last executing test programs:

12m56.830971174s ago: executing program 1 (id=684):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0xfffffffffffffffe, 0x0)

12m56.586929275s ago: executing program 1 (id=688):
r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x45, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x32, 0x30, 0x35, 0x30, 0x39, 0x30, 0x66, 0x30, 0x30, 0x34]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x66, 0x30, 0x5, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x63, 0x35, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x31, 0x30, 0x30, 0x31, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000800)={'fscrypt:', @auto=[0x39, 0x34, 0x31, 0x38, 0x30, 0x30, 0x66, 0x65, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3a}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x35, 0x30, 0x32, 0x30, 0x30, 0x31, 0x30, 0x30, 0x35, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445c66778899aabbccddeeff00112333445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x2f}, 0x48, r0)

12m56.410453404s ago: executing program 1 (id=689):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = dup(r2)
read$FUSE(r3, &(0x7f0000002000)={0x2020}, 0xfffffc7c)

12m56.175133506s ago: executing program 1 (id=691):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b8, &(0x7f00000010c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
getcwd(&(0x7f0000000140)=""/81, 0x51)

12m55.762923886s ago: executing program 1 (id=694):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

12m54.923125508s ago: executing program 1 (id=700):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x10004004, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb2a}], 0x1, 0x40032061, 0x0)

12m54.587094974s ago: executing program 32 (id=700):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x10004004, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb2a}], 0x1, 0x40032061, 0x0)

6m16.044772808s ago: executing program 3 (id=3131):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}]}, 0x30}}, 0x0)

6m13.932032162s ago: executing program 3 (id=3142):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000001000)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002580)={r5, r4, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c)
syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[], 0x0)

6m13.740368591s ago: executing program 3 (id=3143):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x321002, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100)=""/1000, 0x3e8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001500)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000000c0)=ANY=[], 0x361, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9000)
lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x4}], {}, {0x20, 0x7}}, 0x34, 0x3)
getdents64(r1, 0x0, 0x0)
openat(r0, &(0x7f0000000143), 0x800, 0x0)
getdents64(r0, &(0x7f0000000580)=""/100, 0x64)

6m13.386708279s ago: executing program 3 (id=3145):
syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)

6m13.086623193s ago: executing program 3 (id=3147):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800091, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0], 0x1, 0x6b4, &(0x7f0000000a00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
lseek(r2, 0x6, 0x1)
syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00')
fanotify_init(0x10, 0x8000)
syz_emit_ethernet(0x76, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = gettid()
r7 = syz_open_procfs(r6, &(0x7f0000000000)='net/tcp\x00')
syz_read_part_table(0x5d4, &(0x7f0000000000)="$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")
pread64(r7, &(0x7f0000001340)=""/102390, 0x18ff6, 0x2013)

6m12.662837584s ago: executing program 3 (id=3152):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$eJzs3V1v00oawPHHpV2irNRdLSuEqgJD2ZWKVIKTQFDEldeZpIbEjmwHtVeooimqSGFFWWnbG7Y37K50zofgXJ4Pcb4ROh+BI4+dvuYF6Oup/r+ojGOPPY/TaB6miccCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSk6fmdJTWcWwuD1t7TbO8jK+TegWJEuyJW8iO5nNxIV934697m68k/czKbPpuVXFLkZPuP1//85NrkRH//EQF/k5++80ibW9uvV3q97ruTCuQCunl1+LaG9r0o8FpOQysvClS1UrEfLNYjVfeaOlqOYt1SbqidOAjVvHtPFavVstKF5aDjN2pOU/dXPr5fsu2KelpoayeMAv/B00LkLnrNpuc3TJ1kc1LncfJGfObFKtZOS6m19V63PO4EkkrFr6lUGlepZJdKxWKpVKw8qj56bNuTR1bYh8iRGif3psXv0wn23sDxTGT5X5riiS8dWRI18OFKTUIJpDVke6af///+QI9sd3/+72f5G3ubZ8Tk/1vps1vD8v+QWM7usSlbsi2vZUV60pOuvDv3iM720RAtvngSSSCetMQxa1S2RklVKlIRW17IotSnkl9iXTxpipZIliWSWLR5R7kSihZHYgkkFCXz4so9UVKUqlSlLEq0FGRZAumILw2piWOOsibr5nUvi7KGxbhbqTj0NPL9911XSiPOlvyP4zvJ7hs4li/9/A8AAAAAAC4ty/z1fcr83DTP615T2+cdFgAAAAAAOEHmk//ZpDDfzropFuN/AAAAAAAuG8tcY2eJSF5up0trYpnLpfgjAAAAAAAAl4T5/P9WUpg5UG6LtTtdCuN/AAAAAAAuif+NnWM/al+1fvlVwnDK2mkv/c3aMHPzOhtX0v2uHD5iXJ+xprODmKKSFpOTrp61cmml3UkwP2fF2rg4rL0AnN0A/vMtAVyblB/kTlrnzmparmZb/pS2kq97TV1wg+aTojjO9ESsl+J/vVn/t5jT/7/fmrZyst7rFl6+7a2aWHaSo+xsZBMoHplHcUQs7818C+aai4FnPGUuxMjazVuytt7r2u2lq9mRnY2JdGHiYIsfpke0+VHm0lpz2Yy3+f6WtM1c0maxMOzssyiKxzzzj3I3rXN3/m5aDIiiNC6K0v4oBr8Wx4+iPC6K8jGjAIDzsjYmC1lyJO9+Ry93KLsn3d5XZHf5xuz+UebTOvMzpmOdnBnQo9vjenT7mNnt5yP3QBqWY5N2fzyUVT8lO3wa2m7ULFnJS3jl/cY/5frm1vb99Y2VV91X3TelUrliP7TtRyWZMqeRFeQeAMAA+++xYw3M/6PuwvPlS5K7H2aj6p3Do+os4/1l9ysFBXkpb6Unq7JgrjYw3zgY+P+O/L6vISyMGbXmTZpM7/CyMGJU9wdzlUP/uKWRdQ/GUD6LXwUAAGdmbkweHp3/07H7wphx98FcPnp0nN93tzYAAHA6dPjZysf/tcLQa78oVqtFJ17UKgzcZyr0ag2tPD/Wobvo+A2t2mEQB27QTBaeezUdqajTbgdhrOpBqNpB5C2Z6QNVduv3SLccP/bcqN3UTqSVG/ix48aq5kWuanf+0fSiRR2anaO2dr265zqxF/gqCjqhqwtKRVrvq+jVtB97dS9Z9FU79FpOmFPPg2anpVVNR27oteMgPWC/Lc+vB2HLHLZw3i82AAAXxObW9uuVXq/77hQXBjacO/NTBQAAmTFZGgAAAAAAAAAAAAAAAAAAAAAAXABncf0fC5d8oT8V9EWJh4UTWBjbdXw49c4JwKn6LQAA//8FIlBo")
syz_usb_connect$cdc_ecm(0x0, 0x68, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r2 = getpid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000904}, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
write(0xffffffffffffffff, &(0x7f0000000400)="30000200190001001122334455", 0xd)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)

6m11.641813164s ago: executing program 33 (id=3152):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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")
syz_usb_connect$cdc_ecm(0x0, 0x68, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r2 = getpid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000904}, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
write(0xffffffffffffffff, &(0x7f0000000400)="30000200190001001122334455", 0xd)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)

25.079063191s ago: executing program 4 (id=3980):
gettid()
timer_create(0x7, 0x0, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
ioperm(0x4, 0x8, 0x5)
llistxattr(0x0, 0x0, 0x0)

24.547150097s ago: executing program 4 (id=3983):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x746, 0x3, 0x3, 0xfb, 0x8, 0xb}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @none, 0x9}, 0xe)
connect$bt_l2cap(r0, 0x0, 0x0)

22.491059637s ago: executing program 4 (id=3987):
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x4000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
shmctl$IPC_RMID(0x0, 0x0)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x4ef, 0x1, 0x7fff, 0xb1, "fe6735f4050000000000002000", 0x6, 0x10})
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000))

18.96299297s ago: executing program 4 (id=3990):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3})
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f604514)

15.179400256s ago: executing program 6 (id=4000):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x2, 0x54000, 0x8, 0xffffffffffffffff, 0x20})

12.974406354s ago: executing program 6 (id=4003):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x3)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)

10.518577115s ago: executing program 6 (id=4005):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x65}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)

10.18709218s ago: executing program 0 (id=4007):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000c0000000800000002"], 0x50)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x400)
socket$unix(0x1, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0xfffd, @multicast2}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfffb, 0x0, 0x4, 0x6, 0x800})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

9.124426683s ago: executing program 2 (id=4008):
r0 = gettid()
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000))
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df00", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0x0, 0x400000000000, 0x0, 0x1000000000000000, 0x0, 0xb22f, {0x0, 0x1003, 0x0, 0x0, 0xd, 0xfffffffffffffffd, 0xfffffffd, 0xfffffffe, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
io_uring_enter(r1, 0xe7f, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8)

9.028830788s ago: executing program 5 (id=4009):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x813, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0)={[{@i_version}, {@quota}]}, 0xf3, 0x490, &(0x7f0000000dc0)="$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")
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffc000/0x4000)=nil)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, 0x0)

8.943223921s ago: executing program 4 (id=4010):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xd)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)

8.815136828s ago: executing program 0 (id=4011):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = getpgid(0xffffffffffffffff)
r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/netfilter\x00')
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f000000e400)={0x2020}, 0x2020)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001a00010000000000000000", @ANYRES64=r0, @ANYRES64=r1], 0x38}}, 0x0)

8.639392117s ago: executing program 0 (id=4012):
socket(0x10, 0x4, 0x2)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
epoll_create1(0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04480f000800"/18], 0x12)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)

7.074146123s ago: executing program 4 (id=4013):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6)
rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
semget(0x0, 0x4, 0x640)

6.566522918s ago: executing program 5 (id=4014):
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x4, 0xffffffff, 0xfffffffd, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffdff, 0xffffffff, 0xffffffff, 0xfffffbff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0xe, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4241, 0x0, 0x0, 0x1}], '\x00', 0xfffffffe})
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})

5.907035221s ago: executing program 0 (id=4015):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000440)="5578d591", 0x4}, {0x0}], 0x2)

5.71773343s ago: executing program 5 (id=4016):
dup(0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x3008000, &(0x7f0000000040), 0x30, 0x527, &(0x7f0000000200)="$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")
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
statx(r0, 0x0, 0x3800, 0x100, 0x0)

5.680076232s ago: executing program 0 (id=4017):
timerfd_create(0x4, 0x800)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ptrace$peek(0x3, r3, &(0x7f0000000180))
sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48)
setsockopt(r0, 0xffffc654, 0x4, &(0x7f00000006c0)="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", 0x1000)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r7 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "ba853641a01fa9175c02fbafc6d972a2375894179d9a1aa5156b2343b8eb9ee72bbe6d439728895fd207cb8f72df8aff1130e69d9f24d2a454869dd076e9174b", 0x35}, 0x48, r6)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@keyring={'key_or_keyring:', r7})
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r6)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5, <r8=>0xffffffffffffffff}, 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r8, 0x0, &(0x7f0000001780)=""/4096}, 0x20)
socket$inet6(0xa, 0x2, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000010046)

3.986880584s ago: executing program 0 (id=4018):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000b00)=""/252)

3.46035323s ago: executing program 5 (id=4019):
gettid()
timer_create(0x7, 0x0, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
ioperm(0x4, 0x8, 0x5)
llistxattr(0x0, 0x0, 0x0)

3.218877072s ago: executing program 2 (id=4020):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3})
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f604514)

3.046784841s ago: executing program 5 (id=4021):
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20882, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x34, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x7fff)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200081, &(0x7f0000000600)={[], [{@fowner_gt={'fowner>', 0xee01}}, {@uid_lt}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@pcr={'pcr', 0x3d, 0x31}}, {@dont_measure}, {@audit}, {@uid_eq}, {@pcr={'pcr', 0x3d, 0x34}}, {@uid_eq}]}, 0x3, 0x57b, &(0x7f00000014c0)="$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")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
pipe2(&(0x7f0000000140)={<r3=>0xffffffffffffffff}, 0x80000)
fcntl$setstatus(r3, 0x4, 0x2400)
fcntl$setstatus(r3, 0x4, 0x2400)
write(r2, &(0x7f0000000040), 0xffffff4a)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
gettid()
r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$setperm(0x5, r4, 0x0)
timer_create(0x3, 0x0, &(0x7f00000000c0))

2.638845761s ago: executing program 6 (id=4022):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = getpgid(0xffffffffffffffff)
r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/netfilter\x00')
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f000000e400)={0x2020}, 0x2020)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001a00010000000000000000", @ANYRES64=r0, @ANYRES64=r1], 0x38}}, 0x0)

2.462611869s ago: executing program 2 (id=4023):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000100)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}], '\x00', 0xffffffff})
mmap(&(0x7f000000a000)=nil, 0x1000, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$int_out(r0, 0x5460, &(0x7f0000000bc0))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@noinit_itable}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}, {@lazytime}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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")
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x38, 0x48, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback={0xf000000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0'}, 0xb)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
unlink(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x76a, &(0x7f0000000a40)={[{@noload}, {@acl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@commit={'commit', 0x3d, 0x3}}, {@data_err_ignore, 0x0}, {}, {@delalloc}, {@dax_inode}, {@data_writeback}, {@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6e}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1000}}, {@barrier}, {@errors_continue}, {@nouid32}], [{@obj_user={'obj_user', 0x3d, '$'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@context={'context', 0x3d, 'user_u'}}, {@measure}], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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")
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4eb, &(0x7f00000010c0)="$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")

2.411919812s ago: executing program 6 (id=4024):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)
setresuid(0x0, 0xffffffffffffffff, 0xee01)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00')
fchdir(r5)
sendmmsg$unix(r4, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004)

739.322874ms ago: executing program 6 (id=4025):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3})
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

712.265565ms ago: executing program 5 (id=4026):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000)

450.974698ms ago: executing program 2 (id=4027):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x60442, 0x0)
syz_open_procfs(0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x8, 0xfffffffe}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)

239.294158ms ago: executing program 2 (id=4028):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x130c, 0x5e39, 0x26, &(0x7f0000000080)={[0x5]}, 0x8)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x200)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0x1, 0x1, 0x0, 0xfdfdffff, 0x8})
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x2a082)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r2, 0x80000000)
write(r0, &(0x7f0000000640)='high-speed', 0xa)

0s ago: executing program 2 (id=4029):
r0 = syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x69b, &(0x7f0000000f40)="$eJzs3c1vHGcdB/DvrNcvm0qO26ZpQJUwjVQQEYkdK4VwSUAIBalCVThwthqnsbJJg+OiNAfiABJXDvwB5RAucAIhJCSkSOUK3CpuFqdKSFx6Sntg0M7Ortfuru282obPJ5p9nmeemWd+85uXfYmsCfB/68KJNO+nlQsn3rjVaa/fW2iv31u41qsnmUzSSJrdIsX1pPggOZ/ulM91ZtbDFaO288vlsxc//Hj9o26rmY3xOi+t0QE2d7MXa/WU2SRjdfkYNo331qONN7lRLfqZ6STseC9xsNfGk5Sb/PDoRs8w5dhAY+T1DhwcRfd9c0D3+p9JDiWZ6r2hrXU7G88+wh091L1o7enFAQAAAPvG4Qd3kluZ3us4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CCpn/9f1FOjV59N0Xv+/8TAM/Yn9jjc0baPbKpXud94FsEAAAAAAAAAwNP1hQf5zcWynO61y6L6P/9Xq8aR6vW5vJubWcpKTuZWFrOa1axkPsnMwEATtxZXV1fme2t+WpbliDVPD13z9C4Dbj2JvQYAAAAAAACA/xnn6vInuZDpPY4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2KZKxblFNR3r1mTSaSaaSTHSWW0v+3qsfZPf3OgAAAAB4Bg4/yIPcynSvXRbVd/6j1ff+qbyb61nNclbTzlIuVb8FdL/1N9bvLbTX7y1c60yfHfeb/96o/356xzCqEdP97WH4lo9VS7RyOcvVnJN5K++knUtpVGt2HOvFMzyuu52YinNdZbk1htt/HRbZpbrs7Pkv6nJ/mKkyMt7PyFwdWycbz2+ficGj8whbmk+j/8vPkYfI+bltt1L8p3dMDvXmJM99d+ecjz/UzjyWrZk4PXD2Hd0+E8mX/vDbH1xpX796pVg7sX9Oo4cw+c+Nq2ZrJhYGMvHyrjNx+ebBzMRWjbzUr1/Id/L9nMhs3sxKlvOjLGY1S5nNt6vaYn0+d15nts/U+U2tN3eKYqI+LmNbYvri4W65XUyvVutOZznfyzu5lKW8Xv07nfl8LWdyJmcHjvBLu7jqG0Ou+j+ODv74l+tKK8nP63J/6OT1+YG8Dt5zZ6q+wTmNlJPd9V54YvfGvubn60rnSPy0LveHfiam0n+X6EX3Yi8D4wOZuNtf9VfVbeVm+/rVlSuLN7aMW6wN395r2bz7++dG0jlfXugcrKq1+ezo9L04tG++6jvS72ts7ft1q9+305U6UX+G++xIp6u+l4f2LVR9xwb6Nj5vfVqWZffzFgD73qGvHJpo/av1t9b7rZ+1rrTemPrW5NcnX5nI+F/Gv9GcG3ut8Urxu7yfH2fnb+gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCObr53++piu720sqVSluWdEV1PpZJmsmnOn/80sEyS6mFAux+ws/T5RlLNaaauPFxgdx5td+4+ahL+UR+TZ5LwJ1KZGnn+bK18Upbl/oh5N5Wytl/i2YvKM32+IrAHTq1eu3Hq5nu3v7p8bfHtpbeXrp89c+bs3Nkzry+curzcXprrvu51lMDTMPAJHAAAAAAAAAAAADggdvfHOcXj/W0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGO4cCLN+ykyP3dyrtNev7fQ7ky9+saSnyRpJClmk+KD5Hy6U2YGhitGbWctufjhx+sfdVvNeqqWb2y33u6s1VNmk4zV5RBTw2aWd0aNV1Tj3Bg93i4V/T3sJOx4L3Gw1/4bAAD//9sBHIg=")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d30303030303030303030303030303030303030303033372c6e6f6465636f6d706f73652c00"], 0x1, 0x6a4, &(0x7f0000002000)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=")
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x5})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140))
fcntl$setownex(r0, 0xf, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="6f73782e636f6d2e6170706c652e46696e646572496e666f002a7a5a3e47207f3e6f5321c72e7b9551be8b8629359b3365847ce5c3feaa8cb4794cf9b791"], 0x0, 0x30)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)

kernel console output (not intermixed with test programs):

link becomes ready
[  518.713233][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  518.832667][T11626] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  518.864311][T11919] netlink: 'syz.5.2882': attribute type 29 has an invalid length.
[  518.886537][T11626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  519.174107][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  519.246380][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  519.342722][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  519.406959][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  519.490615][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  519.549174][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  519.567772][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  519.577363][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  519.592399][T11919] netlink: 'syz.5.2882': attribute type 29 has an invalid length.
[  519.622484][T11924] netlink: 'syz.5.2882': attribute type 29 has an invalid length.
[  522.683738][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  522.691556][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  522.739756][T11626] 8021q: adding VLAN 0 to HW filter on device batadv0
[  522.893081][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  522.911780][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  522.990759][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  523.023497][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  523.053115][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  523.083528][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  523.129411][T11626] device veth0_vlan entered promiscuous mode
[  523.161314][T11626] device veth1_vlan entered promiscuous mode
[  523.247760][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  523.274313][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  523.299078][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  523.324035][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  523.361853][T11626] device veth0_macvtap entered promiscuous mode
[  523.384388][T11626] device veth1_macvtap entered promiscuous mode
[  523.437240][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  523.463307][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.473255][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  523.532507][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.573513][T11626] batman_adv: batadv0: Interface activated: batadv_slave_0
[  523.595848][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  523.618885][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  523.642269][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  523.663741][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  523.710573][T11626] batman_adv: batadv0: Interface activated: batadv_slave_1
[  523.723007][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  523.743343][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  523.775122][T11626] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  523.814017][T11626] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  523.837949][T11626] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  523.881383][T11626] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  524.765987][T11989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2898'.
[  525.252197][T11989] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  525.261724][T11989] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  525.271669][T11989] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  525.585507][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  525.628652][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  525.735094][ T6214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  525.749488][ T6214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  525.793438][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  525.854326][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  527.632110][T12027] loop3: detected capacity change from 0 to 16
[  527.701760][T12027] erofs: (device loop3): mounted with root inode @ nid 36.
[  528.636933][T12033] loop3: detected capacity change from 0 to 128
[  530.350826][   T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  530.367452][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  530.378060][   T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  530.388392][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  530.396407][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  530.407421][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  532.375429][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  532.381876][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  532.499305][T12053] chnl_net:caif_netlink_parms(): no params data found
[  532.537696][T12093] Mass Storage Function, version: 2009/09/11
[  532.543911][T12093] LUN: removable file: (no medium)
[  532.557532][T12093] LUN: removable file: (no medium)
[  532.732716][ T4289] Bluetooth: hci1: command 0x0409 tx timeout
[  533.589588][T12102] loop3: detected capacity change from 0 to 1024
[  533.600046][T12053] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.228108][ T4289] Bluetooth: hci1: command 0x041b tx timeout
[  535.282630][T12053] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.442420][T12053] device bridge_slave_0 entered promiscuous mode
[  535.650845][T12053] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.658671][T12053] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.668196][T12053] device bridge_slave_1 entered promiscuous mode
[  535.709410][T12053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  535.773158][T12053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  535.915193][T12053] team0: Port device team_slave_0 added
[  535.969900][T12053] team0: Port device team_slave_1 added
[  536.140577][T12053] batman_adv: batadv0: Adding interface: batadv_slave_0
[  536.299213][T12053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.840306][T12053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  537.029655][T12053] batman_adv: batadv0: Adding interface: batadv_slave_1
[  537.064994][T12053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  537.231617][T12053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  537.417844][T12053] device hsr_slave_0 entered promiscuous mode
[  537.473842][T12053] device hsr_slave_1 entered promiscuous mode
[  537.498662][ T4289] Bluetooth: hci1: command 0x040f tx timeout
[  537.512516][T12053] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  537.520890][T12053] Cannot create hsr debugfs directory
[  538.664382][T12053] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.107344][T12163] ip_tables: iptables: counters copy to user failed while replacing table
[  539.716878][T12053] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.818849][ T4289] Bluetooth: hci1: command 0x0419 tx timeout
[  540.040784][T12053] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.405765][T12053] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.899370][T12053] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  540.932160][T12053] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  540.947970][T12053] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  540.969711][T12053] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  541.086156][T12053] 8021q: adding VLAN 0 to HW filter on device bond0
[  541.125846][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  541.139053][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  541.158336][T12053] 8021q: adding VLAN 0 to HW filter on device team0
[  541.178522][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  541.191966][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  541.217918][ T5675] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.225135][ T5675] bridge0: port 1(bridge_slave_0) entered forwarding state
[  541.254829][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  541.277931][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  541.309111][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  541.337627][ T5675] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.344864][ T5675] bridge0: port 2(bridge_slave_1) entered forwarding state
[  541.547330][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  541.585442][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  541.672492][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  541.723215][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  541.777046][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  541.802160][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  541.855579][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  541.881424][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  541.912416][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  541.949427][T12053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  541.972576][T12053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  541.993552][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  542.020628][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  543.118954][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  543.148376][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  543.175226][T12053] 8021q: adding VLAN 0 to HW filter on device batadv0
[  543.238539][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  543.249258][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  543.323739][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  543.342295][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  543.401519][T12053] device veth0_vlan entered promiscuous mode
[  543.443489][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  543.458334][T12230] loop3: detected capacity change from 0 to 16
[  543.475112][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  543.499359][T12230] erofs: (device loop3): mounted with root inode @ nid 36.
[  543.543660][T12053] device veth1_vlan entered promiscuous mode
[  543.658852][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  543.712697][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  543.755183][T12053] device veth0_macvtap entered promiscuous mode
[  543.802293][T12053] device veth1_macvtap entered promiscuous mode
[  543.865546][T12053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.893625][T12053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.933917][T12053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.976593][T12053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.010636][T12053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  544.045305][T12053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.090065][T12053] batman_adv: batadv0: Interface activated: batadv_slave_0
[  544.209722][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  544.260546][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  544.274191][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  544.309984][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  544.341872][T12053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  544.379010][T12053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.420964][T12053] batman_adv: batadv0: Interface activated: batadv_slave_1
[  544.466398][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  544.497069][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  544.582280][T12053] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  544.613491][T12053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  544.656682][T12053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  544.697054][T12053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  544.912862][ T5288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  544.920799][ T5288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.967518][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  545.006291][ T6176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  545.015855][ T6176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  545.025507][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  546.108615][T12254] loop2: detected capacity change from 0 to 8
[  546.206618][T12254] SQUASHFS error: Failed to read block 0x4de: -5
[  546.286005][T12254] SQUASHFS error: Failed to read block 0x4de: -5
[  546.342200][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  546.342217][   T26] audit: type=1800 audit(1789508460.389:67): pid=12254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2912" name="file1" dev="loop2" ino=5 res=0 errno=0
[  549.666209][T12291] loop3: detected capacity change from 0 to 16
[  549.705836][T12291] erofs: (device loop3): mounted with root inode @ nid 36.
[  552.667925][T12306] loop2: detected capacity change from 0 to 2048
[  552.694127][T12306] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value
[  553.638675][T11990] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  554.697998][T12329] loop3: detected capacity change from 0 to 1024
[  554.728503][T12329] EXT4-fs: Ignoring removed orlov option
[  554.812846][T12329] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  555.091410][T11626] EXT4-fs (loop3): unmounting filesystem.
[  555.299734][ T4325] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  555.342941][T12344] loop3: detected capacity change from 0 to 2048
[  555.525455][ T4325] usb 3-1: Using ep0 maxpacket: 8
[  555.535075][ T4325] usb 3-1: config 0 has no interfaces?
[  555.599976][ T4325] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  555.786437][T12350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2995'.
[  555.802451][ T4325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.811321][ T4325] usb 3-1: Product: syz
[  555.816325][ T4325] usb 3-1: Manufacturer: syz
[  555.828594][ T4325] usb 3-1: SerialNumber: syz
[  555.840321][ T4325] usb 3-1: config 0 descriptor??
[  556.478409][ T9164] usb 3-1: USB disconnect, device number 8
[  557.849029][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3001'.
[  557.926541][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3001'.
[  559.080020][T12382] loop3: detected capacity change from 0 to 2048
[  559.088008][T12382] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value
[  559.120699][T11990] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  559.685273][T12397] loop2: detected capacity change from 0 to 1024
[  559.742562][T12397] hfsplus: xattr searching failed
[  559.765800][   T26] audit: type=1804 audit(1789508472.781:68): pid=12397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3013" name="/newroot/10/file1/file0" dev="loop2" ino=2 res=1 errno=0
[  559.768890][T12397] hfsplus: xattr searching failed
[  561.870112][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3017'.
[  561.904204][T12419] loop3: detected capacity change from 0 to 512
[  561.955996][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3017'.
[  562.026708][T12419] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.3018: bad orphan inode 13
[  562.102203][T12419] ext4_test_bit(bit=12, block=4) = 1
[  562.110779][ T4289] Bluetooth: hci4: command 0x0406 tx timeout
[  562.134427][T12419] is_bad_inode(inode)=0
[  562.141622][T12419] NEXT_ORPHAN(inode)=0
[  562.176189][T12419] max_ino=32
[  562.183036][T12419] i_nlink=1
[  562.193745][T12419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  562.271077][T12417] team0: Port device team_slave_0 removed
[  562.397405][T11626] EXT4-fs (loop3): unmounting filesystem.
[  562.825448][T12435] loop2: detected capacity change from 0 to 1024
[  563.258110][T12435] hfsplus: request for non-existent node 33554434 in B*Tree
[  563.271589][T12435] hfsplus: request for non-existent node 33554434 in B*Tree
[  563.302281][T12435] hfsplus: request for non-existent node 33554434 in B*Tree
[  563.311292][T12435] hfsplus: request for non-existent node 33554434 in B*Tree
[  563.339967][T12435] hfsplus: request for non-existent node 33554434 in B*Tree
[  563.391975][T12435] hfsplus: request for non-existent node 33554434 in B*Tree
[  565.012884][T12451] loop2: detected capacity change from 0 to 512
[  565.222123][T12451] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.3033: bad orphan inode 13
[  565.285650][T12451] ext4_test_bit(bit=12, block=4) = 1
[  565.302513][T12451] is_bad_inode(inode)=0
[  565.306916][T12451] NEXT_ORPHAN(inode)=0
[  565.320102][T12451] max_ino=32
[  565.323399][T12451] i_nlink=1
[  565.326699][T12451] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  566.454450][T12053] EXT4-fs (loop2): unmounting filesystem.
[  566.864581][T12472] loop2: detected capacity change from 0 to 128
[  566.893828][ T4336] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  567.567088][T12481] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[12053] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12481]
[  567.714446][ T4336] usb 4-1: Using ep0 maxpacket: 16
[  567.733969][ T4336] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  567.914788][ T4336] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  568.000970][ T4336] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  568.040151][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3042'.
[  568.057859][ T4336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.147998][ T4336] usb 4-1: config 0 descriptor??
[  568.191993][T12487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3043'.
[  568.249008][ T4336] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  568.331848][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3042'.
[  570.353556][T12502] netlink: 'syz.0.3048': attribute type 11 has an invalid length.
[  570.448125][ T4355] usb 4-1: USB disconnect, device number 11
[  570.450573][T12505] loop2: detected capacity change from 0 to 16
[  570.466628][T12505] erofs: (device loop2): mounted with root inode @ nid 36.
[  571.558456][T12517] loop3: detected capacity change from 0 to 512
[  571.649162][T12517] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  571.767720][T12517] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  571.776823][T12517] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  574.174309][T11626] EXT4-fs (loop3): unmounting filesystem.
[  574.471973][T12535] loop2: detected capacity change from 0 to 2048
[  574.567047][T12539] loop3: detected capacity change from 0 to 512
[  574.669511][T12539] exFAT-fs (loop3): invalid boot record signature
[  574.706730][T12539] exFAT-fs (loop3): failed to read boot sector
[  574.725017][T12535] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  574.747288][T12539] exFAT-fs (loop3): failed to recognize exfat type
[  574.966432][T12053] EXT4-fs (loop2): unmounting filesystem.
[  575.627504][T12561] loop2: detected capacity change from 0 to 128
[  575.649067][T12561] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  576.264848][   T26] audit: type=1800 audit(1789508487.470:69): pid=12561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3065" name="file1" dev="loop2" ino=1048842 res=0 errno=0
[  579.308493][T12581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3076'.
[  579.725027][   T26] audit: type=1326 audit(1789508491.198:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.3075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09da39e159 code=0x7ffc0000
[  579.865393][   T26] audit: type=1326 audit(1789508491.198:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.3075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09da39e159 code=0x7ffc0000
[  580.057662][   T26] audit: type=1326 audit(1789508491.225:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.3075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f09da39e159 code=0x7ffc0000
[  581.348209][   T26] audit: type=1326 audit(1789508491.225:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.3075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09da39e159 code=0x7ffc0000
[  581.411698][   T26] audit: type=1326 audit(1789508491.225:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.3075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09da39e159 code=0x7ffc0000
[  581.437751][   T26] audit: type=1326 audit(1789508491.235:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.3075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f09da39e159 code=0x7ffc0000
[  581.498346][   T26] audit: type=1326 audit(1789508491.235:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.3075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09da39e159 code=0x7ffc0000
[  581.592651][T12599] loop3: detected capacity change from 0 to 164
[  581.593089][   T26] audit: type=1326 audit(1789508491.235:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.3075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09da39e159 code=0x7ffc0000
[  581.638102][T12600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  581.710499][   T26] audit: type=1326 audit(1789508491.235:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.3075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09da39e159 code=0x7ffc0000
[  581.844510][   T26] audit: type=1326 audit(1789508491.235:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.3075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09da39e159 code=0x7ffc0000
[  581.939332][   T26] audit: type=1326 audit(1789508491.235:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.3075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09da39e159 code=0x7ffc0000
[  581.966938][T12605] loop2: detected capacity change from 0 to 1024
[  583.435732][   T26] audit: type=1326 audit(1789508491.235:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.3075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f09da39e159 code=0x7ffc0000
[  583.535643][   T26] audit: type=1326 audit(1789508491.235:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.3075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09da39e159 code=0x7ffc0000
[  583.561664][   T26] audit: type=1326 audit(1789508491.235:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.3075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09da39e159 code=0x7ffc0000
[  583.603858][   T26] audit: type=1326 audit(1789508491.235:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.3075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f09da39e159 code=0x7ffc0000
[  583.684189][   T26] audit: type=1326 audit(1789508491.235:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.3075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09da39e159 code=0x7ffc0000
[  583.796887][   T26] audit: type=1326 audit(1789508491.235:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.3075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09da39e159 code=0x7ffc0000
[  585.890786][T12628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3087'.
[  586.358121][T12642] loop2: detected capacity change from 0 to 256
[  587.536556][T12642] syz.2.3099: attempt to access beyond end of device
[  587.536556][T12642] loop2: rw=2049, sector=256, nr_sectors = 288 limit=256
[  587.589219][T12642] syz.2.3099: attempt to access beyond end of device
[  587.589219][T12642] loop2: rw=2049, sector=608, nr_sectors = 112 limit=256
[  587.717889][ T6040] kworker/u4:14: attempt to access beyond end of device
[  587.717889][ T6040] loop2: rw=1, sector=256, nr_sectors = 8 limit=256
[  589.030069][T12659] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3107'.
[  589.070931][T12661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3106'.
[  592.051640][T12690] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3119'.
[  592.552876][T12696] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3120'.
[  593.946371][T12710] loop2: detected capacity change from 0 to 8
[  596.124303][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3128'.
[  596.133389][T12714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3128'.
[  596.411139][T12723] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3133'.
[  596.527451][T12725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3132'.
[  596.722467][T12730] loop2: detected capacity change from 0 to 2048
[  596.730481][T12730] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value
[  598.863256][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  598.884507][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  598.894666][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  598.905999][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  598.913770][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  598.921473][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  598.961693][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  598.968131][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  599.281808][T12759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3146'.
[  599.455837][T12763] loop2: detected capacity change from 0 to 512
[  599.482679][T12763] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size
[  599.529776][T12763] 9pnet: p9_errstr2errno: server reported unknown error _alloc,i
[  599.797962][T12752] chnl_net:caif_netlink_parms(): no params data found
[  600.616271][T12752] bridge0: port 1(bridge_slave_0) entered blocking state
[  600.726833][T12752] bridge0: port 1(bridge_slave_0) entered disabled state
[  600.758031][T12752] device bridge_slave_0 entered promiscuous mode
[  600.793301][T12752] bridge0: port 2(bridge_slave_1) entered blocking state
[  600.800592][T12752] bridge0: port 2(bridge_slave_1) entered disabled state
[  600.809169][T12752] device bridge_slave_1 entered promiscuous mode
[  600.906595][T12752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  600.936706][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3156'.
[  601.127132][ T4289] Bluetooth: hci2: command 0x0409 tx timeout
[  601.199694][T12782] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  601.278776][T12752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  601.320873][T12788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3157'.
[  601.491679][T12752] team0: Port device team_slave_0 added
[  601.570332][T12752] team0: Port device team_slave_1 added
[  602.291618][T12798] usb usb8: usbfs: process 12798 (syz.2.3159) did not claim interface 0 before use
[  603.057072][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  603.069087][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  603.085869][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  603.103975][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  603.128774][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  603.136631][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  603.391677][ T4289] Bluetooth: hci2: command 0x041b tx timeout
[  603.429709][T12752] batman_adv: batadv0: Adding interface: batadv_slave_0
[  603.456964][T12752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  603.533049][T12752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  603.609482][T12752] batman_adv: batadv0: Adding interface: batadv_slave_1
[  603.627623][T12752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  603.690263][T12752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  603.927806][T12752] device hsr_slave_0 entered promiscuous mode
[  603.974211][T12752] device hsr_slave_1 entered promiscuous mode
[  604.012596][T12752] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  604.059039][T12752] Cannot create hsr debugfs directory
[  604.476279][T12813] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3162'.
[  606.007131][ T4287] Bluetooth: hci2: command 0x040f tx timeout
[  606.007233][ T4289] Bluetooth: hci4: command 0x0409 tx timeout
[  606.640758][T12829] loop2: detected capacity change from 0 to 512
[  606.752571][T12829] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.3160: bad orphan inode 13
[  606.801419][T12829] ext4_test_bit(bit=12, block=4) = 1
[  606.860427][T12829] is_bad_inode(inode)=0
[  606.866343][T12829] NEXT_ORPHAN(inode)=0
[  606.887628][T12829] max_ino=32
[  606.890935][T12829] i_nlink=1
[  606.914107][T12829] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  607.140414][T12053] EXT4-fs (loop2): unmounting filesystem.
[  607.337767][T12799] chnl_net:caif_netlink_parms(): no params data found
[  607.711951][T12848] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3169'.
[  607.812302][T12856] loop2: detected capacity change from 0 to 16
[  607.820330][T12856] erofs: (device loop2): mounted with root inode @ nid 36.
[  607.890889][T11990] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  608.333715][ T4289] Bluetooth: hci4: command 0x041b tx timeout
[  608.341062][ T4287] Bluetooth: hci2: command 0x0419 tx timeout
[  609.542404][ T6176] device hsr_slave_0 left promiscuous mode
[  609.560473][ T6176] device hsr_slave_1 left promiscuous mode
[  609.567336][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_0
[  609.635034][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_1
[  609.647726][ T6176] device bridge_slave_1 left promiscuous mode
[  609.656148][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state
[  609.693938][ T6176] device bridge_slave_0 left promiscuous mode
[  609.713615][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state
[  610.578400][ T4289] Bluetooth: hci4: command 0x040f tx timeout
[  612.246637][ T6176] team0 (unregistering): Port device team_slave_1 removed
[  612.322709][ T6176] team0 (unregistering): Port device team_slave_0 removed
[  612.413021][ T6176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  612.500747][ T6176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  613.629840][ T4289] Bluetooth: hci4: command 0x0419 tx timeout
[  614.087422][ T6176] team0 (unregistering): Port device batadv0 removed
[  614.275256][ T6176] bond0 (unregistering): Released all slaves
[  614.417955][T12799] bridge0: port 1(bridge_slave_0) entered blocking state
[  614.432388][T12799] bridge0: port 1(bridge_slave_0) entered disabled state
[  614.441293][T12799] device bridge_slave_0 entered promiscuous mode
[  614.524048][T12884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3179'.
[  614.540574][T12799] bridge0: port 2(bridge_slave_1) entered blocking state
[  614.548271][T12799] bridge0: port 2(bridge_slave_1) entered disabled state
[  614.556991][T12799] device bridge_slave_1 entered promiscuous mode
[  615.860231][T12799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  615.872938][ T4336] logitech-hidpp-device 0005:046D:B012.000B: Device not connected
[  616.017277][T12799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  616.185204][T12799] team0: Port device team_slave_0 added
[  616.211540][T12799] team0: Port device team_slave_1 added
[  616.286454][T12799] batman_adv: batadv0: Adding interface: batadv_slave_0
[  616.314693][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  616.440396][T12799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  616.492417][T12799] batman_adv: batadv0: Adding interface: batadv_slave_1
[  616.517599][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  616.599222][T12799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  616.844143][T12799] device hsr_slave_0 entered promiscuous mode
[  616.881198][T12799] device hsr_slave_1 entered promiscuous mode
[  616.895819][T12799] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  616.906519][T12799] Cannot create hsr debugfs directory
[  617.019208][T12752] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  617.178635][T12752] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  617.202552][T12752] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  617.304925][T12752] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  617.388356][T12940] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  617.408434][T12940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  617.426809][T12940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  617.820224][ T6176] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.984465][ T6176] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.502725][ T6176] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.770904][T12962] loop2: detected capacity change from 0 to 8
[  619.785419][T12962] squashfs: Unknown parameter 'threads'
[  619.795701][ T6176] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.817373][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  620.030856][T12752] 8021q: adding VLAN 0 to HW filter on device bond0
[  620.257216][T12799] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  620.532412][T12799] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  620.578123][T12799] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  620.631185][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  620.641336][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  620.680853][T12752] 8021q: adding VLAN 0 to HW filter on device team0
[  620.747409][T12799] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  620.820445][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  620.841633][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  620.862403][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.869653][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  620.896646][T12970] loop2: detected capacity change from 0 to 512
[  620.920433][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  621.009894][T12970] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  621.034525][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  621.060555][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  621.133867][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.141061][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  621.213462][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  621.240608][T12053] EXT4-fs (loop2): unmounting filesystem.
[  621.258195][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  621.286403][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  621.342484][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  621.420496][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  621.528859][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  621.629531][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  621.668228][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  621.693119][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  621.695724][ T4287] Bluetooth: Frame is too long (len 10, expected len 6)
[  621.760641][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  621.835087][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  623.505733][T12799] 8021q: adding VLAN 0 to HW filter on device bond0
[  624.580044][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  624.599913][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  624.740163][T12799] 8021q: adding VLAN 0 to HW filter on device team0
[  624.772332][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  624.800091][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  624.934329][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  624.975307][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  625.006733][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  625.014020][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  625.217593][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  625.237167][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  625.331719][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  625.357275][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.364566][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  625.421019][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  625.766896][T12752] 8021q: adding VLAN 0 to HW filter on device batadv0
[  625.866987][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  625.982255][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  626.001776][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  626.013400][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  626.026070][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  626.035527][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  626.044766][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  626.060695][T12799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  626.074046][T12799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  626.416169][T13034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3218'.
[  626.489909][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  626.501987][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  626.515322][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  626.530638][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  626.543573][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  626.658324][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  626.679421][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  627.760780][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  627.770365][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  627.784943][T12752] device veth0_vlan entered promiscuous mode
[  628.250168][T12752] device veth1_vlan entered promiscuous mode
[  629.025516][T12752] device veth0_macvtap entered promiscuous mode
[  629.078403][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  629.092277][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  629.136526][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  629.254436][ T6176] device hsr_slave_0 left promiscuous mode
[  629.293422][ T6176] device hsr_slave_1 left promiscuous mode
[  629.301919][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  629.355144][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_0
[  629.388955][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  629.408829][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_1
[  629.446013][ T6176] device bridge_slave_1 left promiscuous mode
[  629.474497][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state
[  629.507457][ T6176] device bridge_slave_0 left promiscuous mode
[  629.538000][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state
[  629.685127][T13084] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3228'.
[  629.815096][ T6176] device veth1_macvtap left promiscuous mode
[  629.865926][ T6176] device veth0_macvtap left promiscuous mode
[  629.902706][ T6176] device veth1_vlan left promiscuous mode
[  629.936119][ T6176] device veth0_vlan left promiscuous mode
[  634.153433][ T6176] team0 (unregistering): Port device team_slave_1 removed
[  634.240064][ T6176] team0 (unregistering): Port device team_slave_0 removed
[  634.329954][ T6176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  634.419822][ T6176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  635.175831][ T6176] bond0 (unregistering): Released all slaves
[  636.070308][T12752] device veth1_macvtap entered promiscuous mode
[  636.084594][T13084] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  636.094532][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  636.104445][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  636.112213][T13084] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  636.124299][T13084] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  636.267909][T12799] 8021q: adding VLAN 0 to HW filter on device batadv0
[  636.339759][T12752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  636.385748][T12752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.427307][T12752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  636.446668][T12752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.477229][T12752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  636.505605][T12752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.534279][T12752] batman_adv: batadv0: Interface activated: batadv_slave_0
[  636.546132][T12752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  636.556893][T12752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.571849][T12752] batman_adv: batadv0: Interface activated: batadv_slave_1
[  636.604689][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  636.625173][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  636.647698][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  636.669376][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  636.693080][T12752] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  636.708286][T12752] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  636.727828][T12752] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  636.746649][T12752] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  637.755562][ T5288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  637.785870][ T5288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  637.931642][ T6214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  637.944431][ T6214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  638.000980][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  638.040968][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  639.554154][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3244'.
[  639.594205][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  639.623389][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  639.656996][T13160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3244'.
[  639.669635][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3248'.
[  639.754834][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3248'.
[  640.113046][T13173] loop0: detected capacity change from 0 to 128
[  640.179949][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  640.228630][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  640.270310][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  640.287420][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  640.310353][T12799] device veth0_vlan entered promiscuous mode
[  640.329739][T13176] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3251'.
[  640.373595][T12799] device veth1_vlan entered promiscuous mode
[  640.468043][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  640.477584][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  640.493007][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  640.512035][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  640.523328][T12799] device veth0_macvtap entered promiscuous mode
[  640.545827][T12799] device veth1_macvtap entered promiscuous mode
[  640.611090][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  641.731456][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  641.789780][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  641.868930][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  641.887444][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  641.927546][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  641.952364][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  641.962902][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  642.007737][T12799] batman_adv: batadv0: Interface activated: batadv_slave_0
[  642.027875][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  642.053438][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  642.091243][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  642.228605][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  642.253973][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  642.323536][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  642.339563][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  642.350840][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  642.376598][T12799] batman_adv: batadv0: Interface activated: batadv_slave_1
[  642.414591][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  642.443658][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  642.490763][T12799] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  642.537505][T12799] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  642.560346][T12799] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  642.602727][T12799] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  642.797318][ T5822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  642.811764][ T5822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.854754][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  642.872484][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  642.882065][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.891048][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  644.202248][T13219] loop6: detected capacity change from 0 to 1024
[  644.233369][T13219] hfsplus: unable to parse mount options
[  644.690231][T13226] loop6: detected capacity change from 0 to 2048
[  644.737619][ T4289] Bluetooth: hci2: command 0x2016 tx timeout
[  645.548526][T13229] loop6: detected capacity change from 0 to 512
[  645.648249][T13229] EXT4-fs error (device loop6): ext4_orphan_get:1435: comm syz.6.3264: bad orphan inode 13
[  645.698861][T13229] ext4_test_bit(bit=12, block=4) = 1
[  645.704442][T13229] is_bad_inode(inode)=0
[  645.709828][T13229] NEXT_ORPHAN(inode)=0
[  645.726406][T13229] max_ino=32
[  645.729721][T13229] i_nlink=1
[  645.732976][T13229] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  645.857905][T12799] EXT4-fs (loop6): unmounting filesystem.
[  645.977852][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  645.989727][   T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  646.000059][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  646.010895][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  646.019411][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  646.026962][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  648.189944][T13264] loop6: detected capacity change from 0 to 512
[  648.197621][T13264] EXT4-fs: Ignoring removed mblk_io_submit option
[  648.219449][T13264] EXT4-fs: Invalid want_extra_isize 32768
[  648.340323][ T4287] Bluetooth: hci5: command 0x0409 tx timeout
[  648.434387][T13236] chnl_net:caif_netlink_parms(): no params data found
[  648.465186][T13268] loop0: detected capacity change from 0 to 512
[  648.478365][T13268] ext4: Unknown parameter 'seclabel'
[  648.745283][T13236] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.787775][T13236] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.847517][T13236] device bridge_slave_0 entered promiscuous mode
[  648.879757][T13236] bridge0: port 2(bridge_slave_1) entered blocking state
[  648.927439][T13236] bridge0: port 2(bridge_slave_1) entered disabled state
[  649.879390][T13236] device bridge_slave_1 entered promiscuous mode
[  650.004780][T13236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  651.124136][ T4287] Bluetooth: hci5: command 0x041b tx timeout
[  651.202760][T13236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  651.394907][T13236] team0: Port device team_slave_0 added
[  651.447806][T13236] team0: Port device team_slave_1 added
[  651.934794][T13236] batman_adv: batadv0: Adding interface: batadv_slave_0
[  652.099824][T13236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  652.328262][T13236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  652.394552][T13236] batman_adv: batadv0: Adding interface: batadv_slave_1
[  652.401904][T13236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  652.427945][T13236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  652.502437][T13236] device hsr_slave_0 entered promiscuous mode
[  652.517246][T13236] device hsr_slave_1 entered promiscuous mode
[  653.322975][ T4287] Bluetooth: hci5: command 0x040f tx timeout
[  653.496999][T13310] loop0: detected capacity change from 0 to 16
[  653.565176][T13310] erofs: (device loop0): mounted with root inode @ nid 36.
[  655.485443][T13327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3285'.
[  655.576335][ T4287] Bluetooth: hci5: command 0x0419 tx timeout
[  655.592539][T13236] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  655.667421][T13236] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  655.739597][T13236] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  655.792802][T13236] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  655.840951][T13336] loop6: detected capacity change from 0 to 1024
[  655.891669][T13336] hfsplus: unable to parse mount options
[  657.378163][T13347] loop0: detected capacity change from 0 to 2048
[  657.472692][T13347] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value
[  658.206724][T13236] 8021q: adding VLAN 0 to HW filter on device bond0
[  658.314106][T13359] loop6: detected capacity change from 0 to 16
[  658.396456][T13359] erofs: (device loop6): mounted with root inode @ nid 36.
[  658.860073][T13236] 8021q: adding VLAN 0 to HW filter on device team0
[  659.011266][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  659.020469][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  659.098607][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  659.136929][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  659.170053][ T6176] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.177539][ T6176] bridge0: port 1(bridge_slave_0) entered forwarding state
[  659.226160][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  659.235232][T13370] loop0: detected capacity change from 0 to 128
[  659.293860][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  659.361107][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.368330][ T6176] bridge0: port 2(bridge_slave_1) entered forwarding state
[  659.420962][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  659.473121][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  659.530583][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  659.622939][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  659.644651][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  659.676379][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  659.727587][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  659.780080][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  659.839070][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  659.884743][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  659.928737][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  659.954805][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  660.001547][T13236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  660.035377][T13383] loop6: detected capacity change from 0 to 512
[  660.084844][T13383] ext4: Unknown parameter 'seclabel'
[  660.157557][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3298'.
[  662.387386][T13411] loop0: detected capacity change from 0 to 16
[  662.412560][T13411] erofs: (device loop0): mounted with root inode @ nid 36.
[  662.502400][T13408] loop6: detected capacity change from 0 to 2048
[  662.850432][T13408] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value
[  663.230085][T13242] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  663.282100][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  663.289781][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  663.533847][T13236] 8021q: adding VLAN 0 to HW filter on device batadv0
[  664.605986][T13434] loop6: detected capacity change from 0 to 1024
[  664.685977][T13436] loop0: detected capacity change from 0 to 128
[  665.243017][T13444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3313'.
[  665.553197][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  665.567767][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  666.003968][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  666.014911][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  666.113693][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  666.139780][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  666.310034][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  666.389820][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  666.547305][T13236] device veth0_vlan entered promiscuous mode
[  666.922734][T13236] device veth1_vlan entered promiscuous mode
[  667.800361][ T4287] Bluetooth: hci1: command 0x0406 tx timeout
[  667.811681][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  667.823956][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  667.842549][T13236] device veth0_macvtap entered promiscuous mode
[  667.875784][T13236] device veth1_macvtap entered promiscuous mode
[  668.064194][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  668.574984][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.962201][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  668.985416][T13470] loop0: detected capacity change from 0 to 2048
[  669.015684][T13470] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value
[  669.068866][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.258114][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  669.567540][T13480] loop6: detected capacity change from 0 to 512
[  669.580409][T13480] EXT4-fs: Ignoring removed mblk_io_submit option
[  669.671616][T13480] EXT4-fs: Invalid want_extra_isize 32768
[  669.848911][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.858855][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  669.963775][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  670.007530][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  670.061334][T13485] loop6: detected capacity change from 0 to 1024
[  670.079325][T13486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3324'.
[  670.096338][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  670.145536][T13236] batman_adv: batadv0: Interface activated: batadv_slave_0
[  670.188884][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  670.237369][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  670.285914][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  670.369008][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  670.625592][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  670.988453][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.140389][T13236] batman_adv: batadv0: Interface activated: batadv_slave_1
[  671.153687][T13346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  671.198258][T13346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  671.230466][T13346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  671.294468][T13346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  671.342487][T13346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  671.587361][T13236] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  671.629010][T13236] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  671.693429][T13236] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  671.743577][T13236] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  671.893681][T13500] loop0: detected capacity change from 0 to 1024
[  671.953992][T13500] hfsplus: unable to parse mount options
[  673.076340][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  673.143359][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  673.209482][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  673.333466][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  673.357909][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  673.422014][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  673.889807][T13518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3263'.
[  674.490513][T13526] loop4: detected capacity change from 0 to 512
[  674.498513][T13526] EXT4-fs: Ignoring removed mblk_io_submit option
[  674.505763][T13526] EXT4-fs: Invalid want_extra_isize 32768
[  674.598688][T13117] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  675.032296][T13534] loop4: detected capacity change from 0 to 2048
[  675.037863][T13117] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  675.077399][T13534] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value
[  675.091120][T13537] loop6: detected capacity change from 0 to 512
[  675.264687][T13537] ext4: Unknown parameter 'seclabel'
[  675.912410][T13537] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3336'.
[  677.094050][T13550] loop4: detected capacity change from 0 to 1024
[  677.165708][T13550] hfsplus: unable to parse mount options
[  678.663375][T13569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3343'.
[  679.274472][T13582] loop6: detected capacity change from 0 to 512
[  679.357446][T13583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3345'.
[  679.385069][T13578] loop4: detected capacity change from 0 to 2048
[  679.527735][T13578] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value
[  679.626374][T13582] ext4: Unknown parameter 'seclabel'
[  679.871473][T13582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3349'.
[  680.571071][T13595] loop6: detected capacity change from 0 to 128
[  680.857351][T13598] loop4: detected capacity change from 0 to 1024
[  680.927500][T13598] hfsplus: unable to parse mount options
[  681.631832][T13117] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  683.600953][T13619] loop4: detected capacity change from 0 to 16
[  683.628917][T13619] erofs: (device loop4): mounted with root inode @ nid 36.
[  684.567277][T13623] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3358'.
[  685.308007][T13635] loop4: detected capacity change from 0 to 512
[  685.315513][T13635] EXT4-fs: Ignoring removed mblk_io_submit option
[  685.401871][T13635] EXT4-fs: Invalid want_extra_isize 32768
[  686.272784][T13646] loop6: detected capacity change from 0 to 1024
[  686.291894][T13645] loop4: detected capacity change from 0 to 2048
[  686.346759][T13645] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value
[  690.123925][T13672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3371'.
[  690.810974][T13692] loop0: detected capacity change from 0 to 512
[  690.818438][T13692] EXT4-fs: Ignoring removed mblk_io_submit option
[  690.930873][T13692] EXT4-fs: Invalid want_extra_isize 32768
[  691.335664][T13697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3377'.
[  691.628582][T13700] loop4: detected capacity change from 0 to 512
[  692.066474][T13700] ext4: Unknown parameter 'seclabel'
[  693.310943][T13712] loop4: detected capacity change from 0 to 16
[  693.657463][T13712] erofs: (device loop4): mounted with root inode @ nid 36.
[  695.710603][T13726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3386'.
[  697.014925][T13749] loop6: detected capacity change from 0 to 512
[  697.413566][T13749] ext4: Unknown parameter 'seclabel'
[  698.041269][T13757] loop4: detected capacity change from 0 to 512
[  698.048933][T13757] EXT4-fs: Ignoring removed mblk_io_submit option
[  698.058374][T13757] EXT4-fs: Invalid want_extra_isize 32768
[  698.939269][T13242] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  700.413525][T13773] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3398'.
[  701.738593][T13789] loop0: detected capacity change from 0 to 1024
[  701.783593][T13789] hfsplus: unable to parse mount options
[  702.034740][T13795] loop4: detected capacity change from 0 to 2048
[  702.065979][T13795] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value
[  703.023216][T13805] loop6: detected capacity change from 0 to 16
[  703.255516][T13805] erofs: (device loop6): mounted with root inode @ nid 36.
[  703.856396][T13812] loop0: detected capacity change from 0 to 2048
[  705.176663][T13823] loop6: detected capacity change from 0 to 512
[  705.184225][T13823] EXT4-fs: Ignoring removed mblk_io_submit option
[  705.214915][T13823] EXT4-fs: Invalid want_extra_isize 32768
[  705.553017][T13826] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3412'.
[  706.095531][T13838] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3414'.
[  708.256101][T13853] loop6: detected capacity change from 0 to 128
[  709.251554][T13866] loop4: detected capacity change from 0 to 512
[  709.343291][T13866] ext4: Unknown parameter 'seclabel'
[  709.550334][T13870] loop0: detected capacity change from 0 to 16
[  709.570358][T13870] erofs: (device loop0): mounted with root inode @ nid 36.
[  712.057052][T13886] loop4: detected capacity change from 0 to 512
[  712.064648][T13886] EXT4-fs: Ignoring removed mblk_io_submit option
[  712.199227][T13886] EXT4-fs: Invalid want_extra_isize 32768
[  712.373271][T13893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3427'.
[  714.794979][T13910] loop6: detected capacity change from 0 to 512
[  714.917669][T13910] ext4: Unknown parameter 'seclabel'
[  715.128035][T13919] loop4: detected capacity change from 0 to 16
[  715.223407][T13919] erofs: (device loop4): mounted with root inode @ nid 36.
[  716.015677][T13921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3426'.
[  717.370246][T13934] loop4: detected capacity change from 0 to 512
[  717.377884][T13934] EXT4-fs: Ignoring removed mblk_io_submit option
[  717.405756][T13934] EXT4-fs: Invalid want_extra_isize 32768
[  717.709042][T13937] loop0: detected capacity change from 0 to 1024
[  718.847641][T13944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3442'.
[  720.301393][T13959] loop4: detected capacity change from 0 to 16
[  720.480970][T13959] erofs: (device loop4): mounted with root inode @ nid 36.
[  720.838559][ T4289] Bluetooth: hci2: command 0x0406 tx timeout
[  720.887977][T13962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3448'.
[  722.517737][T13980] loop4: detected capacity change from 0 to 1024
[  723.698153][T13994] loop6: detected capacity change from 0 to 128
[  724.270205][T14002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3457'.
[  725.216000][T14012] loop0: detected capacity change from 0 to 512
[  725.223691][T14012] EXT4-fs: Ignoring removed mblk_io_submit option
[  725.233965][T14012] EXT4-fs: Invalid want_extra_isize 32768
[  725.333289][T13117] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  725.605022][T14016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3459'.
[  726.241664][T14030] loop4: detected capacity change from 0 to 16
[  727.254738][T14030] erofs: (device loop4): mounted with root inode @ nid 36.
[  728.017733][T14043] loop6: detected capacity change from 0 to 512
[  728.089314][T14043] ext4: Unknown parameter 'seclabel'
[  728.573708][T14051] loop0: detected capacity change from 0 to 1024
[  730.027522][T14063] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3472'.
[  730.076064][T14066] loop4: detected capacity change from 0 to 512
[  730.083522][T14066] EXT4-fs: Ignoring removed mblk_io_submit option
[  730.091019][T14066] EXT4-fs: Invalid want_extra_isize 32768
[  730.353266][T14071] loop0: detected capacity change from 0 to 16
[  730.370710][T14071] erofs: (device loop0): mounted with root inode @ nid 36.
[  731.622509][T14080] loop4: detected capacity change from 0 to 1024
[  731.630851][T14080] hfsplus: unable to parse mount options
[  732.136329][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  732.142831][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  733.151613][T14101] loop4: detected capacity change from 0 to 2048
[  733.236123][T14099] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3481'.
[  734.202532][T14114] loop4: detected capacity change from 0 to 1024
[  734.398330][ T4287] Bluetooth: hci2: command 0x0406 tx timeout
[  735.580649][T14130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3488'.
[  735.681837][T14132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3491'.
[  735.848727][T14132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3491'.
[  737.278708][T14151] loop4: detected capacity change from 0 to 1024
[  737.341178][T14151] hfsplus: unable to parse mount options
[  737.388591][T14157] loop0: detected capacity change from 0 to 8
[  737.451261][T14157] squashfs: Unknown parameter 'ÿÿ'
[  738.211642][T14169] loop0: detected capacity change from 0 to 512
[  738.223389][T14169] EXT4-fs: Ignoring removed mblk_io_submit option
[  738.346308][T14169] EXT4-fs: Invalid want_extra_isize 32768
[  739.279516][T14173] loop4: detected capacity change from 0 to 2048
[  739.936459][ T4287] Bluetooth: hci4: command 0x0406 tx timeout
[  740.152622][T14180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3503'.
[  740.585493][T14190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3507'.
[  740.809123][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3507'.
[  741.843219][T14199] loop0: detected capacity change from 0 to 128
[  741.958375][T14204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3508'.
[  743.718708][T14218] loop6: detected capacity change from 0 to 512
[  743.730756][T14218] EXT4-fs: Ignoring removed mblk_io_submit option
[  743.760651][T14218] EXT4-fs: Invalid want_extra_isize 32768
[  744.849532][T14224] loop6: detected capacity change from 0 to 8
[  744.940744][T14224] squashfs: Unknown parameter 'ÿÿ'
[  745.042055][T14227] loop4: detected capacity change from 0 to 1024
[  745.064137][T13117] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  746.060906][T14238] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3518'.
[  747.200501][T14254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3522'.
[  747.346088][T14256] loop6: detected capacity change from 0 to 1024
[  747.367153][T14254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3522'.
[  747.399711][T14256] hfsplus: unable to parse mount options
[  747.657540][T14262] loop0: detected capacity change from 0 to 512
[  747.686358][T14262] ext4: Unknown parameter 'seclabel'
[  750.822652][T14283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3532'.
[  755.065516][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3544'.
[  755.122922][T14333] loop6: detected capacity change from 0 to 128
[  755.161201][T14332] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3546'.
[  755.415068][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3544'.
[  756.019082][T14350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3541'.
[  756.152997][T14352] loop4: detected capacity change from 0 to 512
[  756.164481][T14352] EXT4-fs: Ignoring removed mblk_io_submit option
[  756.251223][T14352] EXT4-fs: Invalid want_extra_isize 32768
[  757.242418][T14362] loop4: detected capacity change from 0 to 512
[  758.292034][T14362] ext4: Unknown parameter 'seclabel'
[  759.329227][T14379] loop6: detected capacity change from 0 to 1024
[  760.482470][T14390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3559'.
[  760.833895][T14398] loop6: detected capacity change from 0 to 8
[  760.890111][T14398] squashfs: Unknown parameter 'ÿÿ'
[  761.570015][T14407] loop6: detected capacity change from 0 to 512
[  761.581397][T14407] EXT4-fs: Ignoring removed mblk_io_submit option
[  761.603458][T14407] EXT4-fs: Invalid want_extra_isize 32768
[  762.704732][T14416] loop6: detected capacity change from 0 to 1024
[  762.712163][T14417] loop4: detected capacity change from 0 to 128
[  762.723494][T13117] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  762.955515][T14416] hfsplus: unable to parse mount options
[  763.213030][T14424] loop0: detected capacity change from 0 to 512
[  763.247073][T14424] ext4: Unknown parameter 'seclabel'
[  763.473688][T14425] loop6: detected capacity change from 0 to 2048
[  765.552071][T14440] loop4: detected capacity change from 0 to 1024
[  767.033728][T14458] loop4: detected capacity change from 0 to 8
[  767.071572][T14458] squashfs: Unknown parameter 'ÿÿ'
[  767.129931][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3575'.
[  767.296963][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3575'.
[  768.418317][T14472] loop4: detected capacity change from 0 to 2048
[  768.459797][T14472] EXT4-fs: Ignoring removed nomblk_io_submit option
[  768.627825][T14472] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  769.849235][T14484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3579'.
[  769.858609][T14472] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.3578: bg 0: block 2: invalid block bitmap
[  770.017189][T14472] EXT4-fs (loop4): Remounting filesystem read-only
[  770.028528][T14472] EXT4-fs error (device loop4) in ext4_setattr:5695: Corrupt filesystem
[  770.054558][T14472] EXT4-fs (loop4): Remounting filesystem read-only
[  770.142151][T14491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3571'.
[  770.160609][T13236] EXT4-fs (loop4): unmounting filesystem.
[  770.440966][T14496] loop4: detected capacity change from 0 to 1024
[  772.009459][T14518] loop0: detected capacity change from 0 to 8
[  772.025332][T14518] squashfs: Unknown parameter 'ÿÿ'
[  772.400878][T14523] loop4: detected capacity change from 0 to 512
[  772.412494][T14523] EXT4-fs: Ignoring removed mblk_io_submit option
[  772.433029][T14523] EXT4-fs: Invalid want_extra_isize 32768
[  772.567590][T13117] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  773.128001][T14525] loop0: detected capacity change from 0 to 1024
[  773.137679][T14525] hfsplus: unable to parse mount options
[  773.600295][T14532] loop4: detected capacity change from 0 to 512
[  773.644993][T14532] ext4: Unknown parameter 'seclabel'
[  773.728967][T14532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3592'.
[  774.318745][T14540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3593'.
[  774.469795][T14540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3593'.
[  774.970019][T14549] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3595'.
[  776.022483][T14561] loop4: detected capacity change from 0 to 1024
[  777.414786][T14580] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3605'.
[  777.505989][T14582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3604'.
[  777.707000][T14588] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3607'.
[  778.366574][T14605] loop0: detected capacity change from 0 to 1024
[  779.377534][ T4289] Bluetooth: hci5: command 0x0406 tx timeout
[  779.681449][T14618] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3616'.
[  779.995497][T14627] loop6: detected capacity change from 0 to 1024
[  780.036530][T14627] hfsplus: unable to parse mount options
[  780.281040][T14631] loop4: detected capacity change from 0 to 2048
[  780.296974][T14631] EXT4-fs: Ignoring removed nomblk_io_submit option
[  780.403406][T14631] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  780.504061][T14643] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.3619: bg 0: block 2: invalid block bitmap
[  780.643381][T14643] EXT4-fs (loop4): Remounting filesystem read-only
[  780.650251][T14643] EXT4-fs error (device loop4) in ext4_setattr:5695: error 28
[  780.675740][T14641] loop6: detected capacity change from 0 to 2048
[  780.723465][T14643] EXT4-fs (loop4): Remounting filesystem read-only
[  780.931645][T14648] loop0: detected capacity change from 0 to 512
[  780.953168][T13236] EXT4-fs (loop4): unmounting filesystem.
[  781.012552][T14648] ext4: Unknown parameter 'seclabel'
[  781.249026][T14655] loop4: detected capacity change from 0 to 128
[  781.982717][T14663] loop0: detected capacity change from 0 to 1024
[  783.170462][T14657] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3626'.
[  783.378009][T14657] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4
[  783.655608][T14657] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4
[  783.752880][T14657] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s
[  783.967102][T14678] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3629'.
[  786.103093][T14706] loop4: detected capacity change from 0 to 128
[  786.116677][T14702] loop6: detected capacity change from 0 to 2048
[  786.427406][T14702] EXT4-fs: Ignoring removed nomblk_io_submit option
[  786.473084][T14708] loop0: detected capacity change from 0 to 512
[  786.794049][T14708] ext4: Unknown parameter 'seclabel'
[  787.161333][T14702] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  787.354612][T14702] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.3635: bg 0: block 2: invalid block bitmap
[  787.488363][T14702] EXT4-fs (loop6): Remounting filesystem read-only
[  787.502472][T14725] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3641'.
[  787.568402][T14702] EXT4-fs error (device loop6) in ext4_setattr:5695: Corrupt filesystem
[  787.610152][T14702] EXT4-fs (loop6): Remounting filesystem read-only
[  788.026964][T12799] EXT4-fs (loop6): unmounting filesystem.
[  788.088257][T14739] loop0: detected capacity change from 0 to 1024
[  788.149028][T14739] hfsplus: unable to parse mount options
[  789.731362][T14764] loop0: detected capacity change from 0 to 128
[  789.932454][T14759] loop4: detected capacity change from 0 to 512
[  789.939999][T14759] ext4: Unknown parameter 'seclabel'
[  790.610172][T14772] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3655'.
[  791.325701][T14778] FAULT_INJECTION: forcing a failure.
[  791.325701][T14778] name failslab, interval 1, probability 0, space 0, times 0
[  791.386454][T14778] CPU: 1 PID: 14778 Comm: syz.4.3657 Not tainted syzkaller #0
[  791.394037][T14778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  791.404190][T14778] Call Trace:
[  791.407568][T14778]  <TASK>
[  791.410590][T14778]  dump_stack_lvl+0x188/0x24e
[  791.415362][T14778]  ? show_regs_print_info+0x12/0x12
[  791.420638][T14778]  ? load_image+0x410/0x410
[  791.425223][T14778]  ? __might_sleep+0xd0/0xd0
[  791.429883][T14778]  ? __lock_acquire+0x7c40/0x7c40
[  791.434978][T14778]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  791.441133][T14778]  should_fail_ex+0x390/0x4c0
[  791.445890][T14778]  should_failslab+0x5/0x20
[  791.450480][T14778]  slab_pre_alloc_hook+0x59/0x300
[  791.455595][T14778]  ? bpf_prepare_filter+0x645/0x11b0
[  791.460944][T14778]  __kmem_cache_alloc_node+0x4f/0x270
[  791.466359][T14778]  ? bpf_prepare_filter+0x645/0x11b0
[  791.471678][T14778]  __kmalloc+0xa3/0x240
[  791.475882][T14778]  bpf_prepare_filter+0x645/0x11b0
[  791.481036][T14778]  ? seccomp_notify_detach+0x220/0x220
[  791.486533][T14778]  ? bpf_prog_create+0x1f0/0x1f0
[  791.491502][T14778]  ? rcu_is_watching+0x11/0xa0
[  791.496310][T14778]  ? kmemdup+0x42/0x60
[  791.500422][T14778]  ? memcpy+0x3c/0x60
[  791.504444][T14778]  bpf_prog_create_from_user+0x2cc/0x420
[  791.510122][T14778]  ? seccomp_notify_detach+0x220/0x220
[  791.515624][T14778]  do_seccomp+0x806/0xe00
[  791.519994][T14778]  ? prctl_set_seccomp+0x60/0x60
[  791.524966][T14778]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  791.530990][T14778]  ? lockdep_hardirqs_on+0x94/0x140
[  791.536236][T14778]  do_syscall_64+0x4c/0xa0
[  791.540694][T14778]  ? clear_bhb_loop+0x60/0xb0
[  791.545413][T14778]  ? clear_bhb_loop+0x60/0xb0
[  791.550136][T14778]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  791.556099][T14778] RIP: 0033:0x7f825659e159
[  791.560598][T14778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  791.580285][T14778] RSP: 002b:00007f825747c028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  791.588792][T14778] RAX: ffffffffffffffda RBX: 00007f8256825fa0 RCX: 00007f825659e159
[  791.596795][T14778] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  791.604827][T14778] RBP: 00007f825663506b R08: 0000000000000000 R09: 0000000000000000
[  791.612856][T14778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  791.620862][T14778] R13: 00007f8256826038 R14: 00007f8256825fa0 R15: 00007ffcb8134e08
[  791.628881][T14778]  </TASK>
[  791.632078][   T14] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  791.698276][T14783] loop0: detected capacity change from 0 to 512
[  793.255152][T14801] loop6: detected capacity change from 0 to 128
[  793.502635][T14802] loop4: detected capacity change from 0 to 1024
[  795.012306][T14818] loop0: detected capacity change from 0 to 8
[  795.051833][T14818] squashfs: Unknown parameter 'ÿÿ'
[  795.340495][T14825] loop4: detected capacity change from 0 to 512
[  796.513425][T13242] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  798.724001][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  798.730454][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  800.728392][T14876] loop6: detected capacity change from 0 to 1024
[  800.739023][T14876] hfsplus: unable to parse mount options
[  800.762512][   T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  800.778425][   T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  800.977200][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  801.137513][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  801.145442][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  801.155224][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  803.402362][ T4287] Bluetooth: hci3: command 0x0409 tx timeout
[  803.482344][T14722] bridge0: port 3(syz_tun) entered disabled state
[  804.490584][T14722] device syz_tun left promiscuous mode
[  804.496239][T14722] bridge0: port 3(syz_tun) entered disabled state
[  805.080634][ T7304] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.539572][ T4287] Bluetooth: hci3: command 0x041b tx timeout
[  806.641072][T14915] loop4: detected capacity change from 0 to 512
[  807.476516][ T7304] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.723038][T14873] chnl_net:caif_netlink_parms(): no params data found
[  807.935011][ T7304] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.780750][ T4287] Bluetooth: hci3: command 0x040f tx timeout
[  809.072952][ T7304] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  811.872190][ T4287] Bluetooth: hci3: command 0x0419 tx timeout
[  811.985483][T14873] bridge0: port 1(bridge_slave_0) entered blocking state
[  812.045247][T14873] bridge0: port 1(bridge_slave_0) entered disabled state
[  812.106512][T14873] device bridge_slave_0 entered promiscuous mode
[  812.161274][T14873] bridge0: port 2(bridge_slave_1) entered blocking state
[  812.170710][T14873] bridge0: port 2(bridge_slave_1) entered disabled state
[  812.203131][T14873] device bridge_slave_1 entered promiscuous mode
[  812.357652][T14873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  812.413998][T14873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  812.565931][T14873] team0: Port device team_slave_0 added
[  812.635006][T14873] team0: Port device team_slave_1 added
[  812.796607][T14944] loop0: detected capacity change from 0 to 512
[  812.897939][T14944] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  812.956327][T14944] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3694: invalid indirect mapped block 256 (level 1)
[  813.025767][T14944] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3694: invalid indirect mapped block 2683928664 (level 1)
[  813.048851][T14944] EXT4-fs (loop0): 1 truncate cleaned up
[  813.056122][T14944] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  813.139335][T14873] batman_adv: batadv0: Adding interface: batadv_slave_0
[  813.156672][T14873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  813.267964][T14873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  813.337909][T12752] EXT4-fs (loop0): unmounting filesystem.
[  813.354514][T14953] loop4: detected capacity change from 0 to 128
[  813.418288][T14953] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  813.453419][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3698'.
[  813.463437][T14873] batman_adv: batadv0: Adding interface: batadv_slave_1
[  813.492243][T14873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  813.560120][T14953] FAT-fs (loop4): bogus number of reserved sectors
[  813.566734][T14953] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  813.596458][T14873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  813.609217][T14953] FAT-fs (loop4): Can't find a valid FAT filesystem
[  813.868011][T14963] loop6: detected capacity change from 0 to 1024
[  813.922244][T14963] hfsplus: unable to parse mount options
[  814.156188][T14873] device hsr_slave_0 entered promiscuous mode
[  814.699718][T14873] device hsr_slave_1 entered promiscuous mode
[  814.717303][T14873] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  814.724955][T14873] Cannot create hsr debugfs directory
[  815.261280][T14982] loop0: detected capacity change from 0 to 16
[  815.313382][ T9160] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  815.339768][T14982] erofs: (device loop0): mounted with root inode @ nid 36.
[  815.424128][ T4287] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000]
[  815.440147][T14982] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  815.498730][   T26] audit: type=1800 audit(1789508708.752:87): pid=14982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3706" name="file2" dev="loop0" ino=89 res=0 errno=0
[  815.529767][ T9160] usb 7-1: Using ep0 maxpacket: 16
[  815.542923][ T9160] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[  815.559292][ T9160] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  815.571006][ T9160] usb 7-1: config 0 has no interface number 0
[  815.586267][ T9160] usb 7-1: config 0 interface 34 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  815.602625][ T9160] usb 7-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  815.651412][ T9160] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  815.671667][ T9160] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  815.679951][ T9160] usb 7-1: Product: syz
[  815.691125][ T9160] usb 7-1: Manufacturer: syz
[  815.720631][ T9160] usb 7-1: SerialNumber: syz
[  815.769328][ T9160] usb 7-1: config 0 descriptor??
[  815.834577][ T9160] asix: probe of 7-1:0.34 failed with error -22
[  817.397267][ T4287] Bluetooth: hci3: command 0x0405 tx timeout
[  818.643969][ T9162] usb 7-1: USB disconnect, device number 2
[  821.595522][T15028] loop6: detected capacity change from 0 to 512
[  821.603116][T15028] EXT4-fs: Ignoring removed mblk_io_submit option
[  821.678949][T15028] EXT4-fs: Invalid want_extra_isize 32768
[  822.234489][T15035] fuse: Bad value for 'fd'
[  822.280657][T15037] loop6: detected capacity change from 0 to 1024
[  822.325218][T15037] EXT4-fs (loop6): Invalid log block size: 4294574080
[  822.355959][ T7304] device hsr_slave_0 left promiscuous mode
[  822.377330][ T7304] device hsr_slave_1 left promiscuous mode
[  822.410415][ T7304] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  822.438927][ T7304] batman_adv: batadv0: Removing interface: batadv_slave_0
[  822.465426][ T7304] device bridge_slave_1 left promiscuous mode
[  822.493103][ T7304] bridge0: port 2(bridge_slave_1) entered disabled state
[  822.520373][ T7304] device bridge_slave_0 left promiscuous mode
[  822.544880][ T7304] bridge0: port 1(bridge_slave_0) entered disabled state
[  822.651559][T15046] loop6: detected capacity change from 0 to 1024
[  822.697277][ T7304] device veth1_macvtap left promiscuous mode
[  822.704911][ T7304] device veth0_macvtap left promiscuous mode
[  822.718457][ T7304] device veth1_vlan left promiscuous mode
[  822.737518][T15046] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  822.746174][T15046] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  822.761720][ T7304] device veth0_vlan left promiscuous mode
[  823.178922][T15061] loop0: detected capacity change from 0 to 1024
[  823.190928][T15061] hfsplus: unable to parse mount options
[  823.288415][T15063] No such timeout policy "syz1"
[  823.376628][   T26] audit: type=1800 audit(1789508715.958:88): pid=15063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3723" name="file1" dev="loop6" ino=15 res=0 errno=0
[  823.598760][   T26] audit: type=1804 audit(1789508715.967:89): pid=15063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3723" name="/newroot/96/file1/file1" dev="loop6" ino=15 res=1 errno=0
[  823.891717][T15066] loop0: detected capacity change from 0 to 2048
[  824.335852][T12799] EXT4-fs (loop6): unmounting filesystem.
[  824.732333][T15080] loop6: detected capacity change from 0 to 512
[  824.739763][T15080] EXT4-fs: Ignoring removed i_version option
[  824.980319][T15080] EXT4-fs: Ignoring removed oldalloc option
[  825.398846][T15085] loop0: detected capacity change from 0 to 512
[  825.406405][T15085] EXT4-fs: Ignoring removed mblk_io_submit option
[  825.436775][T15085] EXT4-fs: Invalid want_extra_isize 32768
[  825.470337][T15080] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  825.819719][ T9160] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  827.194210][ T9160] usb 7-1: Using ep0 maxpacket: 16
[  827.215214][ T9160] usb 7-1: config 0 has an invalid interface number: 251 but max is 0
[  827.244609][ T9160] usb 7-1: config 0 has no interface number 0
[  827.250892][ T9160] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  827.261439][ T9160] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  827.276947][ T9160] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  827.312700][ T9160] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.321003][ T9160] usb 7-1: Product: syz
[  827.325644][ T9160] usb 7-1: Manufacturer: syz
[  827.330290][ T9160] usb 7-1: SerialNumber: syz
[  827.337577][ T9160] usb 7-1: config 0 descriptor??
[  827.343809][T15080] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  827.385956][T15080] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  827.614795][T15080] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  827.625189][T15080] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  827.643847][T15098] loop0: detected capacity change from 0 to 1024
[  827.652727][T15098] hfsplus: unable to parse mount options
[  827.839631][ T7304] team0 (unregistering): Port device team_slave_1 removed
[  827.869495][ T9160] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  827.906598][ T9160] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  827.916547][ T9160] asix: probe of 7-1:0.251 failed with error -5
[  827.945967][ T9160] usb 7-1: USB disconnect, device number 3
[  828.042826][ T7304] team0 (unregistering): Port device team_slave_0 removed
[  829.728542][ T7304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  829.805065][T12799] EXT4-fs (loop6): unmounting filesystem.
[  829.928379][ T7304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  830.009498][T15111] loop6: detected capacity change from 0 to 1024
[  830.017212][T15111] hfsplus: unable to parse mount options
[  830.371670][T15112] loop6: detected capacity change from 0 to 2048
[  832.430644][T15123] loop0: detected capacity change from 0 to 2048
[  832.487032][T15123] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  833.387371][ T7304] bond0 (unregistering): Released all slaves
[  833.571353][T15130] loop0: detected capacity change from 0 to 128
[  833.602168][T15130] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  833.613986][T15130] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  833.711087][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3711'.
[  833.742518][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3744'.
[  833.811337][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3744'.
[  834.073601][T15130] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)"
[  834.157217][T15137] overlayfs: failed to resolve './bus': -2
[  834.315476][T14873] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  834.390394][T14873] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  834.425268][T12752] EXT4-fs (loop0): unmounting filesystem.
[  834.486802][T14873] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  834.534775][T14873] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  834.918534][T14873] 8021q: adding VLAN 0 to HW filter on device bond0
[  835.065954][T13281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  835.100386][T13281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  835.180644][T14873] 8021q: adding VLAN 0 to HW filter on device team0
[  835.231995][T15162] loop0: detected capacity change from 0 to 4096
[  835.246682][T13281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  835.289837][T13281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  835.357651][T13281] bridge0: port 1(bridge_slave_0) entered blocking state
[  835.364953][T13281] bridge0: port 1(bridge_slave_0) entered forwarding state
[  835.465768][T13281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  836.397295][T15174] loop4: detected capacity change from 0 to 512
[  837.087311][T13281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  837.109258][T15174] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  837.118351][T15174] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  837.245887][T13281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  837.309072][T13236] EXT4-fs (loop4): unmounting filesystem.
[  837.354564][T13281] bridge0: port 2(bridge_slave_1) entered blocking state
[  837.361832][T13281] bridge0: port 2(bridge_slave_1) entered forwarding state
[  837.447381][T13281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  837.510391][T13281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  839.140871][T14873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  839.234432][T14873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  839.396764][T13281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  839.438986][T13281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  839.459144][T13281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  839.506092][T13281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  839.696611][T13281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  839.794411][T13281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  839.868284][T13281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  839.933037][T13281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  840.029507][T13281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  840.097827][T13281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  843.157090][T15216] No such timeout policy "syz1"
[  843.756855][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  843.767132][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  843.855754][T14873] 8021q: adding VLAN 0 to HW filter on device batadv0
[  843.993843][T15222] loop4: detected capacity change from 0 to 1024
[  844.139164][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3757'.
[  844.257154][T15222] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  844.277387][T15222] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  844.278803][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3757'.
[  844.300218][   T26] audit: type=1800 audit(1789508735.316:90): pid=15222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3754" name="file1" dev="loop4" ino=15 res=0 errno=0
[  844.352425][   T26] audit: type=1804 audit(1789508735.335:91): pid=15222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3754" name="/newroot/94/file1/file1" dev="loop4" ino=15 res=1 errno=0
[  844.384505][T13236] EXT4-fs (loop4): unmounting filesystem.
[  847.739930][T15243] binder: 15242:15243 ioctl c0306201 200000000080 returned -14
[  848.114619][T15246] binder: 15242:15246 ioctl c0306201 2000000003c0 returned -14
[  848.966695][T15248] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3774'.
[  849.019178][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  849.041735][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  849.166567][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  849.182831][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  849.208783][T14873] device veth0_vlan entered promiscuous mode
[  849.227490][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  849.259013][T15253] loop0: detected capacity change from 0 to 128
[  849.266597][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  849.337410][T15253] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  849.358907][T14873] device veth1_vlan entered promiscuous mode
[  849.365770][T15253] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  850.974489][T12752] EXT4-fs (loop0): unmounting filesystem.
[  850.987659][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  851.000572][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  851.052457][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  851.106953][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  851.156601][T14873] device veth0_macvtap entered promiscuous mode
[  851.188186][T14873] device veth1_macvtap entered promiscuous mode
[  851.256005][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  851.268903][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  851.289279][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  851.300334][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  851.318931][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  851.369311][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  851.384265][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  851.397142][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  851.408051][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  851.420461][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  851.448763][T14873] batman_adv: batadv0: Interface activated: batadv_slave_0
[  851.472584][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  851.488024][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  851.503152][   T26] audit: type=1326 audit(1789508741.969:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.4.3771" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825659e159 code=0x7ffc0000
[  851.534426][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  851.561203][   T26] audit: type=1326 audit(1789508741.969:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.4.3771" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825659e159 code=0x7ffc0000
[  851.611135][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  851.640042][   T26] audit: type=1326 audit(1789508741.969:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.4.3771" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825659e159 code=0x7ffc0000
[  851.645325][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  851.708189][T15269] loop4: detected capacity change from 0 to 4096
[  851.729202][   T26] audit: type=1326 audit(1789508741.969:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.4.3771" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f825659e159 code=0x7ffc0000
[  851.755743][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  851.806913][   T26] audit: type=1326 audit(1789508741.969:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.4.3771" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825659e159 code=0x7ffc0000
[  851.807987][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  851.887765][   T26] audit: type=1326 audit(1789508741.969:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.4.3771" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825659e159 code=0x7ffc0000
[  851.899459][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  851.932029][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  851.968282][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  851.994933][   T26] audit: type=1326 audit(1789508741.969:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.4.3771" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825659e159 code=0x7ffc0000
[  851.999542][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  852.060854][   T26] audit: type=1326 audit(1789508741.997:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.4.3771" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825659e159 code=0x7ffc0000
[  852.091197][T14873] batman_adv: batadv0: Interface activated: batadv_slave_1
[  852.145832][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  852.172401][   T26] audit: type=1326 audit(1789508741.997:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.4.3771" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f825659e159 code=0x7ffc0000
[  852.209059][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  852.230605][T14873] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  852.267651][   T26] audit: type=1326 audit(1789508741.997:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.4.3771" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f825659dec2 code=0x7ffc0000
[  852.290755][T14873] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  852.333771][T14873] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  852.366083][T14873] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  852.398725][T15276] 9pnet_fd: Insufficient options for proto=fd
[  852.678815][ T5675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  852.696813][ T5675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  854.379422][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3777'.
[  854.388951][T15290] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3777'.
[  855.349240][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  856.858793][T15282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3785'.
[  856.905879][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  856.919575][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  856.945348][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  859.828834][T15307] loop4: detected capacity change from 0 to 16
[  859.875624][T15307] erofs: (device loop4): mounted with root inode @ nid 36.
[  860.135408][T15310] fuse: Bad value for 'fd'
[  865.310613][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  865.318045][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  865.374754][T15337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3800'.
[  866.624104][T15345] loop0: detected capacity change from 0 to 1024
[  868.733983][T15351] loop4: detected capacity change from 0 to 16
[  868.757793][T15351] erofs: (device loop4): mounted with root inode @ nid 36.
[  869.799617][T15356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3798'.
[  869.809048][T15356] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3798'.
[  871.240246][T15364] loop6: detected capacity change from 0 to 8
[  871.312375][T15364] squashfs: Unknown parameter 'threads'
[  872.167088][T15371] Bluetooth: MGMT ver 1.22
[  875.259312][T15387] create_pit_timer: 5 callbacks suppressed
[  875.259338][T15387] pit: kvm: requested 187733 ns i8254 timer period limited to 200000 ns
[  875.296300][T15387] pit: kvm: requested 46933 ns i8254 timer period limited to 200000 ns
[  876.717772][T15401] loop5: detected capacity change from 0 to 256
[  876.733136][T15401] exfat: Deprecated parameter 'utf8'
[  876.778063][T15401] exfat: Deprecated parameter 'utf8'
[  876.820901][T15401] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x30348f56, utbl_chksum : 0xe619d30d)
[  877.162419][T15401] exFAT-fs (loop5): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[  878.113923][T15413] loop0: detected capacity change from 0 to 128
[  878.224701][T15413] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  878.322503][T15413] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  878.346200][T15417] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3813'.
[  879.012806][T12752] EXT4-fs (loop0): unmounting filesystem.
[  879.116602][T15425] loop6: detected capacity change from 0 to 1024
[  882.567637][T15446] loop6: detected capacity change from 0 to 1024
[  884.344951][T15462] loop5: detected capacity change from 0 to 128
[  884.502085][T15462] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  884.599388][T15462] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  886.263640][T14873] EXT4-fs (loop5): unmounting filesystem.
[  888.336189][T15485] loop4: detected capacity change from 0 to 1024
[  888.469073][T15485] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  888.556153][T15485] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  889.395425][T15500] No such timeout policy "syz1"
[  889.413313][   T26] kauditd_printk_skb: 108 callbacks suppressed
[  890.356608][   T26] audit: type=1800 audit(1789508776.949:210): pid=15500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3842" name="file1" dev="loop4" ino=15 res=0 errno=0
[  890.432583][T13236] EXT4-fs (loop4): unmounting filesystem.
[  891.044697][T15510] loop4: detected capacity change from 0 to 128
[  894.410709][T15524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3853'.
[  894.420131][T15524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3853'.
[  898.692429][T15539] loop0: detected capacity change from 0 to 1024
[  898.818860][T15539] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  898.893382][T15539] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  899.773804][T15551] No such timeout policy "syz1"
[  899.801562][   T26] audit: type=1800 audit(1789508786.517:211): pid=15551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3859" name="file1" dev="loop0" ino=15 res=0 errno=0
[  899.972844][   T26] audit: type=1804 audit(1789508786.517:212): pid=15551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3859" name="/newroot/133/file1/file1" dev="loop0" ino=15 res=1 errno=0
[  900.166515][T12752] EXT4-fs (loop0): unmounting filesystem.
[  900.325300][T15553] fuse: Bad value for 'fd'
[  900.858864][T15564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3864'.
[  901.219231][T15570] pit: kvm: requested 5028 ns i8254 timer period limited to 200000 ns
[  904.292918][T15597] loop5: detected capacity change from 0 to 1024
[  904.504846][T15597] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  904.548041][T15597] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  905.004196][T15614] No such timeout policy "syz1"
[  905.104688][   T26] audit: type=1800 audit(1789508791.352:213): pid=15614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3871" name="file1" dev="loop5" ino=15 res=0 errno=0
[  905.204116][T15613] loop6: detected capacity change from 0 to 2048
[  905.253274][   T26] audit: type=1804 audit(1789508791.352:214): pid=15614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3871" name="/newroot/14/file1/file1" dev="loop5" ino=15 res=1 errno=0
[  905.362600][T15613] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  905.635906][T14873] EXT4-fs (loop5): unmounting filesystem.
[  907.108852][T15631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3880'.
[  907.235119][T15634] loop6: detected capacity change from 0 to 512
[  907.247816][T15634] EXT4-fs: Ignoring removed mblk_io_submit option
[  907.371291][T15634] EXT4-fs: Invalid want_extra_isize 32768
[  907.953176][T15631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3880'.
[  908.487441][T15652] loop6: detected capacity change from 0 to 256
[  908.601502][T15652] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  908.644889][T15657] loop4: detected capacity change from 0 to 1024
[  908.881256][T15652] syz.6.3887: attempt to access beyond end of device
[  908.881256][T15652] loop6: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[  909.712077][T15657] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  909.745107][T15657] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  909.755191][T15652] syz.6.3887: attempt to access beyond end of device
[  909.755191][T15652] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  909.800607][   T26] audit: type=1800 audit(1789508795.763:215): pid=15652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3887" name="file1" dev="loop6" ino=1048866 res=0 errno=0
[  910.440845][T15680] No such timeout policy "syz1"
[  910.466829][   T26] audit: type=1800 audit(1789508796.362:216): pid=15680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3888" name="file1" dev="loop4" ino=15 res=0 errno=0
[  910.674689][T15682] loop6: detected capacity change from 0 to 512
[  910.686216][T15682] EXT4-fs: Ignoring removed mblk_io_submit option
[  911.162997][T15682] EXT4-fs: Invalid want_extra_isize 32768
[  911.186200][T13236] EXT4-fs (loop4): unmounting filesystem.
[  911.223499][   T26] audit: type=1804 audit(1789508796.372:217): pid=15680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3888" name="/newroot/117/file1/file1" dev="loop4" ino=15 res=1 errno=0
[  912.487078][T15704] loop6: detected capacity change from 0 to 8
[  914.501077][T15714] loop5: detected capacity change from 0 to 8
[  914.926782][T15721] loop4: detected capacity change from 0 to 512
[  914.938489][T15721] EXT4-fs: Ignoring removed mblk_io_submit option
[  914.963018][T15721] EXT4-fs: Invalid want_extra_isize 32768
[  915.633706][T15725] loop6: detected capacity change from 0 to 1024
[  916.101841][T15725] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  916.149174][T15725] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  916.602616][T15734] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  916.693869][T15741] fuse: Bad value for 'fd'
[  916.769778][T15743] Bluetooth: ISO socket layer initialized
[  917.533856][T15746] No such timeout policy "syz1"
[  917.621401][ T9160] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  917.827233][ T9160] usb 5-1: device descriptor read/64, error -71
[  917.968467][T12799] EXT4-fs (loop6): unmounting filesystem.
[  918.239271][ T9160] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  919.648168][ T9160] usb 5-1: device descriptor read/64, error -71
[  919.778448][ T9160] usb usb5-port1: attempt power cycle
[  921.749055][T15776] fuse: Bad value for 'fd'
[  921.989450][T15780] loop0: detected capacity change from 0 to 1024
[  922.105365][T15780] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  922.129668][T15780] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  922.564190][T15789] No such timeout policy "syz1"
[  923.158179][T12752] EXT4-fs (loop0): unmounting filesystem.
[  925.124814][T15806] loop5: detected capacity change from 0 to 512
[  925.137463][T15806] EXT4-fs: Ignoring removed i_version option
[  925.175416][T15806] EXT4-fs (loop5): 1 truncate cleaned up
[  925.240223][T15806] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  925.457475][T14873] EXT4-fs (loop5): unmounting filesystem.
[  927.220266][T15826] loop5: detected capacity change from 0 to 128
[  927.376267][T15826] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  927.451185][T15826] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  928.305684][T14873] EXT4-fs (loop5): unmounting filesystem.
[  930.463394][T15853] loop5: detected capacity change from 0 to 512
[  930.481976][T15853] EXT4-fs: Ignoring removed i_version option
[  930.544105][T15853] EXT4-fs (loop5): 1 truncate cleaned up
[  930.559909][T15853] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  930.600463][T15857] loop6: detected capacity change from 0 to 1024
[  932.079424][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  932.085885][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  932.558073][T15864] loop0: detected capacity change from 0 to 1024
[  932.677744][T14873] EXT4-fs (loop5): unmounting filesystem.
[  934.584038][ T4287] Bluetooth: hci3: command 0x0406 tx timeout
[  935.958202][T15886] loop0: detected capacity change from 0 to 128
[  937.155284][T15886] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  937.175764][T15886] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  938.065923][T12752] EXT4-fs (loop0): unmounting filesystem.
[  939.815058][T15921] loop0: detected capacity change from 0 to 1024
[  940.239304][T15927] loop6: detected capacity change from 0 to 1024
[  944.177491][T15947] loop4: detected capacity change from 0 to 128
[  945.723092][T15951] loop0: detected capacity change from 0 to 128
[  945.774412][T15947] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  945.797025][T15951] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  945.828852][T15951] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  945.882726][T15947] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  947.071516][T12752] EXT4-fs (loop0): unmounting filesystem.
[  947.210686][T13236] EXT4-fs (loop4): unmounting filesystem.
[  947.483870][T15966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3981'.
[  947.631936][T15966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3981'.
[  953.259438][T16001] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3976'.
[  961.951039][T16057] loop4: detected capacity change from 0 to 128
[  963.023304][T16057] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  963.121563][T16057] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  963.343213][T13236] EXT4-fs (loop4): unmounting filesystem.
[  963.405164][T16069] loop5: detected capacity change from 0 to 512
[  963.475466][T16069] EXT4-fs: Ignoring removed i_version option
[  963.536110][T16069] EXT4-fs (loop5): 1 truncate cleaned up
[  963.580232][T16069] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  966.007534][T14873] EXT4-fs (loop5): unmounting filesystem.
[  966.681670][T16087] loop5: detected capacity change from 0 to 512
[  966.753828][T16087] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  968.287666][T16087] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  968.343452][T16087] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  968.353414][T16087] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  968.361635][T16087] System zones: 0-2, 18-18, 34-35
[  968.398455][T16087] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  968.793268][T14873] EXT4-fs (loop5): unmounting filesystem.
[  969.280988][T16106] loop5: detected capacity change from 0 to 512
[  969.291602][T16106] ext4: Unknown parameter 'fowner>00000000000000060929'
[  969.624485][T15408] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  972.197009][T16128] mmap: syz.5.4026 (16128) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  972.250379][T16128] 
[  972.252808][T16128] ======================================================
[  972.259944][T16128] WARNING: possible circular locking dependency detected
[  972.267086][T16128] syzkaller #0 Not tainted
[  972.271535][T16128] ------------------------------------------------------
[  972.278595][T16128] syz.5.4026/16128 is trying to acquire lock:
[  972.284697][T16128] ffff888056a2f430 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3af/0x1c40
[  972.295577][T16128] 
[  972.295577][T16128] but task is already holding lock:
[  972.302980][T16128] ffff88802fdeea58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0
[  972.313078][T16128] 
[  972.313078][T16128] which lock already depends on the new lock.
[  972.313078][T16128] 
[  972.323545][T16128] 
[  972.323545][T16128] the existing dependency chain (in reverse order) is:
[  972.332604][T16128] 
[  972.332604][T16128] -> #1 (&mm->mmap_lock){++++}-{3:3}:
[  972.340228][T16128]        down_read_killable+0x4c/0x340
[  972.345752][T16128]        mmap_read_lock_killable+0x1d/0x60
[  972.351612][T16128]        lock_mm_and_find_vma+0x2b1/0x2f0
[  972.357373][T16128]        do_user_addr_fault+0x2e8/0xb20
[  972.362970][T16128]        exc_page_fault+0x60/0x100
[  972.368139][T16128]        asm_exc_page_fault+0x22/0x30
[  972.373558][T16128]        fault_in_readable+0x13e/0x1f0
[  972.379080][T16128]        fault_in_iov_iter_readable+0xbf/0x2f0
[  972.385301][T16128]        generic_perform_write+0x1f1/0x5c0
[  972.391170][T16128]        __generic_file_write_iter+0x148/0x2a0
[  972.397388][T16128]        generic_file_write_iter+0xab/0x2e0
[  972.403350][T16128]        vfs_write+0x482/0x9a0
[  972.408177][T16128]        ksys_write+0x14d/0x260
[  972.413082][T16128]        do_syscall_64+0x4c/0xa0
[  972.418073][T16128]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  972.424549][T16128] 
[  972.424549][T16128] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}:
[  972.433298][T16128]        __lock_acquire+0x2d18/0x7c40
[  972.438782][T16128]        lock_acquire+0x1bb/0x4a0
[  972.443866][T16128]        down_write+0x36/0x60
[  972.448591][T16128]        process_measurement+0x3af/0x1c40
[  972.454411][T16128]        ima_file_mmap+0xe9/0x140
[  972.459500][T16128]        __se_sys_remap_file_pages+0x55a/0x7b0
[  972.465718][T16128]        do_syscall_64+0x4c/0xa0
[  972.470772][T16128]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  972.477276][T16128] 
[  972.477276][T16128] other info that might help us debug this:
[  972.477276][T16128] 
[  972.487551][T16128]  Possible unsafe locking scenario:
[  972.487551][T16128] 
[  972.495045][T16128]        CPU0                    CPU1
[  972.500446][T16128]        ----                    ----
[  972.505847][T16128]   lock(&mm->mmap_lock);
[  972.510222][T16128]                                lock(&sb->s_type->i_mutex_key#13);
[  972.518268][T16128]                                lock(&mm->mmap_lock);
[  972.525162][T16128]   lock(&sb->s_type->i_mutex_key#13);
[  972.530680][T16128] 
[  972.530680][T16128]  *** DEADLOCK ***
[  972.530680][T16128] 
[  972.538858][T16128] 1 lock held by syz.5.4026/16128:
[  972.544049][T16128]  #0: ffff88802fdeea58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0
[  972.554591][T16128] 
[  972.554591][T16128] stack backtrace:
[  972.560521][T16128] CPU: 1 PID: 16128 Comm: syz.5.4026 Not tainted syzkaller #0
[  972.568038][T16128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  972.578154][T16128] Call Trace:
[  972.581478][T16128]  <TASK>
[  972.584446][T16128]  dump_stack_lvl+0x188/0x24e
[  972.589189][T16128]  ? load_image+0x410/0x410
[  972.593747][T16128]  ? show_regs_print_info+0x12/0x12
[  972.599000][T16128]  ? print_circular_bug+0x12b/0x1a0
[  972.604285][T16128]  check_noncircular+0x296/0x330
[  972.609279][T16128]  ? look_up_lock_class+0x75/0x140
[  972.614501][T16128]  ? add_chain_block+0x9b0/0x9b0
[  972.619496][T16128]  ? lockdep_lock+0xf1/0x1f0
[  972.624138][T16128]  ? __lock_acquire+0x1465/0x7c40
[  972.629251][T16128]  ? _find_first_zero_bit+0xd2/0x100
[  972.634603][T16128]  __lock_acquire+0x2d18/0x7c40
[  972.639520][T16128]  ? ima_match_policy+0x10d/0x21b0
[  972.644691][T16128]  ? __lock_acquire+0x7c40/0x7c40
[  972.649793][T16128]  ? __lock_acquire+0x1465/0x7c40
[  972.654879][T16128]  ? verify_lock_unused+0x140/0x140
[  972.660144][T16128]  ? ima_match_policy+0x10d/0x21b0
[  972.665313][T16128]  ? ima_match_policy+0x211c/0x21b0
[  972.670597][T16128]  lock_acquire+0x1bb/0x4a0
[  972.675170][T16128]  ? process_measurement+0x3af/0x1c40
[  972.680609][T16128]  ? __might_sleep+0xd0/0xd0
[  972.685258][T16128]  ? finish_task_switch+0x262/0x8e0
[  972.690517][T16128]  ? read_lock_is_recursive+0x10/0x10
[  972.695948][T16128]  ? ima_get_action+0x71/0xa0
[  972.700702][T16128]  down_write+0x36/0x60
[  972.704914][T16128]  ? process_measurement+0x3af/0x1c40
[  972.710356][T16128]  process_measurement+0x3af/0x1c40
[  972.715641][T16128]  ? ima_file_mmap+0x140/0x140
[  972.720480][T16128]  ? aa_file_perm+0x112/0xf00
[  972.725243][T16128]  ? apparmor_current_getsecid_subj+0xb1/0x110
[  972.731534][T16128]  ima_file_mmap+0xe9/0x140
[  972.736098][T16128]  ? ima_file_free+0x3e0/0x3e0
[  972.740921][T16128]  ? common_file_perm+0x171/0x1c0
[  972.746019][T16128]  ? bpf_lsm_mmap_file+0x5/0x10
[  972.750939][T16128]  ? security_mmap_file+0x11b/0x180
[  972.756192][T16128]  __se_sys_remap_file_pages+0x55a/0x7b0
[  972.761895][T16128]  ? __x64_sys_remap_file_pages+0xc0/0xc0
[  972.767684][T16128]  ? lockdep_hardirqs_on+0x94/0x140
[  972.772966][T16128]  ? __x64_sys_remap_file_pages+0x1c/0xc0
[  972.778759][T16128]  do_syscall_64+0x4c/0xa0
[  972.783232][T16128]  ? clear_bhb_loop+0x60/0xb0
[  972.787961][T16128]  ? clear_bhb_loop+0x60/0xb0
[  972.792698][T16128]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  972.798702][T16128] RIP: 0033:0x7f559b99e159
[  972.803176][T16128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  972.822848][T16128] RSP: 002b:00007f559c8e3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  972.831323][T16128] RAX: ffffffffffffffda RBX: 00007f559bc26090 RCX: 00007f559b99e159
[  972.839348][T16128] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000
[  972.847373][T16128] RBP: 00007f559ba3506b R08: 0000000000010000 R09: 0000000000000000
[  972.855401][T16128] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000000
[  972.863427][T16128] R13: 00007f559bc26128 R14: 00007f559bc26090 R15: 00007fff591864b8
[  972.871464][T16128]  </TASK>
[  973.366670][T16137] loop6: detected capacity change from 0 to 128
[  973.404850][T16137] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  973.413736][T16137] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  973.473989][T12799] EXT4-fs (loop6): unmounting filesystem.