][T10070] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  529.461735][T10070] EXT4-fs (loop4): shut down requested (0)
[  529.466648][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1807'.
[  529.585602][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1807'.
[  529.684198][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  529.722472][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1807'.
[  529.735594][T10084] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  529.745502][T10084] IPVS: Error joining to the multicast group
[  529.762090][T10084] 8021q: VLANs not supported on ipvlan1
[  529.887153][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'.
[  529.952484][T10094] loop4: detected capacity change from 0 to 256
[  530.025337][T10094] FAT-fs (loop4): Directory bread(block 64) failed
[  530.044491][T10094] FAT-fs (loop4): Directory bread(block 65) failed
[  530.067351][T10094] FAT-fs (loop4): Directory bread(block 66) failed
[  530.073967][T10094] FAT-fs (loop4): Directory bread(block 67) failed
[  530.107999][T10094] FAT-fs (loop4): Directory bread(block 68) failed
[  530.114591][T10094] FAT-fs (loop4): Directory bread(block 69) failed
[  530.163362][T10094] FAT-fs (loop4): Directory bread(block 70) failed
[  530.170112][T10094] FAT-fs (loop4): Directory bread(block 71) failed
[  530.181294][T10094] FAT-fs (loop4): Directory bread(block 72) failed
[  530.196864][T10094] FAT-fs (loop4): Directory bread(block 73) failed
[  530.415789][T10108] loop5: detected capacity change from 0 to 512
[  530.439817][T10110] loop7: detected capacity change from 0 to 128
[  530.491152][T10108] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1820: invalid indirect mapped block 256 (level 2)
[  530.506691][T10108] EXT4-fs (loop5): 2 truncates cleaned up
[  530.512474][T10108] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  530.661903][T10117] siw: device registration error -23
[  530.661975][ T6385] EXT4-fs (loop5): unmounting filesystem.
[  530.821774][T10125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1827'.
[  531.101088][   T22] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  531.262057][   T22] usb 6-1: device descriptor read/64, error -71
[  531.479284][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1838'.
[  531.548398][   T22] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  531.653235][T10155] loop4: detected capacity change from 0 to 512
[  531.701402][T10155] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  531.715118][T10155] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  531.740845][   T22] usb 6-1: device descriptor read/64, error -71
[  531.829700][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  531.877094][   T22] usb usb6-port1: attempt power cycle
[  532.308028][   T22] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  532.359348][   T22] usb 6-1: device descriptor read/8, error -71
[  532.430151][T10187] smc: net device bond0 applied user defined pnetid SYZ0
[  532.446852][T10187] smc: net device bond0 erased user defined pnetid SYZ0
[  532.627635][   T22] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  532.667045][   T22] usb 6-1: device descriptor read/8, error -71
[  532.796455][   T22] usb usb6-port1: unable to enumerate USB device
[  533.302862][T10211] netlink: 'syz.4.1862': attribute type 10 has an invalid length.
[  534.142177][T10231] netlink: 'syz.7.1871': attribute type 2 has an invalid length.
[  535.369149][ T4301] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  535.536700][T10255] loop7: detected capacity change from 0 to 256
[  535.566175][ T4301] usb 1-1: device descriptor read/64, error -71
[  535.589842][T10255] FAT-fs (loop7): Directory bread(block 64) failed
[  535.611278][T10255] FAT-fs (loop7): Directory bread(block 65) failed
[  535.640607][T10255] FAT-fs (loop7): Directory bread(block 66) failed
[  535.656164][T10255] FAT-fs (loop7): Directory bread(block 67) failed
[  535.664905][T10255] FAT-fs (loop7): Directory bread(block 68) failed
[  535.672753][T10255] FAT-fs (loop7): Directory bread(block 69) failed
[  535.680284][T10255] FAT-fs (loop7): Directory bread(block 70) failed
[  535.687086][T10255] FAT-fs (loop7): Directory bread(block 71) failed
[  535.693857][T10255] FAT-fs (loop7): Directory bread(block 72) failed
[  535.700639][T10255] FAT-fs (loop7): Directory bread(block 73) failed
[  535.780017][T10266] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1885'.
[  535.791713][T10265] netlink: 16402 bytes leftover after parsing attributes in process `+}[@'.
[  535.836647][ T4301] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  535.856167][ T5293] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  535.896128][   T26] kauditd_printk_skb: 172 callbacks suppressed
[  535.896147][   T26] audit: type=1326 audit(1733627351.039:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.7.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa23d7fed9 code=0x7ffc0000
[  535.931666][T10272] loop5: detected capacity change from 0 to 512
[  535.940625][   T26] audit: type=1326 audit(1733627351.039:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.7.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa23d7fed9 code=0x7ffc0000
[  535.973316][T10272] EXT4-fs: Ignoring removed nobh option
[  535.982324][   T26] audit: type=1326 audit(1733627351.039:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.7.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa23d7fed9 code=0x7ffc0000
[  536.004490][T10270] loop7: detected capacity change from 0 to 1024
[  536.010470][   T26] audit: type=1326 audit(1733627351.089:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.7.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa23d7fed9 code=0x7ffc0000
[  536.022821][T10270] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  536.034556][ T4301] usb 1-1: device descriptor read/64, error -71
[  536.049912][T10270] EXT4-fs (loop7): orphan cleanup on readonly fs
[  536.061008][   T26] audit: type=1326 audit(1733627351.089:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.7.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa23d7fed9 code=0x7ffc0000
[  536.092351][T10272] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  536.099243][T10270] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5885: Corrupt filesystem
[  536.102097][T10272] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  536.134348][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  536.156751][ T5293] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  536.160870][T10270] EXT4-fs (loop7): Remounting filesystem read-only
[  536.174413][T10272] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.5.1888: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0
[  536.195117][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.197205][ T5293] usb 5-1: config 0 descriptor??
[  536.204670][ T4301] usb usb1-port1: attempt power cycle
[  536.215159][   T26] audit: type=1326 audit(1733627351.089:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.7.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa23d7fed9 code=0x7ffc0000
[  536.236585][T10270] EXT4-fs error (device loop7): ext4_dirty_inode:6089: inode #3: comm syz.7.1887: mark_inode_dirty error
[  536.261074][T10270] EXT4-fs (loop7): Remounting filesystem read-only
[  536.268492][T10270] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.1887: Invalid block bitmap block 3 in block_group 0
[  536.283025][T10270] EXT4-fs (loop7): Remounting filesystem read-only
[  536.299800][T10272] EXT4-fs error (device loop5) in ext4_delete_entry:2800: Corrupt filesystem
[  536.304148][   T26] audit: type=1326 audit(1733627351.109:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.7.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa23d7fed9 code=0x7ffc0000
[  536.316381][T10270] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5885: Corrupt filesystem
[  536.349524][T10272] EXT4-fs warning (device loop5): ext4_rename_delete:3778: inode #2: comm syz.5.1888: Deleting old file: nlink 4, error=-117
[  536.351854][   T26] audit: type=1326 audit(1733627351.119:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.7.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffa23d7fed9 code=0x7ffc0000
[  536.383384][T10270] EXT4-fs (loop7): Remounting filesystem read-only
[  536.397243][T10272] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  536.412634][T10270] EXT4-fs error (device loop7): ext4_dirty_inode:6089: inode #3: comm syz.7.1887: mark_inode_dirty error
[  536.426515][T10270] EXT4-fs (loop7): Remounting filesystem read-only
[  536.433142][T10270] Quota error (device loop7): write_blk: dquota write failed
[  536.441443][   T26] audit: type=1326 audit(1733627351.119:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.7.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffa23d7ff13 code=0x7ffc0000
[  536.441577][T10270] EXT4-fs error (device loop7): ext4_map_blocks:634: inode #3: block 1: comm syz.7.1887: lblock 6 mapped to illegal pblock 1 (length 1)
[  536.478748][T10260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  536.491058][T10260] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  536.503324][T10270] EXT4-fs (loop7): Remounting filesystem read-only
[  536.510459][T10270] EXT4-fs error (device loop7): ext4_map_blocks:634: inode #3: block 48: comm syz.7.1887: lblock 0 mapped to illegal pblock 48 (length 1)
[  536.535020][T10270] EXT4-fs (loop7): Remounting filesystem read-only
[  536.548078][T10270] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.1887: Failed to acquire dquot type 0
[  536.563145][ T6385] EXT4-fs (loop5): unmounting filesystem.
[  536.575344][T10270] EXT4-fs (loop7): Remounting filesystem read-only
[  536.585573][T10270] EXT4-fs error (device loop7): ext4_map_blocks:634: inode #3: block 49: comm syz.7.1887: lblock 1 mapped to illegal pblock 49 (length 1)
[  536.636397][ T4301] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  536.636404][T10270] EXT4-fs (loop7): Remounting filesystem read-only
[  536.655727][T10270] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.1887: Failed to acquire dquot type 0
[  536.671575][T10287] syz.5.1892[10287] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  536.671696][T10287] syz.5.1892[10287] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  536.676221][T10270] EXT4-fs (loop7): Remounting filesystem read-only
[  536.690000][ T4301] usb 1-1: device descriptor read/8, error -71
[  536.708943][ T5293] usbhid 5-1:0.0: can't add hid device: -71
[  536.714984][ T5293] usbhid: probe of 5-1:0.0 failed with error -71
[  536.738400][ T5293] usb 5-1: USB disconnect, device number 21
[  536.756223][T10270] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5885: Corrupt filesystem
[  536.779324][T10270] EXT4-fs (loop7): Remounting filesystem read-only
[  536.795684][T10270] EXT4-fs error (device loop7): ext4_evict_inode:279: inode #15: comm syz.7.1887: mark_inode_dirty error
[  536.814793][T10270] EXT4-fs (loop7): Remounting filesystem read-only
[  536.822153][T10270] EXT4-fs warning (device loop7): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  536.832974][T10270] EXT4-fs (loop7): 1 orphan inode deleted
[  536.846766][T10270] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  536.911515][T10293] loop5: detected capacity change from 0 to 256
[  536.950192][ T8299] EXT4-fs (loop7): unmounting filesystem.
[  536.996146][ T4301] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  537.014616][T10293] FAT-fs (loop5): Directory bread(block 64) failed
[  537.036820][ T4301] usb 1-1: device descriptor read/8, error -71
[  537.044973][T10293] FAT-fs (loop5): Directory bread(block 65) failed
[  537.052393][T10293] FAT-fs (loop5): Directory bread(block 66) failed
[  537.059461][T10293] FAT-fs (loop5): Directory bread(block 67) failed
[  537.066248][T10293] FAT-fs (loop5): Directory bread(block 68) failed
[  537.073234][T10293] FAT-fs (loop5): Directory bread(block 69) failed
[  537.081167][T10293] FAT-fs (loop5): Directory bread(block 70) failed
[  537.091724][T10293] FAT-fs (loop5): Directory bread(block 71) failed
[  537.105737][T10293] FAT-fs (loop5): Directory bread(block 72) failed
[  537.119531][T10293] FAT-fs (loop5): Directory bread(block 73) failed
[  537.156318][ T4301] usb usb1-port1: unable to enumerate USB device
[  537.339798][T10310] IPVS: Error joining to the multicast group
[  537.632290][T10328] loop5: detected capacity change from 0 to 256
[  537.692058][T10328] FAT-fs (loop5): Directory bread(block 64) failed
[  537.710250][T10329] loop4: detected capacity change from 0 to 512
[  537.724867][T10328] FAT-fs (loop5): Directory bread(block 65) failed
[  537.743324][T10328] FAT-fs (loop5): Directory bread(block 66) failed
[  537.763598][T10328] FAT-fs (loop5): Directory bread(block 67) failed
[  537.776375][T10328] FAT-fs (loop5): Directory bread(block 68) failed
[  537.794293][T10328] FAT-fs (loop5): Directory bread(block 69) failed
[  537.804755][T10329] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  537.833856][T10329] ext4 filesystem being mounted at /478/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  537.845142][T10328] FAT-fs (loop5): Directory bread(block 70) failed
[  537.854047][T10328] FAT-fs (loop5): Directory bread(block 71) failed
[  537.861149][T10328] FAT-fs (loop5): Directory bread(block 72) failed
[  537.868208][T10328] FAT-fs (loop5): Directory bread(block 73) failed
[  538.727554][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  538.743077][T10345] loop6: detected capacity change from 0 to 512
[  538.810730][T10345] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  538.847371][T10345] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  538.874314][T10345] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1920'.
[  539.015205][ T6397] EXT4-fs (loop6): unmounting filesystem.
[  539.036655][T10356] loop7: detected capacity change from 0 to 8192
[  539.313898][T10366] syz.0.1926[10366] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  539.314008][T10366] syz.0.1926[10366] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  539.396236][   T22] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  539.491370][   T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4
[  539.506239][   T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2
[  539.519659][   T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3
[  539.539548][   T14] hid-generic 0000:3000000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  539.596118][   T22] usb 7-1: device descriptor read/64, error -71
[  539.688378][T10375] loop4: detected capacity change from 0 to 128
[  539.695555][T10375] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  539.697234][T10371] netlink: 'syz.0.1928': attribute type 10 has an invalid length.
[  539.733221][T10371] device geneve0 entered promiscuous mode
[  539.743927][T10375] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  539.766599][T10371] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  539.770946][T10375] xt_hashlimit: size too large, truncated to 1048576
[  539.887060][   T22] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  540.056183][   T22] usb 7-1: device descriptor read/64, error -71
[  540.189594][   T22] usb usb7-port1: attempt power cycle
[  540.321400][T10386] loop7: detected capacity change from 0 to 512
[  540.421172][T10386] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  540.445453][T10386] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  540.596250][   T22] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  540.642935][   T22] usb 7-1: device descriptor read/8, error -71
[  540.928205][   T22] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  540.997989][   T22] usb 7-1: device descriptor read/8, error -71
[  541.126391][   T22] usb usb7-port1: unable to enumerate USB device
[  541.396845][   T26] kauditd_printk_skb: 62 callbacks suppressed
[  541.396862][   T26] audit: type=1326 audit(1733627356.549:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  541.431272][   T26] audit: type=1326 audit(1733627356.549:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  541.455697][   T26] audit: type=1326 audit(1733627356.579:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  541.484593][   T26] audit: type=1326 audit(1733627356.579:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  541.512337][   T26] audit: type=1326 audit(1733627356.579:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  541.542998][   T26] audit: type=1326 audit(1733627356.579:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  541.567828][   T26] audit: type=1326 audit(1733627356.579:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  541.591538][   T26] audit: type=1326 audit(1733627356.579:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  541.614616][   T26] audit: type=1326 audit(1733627356.579:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  542.144676][   T26] audit: type=1326 audit(1733627357.289:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  542.170019][ T8299] EXT4-fs (loop7): unmounting filesystem.
[  542.328998][T10403] loop6: detected capacity change from 0 to 512
[  542.431032][ T6385] bond0: (slave syz_tun): Releasing backup interface
[  542.438400][T10403] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  542.438508][T10403] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  542.576782][T10411] @: renamed from bond0
[  542.767054][ T6397] EXT4-fs (loop6): unmounting filesystem.
[  543.075909][   T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.137176][T10422] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1946'.
[  543.171383][T10422] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.178972][T10422] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.221521][T10421] netlink: 'syz.6.1947': attribute type 10 has an invalid length.
[  543.248972][T10421] device syz_tun entered promiscuous mode
[  543.266236][T10421] @: (slave syz_tun): Enslaving as an active interface with an up link
[  543.350079][   T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.488250][   T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.541343][T10431] loop7: detected capacity change from 0 to 512
[  543.604548][   T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.628741][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  543.642568][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  543.642797][T10431] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  543.666712][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  543.668503][T10431] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  543.673972][ T4516] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  543.692861][ T4265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  543.702522][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  543.715852][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  543.856482][ T4516] usb 1-1: device descriptor read/64, error -71
[  543.993679][T10433] chnl_net:caif_netlink_parms(): no params data found
[  544.009912][ T8299] EXT4-fs (loop7): unmounting filesystem.
[  544.152114][ T4516] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  544.250666][T10433] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.268292][T10433] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.280123][T10433] device bridge_slave_0 entered promiscuous mode
[  544.323263][ T4516] usb 1-1: device descriptor read/64, error -71
[  544.341298][T10433] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.356523][T10433] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.364606][T10433] device bridge_slave_1 entered promiscuous mode
[  544.456379][ T4516] usb usb1-port1: attempt power cycle
[  544.540453][T10433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  544.618250][T10433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  544.754189][T10433] team0: Port device team_slave_0 added
[  544.823890][T10433] team0: Port device team_slave_1 added
[  544.892597][ T4516] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  544.941070][T10433] batman_adv: batadv0: Adding interface: batadv_slave_0
[  544.948503][T10433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  544.981202][ T4516] usb 1-1: device descriptor read/8, error -71
[  544.992400][T10433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  545.006762][T10433] batman_adv: batadv0: Adding interface: batadv_slave_1
[  545.013850][T10433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  545.040327][T10433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  545.053014][T10450] random: crng reseeded on system resumption
[  545.218999][T10433] device hsr_slave_0 entered promiscuous mode
[  545.226783][T10433] device hsr_slave_1 entered promiscuous mode
[  545.233633][T10433] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  545.249451][T10433] Cannot create hsr debugfs directory
[  545.266261][ T4516] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  545.327060][ T4516] usb 1-1: device descriptor read/8, error -71
[  545.447199][ T4516] usb usb1-port1: unable to enumerate USB device
[  545.746334][ T4253] Bluetooth: hci0: command 0x0409 tx timeout
[  545.756565][   T11] device hsr_slave_0 left promiscuous mode
[  545.769772][   T11] device hsr_slave_1 left promiscuous mode
[  545.784123][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  545.794692][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  545.803676][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  545.811527][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  545.837024][   T11] device bridge_slave_1 left promiscuous mode
[  545.843318][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.870030][   T11] device bridge_slave_0 left promiscuous mode
[  545.886399][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.949531][T10466] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1962'.
[  545.949664][   T11] device veth1_macvtap left promiscuous mode
[  545.981851][   T11] device veth0_macvtap left promiscuous mode
[  545.989254][   T11] device veth1_vlan left promiscuous mode
[  545.995320][   T11] device veth0_vlan left promiscuous mode
[  546.002087][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1962'.
[  546.320747][   T11] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  546.510354][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  546.510371][   T26] audit: type=1326 audit(1733627361.659:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a6b7fed9 code=0x7ffc0000
[  546.564210][   T26] audit: type=1326 audit(1733627361.659:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a6b7fed9 code=0x7ffc0000
[  546.602331][   T26] audit: type=1326 audit(1733627361.689:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f04a6b7fed9 code=0x7ffc0000
[  546.625308][   T26] audit: type=1326 audit(1733627361.689:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a6b7fed9 code=0x7ffc0000
[  546.653118][   T26] audit: type=1326 audit(1733627361.689:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a6b7fed9 code=0x7ffc0000
[  546.679223][   T26] audit: type=1326 audit(1733627361.689:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04a6b7fed9 code=0x7ffc0000
[  546.709164][   T26] audit: type=1326 audit(1733627361.689:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a6b7fed9 code=0x7ffc0000
[  546.738792][   T26] audit: type=1326 audit(1733627361.689:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a6b7fed9 code=0x7ffc0000
[  546.767426][   T26] audit: type=1326 audit(1733627361.689:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04a6b7fed9 code=0x7ffc0000
[  546.813059][   T26] audit: type=1326 audit(1733627361.689:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10487 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a6b7fed9 code=0x7ffc0000
[  546.902190][T10496] tipc: Can't bind to reserved service type 2
[  547.061675][T10476] slcan: can't register candev
[  547.226428][   T11] team0 (unregistering): Port device team_slave_1 removed
[  547.309838][   T11] team0 (unregistering): Port device team_slave_0 removed
[  547.379692][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  547.423970][T10503] loop7: detected capacity change from 0 to 512
[  547.438832][T10503] EXT4-fs: Ignoring removed mblk_io_submit option
[  547.451048][T10503] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  547.463819][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  547.476456][T10503] EXT4-fs error (device loop7): ext4_orphan_get:1426: comm syz.7.1977: bad orphan inode 131083
[  547.496666][T10503] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  547.827449][ T4253] Bluetooth: hci0: command 0x041b tx timeout
[  547.991862][   T11] bond0 (unregistering): Released all slaves
[  548.314697][ T8299] EXT4-fs (loop7): unmounting filesystem.
[  548.374849][T10433] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  548.433203][T10433] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  548.461827][T10512] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  548.498004][T10433] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  548.544247][T10433] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  548.806751][T10433] 8021q: adding VLAN 0 to HW filter on device bond0
[  548.869213][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  548.885111][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  548.918466][T10433] 8021q: adding VLAN 0 to HW filter on device team0
[  548.937407][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  548.959929][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  548.992414][ T4486] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.999638][ T4486] bridge0: port 1(bridge_slave_0) entered forwarding state
[  549.013120][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  549.033973][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  549.043808][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  549.070133][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.077357][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  549.100836][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  549.117630][T10535] random: crng reseeded on system resumption
[  549.133337][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  549.160732][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  549.180591][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  549.231178][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  549.268068][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  549.273886][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1992'.
[  549.286690][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  549.315508][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  549.339404][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  549.365049][T10433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  549.365381][T10538] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1992'.
[  549.385850][T10433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  549.406638][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  549.427998][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  549.628272][T10548] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1996'.
[  549.852455][T10555] loop6: detected capacity change from 0 to 128
[  549.898105][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  549.899102][T10555] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  549.905754][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  549.924126][ T4253] Bluetooth: hci0: command 0x040f tx timeout
[  549.932016][T10555] ext4 filesystem being mounted at /360/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  549.994749][T10433] 8021q: adding VLAN 0 to HW filter on device batadv0
[  550.092977][ T6397] EXT4-fs (loop6): unmounting filesystem.
[  550.668198][T10589] loop4: detected capacity change from 0 to 128
[  550.694301][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  550.712628][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  550.741048][T10589] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  550.750260][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  550.764919][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  550.779706][T10589] ext4 filesystem being mounted at /496/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  550.788493][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  550.865646][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  550.880519][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  550.898752][T10433] device veth0_vlan entered promiscuous mode
[  551.272210][ T4486] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.867712][   T26] kauditd_printk_skb: 115 callbacks suppressed
[  551.867730][   T26] audit: type=1326 audit(1733627367.019:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10605 comm="syz.4.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  551.975422][T10433] device veth1_vlan entered promiscuous mode
[  551.991533][   T26] audit: type=1326 audit(1733627367.049:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10605 comm="syz.4.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  552.016187][ T4253] Bluetooth: hci0: command 0x0419 tx timeout
[  552.092408][T10433] device veth0_macvtap entered promiscuous mode
[  552.177314][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  552.207055][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  552.294747][   T26] audit: type=1326 audit(1733627367.049:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10605 comm="syz.4.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  552.379366][ T4486] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.430039][T10433] device veth1_macvtap entered promiscuous mode
[  552.432405][   T26] audit: type=1326 audit(1733627367.049:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10605 comm="syz.4.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  552.489216][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  552.499066][T10614] loop6: detected capacity change from 0 to 128
[  552.502149][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  552.514001][   T26] audit: type=1326 audit(1733627367.049:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10605 comm="syz.4.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  552.514045][   T26] audit: type=1326 audit(1733627367.049:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10605 comm="syz.4.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  552.514126][   T26] audit: type=1326 audit(1733627367.049:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10605 comm="syz.4.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  552.589015][T10614] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  552.598343][T10614] ext4 filesystem being mounted at /366/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  552.678432][ T4486] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.707253][ T6397] EXT4-fs (loop6): unmounting filesystem.
[  552.731530][   T26] audit: type=1326 audit(1733627367.049:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10605 comm="syz.4.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  552.770938][T10617] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2024'.
[  552.814708][T10620] IPv6: Can't replace route, no match found
[  552.825006][ T4253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  552.852268][ T4253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  552.861932][ T4253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  552.870815][ T4253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  552.900858][ T4253] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  552.902828][ T4486] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.919063][ T4253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  552.992320][T10433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  553.039524][T10433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  553.085336][T10433] batman_adv: batadv0: Interface activated: batadv_slave_0
[  553.132907][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  553.147112][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  553.173899][T10433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  553.185590][T10433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  553.201968][T10433] batman_adv: batadv0: Interface activated: batadv_slave_1
[  553.231595][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  553.252505][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  553.273148][T10628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2028'.
[  553.306874][T10433] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  553.315633][T10433] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  553.358152][T10433] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  553.375717][   T26] audit: type=1326 audit(1733627368.519:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a6b7fed9 code=0x7ffc0000
[  553.379089][T10433] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  553.421529][   T26] audit: type=1326 audit(1733627368.519:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a6b7fed9 code=0x7ffc0000
[  553.634703][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  553.663345][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  553.758984][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  553.961628][ T4418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  553.974429][ T4418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  554.054897][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  554.119413][T10619] chnl_net:caif_netlink_parms(): no params data found
[  554.149208][T10649] loop6: detected capacity change from 0 to 256
[  554.189088][T10651] syz.4.2037[10651] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  554.189198][T10651] syz.4.2037[10651] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  554.204412][T10649] FAT-fs (loop6): Directory bread(block 64) failed
[  554.236329][T10649] FAT-fs (loop6): Directory bread(block 65) failed
[  554.251852][T10649] FAT-fs (loop6): Directory bread(block 66) failed
[  554.265273][T10649] FAT-fs (loop6): Directory bread(block 67) failed
[  554.290215][T10649] FAT-fs (loop6): Directory bread(block 68) failed
[  554.297154][T10649] FAT-fs (loop6): Directory bread(block 69) failed
[  554.303790][T10649] FAT-fs (loop6): Directory bread(block 70) failed
[  554.316344][T10649] FAT-fs (loop6): Directory bread(block 71) failed
[  554.323104][T10649] FAT-fs (loop6): Directory bread(block 72) failed
[  554.346238][T10649] FAT-fs (loop6): Directory bread(block 73) failed
[  554.406735][T10657] netlink: 'syz.8.1945': attribute type 3 has an invalid length.
[  554.424661][T10657] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1945'.
[  554.449905][T10619] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.490690][T10619] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.499633][T10619] device bridge_slave_0 entered promiscuous mode
[  554.571652][T10619] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.592141][T10619] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.605813][T10619] device bridge_slave_1 entered promiscuous mode
[  554.685169][T10668] loop8: detected capacity change from 0 to 1024
[  554.709644][T10668] EXT4-fs: Ignoring removed nobh option
[  554.727399][T10670] loop4: detected capacity change from 0 to 164
[  554.730992][T10668] EXT4-fs: Ignoring removed orlov option
[  554.744774][T10619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  554.757517][T10619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  554.770363][T10670] Unable to read rock-ridge attributes
[  554.795282][T10670] Unable to read rock-ridge attributes
[  554.820244][T10670] iso9660: Corrupted directory entry in block 4 of inode 1792
[  554.831464][T10668] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  554.907714][T10619] team0: Port device team_slave_0 added
[  554.919094][T10619] team0: Port device team_slave_1 added
[  554.946438][ T4265] Bluetooth: hci1: command 0x0409 tx timeout
[  555.019451][T10433] EXT4-fs (loop8): unmounting filesystem.
[  555.052143][T10619] batman_adv: batadv0: Adding interface: batadv_slave_0
[  555.076963][T10619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  555.143536][T10619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  555.206592][T10619] batman_adv: batadv0: Adding interface: batadv_slave_1
[  555.213568][T10619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  555.266635][T10619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  555.302571][T10690] loop8: detected capacity change from 0 to 1024
[  555.313157][T10690] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869)
[  555.332812][T10690] EXT4-fs (loop8): invalid journal inode
[  555.338915][T10690] EXT4-fs (loop8): can't get journal size
[  555.359379][T10690] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  555.463504][T10433] EXT4-fs (loop8): unmounting filesystem.
[  555.555240][T10695] loop8: detected capacity change from 0 to 128
[  555.569807][T10619] device hsr_slave_0 entered promiscuous mode
[  555.585935][T10619] device hsr_slave_1 entered promiscuous mode
[  555.596452][ T4301] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  555.619798][T10695] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  555.632376][T10619] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  555.643268][T10695] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  555.695551][T10619] Cannot create hsr debugfs directory
[  555.806296][ T4301] usb 7-1: Using ep0 maxpacket: 32
[  555.816646][ T4301] usb 7-1: no configurations
[  555.821294][ T4301] usb 7-1: can't read configurations, error -22
[  555.879213][T10433] EXT4-fs (loop8): unmounting filesystem.
[  555.905522][ T4486] device hsr_slave_1 left promiscuous mode
[  555.926630][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  555.936586][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_0
[  555.957669][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  555.974687][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2059'.
[  555.979699][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_1
[  556.015816][ T4486] device bridge_slave_1 left promiscuous mode
[  556.029196][ T4486] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.032980][ T4301] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  556.049402][ T4486] device bridge_slave_0 left promiscuous mode
[  556.067177][ T4486] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.138667][ T4486] device veth1_macvtap left promiscuous mode
[  556.144767][ T4486] device veth0_macvtap left promiscuous mode
[  556.160166][ T4486] device veth1_vlan left promiscuous mode
[  556.176379][ T4486] device veth0_vlan left promiscuous mode
[  556.248550][ T4301] usb 7-1: Using ep0 maxpacket: 32
[  556.256899][ T4301] usb 7-1: no configurations
[  556.269061][ T4301] usb 7-1: can't read configurations, error -22
[  556.283384][ T4301] usb usb7-port1: attempt power cycle
[  556.440099][T10723] loop8: detected capacity change from 0 to 128
[  556.475264][T10723] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  556.488116][T10723] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  556.564444][T10433] EXT4-fs (loop8): unmounting filesystem.
[  556.712809][ T4301] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  556.757835][ T4301] usb 7-1: Using ep0 maxpacket: 32
[  556.766779][ T4301] usb 7-1: no configurations
[  556.772365][ T4301] usb 7-1: can't read configurations, error -22
[  556.956214][ T4301] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  557.016814][ T4301] usb 7-1: Using ep0 maxpacket: 32
[  557.022835][ T4301] usb 7-1: no configurations
[  557.026266][ T4265] Bluetooth: hci1: command 0x041b tx timeout
[  557.042484][ T4301] usb 7-1: can't read configurations, error -22
[  557.073542][ T4301] usb usb7-port1: unable to enumerate USB device
[  557.142059][T10739] loop8: detected capacity change from 0 to 1024
[  557.207856][T10739] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  557.308707][ T4486] team0 (unregistering): Port device team_slave_1 removed
[  557.366818][ T4486] team0 (unregistering): Port device team_slave_0 removed
[  557.423519][ T4486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  557.493225][ T4486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  557.905539][T10433] EXT4-fs (loop8): unmounting filesystem.
[  558.082903][T10754] loop8: detected capacity change from 0 to 2048
[  558.179031][T10754] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  558.211639][T10761] loop6: detected capacity change from 0 to 512
[  558.266706][T10754] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  558.357288][T10433] EXT4-fs (loop8): unmounting filesystem.
[  558.375144][T10761] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  558.395816][T10761] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  558.663246][ T4486] bond0 (unregistering): Released all slaves
[  558.761393][T10777] tmpfs: Unknown parameter 'mpo'
[  559.043056][ T6397] EXT4-fs (loop6): unmounting filesystem.
[  559.106400][ T4265] Bluetooth: hci1: command 0x040f tx timeout
[  559.222086][T10789] Cannot find set identified by id 0 to match
[  559.263614][T10793] loop4: detected capacity change from 0 to 256
[  559.281397][T10619] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  559.293801][T10793] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value
[  559.319499][T10619] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  559.330327][T10619] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  559.351012][T10619] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  559.456150][ T4302] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  559.582298][T10800] netlink: 2036 bytes leftover after parsing attributes in process `syz.6.2098'.
[  559.592746][T10800] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2098'.
[  559.651147][ T4302] usb 9-1: Using ep0 maxpacket: 32
[  559.659844][ T4302] usb 9-1: no configurations
[  559.680136][ T4302] usb 9-1: can't read configurations, error -22
[  559.753362][   T26] kauditd_printk_skb: 114 callbacks suppressed
[  559.753379][   T26] audit: type=1326 audit(1733627374.899:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.0.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  559.802368][T10619] 8021q: adding VLAN 0 to HW filter on device bond0
[  559.832284][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  559.839569][   T26] audit: type=1326 audit(1733627374.909:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.0.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  559.839611][   T26] audit: type=1326 audit(1733627374.909:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.0.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  559.839646][   T26] audit: type=1326 audit(1733627374.919:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.0.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  559.839682][   T26] audit: type=1326 audit(1733627374.919:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.0.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  559.839717][   T26] audit: type=1326 audit(1733627374.919:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.0.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  559.839753][   T26] audit: type=1326 audit(1733627374.919:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.0.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  559.839792][   T26] audit: type=1326 audit(1733627374.919:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.0.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  559.839827][   T26] audit: type=1326 audit(1733627374.919:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.0.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  559.839863][   T26] audit: type=1326 audit(1733627374.919:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.0.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  559.863993][ T4302] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  560.081457][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  560.105856][T10619] 8021q: adding VLAN 0 to HW filter on device team0
[  560.175175][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  560.202417][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  560.214103][ T4462] bridge0: port 1(bridge_slave_0) entered blocking state
[  560.221301][ T4462] bridge0: port 1(bridge_slave_0) entered forwarding state
[  560.286635][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  560.327873][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  560.347051][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  560.385489][ T4462] bridge0: port 2(bridge_slave_1) entered blocking state
[  560.392718][ T4462] bridge0: port 2(bridge_slave_1) entered forwarding state
[  560.422220][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  560.447936][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  560.484814][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  560.510782][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  560.532061][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  560.550645][ T4302] usb 9-1: Using ep0 maxpacket: 32
[  560.556981][ T4302] usb 9-1: no configurations
[  560.566190][ T4302] usb 9-1: can't read configurations, error -22
[  560.573608][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  560.587376][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  560.595528][ T4302] usb usb9-port1: attempt power cycle
[  560.621519][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  560.636750][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  560.645700][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  560.660827][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  560.674226][T10821] netlink: 'syz.6.2108': attribute type 4 has an invalid length.
[  560.684187][T10619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  560.693953][T10820] netlink: 'syz.6.2108': attribute type 4 has an invalid length.
[  560.826289][ T4516] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  561.016200][ T4302] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  561.016276][ T4516] usb 5-1: Using ep0 maxpacket: 16
[  561.033996][ T4516] usb 5-1: config 0 has an invalid interface number: 143 but max is 0
[  561.052746][ T4516] usb 5-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config
[  561.070105][ T4302] usb 9-1: Using ep0 maxpacket: 32
[  561.078893][ T4302] usb 9-1: no configurations
[  561.094273][ T4302] usb 9-1: can't read configurations, error -22
[  561.096088][ T4516] usb 5-1: config 0 has no interface number 0
[  561.123341][ T4516] usb 5-1: too many endpoints for config 0 interface 143 altsetting 207: 208, using maximum allowed: 30
[  561.140143][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  561.140406][ T4516] usb 5-1: config 0 interface 143 altsetting 207 has 0 endpoint descriptors, different from the interface descriptor's value: 208
[  561.167461][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  561.180248][ T4516] usb 5-1: config 0 interface 143 has no altsetting 0
[  561.186237][ T4265] Bluetooth: hci1: command 0x0419 tx timeout
[  561.192073][ T4516] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  561.203708][T10619] 8021q: adding VLAN 0 to HW filter on device batadv0
[  561.207885][ T4516] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  561.223578][ T4516] usb 5-1: Product: syz
[  561.232939][ T4516] usb 5-1: SerialNumber: syz
[  561.256633][ T4302] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  561.265309][ T4516] usb 5-1: config 0 descriptor??
[  561.296890][ T4302] usb 9-1: Using ep0 maxpacket: 32
[  561.303767][ T4302] usb 9-1: no configurations
[  561.328962][ T4302] usb 9-1: can't read configurations, error -22
[  561.342065][ T4302] usb usb9-port1: unable to enumerate USB device
[  561.482780][T10846] xt_hashlimit: max too large, truncated to 1048576
[  561.497978][T10818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  561.522495][T10849] block device autoloading is deprecated and will be removed.
[  561.530707][T10818] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  561.542084][T10850] device macvlan1 entered promiscuous mode
[  561.560752][ T4516] usb 5-1: USB disconnect, device number 22
[  561.570781][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2117'.
[  561.634047][T10846] device macvlan1 left promiscuous mode
[  561.822618][T10859] loop0: detected capacity change from 0 to 512
[  561.846978][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  561.861281][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  561.904461][T10859] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  561.907679][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  561.921806][T10859] ext4 filesystem being mounted at /435/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  561.950081][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  561.996951][T10619] device veth0_vlan entered promiscuous mode
[  562.026302][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  562.034607][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  562.070494][T10619] device veth1_vlan entered promiscuous mode
[  562.149907][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  562.167331][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  562.192618][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  562.227904][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  562.257898][T10619] device veth0_macvtap entered promiscuous mode
[  562.308368][T10619] device veth1_macvtap entered promiscuous mode
[  562.362776][T10619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  562.400824][T10874] loop6: detected capacity change from 0 to 128
[  562.411177][T10619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.442980][T10619] batman_adv: batadv0: Interface activated: batadv_slave_0
[  562.482975][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  562.495073][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  562.515522][T10874] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  562.551346][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  562.570514][T10874] ext4 filesystem being mounted at /387/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  562.630255][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  562.651360][ T4259] EXT4-fs (loop0): unmounting filesystem.
[  562.666218][T10619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.702450][T10619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.724457][T10619] batman_adv: batadv0: Interface activated: batadv_slave_1
[  562.734478][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  562.758181][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  562.787790][T10619] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  562.832924][T10619] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  562.856146][T10619] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  562.869468][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  562.875860][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  562.883125][T10619] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  562.911118][ T6397] EXT4-fs (loop6): unmounting filesystem.
[  562.952421][T10894] netlink: 'syz.8.2134': attribute type 8 has an invalid length.
[  562.961141][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2134'.
[  562.995601][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2134'.
[  563.073464][ T4418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  563.092472][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  563.107770][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.115202][ T4418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.142955][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  563.157573][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  563.166145][   T14] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  563.174876][T10898] syz.8.2135[10898] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  563.174980][T10898] syz.8.2135[10898] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  563.179944][ T4519] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  563.316345][T10902] 9pnet_fd: Insufficient options for proto=fd
[  563.373112][T10904] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  563.386114][   T14] usb 5-1: Using ep0 maxpacket: 32
[  563.396194][ T4519] usb 1-1: Using ep0 maxpacket: 16
[  563.402817][   T14] usb 5-1: no configurations
[  563.412922][ T4519] usb 1-1: config 0 has an invalid interface number: 143 but max is 0
[  563.421336][   T14] usb 5-1: can't read configurations, error -22
[  563.428418][ T4519] usb 1-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config
[  563.448941][T10906] netlink: 'syz.6.2138': attribute type 39 has an invalid length.
[  563.466183][ T4519] usb 1-1: config 0 has no interface number 0
[  563.472320][ T4519] usb 1-1: too many endpoints for config 0 interface 143 altsetting 207: 208, using maximum allowed: 30
[  563.478981][T10909] loop9: detected capacity change from 0 to 512
[  563.496465][ T4519] usb 1-1: config 0 interface 143 altsetting 207 has 0 endpoint descriptors, different from the interface descriptor's value: 208
[  563.534518][ T4519] usb 1-1: config 0 interface 143 has no altsetting 0
[  563.555702][ T4519] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  563.562519][T10909] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  563.575582][ T4519] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  563.594391][ T4519] usb 1-1: Product: syz
[  563.599008][T10909] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  563.609670][   T14] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  563.623961][ T4519] usb 1-1: SerialNumber: syz
[  563.661861][ T4519] usb 1-1: config 0 descriptor??
[  563.796508][   T14] usb 5-1: Using ep0 maxpacket: 32
[  563.802676][   T14] usb 5-1: no configurations
[  563.819729][   T14] usb 5-1: can't read configurations, error -22
[  563.841906][   T14] usb usb5-port1: attempt power cycle
[  563.874323][T10892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  563.893609][T10892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  563.927321][ T4519] usb 1-1: USB disconnect, device number 20
[  563.986961][T10619] EXT4-fs (loop9): unmounting filesystem.
[  564.081363][T10921] loop6: detected capacity change from 0 to 128
[  564.101249][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.110875][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.124094][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.126700][T10921] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  564.132089][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.149507][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.153780][T10921] ext4 filesystem being mounted at /391/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  564.157735][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.196793][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.204213][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.211698][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.219218][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.227040][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.234477][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.241963][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.250710][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.258245][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.265663][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.268494][   T14] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  564.273224][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.288190][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.295619][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.303131][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.311026][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.318839][   T14] usb 5-1: Using ep0 maxpacket: 32
[  564.319022][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.330380][   T14] usb 5-1: no configurations
[  564.331835][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.344875][   T14] usb 5-1: can't read configurations, error -22
[  564.345665][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.363082][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.370777][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.382533][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.390380][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.398195][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.405826][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.419991][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.433007][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.440973][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.452070][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.455719][ T6397] EXT4-fs (loop6): unmounting filesystem.
[  564.459903][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.473667][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.482474][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.491963][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.504129][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.506188][   T14] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  564.512057][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.534026][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.542210][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.557538][   T14] usb 5-1: Using ep0 maxpacket: 32
[  564.563850][   T14] usb 5-1: no configurations
[  564.568803][ T4516] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  564.570042][   T14] usb 5-1: can't read configurations, error -22
[  564.585972][   T14] usb usb5-port1: unable to enumerate USB device
[  564.592121][ T4516] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  564.718798][T10933] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2147'.
[  564.904363][   T26] kauditd_printk_skb: 78 callbacks suppressed
[  564.904379][   T26] audit: type=1326 audit(1733627380.049:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.9.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42ef7fed9 code=0x7ffc0000
[  564.958681][   T26] audit: type=1326 audit(1733627380.079:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.9.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe42ef7fed9 code=0x7ffc0000
[  565.008660][   T26] audit: type=1326 audit(1733627380.079:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.9.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42ef7fed9 code=0x7ffc0000
[  565.058479][   T26] audit: type=1326 audit(1733627380.079:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.9.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42ef7fed9 code=0x7ffc0000
[  565.107113][   T26] audit: type=1326 audit(1733627380.079:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.9.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe42ef7fed9 code=0x7ffc0000
[  565.130738][   T26] audit: type=1326 audit(1733627380.079:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.9.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42ef7fed9 code=0x7ffc0000
[  565.187324][   T26] audit: type=1326 audit(1733627380.089:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.9.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe42ef7fed9 code=0x7ffc0000
[  565.235820][   T26] audit: type=1326 audit(1733627380.089:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.9.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42ef7fed9 code=0x7ffc0000
[  565.292097][   T26] audit: type=1326 audit(1733627380.089:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.9.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe42ef7fed9 code=0x7ffc0000
[  565.321825][   T26] audit: type=1326 audit(1733627380.089:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.9.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42ef7fed9 code=0x7ffc0000
[  565.440563][ T4516] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  565.560119][T10968] netlink: 558 bytes leftover after parsing attributes in process `syz.0.2165'.
[  565.636191][ T4516] usb 7-1: Using ep0 maxpacket: 16
[  565.649523][ T4516] usb 7-1: config 0 has an invalid interface number: 143 but max is 0
[  565.667155][ T4516] usb 7-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config
[  565.688318][ T4516] usb 7-1: config 0 has no interface number 0
[  565.694665][ T4516] usb 7-1: too many endpoints for config 0 interface 143 altsetting 207: 208, using maximum allowed: 30
[  565.717925][ T4516] usb 7-1: config 0 interface 143 altsetting 207 has 0 endpoint descriptors, different from the interface descriptor's value: 208
[  565.741549][ T4516] usb 7-1: config 0 interface 143 has no altsetting 0
[  565.771237][ T4516] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  565.800103][ T4516] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  565.811277][T10980] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2171'.
[  565.818582][ T4516] usb 7-1: Product: syz
[  565.824545][ T4516] usb 7-1: SerialNumber: syz
[  565.833176][ T4516] usb 7-1: config 0 descriptor??
[  565.938527][T10984] netlink: 'syz.4.2172': attribute type 32 has an invalid length.
[  566.044796][T10953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.068828][T10953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  566.095231][ T4516] usb 7-1: USB disconnect, device number 42
[  566.589609][T11012] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  566.816181][ T4519] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  567.006441][ T4519] usb 10-1: Using ep0 maxpacket: 32
[  567.014492][ T4519] usb 10-1: no configurations
[  567.034432][ T4519] usb 10-1: can't read configurations, error -22
[  567.206374][ T4519] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  567.366427][ T5293] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  567.401255][ T4519] usb 10-1: Using ep0 maxpacket: 32
[  567.407590][ T4519] usb 10-1: no configurations
[  567.412317][ T4519] usb 10-1: can't read configurations, error -22
[  567.445756][ T4519] usb usb10-port1: attempt power cycle
[  567.541495][T11057] loop6: detected capacity change from 0 to 512
[  567.560763][ T5293] usb 5-1: Using ep0 maxpacket: 16
[  567.568929][ T5293] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  567.582167][T11057] EXT4-fs: Ignoring removed mblk_io_submit option
[  567.588883][ T5293] usb 5-1: config 0 has an invalid descriptor of length 208, skipping remainder of the config
[  567.604892][T11057] EXT4-fs: Ignoring removed bh option
[  567.610440][ T5293] usb 5-1: config 0 has no interface number 0
[  567.621787][T11057] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  567.633987][ T5293] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  567.656731][ T5293] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  567.666659][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  567.674774][ T5293] usb 5-1: Product: syz
[  567.680373][ T5293] usb 5-1: SerialNumber: syz
[  567.685215][T11057] EXT4-fs (loop6): 1 truncate cleaned up
[  567.692037][T11057] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  567.692964][ T5293] usb 5-1: config 0 descriptor??
[  567.856183][ T4519] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  567.862191][ T6397] EXT4-fs (loop6): unmounting filesystem.
[  567.896675][ T4519] usb 10-1: Using ep0 maxpacket: 32
[  567.910142][ T4519] usb 10-1: no configurations
[  567.915047][T11036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  567.928187][ T4519] usb 10-1: can't read configurations, error -22
[  567.939519][T11036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  567.955135][T11064] loop6: detected capacity change from 0 to 512
[  567.962826][ T5293] usbhid 5-1:0.8: couldn't find an input interrupt endpoint
[  567.972008][ T5293] usb 5-1: USB disconnect, device number 27
[  567.996243][T11064] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  568.005323][T11064] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  568.028738][T11064] Process accounting resumed
[  568.052820][T11064] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[  568.088652][ T6397] EXT4-fs (loop6): unmounting filesystem.
[  568.107463][ T4519] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  568.142632][ T4519] usb 10-1: Using ep0 maxpacket: 32
[  568.149276][ T4519] usb 10-1: no configurations
[  568.162159][ T4519] usb 10-1: can't read configurations, error -22
[  568.172730][T11069] loop6: detected capacity change from 0 to 128
[  568.183352][ T4519] usb usb10-port1: unable to enumerate USB device
[  568.201578][T11069] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  568.211944][T11069] ext4 filesystem being mounted at /403/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  568.309749][T11072] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  568.309749][T11072]    program syz.0.2210 not setting count and/or reply_len properly
[  568.310328][ T6397] EXT4-fs (loop6): unmounting filesystem.
[  568.659566][T11086] loop8: detected capacity change from 0 to 256
[  568.688424][T11086] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  568.747656][T11086] FAT-fs (loop8): Directory bread(block 64) failed
[  568.764428][T11086] FAT-fs (loop8): Directory bread(block 65) failed
[  568.780496][T11086] FAT-fs (loop8): Directory bread(block 66) failed
[  568.814028][T11086] FAT-fs (loop8): Directory bread(block 67) failed
[  568.826749][T11086] FAT-fs (loop8): Directory bread(block 68) failed
[  568.833335][T11086] FAT-fs (loop8): Directory bread(block 69) failed
[  568.869508][T11086] FAT-fs (loop8): Directory bread(block 70) failed
[  568.886663][T11086] FAT-fs (loop8): Directory bread(block 71) failed
[  568.893335][T11086] FAT-fs (loop8): Directory bread(block 72) failed
[  568.905854][T11086] FAT-fs (loop8): Directory bread(block 73) failed
[  569.095599][T11102] syz.4.2226[11102] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  569.095708][T11102] syz.4.2226[11102] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  569.213707][T11111] bond0: (slave vlan0): Opening slave failed
[  569.244103][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2227'.
[  569.270101][T11109] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 34183 - 0
[  569.279347][T11109] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 34183 - 0
[  569.291282][T11109] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 34183 - 0
[  569.303273][T11109] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 34183 - 0
[  569.315057][T11109] device geneve2 entered promiscuous mode
[  569.361663][  T127] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  569.566309][  T127] usb 1-1: Using ep0 maxpacket: 16
[  569.574765][  T127] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  569.598329][  T127] usb 1-1: config 0 has an invalid descriptor of length 208, skipping remainder of the config
[  569.626763][  T127] usb 1-1: config 0 has no interface number 0
[  569.639094][  T127] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  569.665754][  T127] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  569.685188][  T127] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  569.699187][  T127] usb 1-1: Product: syz
[  569.713133][  T127] usb 1-1: SerialNumber: syz
[  569.726685][  T127] usb 1-1: config 0 descriptor??
[  569.921234][   T26] kauditd_printk_skb: 177 callbacks suppressed
[  569.921251][   T26] audit: type=1326 audit(1733627385.069:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11123 comm="syz.4.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  569.960512][T11104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  569.997284][T11104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  570.039908][  T127] usbhid 1-1:0.8: couldn't find an input interrupt endpoint
[  570.050927][   T26] audit: type=1326 audit(1733627385.129:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11123 comm="syz.4.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  570.058027][  T127] usb 1-1: USB disconnect, device number 21
[  570.151038][   T26] audit: type=1326 audit(1733627385.129:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11123 comm="syz.4.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  570.207453][   T26] audit: type=1326 audit(1733627385.129:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11123 comm="syz.4.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  570.211537][T11126] loop9: detected capacity change from 0 to 1024
[  570.281412][T11126] EXT4-fs: Ignoring removed nobh option
[  570.291774][T11126] EXT4-fs: Ignoring removed nomblk_io_submit option
[  570.320891][T11126] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  570.355438][   T26] audit: type=1326 audit(1733627385.499:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11130 comm="syz.8.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1517fed9 code=0x7ffc0000
[  570.363319][T11126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  570.417033][   T26] audit: type=1326 audit(1733627385.529:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11130 comm="syz.8.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1517fed9 code=0x7ffc0000
[  570.464815][T11126] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  570.498465][T11126] EXT4-fs (loop9): re-mounted. Quota mode: writeback.
[  570.521972][   T26] audit: type=1326 audit(1733627385.529:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11130 comm="syz.8.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1517fed9 code=0x7ffc0000
[  570.656101][   T26] audit: type=1326 audit(1733627385.529:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11130 comm="syz.8.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1517fed9 code=0x7ffc0000
[  570.699322][T10619] EXT4-fs (loop9): unmounting filesystem.
[  570.716377][   T26] audit: type=1326 audit(1733627385.529:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11130 comm="syz.8.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1517fed9 code=0x7ffc0000
[  570.766217][   T26] audit: type=1326 audit(1733627385.529:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11130 comm="syz.8.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1517fed9 code=0x7ffc0000
[  570.977192][T11149] 9pnet_fd: Insufficient options for proto=fd
[  570.986201][ T5293] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  571.146128][ T5293] usb 1-1: device descriptor read/64, error -71
[  571.416191][ T5293] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  571.536286][ T4516] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  571.578678][ T5293] usb 1-1: device descriptor read/64, error -71
[  571.708761][ T5293] usb usb1-port1: attempt power cycle
[  571.726102][ T4516] usb 10-1: Using ep0 maxpacket: 16
[  571.733510][ T4516] usb 10-1: config 0 has an invalid interface number: 8 but max is 0
[  571.751937][ T4516] usb 10-1: config 0 has an invalid descriptor of length 208, skipping remainder of the config
[  571.777904][ T4516] usb 10-1: config 0 has no interface number 0
[  571.795763][ T4516] usb 10-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  571.831132][ T4516] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  571.850861][ T4516] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  571.866114][ T4516] usb 10-1: Product: syz
[  571.876258][ T4516] usb 10-1: SerialNumber: syz
[  571.879520][T11178] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2260'.
[  571.892141][ T4516] usb 10-1: config 0 descriptor??
[  572.054716][T11182] loop6: detected capacity change from 0 to 128
[  572.090799][T11183] loop4: detected capacity change from 0 to 512
[  572.103133][T11161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  572.116302][T11161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  572.131091][ T5293] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  572.138636][ T4516] usbhid 10-1:0.8: couldn't find an input interrupt endpoint
[  572.156304][ T4516] usb 10-1: USB disconnect, device number 6
[  572.171224][ T5293] usb 1-1: device descriptor read/8, error -71
[  572.198310][T11183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  572.208837][T11183] ext4 filesystem being mounted at /552/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  572.261903][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  572.315230][T11186] syz.6.2261: attempt to access beyond end of device
[  572.315230][T11186] loop6: rw=2049, sector=164, nr_sectors = 16 limit=128
[  572.329658][T11186] syz.6.2261: attempt to access beyond end of device
[  572.329658][T11186] loop6: rw=2049, sector=188, nr_sectors = 8 limit=128
[  572.446128][ T5293] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  572.487065][ T5293] usb 1-1: device descriptor read/8, error -71
[  572.533822][T11194] loop4: detected capacity change from 0 to 512
[  572.542699][T11194] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  572.590773][T11194] EXT4-fs (loop4): 1 truncate cleaned up
[  572.609624][ T5293] usb usb1-port1: unable to enumerate USB device
[  572.616308][T11194] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  572.703058][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  572.982600][ T4316] kworker/u4:7: attempt to access beyond end of device
[  572.982600][ T4316] loop6: rw=1, sector=180, nr_sectors = 8 limit=128
[  573.027182][ T4316] kworker/u4:7: attempt to access beyond end of device
[  573.027182][ T4316] loop6: rw=1, sector=196, nr_sectors = 8 limit=128
[  573.063008][ T4316] kworker/u4:7: attempt to access beyond end of device
[  573.063008][ T4316] loop6: rw=1, sector=212, nr_sectors = 528 limit=128
[  573.224407][T11213] loop4: detected capacity change from 0 to 512
[  573.274152][T11213] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  573.290875][T11213] ext4 filesystem being mounted at /557/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  573.334300][T11219] loop8: detected capacity change from 0 to 128
[  573.353989][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  573.391853][T11219] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  573.410980][T11219] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  573.456829][T11227] loop4: detected capacity change from 0 to 128
[  573.553500][T10433] EXT4-fs (loop8): unmounting filesystem.
[  573.596377][ T5293] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  573.690418][T11236] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2282'.
[  573.725996][T11236] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2282'.
[  573.776369][T11237] syz.4.2279: attempt to access beyond end of device
[  573.776369][T11237] loop4: rw=34817, sector=97, nr_sectors = 32 limit=128
[  573.799502][ T5293] usb 7-1: Using ep0 maxpacket: 16
[  573.833680][ T5293] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  573.841809][ T5293] usb 7-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config
[  573.865583][ T5293] usb 7-1: config 0 has no interface number 0
[  573.871776][ T5293] usb 7-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  573.932110][ T5293] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  573.962770][ T5293] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  573.993340][ T5293] usb 7-1: Product: syz
[  574.020018][ T5293] usb 7-1: SerialNumber: syz
[  574.064368][ T5293] usb 7-1: config 0 descriptor??
[  574.094775][ T5293] usbhid 7-1:0.8: couldn't find an input interrupt endpoint
[  574.240982][T11244] loop8: detected capacity change from 0 to 1024
[  574.345061][T11244] EXT4-fs: Ignoring removed oldalloc option
[  574.350525][T11222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  574.412445][T11222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  574.465450][ T4301] usb 7-1: USB disconnect, device number 43
[  574.511770][T11244] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  574.573256][T11252] loop9: detected capacity change from 0 to 512
[  574.580756][T11252] EXT4-fs: inline encryption not supported
[  574.623593][T11252] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  574.657659][T11252] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  574.689450][T11252] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #2: comm syz.9.2287: corrupted inode contents
[  574.722386][T11252] EXT4-fs error (device loop9): ext4_dirty_inode:6089: inode #2: comm syz.9.2287: mark_inode_dirty error
[  574.741446][T10433] EXT4-fs (loop8): unmounting filesystem.
[  574.750385][T11252] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #2: comm syz.9.2287: corrupted inode contents
[  574.777293][T11252] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #2: comm syz.9.2287: mark_inode_dirty error
[  574.913911][T10619] EXT4-fs (loop9): unmounting filesystem.
[  574.958076][T11260] loop8: detected capacity change from 0 to 512
[  575.011221][T11260] EXT4-fs (loop8): orphan cleanup on readonly fs
[  575.082778][   T26] kauditd_printk_skb: 127 callbacks suppressed
[  575.082794][   T26] audit: type=1326 audit(1733627390.229:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11268 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  575.086620][T11260] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2290: bg 0: block 248: padding at end of block bitmap is not set
[  575.090698][   T26] audit: type=1326 audit(1733627390.239:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11268 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe734f7e840 code=0x7ffc0000
[  575.155400][   T26] audit: type=1326 audit(1733627390.239:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11268 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  575.177977][   T26] audit: type=1326 audit(1733627390.239:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11268 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe734f7eb3a code=0x7ffc0000
[  575.204698][   T26] audit: type=1326 audit(1733627390.299:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11268 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe734fb2785 code=0x7ffc0000
[  575.235801][T11260] Quota error (device loop8): write_blk: dquota write failed
[  575.255734][   T26] audit: type=1326 audit(1733627390.379:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11271 comm="syz.6.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a6b7fed9 code=0x7ffc0000
[  575.272268][T11260] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  575.306766][   T26] audit: type=1326 audit(1733627390.379:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11270 comm="syz.4.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  575.341480][T11260] EXT4-fs error (device loop8): ext4_acquire_dquot:6801: comm syz.8.2290: Failed to acquire dquot type 1
[  575.345233][T11275] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2297'.
[  575.367474][   T26] audit: type=1326 audit(1733627390.379:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11270 comm="syz.4.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa34f17fed9 code=0x7ffc0000
[  575.413120][T11260] EXT4-fs (loop8): 1 truncate cleaned up
[  575.427470][T11280] loop9: detected capacity change from 0 to 512
[  575.444689][T11260] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  575.525203][T11280] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  575.547968][T10433] EXT4-fs (loop8): unmounting filesystem.
[  575.589631][T11280] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  575.838272][T10619] EXT4-fs (loop9): unmounting filesystem.
[  575.943866][T11293] loop8: detected capacity change from 0 to 512
[  575.995009][T11295] loop9: detected capacity change from 0 to 128
[  576.042146][T11293] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  576.063731][T11295] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  576.077957][T11295] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  576.084966][T11293] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  576.189184][T10619] EXT4-fs (loop9): unmounting filesystem.
[  576.300534][  T127] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  576.349305][T11311] loop9: detected capacity change from 0 to 512
[  576.391921][T11311] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  576.405164][T11311] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  576.502377][  T127] usb 7-1: Using ep0 maxpacket: 16
[  576.512991][T10619] EXT4-fs (loop9): unmounting filesystem.
[  576.517495][T11317] loop4: detected capacity change from 0 to 128
[  576.520706][  T127] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  576.539465][  T127] usb 7-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config
[  576.551929][  T127] usb 7-1: config 0 has no interface number 0
[  576.558301][  T127] usb 7-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  576.583837][  T127] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  576.611885][  T127] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  576.624378][  T127] usb 7-1: Product: syz
[  576.629790][  T127] usb 7-1: SerialNumber: syz
[  576.640501][  T127] usb 7-1: config 0 descriptor??
[  576.658911][  T127] usbhid 7-1:0.8: couldn't find an input interrupt endpoint
[  576.698583][T11318] syz.4.2311: attempt to access beyond end of device
[  576.698583][T11318] loop4: rw=2049, sector=180, nr_sectors = 16 limit=128
[  576.714843][T11318] syz.4.2311: attempt to access beyond end of device
[  576.714843][T11318] loop4: rw=2049, sector=204, nr_sectors = 8 limit=128
[  576.732752][T11318] syz.4.2311: attempt to access beyond end of device
[  576.732752][T11318] loop4: rw=2049, sector=220, nr_sectors = 8 limit=128
[  576.733646][T10433] EXT4-fs (loop8): unmounting filesystem.
[  576.866845][T11299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  576.886277][T11299] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  577.235813][T11333] loop9: detected capacity change from 0 to 1024
[  577.253220][T11333] EXT4-fs: Ignoring removed nobh option
[  577.261740][T11333] EXT4-fs: Ignoring removed nomblk_io_submit option
[  577.291146][T11333] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  577.308674][T11333] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  577.341070][T11333] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  577.425034][   T51] kworker/u4:3: attempt to access beyond end of device
[  577.425034][   T51] loop4: rw=1, sector=196, nr_sectors = 8 limit=128
[  577.468262][   T51] kworker/u4:3: attempt to access beyond end of device
[  577.468262][   T51] loop4: rw=1, sector=212, nr_sectors = 8 limit=128
[  577.510957][   T51] kworker/u4:3: attempt to access beyond end of device
[  577.510957][   T51] loop4: rw=1, sector=228, nr_sectors = 8 limit=128
[  577.543880][   T51] kworker/u4:3: attempt to access beyond end of device
[  577.543880][   T51] loop4: rw=1, sector=244, nr_sectors = 480 limit=128
[  577.573085][T10619] EXT4-fs (loop9): unmounting filesystem.
[  577.794041][T11355] loop4: detected capacity change from 0 to 512
[  577.857957][T11355] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  577.874143][T11355] ext4 filesystem being mounted at /565/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  578.025442][T11366] loop9: detected capacity change from 0 to 512
[  578.054924][T11366] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  578.065652][T11366] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  578.137846][T11366] Process accounting resumed
[  578.147812][T11366] EXT4-fs (loop9): re-mounted. Quota mode: writeback.
[  578.186553][T10619] EXT4-fs (loop9): unmounting filesystem.
[  578.438764][T11373] smc: net device bond0 applied user defined pnetid SYZ0
[  578.612024][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  579.082163][ T4519] usb 7-1: USB disconnect, device number 44
[  579.359292][T11409] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2350'.
[  579.653425][T11419] loop9: detected capacity change from 0 to 4096
[  579.671055][T11423] loop6: detected capacity change from 0 to 128
[  579.681911][T11423] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  579.698496][T11419] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  579.715037][T11423] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  579.741103][T11419] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #15: comm syz.9.2356: corrupted inode contents
[  579.758802][T11419] EXT4-fs error (device loop9): ext4_dirty_inode:6089: inode #15: comm syz.9.2356: mark_inode_dirty error
[  579.771633][T11419] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #15: comm syz.9.2356: corrupted inode contents
[  579.785748][T11419] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #15: comm syz.9.2356: mark_inode_dirty error
[  579.787926][T11423] xt_hashlimit: size too large, truncated to 1048576
[  579.802122][T11419] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #15: comm syz.9.2356: corrupted inode contents
[  579.820577][T11419] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #15: comm syz.9.2356: mark_inode_dirty error
[  579.846535][T11419] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #15: comm syz.9.2356: corrupted inode contents
[  579.865354][T11419] EXT4-fs error (device loop9): ext4_truncate:4311: inode #15: comm syz.9.2356: mark_inode_dirty error
[  579.877025][T11419] EXT4-fs error (device loop9) in ext4_setattr:5628: Corrupt filesystem
[  579.896125][ T4516] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  580.110614][ T4516] usb 5-1: Using ep0 maxpacket: 16
[  580.120681][ T4516] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  580.148877][ T4516] usb 5-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config
[  580.183119][ T4516] usb 5-1: config 0 has no interface number 0
[  580.203284][ T4516] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  580.241668][ T4516] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  580.259801][ T4516] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  580.276878][ T4516] usb 5-1: Product: syz
[  580.285589][ T4516] usb 5-1: SerialNumber: syz
[  580.306872][ T4516] usb 5-1: config 0 descriptor??
[  580.333160][ T4516] usbhid 5-1:0.8: couldn't find an input interrupt endpoint
[  580.418703][T10619] EXT4-fs (loop9): unmounting filesystem.
[  580.533343][T11421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  580.558565][T11421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  581.844282][   T26] kauditd_printk_skb: 435 callbacks suppressed
[  581.844299][   T26] audit: type=1326 audit(1733627396.989:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  581.949742][   T26] audit: type=1326 audit(1733627396.989:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  581.982460][   T26] audit: type=1326 audit(1733627396.989:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  582.029312][   T26] audit: type=1326 audit(1733627396.989:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  582.096672][   T26] audit: type=1326 audit(1733627396.989:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  582.165279][   T26] audit: type=1326 audit(1733627396.999:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  582.201846][   T26] audit: type=1326 audit(1733627396.999:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  582.265380][   T26] audit: type=1326 audit(1733627396.999:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  582.305625][   T26] audit: type=1326 audit(1733627396.999:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  582.356308][   T26] audit: type=1326 audit(1733627396.999:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734f7fed9 code=0x7ffc0000
[  582.694847][T11473] loop9: detected capacity change from 0 to 512
[  582.704823][ T5293] usb 5-1: USB disconnect, device number 28
[  582.769682][T11473] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  582.817370][T11473] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  583.004042][T10619] EXT4-fs (loop9): unmounting filesystem.
[  583.479296][T11501] loop9: detected capacity change from 0 to 128
[  583.507290][T11501] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  583.536505][T11501] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  583.676204][T10619] EXT4-fs (loop9): unmounting filesystem.
[  583.706188][ T5293] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  583.797735][T11510] loop9: detected capacity change from 0 to 512
[  583.878101][T11510] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  583.896555][T11510] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  583.916530][ T5293] usb 5-1: Using ep0 maxpacket: 16
[  583.924790][ T5293] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  583.935160][ T5293] usb 5-1: config 0 has no interface number 0
[  583.941601][ T5293] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  583.957280][ T5293] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  583.966577][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  583.974689][ T5293] usb 5-1: Product: syz
[  583.979082][ T5293] usb 5-1: SerialNumber: syz
[  583.991695][ T5293] usb 5-1: config 0 descriptor??
[  584.000601][ T5293] usbhid 5-1:0.8: couldn't find an input interrupt endpoint
[  584.059947][T10619] EXT4-fs (loop9): unmounting filesystem.
[  584.210975][T11500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  584.240938][T11500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  584.550578][T11535] loop8: detected capacity change from 0 to 128
[  584.578665][T11535] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  584.591057][T11535] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  584.691707][T10433] EXT4-fs (loop8): unmounting filesystem.
[  584.782259][T11544] loop9: detected capacity change from 0 to 512
[  584.806864][T11549] xt_ipcomp: unknown flags 12
[  584.823889][T11544] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  584.846313][T11544] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  584.945252][T10619] EXT4-fs (loop9): unmounting filesystem.
[  585.446164][T11582] loop6: detected capacity change from 0 to 512
[  585.501544][T11582] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  585.512193][T11582] ext4 filesystem being mounted at /431/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  585.616172][ T6397] EXT4-fs (loop6): unmounting filesystem.
[  585.621424][T11590] loop8: detected capacity change from 0 to 2048
[  585.709068][T11593] loop6: detected capacity change from 0 to 1024
[  585.729397][T11593] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  585.745942][T11593] sch_tbf: burst 19869 is lower than device lo mtu (11337746) !
[  585.828100][ T6397] EXT4-fs (loop6): unmounting filesystem.
[  585.937461][T11599] loop6: detected capacity change from 0 to 1024
[  585.957187][T11599] EXT4-fs: Ignoring removed oldalloc option
[  585.994750][T11599] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  586.019060][T11606] loop9: detected capacity change from 0 to 128
[  586.059905][T11606] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  586.084543][T11606] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  586.129781][ T6397] EXT4-fs (loop6): unmounting filesystem.
[  586.255400][T10619] EXT4-fs (loop9): unmounting filesystem.
[  586.447918][T11619] loop6: detected capacity change from 0 to 512
[  586.493388][ T5293] usb 5-1: USB disconnect, device number 29
[  586.510276][T11619] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  586.539760][T11619] ext4 filesystem being mounted at /436/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  586.560021][T11625] netlink: 'syz.9.2436': attribute type 13 has an invalid length.
[  586.581875][T11625] gretap0: refused to change device tx_queue_len
[  586.593559][T11625] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  586.658807][T11619] ------------[ cut here ]------------
[  586.664310][T11619] Looking for class "&ei->i_data_sem" with key init_once.__key.786, but found a different class "&ei->i_data_sem" with the same key
[  586.678166][T11619] WARNING: CPU: 0 PID: 11619 at kernel/locking/lockdep.c:933 look_up_lock_class+0xc2/0x140
[  586.688198][T11619] Modules linked in:
[  586.692134][T11619] CPU: 0 PID: 11619 Comm: syz.6.2438 Not tainted 6.1.119-syzkaller #0
[  586.700316][T11619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  586.710396][T11619] RIP: 0010:look_up_lock_class+0xc2/0x140
[  586.716148][T11619] Code: 8b 16 48 c7 c0 20 c1 db 90 48 39 c2 74 46 f6 05 f0 cb d4 03 01 75 3d c6 05 e7 cb d4 03 01 48 c7 c7 60 22 0c 8b e8 1e de a0 f6 <0f> 0b eb 26 e8 45 33 8f f9 48 c7 c7 a0 21 0c 8b 89 de e8 d7 f3 fd
[  586.735798][T11619] RSP: 0018:ffffc90003437410 EFLAGS: 00010046
[  586.741909][T11619] RAX: 88647974c6426700 RBX: ffffffff90c578e0 RCX: 0000000000080000
[  586.749913][T11619] RDX: ffffc900154f7000 RSI: 00000000000056a4 RDI: 00000000000056a5
[  586.757915][T11619] RBP: ffffc90003437510 R08: ffffffff8152b88e R09: fffff52000686de1
[  586.765922][T11619] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
[  586.773947][T11619] R13: 1ffff92000686e90 R14: ffff88804631dcd0 R15: ffffffff974dff41
[  586.781951][T11619] FS:  00007f04a79ea6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  586.790919][T11619] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  586.797530][T11619] CR2: 000000110c2852f6 CR3: 0000000056410000 CR4: 00000000003506f0
[  586.805562][T11619] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  586.813562][T11619] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  586.821561][T11619] Call Trace:
[  586.824849][T11619]  <TASK>
[  586.827794][T11619]  ? __warn+0x15a/0x520
[  586.831969][T11619]  ? look_up_lock_class+0xc2/0x140
[  586.837275][T11619]  ? report_bug+0x2af/0x500
[  586.841796][T11619]  ? look_up_lock_class+0xc2/0x140
[  586.846922][T11619]  ? handle_bug+0x3d/0x70
[  586.851270][T11619]  ? exc_invalid_op+0x16/0x40
[  586.855962][T11619]  ? asm_exc_invalid_op+0x16/0x20
[  586.861002][T11619]  ? __warn_printk+0x28e/0x350
[  586.865773][T11619]  ? look_up_lock_class+0xc2/0x140
[  586.870895][T11619]  register_lock_class+0x100/0x990
[  586.876033][T11619]  ? is_dynamic_key+0x260/0x260
[  586.880912][T11619]  ? mark_lock+0x9a/0x340
[  586.885255][T11619]  __lock_acquire+0xd3/0x1f80
[  586.890220][T11619]  lock_acquire+0x1f8/0x5a0
[  586.894742][T11619]  ? ext4_move_extents+0x3a0/0xe10
[  586.899864][T11619]  ? read_lock_is_recursive+0x10/0x10
[  586.905253][T11619]  ? __might_sleep+0xb0/0xb0
[  586.909847][T11619]  ? rwsem_write_trylock+0x166/0x210
[  586.915142][T11619]  ? inode_owner_or_capable+0x210/0x210
[  586.920707][T11619]  ? clear_nonspinnable+0x60/0x60
[  586.925749][T11619]  down_write_nested+0x39/0x60
[  586.930524][T11619]  ? ext4_move_extents+0x3a0/0xe10
[  586.935640][T11619]  ext4_move_extents+0x3a0/0xe10
[  586.940588][T11619]  ? rcu_read_lock_any_held+0xb3/0x160
[  586.946065][T11619]  ? ext4_double_up_write_data_sem+0x30/0x30
[  586.952065][T11619]  ext4_ioctl+0x3a8d/0x5f60
[  586.956580][T11619]  ? kasan_set_track+0x4b/0x70
[  586.961358][T11619]  ? security_file_ioctl+0x6d/0xa0
[  586.966475][T11619]  ? __se_sys_ioctl+0x47/0x160
[  586.971245][T11619]  ? do_syscall_64+0x3b/0xb0
[  586.975853][T11619]  ? ext4_fileattr_set+0x1770/0x1770
[  586.981162][T11619]  ? do_vfs_ioctl+0x1ab2/0x2a90
[  586.986021][T11619]  ? __x64_compat_sys_ioctl+0x80/0x80
[  586.991405][T11619]  ? __lock_acquire+0x1f80/0x1f80
[  586.996442][T11619]  ? lockdep_hardirqs_on+0x94/0x130
[  587.001663][T11619]  ? __kmem_cache_free+0x25c/0x3c0
[  587.006785][T11619]  ? tomoyo_path_number_perm+0x61b/0x7f0
[  587.012434][T11619]  ? tomoyo_path_number_perm+0x68a/0x7f0
[  587.018085][T11619]  ? tomoyo_path_number_perm+0x1f2/0x7f0
[  587.023735][T11619]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  587.029216][T11619]  ? __fget_files+0x28/0x4a0
[  587.033820][T11619]  ? __fget_files+0x28/0x4a0
[  587.038416][T11619]  ? __fget_files+0x435/0x4a0
[  587.043095][T11619]  ? __fget_files+0x28/0x4a0
[  587.047697][T11619]  ? bpf_lsm_file_ioctl+0x5/0x10
[  587.052641][T11619]  ? security_file_ioctl+0x7d/0xa0
[  587.057754][T11619]  ? ext4_fileattr_set+0x1770/0x1770
[  587.063059][T11619]  __se_sys_ioctl+0xf1/0x160
[  587.067653][T11619]  do_syscall_64+0x3b/0xb0
[  587.072081][T11619]  ? clear_bhb_loop+0x45/0xa0
[  587.076770][T11619]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  587.082691][T11619] RIP: 0033:0x7f04a6b7fed9
[  587.087119][T11619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  587.106743][T11619] RSP: 002b:00007f04a79ea058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  587.115171][T11619] RAX: ffffffffffffffda RBX: 00007f04a6d45fa0 RCX: 00007f04a6b7fed9
[  587.123169][T11619] RDX: 0000000020000240 RSI: 00000000c028660f RDI: 0000000000000007
[  587.131143][T11619] RBP: 00007f04a6bf3cc8 R08: 0000000000000000 R09: 0000000000000000
[  587.139115][T11619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  587.147088][T11619] R13: 0000000000000000 R14: 00007f04a6d45fa0 R15: 00007ffe89ae20c8
[  587.155077][T11619]  </TASK>
[  587.158101][T11619] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  587.165383][T11619] CPU: 0 PID: 11619 Comm: syz.6.2438 Not tainted 6.1.119-syzkaller #0
[  587.173534][T11619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  587.183590][T11619] Call Trace:
[  587.186872][T11619]  <TASK>
[  587.189803][T11619]  dump_stack_lvl+0x1e3/0x2cb
[  587.194496][T11619]  ? nf_tcp_handle_invalid+0x642/0x642
[  587.199965][T11619]  ? panic+0x764/0x764
[  587.204042][T11619]  ? vscnprintf+0x59/0x80
[  587.208384][T11619]  panic+0x318/0x764
[  587.212281][T11619]  ? __warn+0x169/0x520
[  587.216442][T11619]  ? memcpy_page_flushcache+0xfc/0xfc
[  587.221827][T11619]  __warn+0x348/0x520
[  587.225814][T11619]  ? look_up_lock_class+0xc2/0x140
[  587.230929][T11619]  report_bug+0x2af/0x500
[  587.235273][T11619]  ? look_up_lock_class+0xc2/0x140
[  587.240392][T11619]  handle_bug+0x3d/0x70
[  587.244565][T11619]  exc_invalid_op+0x16/0x40
[  587.249087][T11619]  asm_exc_invalid_op+0x16/0x20
[  587.253946][T11619] RIP: 0010:look_up_lock_class+0xc2/0x140
[  587.259711][T11619] Code: 8b 16 48 c7 c0 20 c1 db 90 48 39 c2 74 46 f6 05 f0 cb d4 03 01 75 3d c6 05 e7 cb d4 03 01 48 c7 c7 60 22 0c 8b e8 1e de a0 f6 <0f> 0b eb 26 e8 45 33 8f f9 48 c7 c7 a0 21 0c 8b 89 de e8 d7 f3 fd
[  587.279319][T11619] RSP: 0018:ffffc90003437410 EFLAGS: 00010046
[  587.285388][T11619] RAX: 88647974c6426700 RBX: ffffffff90c578e0 RCX: 0000000000080000
[  587.293360][T11619] RDX: ffffc900154f7000 RSI: 00000000000056a4 RDI: 00000000000056a5
[  587.301337][T11619] RBP: ffffc90003437510 R08: ffffffff8152b88e R09: fffff52000686de1
[  587.309313][T11619] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
[  587.317286][T11619] R13: 1ffff92000686e90 R14: ffff88804631dcd0 R15: ffffffff974dff41
[  587.325263][T11619]  ? __warn_printk+0x28e/0x350
[  587.330044][T11619]  register_lock_class+0x100/0x990
[  587.335173][T11619]  ? is_dynamic_key+0x260/0x260
[  587.340040][T11619]  ? mark_lock+0x9a/0x340
[  587.344384][T11619]  __lock_acquire+0xd3/0x1f80
[  587.349080][T11619]  lock_acquire+0x1f8/0x5a0
[  587.353594][T11619]  ? ext4_move_extents+0x3a0/0xe10
[  587.358729][T11619]  ? read_lock_is_recursive+0x10/0x10
[  587.364114][T11619]  ? __might_sleep+0xb0/0xb0
[  587.368706][T11619]  ? rwsem_write_trylock+0x166/0x210
[  587.374001][T11619]  ? inode_owner_or_capable+0x210/0x210
[  587.379564][T11619]  ? clear_nonspinnable+0x60/0x60
[  587.384601][T11619]  down_write_nested+0x39/0x60
[  587.389375][T11619]  ? ext4_move_extents+0x3a0/0xe10
[  587.394490][T11619]  ext4_move_extents+0x3a0/0xe10
[  587.399437][T11619]  ? rcu_read_lock_any_held+0xb3/0x160
[  587.404906][T11619]  ? ext4_double_up_write_data_sem+0x30/0x30
[  587.410900][T11619]  ext4_ioctl+0x3a8d/0x5f60
[  587.415414][T11619]  ? kasan_set_track+0x4b/0x70
[  587.420193][T11619]  ? security_file_ioctl+0x6d/0xa0
[  587.425305][T11619]  ? __se_sys_ioctl+0x47/0x160
[  587.430071][T11619]  ? do_syscall_64+0x3b/0xb0
[  587.434676][T11619]  ? ext4_fileattr_set+0x1770/0x1770
[  587.439981][T11619]  ? do_vfs_ioctl+0x1ab2/0x2a90
[  587.444836][T11619]  ? __x64_compat_sys_ioctl+0x80/0x80
[  587.450212][T11619]  ? __lock_acquire+0x1f80/0x1f80
[  587.455247][T11619]  ? lockdep_hardirqs_on+0x94/0x130
[  587.460448][T11619]  ? __kmem_cache_free+0x25c/0x3c0
[  587.465564][T11619]  ? tomoyo_path_number_perm+0x61b/0x7f0
[  587.471214][T11619]  ? tomoyo_path_number_perm+0x68a/0x7f0
[  587.476862][T11619]  ? tomoyo_path_number_perm+0x1f2/0x7f0
[  587.482506][T11619]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  587.487984][T11619]  ? __fget_files+0x28/0x4a0
[  587.492593][T11619]  ? __fget_files+0x28/0x4a0
[  587.497184][T11619]  ? __fget_files+0x435/0x4a0
[  587.501863][T11619]  ? __fget_files+0x28/0x4a0
[  587.506546][T11619]  ? bpf_lsm_file_ioctl+0x5/0x10
[  587.511490][T11619]  ? security_file_ioctl+0x7d/0xa0
[  587.516601][T11619]  ? ext4_fileattr_set+0x1770/0x1770
[  587.521902][T11619]  __se_sys_ioctl+0xf1/0x160
[  587.526495][T11619]  do_syscall_64+0x3b/0xb0
[  587.530920][T11619]  ? clear_bhb_loop+0x45/0xa0
[  587.535609][T11619]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  587.541515][T11619] RIP: 0033:0x7f04a6b7fed9
[  587.545931][T11619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  587.565544][T11619] RSP: 002b:00007f04a79ea058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  587.573977][T11619] RAX: ffffffffffffffda RBX: 00007f04a6d45fa0 RCX: 00007f04a6b7fed9
[  587.581960][T11619] RDX: 0000000020000240 RSI: 00000000c028660f RDI: 0000000000000007
[  587.589939][T11619] RBP: 00007f04a6bf3cc8 R08: 0000000000000000 R09: 0000000000000000
[  587.597914][T11619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  587.605890][T11619] R13: 0000000000000000 R14: 00007f04a6d45fa0 R15: 00007ffe89ae20c8
[  587.613873][T11619]  </TASK>
[  587.617246][T11619] Kernel Offset: disabled
[  587.621604][T11619] Rebooting in 86400 seconds..