last executing test programs:

2m13.058301625s ago: executing program 0 (id=290):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_cmd={0x7, 0xfff, 0x404, 0x1, 0xc, 0x8, 0xe, 0xe1, 0x9, 0x3, 0x1, 0x3338, 0x4, 0x2, 0x41, 0x92, [0x100, 0x585]}})
r1 = accept(r0, &(0x7f00000000c0)=@nl, &(0x7f0000000140)=0x80)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setns(0xc9, 0x40000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
getsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000880), &(0x7f00000008c0)=0x10)
sched_setscheduler(r3, 0x6, &(0x7f00000001c0)=0x203)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x553b, &(0x7f00000024c0)="$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")
r5 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000340)=r3, 0x12)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000240)=@req={0xb, 0x7, 0xa, 0x5}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x800000, 0x0, 0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x0, 0x0, 0x148, 0x0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x8, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000000)=""/48, &(0x7f0000000200)=0x10)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xe}}, './file0\x00'})
ptrace$setregs(0xf, r3, 0x229, &(0x7f0000000280)="d912b7f130021e18869f9311395dde0d3fe69af63764ed7a8f0dc88e946c75db1630e6bdf760d22035e4ad563817f08d3685765fdbb65ff84fc4e3149565da880a0cb828179ecf91d13496e8d0bd46ac773434ebfe3a659bd63563ee27bcacfdcdc7b7a4a3b834bcbe8c")

2m11.294278798s ago: executing program 0 (id=297):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xfff3}, {0x1}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0)
ioctl$EVIOCSCLOCKID(r1, 0x40084503, 0xfffffffffffffffe)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={<r2=>r0, &(0x7f0000000000)='(.^{@\x00', 0x20080, &(0x7f0000000040)={@align=0xd2f1, {0x51, 0x7f, 0x5}}, 0x4, &(0x7f0000000080), &(0x7f0000000140)=0x3})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff02001800000800"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

2m8.604966134s ago: executing program 0 (id=301):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
recvfrom$inet(r3, 0x0, 0x0, 0x10060, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

2m8.115577356s ago: executing program 0 (id=303):
syz_mount_image$ufs(&(0x7f0000009e00), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x1, 0x9e24, &(0x7f0000009e40)="$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")
syz_mount_image$jffs2(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300), 0x1, 0x265, &(0x7f0000000340)="$eJxqlWRW4GFgYNi4Qe5JqyTjA0MGBgbZm01OjAwQwASlOTkYGF7vdv+1074nOS0zJ1UvOT8n5f///62STA9WMDAwzGWNYwGpBel72wjRk8KACVKQxBsmf9Te46raUFxZlZ2Yk5NaREMGyG+6DAwMVoa+EYxQdzJD3cHKwsBwUsGtJ2/5IX2Q3wyg/nIBhcXv7zOYYf5yxOIhHGDxO6USdDtB4cMCs5ODgeFCC8+NH9OPRoDsNITa6cfAwFAp7fWdBS0subDYwYUknvzoTuO3dP43CB+DzON4YMDAwLDhveFdmJ8Z2dgYvvJZnV2zYIt5RWJJSZEhA4QC28/5QIaBgWGyTucfmP0gN2d9XpqKbBYTkllrIvbcqtvjpAc2xAhilhEWs2B+D13teA49XEDhy4oULnqRB986HTtzEBQuRrC4UGBg+Lt31wJWtHDRUMYSMApQDAWyNru/Eh9zo2AUjIJRMApGwSgYBaNgFIyCUTAKRsEoGAWjYBSMglEwCkbBKBgFo2AUjIJRMApGwSgYrKBVkulBDjMDw9RD5v9ZoesRcK4hUGBg0GCGYBgQD2m+RlcHj4JRMEQB+voeFrT1PdELLQSufDu9LS0zJ9UYvL4HoR62FogNSf22KQzM6Guz4lgYGKyeRC1gQ1sPJMWC6R6QGEy8WHR279If81vpseZslDHKGGUMNQZmeQQqY9hh5REXA4Prjpeb0NdtZjMwMJS6LEtgh5ZH/xdC1KtjKR/VkcQnmO4SkCjbwqhfklugX1xZpZuZm5iemp6aZ2RkbGZgYmBgagQp96ClHyAAAP//kjLM+w==")
clock_gettime(0x0, &(0x7f0000000ec0))
futimesat(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='mydomain   64\n', 0xe)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04152cbd7000fedbd7252c00000008000000", @ANYRES32=r2, @ANYBLOB="0c0099000000000006000000"], 0x28}, 0x1, 0x0, 0x0, 0x40008}, 0x4000001)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x200000, &(0x7f0000000840)={[{@test_dummy_encryption_v1}, {@init_itable}, {@dioread_lock}]}, 0x3, 0x46a, &(0x7f0000001040)="$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")
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./bus\x00', 0x16b82f, 0x0, 0x6, 0x0, &(0x7f0000000100))
chdir(&(0x7f00000003c0)='./bus\x00')
r3 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x42021000)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f00000005c0)="462a41b72d6d3c319b8c9b4f758b3ef53a87125da2fc1c28f0a1cd2cc1d2f2a9ed58825a9d23f8a9fe", 0x29)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r4 = syz_usb_connect(0x0, 0x2b, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x16d980, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
r5 = semget(0x1, 0x4, 0x69c)
semop(r5, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2)
semop(r5, &(0x7f00000000c0)=[{0x1, 0xbbdd, 0x1000}, {0x1, 0x2, 0x1800}], 0x2)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff])
socket$tipc(0x1e, 0x2, 0x0)

2m4.252107981s ago: executing program 0 (id=320):
r0 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x20000400)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x112, 0xe, 0x0, &(0x7f0000000080))
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000003000000040000000c000180cafc08"], 0x78}}, 0x0)

2m1.596005136s ago: executing program 0 (id=328):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000faffcaf538c5b8a349d92d3e2f719b68dd2a6cbd19a3da7306", @ANYRESOCT=r0, @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001400), 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x1)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)

2m1.248428975s ago: executing program 32 (id=328):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000faffcaf538c5b8a349d92d3e2f719b68dd2a6cbd19a3da7306", @ANYRESOCT=r0, @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001400), 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x1)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)

2m0.159039262s ago: executing program 4 (id=334):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000faffcaf538c5b8a349d92d3e2f719b68dd2a6cbd19a3da7306", @ANYRESOCT=r0, @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001400), 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x1)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r5 = syz_open_procfs(0x0, 0x0)
r6 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="1c0000202c0000bc6724f81d", @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x20400, 0xb6)
linkat(r7, 0x0, 0xffffffffffffffff, &(0x7f0000000640)='./bus\x00', 0x1400)
stat(&(0x7f0000000200)='./file0/file1\x00', &(0x7f0000000280))
r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0835241313288b6187916c7b0e5f1fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e0500000036df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f294880b584a15bbf3956250db0cf5e948127560df4dbc6af73f6eacdd4b6e23b100"})
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000740)='./file0\x00', 0x13040, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=macceltic,umask=00000000000000000400011,anchor=00000000000001114111,gid=forget,volume=00000000000000001023,novrs,novrs,iocharset=cp865,umask=00000000000000000001000,gid=', @ANYRESDEC=r3, @ANYBLOB="2c73657373696f6e3d30303030303030303030303030303030303030362c6d6f64653d30303030303030405dc2f83bb24e303030302c000000000000000000000026b59cf7c9d20000"], 0x1, 0xc32, &(0x7f0000000e00)="$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")

1m58.999183411s ago: executing program 4 (id=335):
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x82, 0x0, &(0x7f0000000000))

1m58.569722771s ago: executing program 4 (id=337):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@deltaction={0x20c, 0x31, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0x44, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x20c}}, 0x0)

1m58.366935766s ago: executing program 4 (id=338):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000001940), &(0x7f0000001980)={0x0, 0xfb, 0xd9, 0x1, 0x40, "fb7119f5fb6a0c760d9f7870f74a97d7", "6fa3e9fccf33a28496c77182442220ba90cfbbe59dc1bde2271317e34a806df68a0e4145a97bf4b9a293e4eecaec115dd4e4a16276f63ff4835c598540eff68d769eed6a65aca9cdad81aa3c89836937feec7c42ead8d405c07ae92c91bc3ffaa26b78ae111ca2b6bbc60f27fcab00dc48e02f3f2e13315999366a2372eade7618b526c1a07e4ac797f7e8a5a29376fc0d99f03c5c6360606c7429eb6e369edbf70adf724f09a7f0d7d562c7ceb78df92d7c61326ab284ce01ccd53203c134e7c160bc20"}, 0xd9, 0x1) (async)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x986, 0x4, 0x0, 0x3, 0xb, "155e4a7285d474dd"})
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x804004, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
setrlimit(0x1, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x103800, 0x12) (async)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
close(0xffffffffffffffff)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b70500d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) (async)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r6, 0x2000009) (async)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$eJzs3c1vVFUbAPDnTj9oKXk7kDcqLqSJMZAoLS1gGuMCtoY0+BE3urDSgkiBhtZo0YSS4MbEuDHGxJUL8b9QIltWunLhxpUhIWpYmjjmztxbOu1Mv2jnEu7vlwxz7zlze86lfeace+acOwGU1lD6TyVif0TMJhGDyeJSXndkmUON193/+5Mz6SOJWu31P5NIsrT89Un2PJAd3BcRP/+UxL6u1eXOLVy9MDkzM30l2x+Zvzg7Mrdw9fD5i5Pnps9NXxp7cWz8+LHj46NHtnRe11qknbrx/oeDn0289d03/ySj3/82kcSJeCV74fLz2C5DMVT/P0lWZw2Mb3dhBenK/k5qtVotT0u6i60TG5f//noi4skYjK548MsbjE9fLbRywI6qJY33bqCMEvEPJZX3A/Jr+5XXwZVCeiVAJ9w72RgAWB3/3Y2xweirjw3svp/E8mGdJCK2NjLXbE9E3Lk9cePs7YkbsUPjcEBri9cj4qlW8Z/U478afVGtx3+lKf7TfsHp7DlNf22L5a8cKhb/0DmN+O9bM/6jTfy/kz5fa8Twu1ssv/pg873+pvjv3+opAQAAAAAAQGndOhkRL7T6/L+yNP8nWsz/GYiIE9tQ/tCK/dWf/1fubkMxQAv3Tka83HL+byWf/VvtWraEtRo9ydnzM9NHIuJ/EXEoenal+6NrlHH4831ft8sbyub/5Y+0/DvZXMCsHne7dzUfMzU5P/kQpwxk7l2PeLrl/N9kqf1PWrT/6TvD7AbL2PfczdPt8taPf2Cn1L6NONiy/X9w14pk7ftzjNT7AyN5r2C1Zz7+4od25W81/t1iAh5e2v7vXjv+q8ny+/XMbb6MowvdtXZ5W+3/9yZv1O8q1JulfTQ5P39lNKI3OdWVpjalj22+zvA4yuMhj5c0/g89u/b4X6v+f39ELK742clfzWuKc0/8O/B7u/ro/0Nx0vif2lT7v/mNsZvVH9uVv7H2/1i9rT+UpRj/g4av8jDtbU5vEY7drbI6XV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBxUImJPJJXhpe1KZXg4YiAi/h+7KzOX5+afP3v5g0tTaV79+/8r+Tf9Djb2k/z7/6vL9sdW7B+NiL0R8WVXf31/+MzlmamiTx4AAAAAAAAAAAAAAAAAAAAeEQNt1v+n/ugqunbAjusuugJAYVrE/y9F1APoPO0/lJf4h/IS/1Be4h/KS/xDea0d/2+Pd6wiQMdp/6G8xD8AAAAAADxW9h649WsSEYsv9dcfqd4sr6fQmgE7rVJ0BYDCuMUPlJepP1BervGBZJ38vrYHrXfkWmbPPMTBAAAAAAAAAAAAAFA6B/db/w9lZf0/lJf1/1Be+fr/AwXXA+g81/hArLOSv+X6/3WPAgAAAAAAAAAAAAC209zC1QuTMzPTV2y8+WhUo5MbtVrtWvpX8KjUZ/s3kmyGekcKzafCd/5Mezdygvlav4395OLekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGb/BQAA//8wviV5") (async)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) (async)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

1m57.096096618s ago: executing program 4 (id=342):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0)

1m56.391173405s ago: executing program 4 (id=345):
syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="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", 0x2000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xacb, r1}, 0x38)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b)
write(r2, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r3, &(0x7f0000000400)='p:mygroup/_yevent ./dummy:0x2', 0x1d)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000006d40)=ANY=[@ANYBLOB="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"], 0x1, 0x1504, &(0x7f0000001580)="$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")

1m56.1645791s ago: executing program 33 (id=345):
syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="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", 0x2000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xacb, r1}, 0x38)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b)
write(r2, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r3, &(0x7f0000000400)='p:mygroup/_yevent ./dummy:0x2', 0x1d)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000006d40)=ANY=[@ANYBLOB="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"], 0x1, 0x1504, &(0x7f0000001580)="$eJzs3Qn4jtXWMPC19t43fxJPknmvvW6eZNgkSYYkGZIkSSWZEpIkSUIyZUpCEjInmUMyhWSep8xJciRJEhKS7O/6V+c45+28b9/5Tu/nnPNfv+u6r2eva99r33s/i+cerud6/l+3H1SlbtWKdZgZ/in4y0s3AEgBgL4AkAUAIgAombVk1tT+DBq7/XMHEX+s+6de7hmIy0nqn7ZJ/dM2qX/aJvVP26T+aZvUP22T+qdtUn8h0rKt03JdJVva3f755/8pv7zI8/9/Q3L+T9uk/v9pTmf4R/aW+v8nuRhC+McypP5pm9Q/bZP6p21S/7RN6p+2Sf2FSMsu9/Nn2S7vdrn//QkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESBvOhUsMAARIXO4pCSGEEEIIIYQQ4g8W0l/uGQghhBBCCCGEEOJ/H4ICDQYiSAfpIQUyQEa4AjLBlZAZskACroKscDVkg2sgO+SAnJALckMeyAsWCBwwxJAP8kMSroUCcB0UhEJQGIqAh6JQDK6H4nADlIAboSTcBKXgZigNZaAslINboDzcChXgNqgIt0MlqAxVoCrcAdXgTqgOd0ENuBtqwj1QC+6F2nAf1IH74QF4EOrCQ1APHob60AAaQiNo/P+U/zx0hhegC3SFbtAdesCL0BN6QW/oA33hJegHL0N/eAUGwEAYBK/CYHgNhsDrMBSGwXB4A0bASBgFo2EMjIVx8CaMh7dgArwNE2ESTIYpMBWmwXR4B2bATJgF78JseA/mwFyYB/NhAbwPC2ERLIYPYAl8CEthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW+Ej2AbbYQfshF2wG/bAx7AXPoF98Cnsh8/+wfyz/yW/AwICKlRo0GA6TIcpmIIZMSNmwkyYGTNjAhOYFbNiNsyG2TE75sScmBtzY17Mi4SEjIz5MB8mMYkFsAAWxIJYGAujR4/FsBgWxxuwBJbAklgSS2EpLI1lsAyWw3JYHstjBayAFbEiVsJKWAWr4B14B96J1bE61sAaWBNrYi2shbWxNtbBC79+S6Uu1sN6WB/rY0NsiI2xMTbBJtgUm2JzbI4tsAW2xJbYCltha2yNbbANtsW22A7bYXtsjx2wI3bE5/F5fAFfwK5YSXXHHtgDe2JP7I19sA++hP3wZXwZX8EBOBAH4av4Kr6GQ/AMDsVhOByHY3k1EkfhaGQ1FsfhOByP43ECTsCJOAkn4RScitNwOk7HGTgTZ+K7OBvfw/dwLs7F+bgAF+BCXISLcTEuwbO4FJfhclyBK3EVrsQ1uBbX4HrcgOtxE27CLbgFP8KPcDtux524E3fjbvwYP8ZP8BMcgPtxPx7AA3gQD+IhPISH8TAewSN4FI/iMTyGx/E4nsCTeApP4mk8jWfwLJ7Dc3gez+MFvIAX8WLqf36Vyiij0ql0KkWlqIwqo8qkMqnMKrNKqITKqrKqbCqbyq6yq5wqp8qtcqu8Kq8iRYpVrPKpfCqpkqqAKqAKqoKqsCqsvPKqmCqmiqviqoQqoUqqm1QpdbMqrcqoZr6cKqfKq+a+grpNVVQVVSVVWVVRVVVVVU1VU9VVdVVD1VA1VU1VS92raqvu2BvvV6mVqasGYj01COurBqqhaqRew0dUEzUEm6pmqrl6TA3DodhSNfGt1JOqtRqFbdTTajQ+o9qpsdhePac6qI6qk3pedVZNfRfVVU3E7qqHmoI9VS/VW/VRM7CySq1YFfWKGqAGqkHqVTUfX1ND1OtqqBqmhqs31Ag1Uo1So9UYNVaNU2+q8eotNUG9rSaqSWqymqKmqmlqeupHq5qpZql31Wz1npqj5qp5ar5aoN5XC9UitVh9oJaoD9VStUwtVyvUSrVKrVZr1Fq1Tq1XG9TGCNRmtUVtVR+pbWq72qF2ql1qt9qjPlZ71Sdqn/pU7VefqQPqT+qg+lwdUl+ow+pLdUR9pY6qr9Ux9Y06rr5VJ9RJdUp9p06r79UZdVadUz+o8+pHdUH9pC6qoECjVlproyOdTqfXKTqDzqiv0Jn0lTqzzqIT+iqdVV+ts+lrdHadQ+fUuXRunUfn1VaTdpp1rPPp/Dqpr9UF9HW6oC6kC+si2uuiupi+XhfXN+gS+kZdUt+kS+mbdWldRpfV5fQtury+VVfQt+mK+nZdSVfWVXRVfYeupu/U1fVduoa+W9fU9+ha+l5dW9+n6+j79QP6QV1XP6Tr6Yd1fd1AN9SNdGP9iG6iH9VNdTPdXD+mW+jHdUv9hG6ln9St9VO6jX5at9XP6Hb6Wd1eP6c76I66k/5JX9RBd9FddTfdXffQL+qeupfurfvovvol3U+/rPvrV/QAPVAP0q/qwfo1PUS/rofqYXq4fkOP0CP1KD1aj9Fj9Tj9ph6v39IT9Nt6op6kJ+speqqepnv/OtKs/4v8t/5Ofv+fj75Fb9Uf6W16u96hd+pderfeo/fovXqv3qf36f16vz6gD+iD+qA+pA/pw/qwPqKP6KP6qD6mj+nj+rg+oU/qH/R3+rT+Xp/RZ/VZ/YM+r8/rC7++B2DQKKONMZFJZ9KbFJPBZDRXmEzmSpPZZDEJc5XJaq422cw1JrvJYXKaXCa3yWPyGmvIOMMmNvlMfpM015oC5jpT0BQyhU0R401RU8xc/0/n/978GpvGpolpYpqapqa5aW5amBampWlpWplWprVpbdqYNqataWvamXamvWlvOpgOppPpZDqbziYAQDfTzfQwL5qeppfpbfqYvuYl08/0M/1NfzPADDCDzCAz2Aw2Q8wQM9QMNcPNcDPCjDCjzCgzxowx48w4M96MNxPMBDPRTDSTzWQz1Uw10810M8PMMLPMLDPbzDZzzBwzz8wzC8wCs9AsNIvNYrPELDFLzTKzzKwwK8wqs8qsMWvMOrPObDAbzCazySw1f/6C5g6zw+wyu8wes8fsNXvNPrPP7Df7zQFzwBw0B80hc8gcNofNEXPEHDVHzTFzzBw3x80Jc8KcMqfMaXPanDFnzDlzzpw3580Fc8FcNBdTL/siFanIRCZKF6WLUqKUKGOUMcoUZYoyR5mjRJSIskZZo2zRNVH2KEeUM8oV5Y7yRHkjG1HkIo7iKF+UP0pG10YFouuiglGhqHBUJPJR0ahYdH1UPLohKhHdGJWMbopKRTdHpaMyUdmoXHRLVD66NaoQ3RZVjG6PKkWVoypR1eiOqFp0Z1Q9uiuqEd0d1YzuiWpF90a1o/uiOtH90QPRg1Hd6KGoXvRwVD9qEDWMGkWN/9DxQziT41HfxXa13Wx328O+aHvaXra37WP72pdsP/uy7W9fsQPsQDvIvmoH29fsEPu6HWqH2eH2DTvCjrSj7Gg7xo614+ybdrx9y06wb9uJdpKdbKfYqXaanW7fsTPsTDvLvmtn2/fsHDvXzrPz7QL7vl1oF9nF9gO7xH5ol9pldrldYVfaVXa1XWPX2nV2vd1gN9pNdrPdYrfaj+w2u93usDvtLrvb7rEf2732E7vPfmr328/sAfsne9B+bg/ZL+xh+6U9Yr+yR+3X9pj9xh6339oT9qQ9Zb+zp+339ow9a8/ZH+x5+6O9YH+yF21IvbhPPb2TIUPpKB2lUAplpIyUiTJRZspMCUpQVspK2SgbZafslJNyUm7KTXkpL6ViYspH+ShJSSpABaggFaTCVJg8eSpGxag4FacSVIJKUkkqRaWoNJWmspR60ryFbqVb6Ta6jW6n26kyVaaqVJWqUTWqTtWpBtWgmlSTalEtqk21qQ7VoQfoAapLdake1aP6VJ8aUkNqTI2pCTWhptSUmlNzakEtqCW1pFbUilpTa2pDbagttaV21I7aU3vqQB2oE3WiztSZulAX6kbdqAf1oJ7Uk3pTb+pLfakf9aP+1J8G0AAaRINoMA2mITSEhtIwGk5v0AgaSaNoNI2hsTSOxtF4Gk8TaAJNpIk0mSbTVJpK02k6zaAZNItm0WyaTXNoDs2jebSAFtBCWkiLaTEtoSW0lJbSclpOK2klrabVtJbW0npaTxtpI22mzbSVttI22kY7aAftol20h/bQXtpL+2gf7af9dIAO0EE6SIfoEB2mw3SEjtBROkrH6Bgdp+N0gk7gKTpFp+k0naEzdI7O0Xn6kS7QT3SRAqW4DC6ju8Jlcle6zC6LS3EZugLAX+KcLpfL7fK4vM667C7H38TknCvoCrnCrojzrqgr5q7/TVy6exlX1pVzt7jy7lZXwZV2fxtXc3e66u4uV8Pd7aq6O/4mrunucbXcQ662e9jVcQ3cA66Rq+secvXcw66+a+AaukauhXvctXRPuFbuSdfaPfWbeKFb5Na6dW692+D2uk/cOfeDO+q+dufdj66L6+r6updcP/ey6+9ecQPcwN/Ew90bboQb6Ua50W6MG/ubeLKb4qa6aW66e8fNcDN/Ey9w77vZbrGb4+a6eW7+z3HqnBa7D9wS96Fb6pa55W6FW+lWudVuzV/musJtcpvdFrfHfey2ue1uh9vpdrndP8ep69jnPnX73WfuiPvKHXSfu0PumDvsvvw5Tl3fMfeNO+6+dSfcSXfKfedOu+/dGXf25/Wnrv0795O76IIDRlas2XDE6Tg9p3AGzshXcCa+kjNzFk7wVZyVr+ZsfA1n5xyck3Nxbs7DedkysWPmmPNxfk7ytVyAr+OCXIgLcxH2XJSL8fVcnG/gEnwjl+SbuBTfzKW5DJflcnwLl+dbuQLfxhX5dq7ElbkKV+U7uBrfydX5Lq7Bd3NNvodr8b1cm+/jOnw/P8APcl1+iOvxw1yfG3BDbsSN+RFuwo9yU27GzfkxbsGPc0t+glvxk9yan+I2/DS35We4HT/L7fk57sAduRM/z535Be7CXbkbd+ce/CL35F7cm/twX36J+/HL3J9f4QE8kAfxqzyYX+Mh/DoP5WE8nN/gETySR/FoHsNjeRy/yeP5LZ7Ab/NEnsSTeQpP5Wk8nd/hGTyTZ/G7PJvf4zk8l+fxfF7A7/NCXsSL+QNewh/yUl7Gy3kFr+RVvJrX8Fpex+t5A2/kTbyZt/BW/oi38XbewTt5F+/mPfwx7+VPeB9/yvv5Mz7Af+KD/Dkf4i/4MH/JR/grPspf8zH+ho/zt3yCT/Ip/o5P8/d8hs/yOf6Bz/OPfIF/4oscGGKMVaxjE0dxujh9nBJniDPGV8SZ4ivjzHGWOBFfFWeNr46zxdfE2eMccc44V5w7zhPnjW1MsYs5juN8cf44GV8bF4iviwvGheLCcZHYx0XjYvH1cfH4hrhEfGNcMr4pLhXfHJeOy8Rl43LxLXH5+Na4QnxbXDG+Pa4UV46rxFXjO+Jq8Z1x9fiuuEZ8d1wivieuFd8b147vi+vE98cPxA/GdeOH4nrxw3H9uEHcMG4UN44fiZvEj8ZN42Zx8/ixuEX8eNwyfiJuFT8Zt46f+t3+bnH3uEf8YvxiHMJdel5yfnJB8v3kwuSi5OLkB8klyQ+TS5PLksuTK5Irk6uSq5NrkmuT65LrkxuSG5ObkpuTW5IhVE0PHr3y2hsf+XQ+vU/xGXxGf4XP5K/0mX0Wn/BX+az+ap/NX+Oz+xw+p8/lc/s8Pq+3nrzz7GOfz+f3SX+tL+Cv8wV9IV/YF/HeF/XFfCPf2Df2Tfyjvqlv5pv7x/xj/nH/uH/CP+Gf9K39U76Nf9q39c/4dv5Z/6x/znfwHX0n/7zv7F/wXXxX38138z18D9/T9/S9fW/f1/f1/Xw/39/39wP8AD/ID/KD/WA/xA/xQ/1QP9wP9yP8CD/Kj/Jj/Bg/zo/z4/14P8FP8BP9RD/ZT/ZT/VQ/3U/3M/wMP8vP8rP9bD/Hz/Hz/Dy/wC/wC/1Cv9gv9kv8Er/UL/XL/XK/0q/0q/1qv9av9ev9er/Rb/Sb/Wa/1W/12/w2v8Pv8Lv8Lr/H7/F7/V6/z+/z+/1+f8Af8Af9QX/If+EP+y/9Ef+VP+q/9sf8N/64/9af8Cf9Kf+dP+2/92f8WX/O/+DP+x/9Bf+Tv+iDH5d4MzE+8VZiQuLtxMTEpMTkxJTE1MS0xPTEO4kZiZmJWYl3E7MT7yXmJOYm5iXmJxYk3k8sTCxKLE58kFiS+DCxNLEssTyxIrEysSoRQp5tccgX8odkuDYUCNeFgqFQKByKBB+KhmLh+lA83BBKhBtDyXBTKBVuDqVDmVA2PBzqhwahYWgUGodHQpPwaGgamoXm4bHQIjweWoYnQqvwZGgdngptwtOhbXgmtAvPhvbhudAhdAydwvOhc3ghdAldQ7fQPfQIL4aeoVfoHfqEvuGl0C+8HPqHV8KAMDAMCq+GweG1MCS8HoaGYWF4eCOMCCPDqDA6jAljw7jwZhgf3goTwtthYpgUJocpYWqYFqaHd8KMMDPMCu+G2eG9MCfMDfPC/LAgvB8WhkVhcfggLAkfhqVhWVgeVoSVYVVYHdaEtWFdWB82hI1hU9gctoSt4aOwLWwPO8LOsCvsDnvCx2Fv+CTsC5+G/eGzcCD8KRwMn4dD4YtwOHwZjoSvwtHwdTgWvgnHw7fhRDgZToXvwunwfTgTzoZz4YdwPvwYLoSfwsUQwuV+ki6EEEII8e9A/05/9/8mR/3a7gEAV27Pdfi/9m/M/ku7V/rcLRIA8GTX9vf/eatUqVu3br/uu1RDlH8uwF//7EA6uBQvg+bwOLSCZlD8L/0pf3WsXqrjef6fxgeIkjcBZPyrnNT8P8eXxr/h766/lxo5+38cX0OUnAtQMP+lnAxwKb40fon/ZvwcTX5n/AyfjwNo+lc5meBSfGn8YvAoPAWt/mZPIYQQQgghhBDiF71U2ba/d3+ben+e21zKSQ+X4r93fy6EEEIIIYQQQoh/Lc907PTEI61aNWsrjf+tRsjyy1v9rzKfNN3o968xjX+DxuX+ZBJCCCGEEEL80S5d9F/umQghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEGnX/4+fE/vzsX7vbw0KIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/6n+TwAAAP//jJE5Fg==")

1m23.403781197s ago: executing program 2 (id=441):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000049000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b954bc6762240c61c57ed374ad", 0x0, 0x20041ff, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0x4, 0x2}, 0x6)

1m22.500612849s ago: executing program 2 (id=444):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x81, 0x56a, &(0x7f00000015c0)="$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")
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00')
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x40001, 0x0)
write$binfmt_misc(r0, &(0x7f00000000c0), 0xff86)

1m22.096354799s ago: executing program 2 (id=447):
ftruncate(0xffffffffffffffff, 0x51a9497) (async)
r0 = socket$kcm(0xa, 0x2, 0x0) (async)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @broadcast, 0x4e20, 0x3, 'nq\x00', 0x2, 0x660f537e, 0xfffffffb}, 0x2c) (async)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0xc44, &(0x7f0000000100)=ANY=[], 0x3, 0x152d, &(0x7f00000002c0)="$eJzs3An4jVXXMPC19t43fzKcJPNee92cZNgkSYYkGZIkSZI5IUmSJCRTpiQkIXOSOSRTSOZ5ypQkeSRJEhKS7O/SpOer96r363k+7/tYv+u6r7PX2Xvte99nOefc53bO/8t2AyvWrlSuJjPD34I/3XQFgBQA6AMAGQEgAoBimYplutCfRmPXv7cT8a9135RLvQJxKUn9L29S/8ub1P/yJvW/vEn9L29S/8ub1P/yJvUX4nK2ZWr2K2W7fLe/f/0/5acbuf7/v5C8/1/epP7/aU6m+e+Mlvr/JzkfQvjdnSn/5fAM/+bliP/x5Pl/eZP6/yeK/vJIqf/lTep/eZP6C3E5u9TXn2X7e1vd+pPS/Z38S/3vTwghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHE5eFMuMgAwC/tS70uIYQQQgghhBBC/OuE1Jd6BUIIIYQQQgghhPj3Q1CgwUAEqSA1pEAaSAtXQDpIDxkgIyTgSsgEV0FmuBqyQFbIBtkhB+SEXGCBwAFDDLkhDyThGsgL10I+yA8FoCB4KASF4TooAtdDUbgBisGNUBxughJQEkpBabgZysAtUBZuhXJwG5SHClARKsHtUBnugCpwJ1SFu6Aa3A3V4R6oAfdCTbgPasH9UBsegDpQF+pBfWgADaHRb/JT/nL+M9AJnoXO0AW6QjfoDs9BD+gJvaA39IHnoS+8AP3gRegPA2AgvASD4GUYDK/AEBgKw+BVGA4jYCSMgtEwBsbCazAOXofx8AZMgIkwCSbDFJgK0+BNmA4zYCa8BbPgbZgNc2AuzIP58A4sgIWwCN6FxfAeLIGlsAyWwwpYCatgNayBtbAO1sMG2AibYDNsgfdhK2yD7bADdsIHsAs+hN3wEeyBj2EvfPLfzD/9z/nnQwgIqFChQYOpMBWmYAqmxbSYDtNhBsyACUxgJsyEmTEzZsEsmA2zYQ7MgbkwFxISMjLmxtyYxCTmxbyYD/NhASyAHj0WxsJYBKdCUSyKxbAYFsfiWAJLImBpLI1lEKAslsVyWA7LY3msiBXxdrwd78AqWAWrYlWshtWwOlbHGlgDa2JNrIW1sDbWxjpYB+thPWyADbARNsLG2BibYBNsZgCbY3NsgS2wJbbEVtgKW2NrbINtsC22xXbYDttjB+yAz+Az+Cw+i12wvOqG3bE79sAe2At7Y298HvviC/gCvoj9cQAOxJfwJXwZB+MpHIJDcRgOwzJqBI7EUchqDI7FsTgOx+F4HI8TcCJOxMk4BafiNJyG03EGzsC3cBa+jW/jHJyD83A+zscFuBAX4SJcjKdxCS7FZbgcV+BKXIGrcQ2uxnW4HtfhRtyIm3Ezvo/v4zbchjtwB36AH+CH+CF+hB9hf9yLe3Ef7sP9uB8P4AE8iAfxEB7Cw3gYj+ARPIpH8RgexxN4HE/iSTyFp/EMnsGzeBbP4Tk8j+cvPPnVBUYZlUqlUikqRaVVaVU6lU5lUBlUQiVUJpVJZVaZVRaVRWVT2VQOlUPlUrkUKVKsYpVb5VZJlVR5VV6VT+VTBVQB5ZVXhVVhVUQVUUVVUVVM3aiKq5tUCVVSNfWlVWlVRjXzZdWtqpwqp8qrCqqiqqQqqcqqsqqiqqiqqqqqpqqp6uoeVUN1w154n7pQmdpqANZRA7Geqq8aqIbqZXxQNVaDsYlqqpqph9VQHIItVGPfUj2mWqmR2Fo9oUbhk6qtGoPt1NOqveqgOqpnVCfVxHdWXdQE7Ka6q8nYQ/VUvVRvNR0rqAsVq6heVP3VADVQvaTm4ctqsHpFDVFD1TD1qhquRqiRapQarcaoseo1NU69rsarN9QENVFNUpPVFDVVTVNvqulqhpqp3lKz1Ntqtpqj5qp5ar56Ry1QC9Ui9a5arN5TS9RStUwtVyvUSrVKrVZr1Fq1Tq1XG9RGtUltVlvU+2qr2qa2qx1qp1K/vGirPepjtVd9ovapf6j96lN1QH2mDqrP1SH1hTqsvlRH1FfqqPpaHVPH1Qn1jTqpvlWn1Gl1Rn2nzqrv1Tn1gzqvgoJuAKC1NjrSqXRqnaLT6LT6Cp1Op9cZdEad0FfqTPoqnVlfrbPorDqbzq5z6Jw6l7aatNOsY51b59FJfY3Oq6/V+XR+XUAX1F4X0oX1dbqIvl4X1TfoYvpGXVzfpEvokrqULq1v1mX0LbqsvlWX07fp8rqCrqgr6dt1ZX2HrqLv1FX1XbqavltX1/foGvpeXVPfp2vp+3Vt/YCuo+vqerq+bqAb6kb6Qd1YP6Sb6Ka6mX5YN9eP6Bb6Ud1SP6Zb6cd1a/2EbqOf1G31U7qdflq31x10R/2DPq+D7qy76K66m+6un9M9dE/dS/fWffTzuq9+QffTL+r+eoAeqF/Sg/TLerB+RQ/RQ/Uw/aoerkfokXqUHq3H6LH6NT1Ov67H6zf0BD1RT9KT9RQ9Vff6eaaZfyH/9T/I7/fj3jfrLfp9vVVv09v1Dr1Tf6B36V16t96t9+g9eq/eq/fpfXq/3q8P6AP6oD6oD+lD+rA+rI/oI/qoPqqP6eP6O/2NPqm/1af0aX1af6fP6rP63M+PARg0ymhjTGRSmdQmxaQxac0VJp1JbzKYjCZhrjSZzFUms7naZDFZTTaT3eQwOU0uYw0ZZ9jEJrfJY5LmGpPXXGvymfymgClovClkCpvr/nb+n62vkWlkGpvGpolpYpqZZqa5aW5amBampWlpWplWprVpbdqYNqataWvamXamvWlvOpqOppPpZAIAdDVdTXfznOlheppeprfpY543fU1f08/0M/1NfzPQDDSDzCAz2Aw2Q8wQM8wMM8PNcDPSjDSjzWgz1ow148w4M96MNxPMBDPJTDJTzBQzzUwz0810M9PMNLPMLDPbzDZzzVwz38w3C8wCs8gsMovNYrPELDVLzXKz3Kw0K81qs9qsNWvNerPebDQbzRLzyxc0t5vtZqfZaXaZXWa32W32mD1mr9lr9pl9Zr/Zbw6YA+agOWgOmUPmsDlsjpgj5qg5ao6ZY+aEOWFOmpPmlDllzpgz5qw5a86Zc+a8OX/htC9SkYpMZKJUUaooJUqJ0kZpo3RRuihDlCFKRIkoU5QpyhxdHWWJskbZouxRjihnlCuyEUUu4iiOckd5omR0TZQ3ujbKF+WPCkQFIx8VigpH10VFouujotENUbHoxqh4dFNUIioZlYpKRzdHZaJborLRrVG56LaofFQhqhhVim6PKkd3RFWiO6Oq0V1RtejuqHp0T1QjujeqGd0X1Yruj2pHD0R1orpRvah+1CBqGDX6l84fwqmsD/nOtovtarvZ7vY528P2tL1sb9vHPm/72hdsP/ui7W8H2IH2JTvIvmwH21fsEDvUDrOv2uF2hB1pR9nRdowda1+z4+zrdrx9w06wE+0kO9lOsVPtNPumnW5n2Jn2LTvLvm1n2zl2rp1n59t37AK70C6y79rF9j27xC61y+xyu8KutKvsarvGrrXr7Hq7wW60m+xmu8W+b7fabXa73WF32g/sLvuh3W0/snvsx3av/cTus/+w++2n9oD9zB60n9tD9gt72H5pj9iv7FH7tT1mj9sT9ht70n5rT9nT9oz9zp6139tz9gd73oYLJ/cX3t7JkKFUlIpSKIXSUlpKR+koA2WgBCUoE2WizJSZslAWykbZKAfloFyUiy5gYspNuSlJScpLeSkf5aMCVIA8eSpMhakIFaGiVJSKUTEqTsWpBJWgUnThre1muoVuoVvpVrqNbqMKVIEqUSWqTJWpClWhqlSVqlE1qk7VqQbVoJpUk2pRLapNtakO1aF6VI8aUANqRI2oMTWmJtSEmlEzak7NqQW1oJbUklpRK2pNrakNtaG21JbaUTtqT+2pI3WkTtSJOlNn6kpdqTt1px7Ug3pRL+pDfagv9aV+1I/6U38aSANpEA2iwTSYhtBQGkav0nAaQSNpFI2mMTSWxtI4GkfjaTxNoAk0iSbRFJpC02gaTafpNJNm0iyaRbNpNs2luTSf5tMCWkCLaBEtpsW0hJbQMlpGK2gFraJVtIbW0DpaRxtoA22iTZQattBW2krbaTvtpJ20i3bRbtpNe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7hCTpBJ+kknaJTdIbO0Fn6ns7RD3SeAqW4NC6tu8Klc+ldBpfRpbg0XQDg1ziby+5yuJwul7Mui8v6TzE55/K5/K6AS+O8K+QKu+t+jgv+GpdwJV0pV9rd7Mq4W1zZ38WV3R2uirvTVXV3uUru9n+Kq7m7XXX3gKvh6rqarr6r5Rq62u4BV8fVdfVcfdfANXTN3SOuhXvUtXSPuVbu8d/FC9xCt8atdevcerfbfeTOuO/cYfelO+u+d51dF9fHPe/6uhdcP/ei6+8G/C4e5l51w90IN9KNcqPdmN/Fk9xkN8VNddPcm266m/G7eL57x81yi9xsN8fNdfN+jC+saZF71y1277klbqlb5pa7FW6lW+VW/7rW5W6j2+Q2u13uQ7fVbXPb3Q63033wY3zhOPa4j91e94k75L5w+92n7oA74g66z3+MLxzfEfeVO+q+dsfccXfCfeNOum/dKXf6x+O/cOzfuB/ceRccMLJizYYjTsWpOYXTcFq+gtNxes7AGTnBV3Imvooz89WchbNyNs7OOTgn52LLxI6ZY87NeTiZJz3n5Ws5H+fnAlyQPRfiwnwdF+HruSjfwMX4Ri7ON3EJLsmluDTfzGX4Fi7Lt3I5vo3LcwWuyJX4dq7Md3AVvpOr8l1cje/m6nwP1+B7uSbfx7X4fq7ND3Adrsv1uD434IbciB/kxvwQN+Gm3Iwf5ub8CLfgR7klP8at+HFuzU9wG36S2/JT3I6f5vbcgTvyM9yJn+XO3IW7cjfuzs9xD+7Jvbg39+HnuS+/wP34Re7PA3ggv8SD+GUezK/wEB7Kw/hVHs4jeCSP4tE8hsfyazyOX+fx/AZP4Ik8iSfzFJ7K0/hNns4zeCa/xbP4bZ7Nc3guz+P5/A4v4IW8iN/lxfweL+GlvIyX8wpeyat4Na/htbyO1/MG3sibeDNv4fd5K2/j7byDd/IHvIs/5N38Ee/hj3kvf8L7+B+8nz/lA/wZH+TP+RB/wYf5Sz7CX/FR/pqP8XE+wd/wSf6WT/FpPsPf8Vn+ns/xD3yeA0OMsYp1bOIoThWnjlPiNHHa+Io4XZw+zhBnjBPxlXGm+Ko4c3x1nCXOGmeLs8c54pxxrtjGFLuY4zjOHeeJk/E1cd742jhfnD8uEBeMfVwoLhxfFxeJr4+LxjfExeIb4+LxTXGJuGRcKi4d3xyXiW+Jy8a3xuXi2+LycYW4Ylwpvj2uHN8RV4nvjKvGd8VF47vj6vE9cY343rhmfF9cK74/rh0/ENeJ68b14vpxg7hh3Ch+MG4cPxQ3iZvGzeKH4+bxI3GL+NG4ZfxY3Cp+/E/7u8bd4u7xc/FzcQh36rnJecn5yXeSC5ILk4uS7yYXJ99LLkkuTS5LLk+uSK5MrkquTq5Jrk2uS65PbkhuTG5Kbk6GUCk1ePTKa2985FP51D7Fp/Fp/RU+nU/vM/iMPuGv9Jn8VT6zv9pn8Vl9Np/d5/A5fS5vPXnn2cc+t8/jk/4an9df6/P5/L6AL+i9L+QL+4a+kW/kG/uHfBPf1DfzD/uH/SP+Ef+of9Q/5lv5x31r/4Rv45/0bf1T/in/tG/vO/iO/hnfyT/rO/suvqvv6rv77r6H7+F7+V6+j+/j+/q+vp/v5/v7/n6gH+gH+UF+sB/sh/ghfpgf5of74X6kH+lH+9F+rB/rx/lxfrwf7yf4CX6Sn+Sn+Cl+mp/mp/vpfqaf6Wf5WX62n+3n+rl+vp/vF/gFfpFf5Bf7xX6JX+KX+WV+hV/hV/lVfo1f49f5dX6D3+A3+U1+i9/it/qtfrvf7nf6nX6X3+V3q91+j9/j9/q9fp/f5/f7/f6A/8wf9J/7Q/4Lf9h/6Y/4r/xR/7U/5o/7E/4bf9J/60/50/6M/86f9d/7c/4Hf94HPzbxWmJc4vXE+MQbiQmJiYlJicmJKYmpiWmJNxPTEzMSMxNvJWYl3k7MTsxJzE3MS8xPvJNYkFiYWJR4N7E48V5iSWJpYllieWJFYmUihJypACDkCclwTcgbrg35Qv5QIBQMPhQKhcN1oUi4PhQNN4Ri4cZQPNwUSoSSoVSoG+qF+qFBaBgahQdD4/BQaBKahmbh4dA8PBJahEdDy/BYaBUeD63DE6FNeDK0DU+FduHp0D50CB3DM6FTeDZ0Dl1C19AtdA/PhR6hZ+gVeoc+4fnQN7wQ+oUXQ/8wIAwML4VB4eUwOLwShoShYVh4NQwPI8LIMCqMDmPC2PBaGBdeD+PDG2FCmBgmhclhSpgapoU3w/QwI8wMb4VZ4e0wO8wJc8O8MD+8ExaEhWFReDcsDu+FJWFpWBaWhxVhZVgVVoc1YW1YF9aHDWFj2BQ2hy3h/bA1bAvbw46wM3wQdoUPw+7wUdgTPg57wydhX/hH2B8+DQfCZ+Fg+DwcCl+Ew+HLcCR8FY6Gr8OxcDyc+PFHat+GU+F0OBO+C2fD9+Fc+CGcl9+sCSGEEEL8JfpP+rtFf5zzy/9EdQeA9NuyH/y/+zdk+andM3WO5gkAeKxLu/t+2cqX79q1689jl2iI8swBgMTF/Aun0b/ES6EZPAItoSkU+bU/5Tf76qk6nOU/mT95I0Da3+SkqIvti/Nf/4fH31ONmPXH8+MvQ6LkHIB8eS7mpIGL8cX5i/4X82dt/CfrT/PpWIAmv8lJBxfji/MXhofgcWj5TyOFEEIIIYQQQoif9FSl2sBf+Hyew1zMSQ2/xml+ue+3n8+FEEIIIYQQQgjxP8uTHTo++mDLlk3b/O9rmL+VDv+Pe0eAH6+NJH7+YsSfZ4WMP4289I/Yv6OR5g+7xme85AuTxt9rXMpXJSGEEEIIIcS/w8WT/t/3DboUCxJCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIS5D/z/+nNhPe8JLfahCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHEJfN/AgAA//8TwifR")
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) (async)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1m21.840035665s ago: executing program 2 (id=449):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/170})
syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
unshare(0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010001, 0x0, 0xbffffffffffffffd}]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x358, 0xffff8881f5c0a000)
utimes(0x0, 0x0)
pipe2$9p(&(0x7f0000000100), 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)

1m20.079688698s ago: executing program 2 (id=453):
unshare(0x22020600)
r0 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x36010000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0)
unshare(0xeafd304cf6c70af9)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000140)=0x80000001, 0x4)

1m19.551010702s ago: executing program 2 (id=457):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setns(0xc9, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @remote, 0x2}], 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90)
sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0xffffff01, 0x0, 0xa4f, 0xc0, 0x15, 0xffffff86, 0xac}, 0x9c)
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)

1m19.428675185s ago: executing program 34 (id=457):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setns(0xc9, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @remote, 0x2}], 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90)
sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0xffffff01, 0x0, 0xa4f, 0xc0, 0x15, 0xffffff86, 0xac}, 0x9c)
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)

1m12.820325257s ago: executing program 7 (id=458):
socket$unix(0x1, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a"}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)='V', 0x1}], 0x1}}], 0x2, 0x4000000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000007c0)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r2, 0x5}, 0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, 0x6}, 0x90)
setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f00000001c0)=0x4, 0x4)

1m11.922583389s ago: executing program 7 (id=478):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
connect$netlink(r1, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfd, 0x8000000}, 0xc)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000f80)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e24, @remote}}}, 0x90)
sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x60, r4, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6394bc11539d"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "de5cf1f6a3984103b1a46c1027"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@private2, @in6=@loopback}}, {{@in=@initdev}}}, &(0x7f0000000080)=0xe8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r2, 0x3}, &(0x7f00000001c0)=0x8)
unshare(0x12020400)
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
socket(0x80000000000000a, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
recvfrom(r7, &(0x7f0000000180)=""/233, 0xe9, 0x40000002, 0x0, 0x0)
sendto$inet6(r7, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0)

1m8.749799847s ago: executing program 7 (id=492):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x807e)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xfcca, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x807e)
accept4(r1, &(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f0000000240)=0x80, 0x800)
r2 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000100)=@hci={0x1f, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x2f, 0x68000000}, 0x80fe)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000003, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x2, r3, 0x0, 0x2, 0x0)
clock_nanosleep(0x3, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x18040, 0x23)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r4, 0x40015b0b, &(0x7f0000000040)={0x1, 0x2, 0x3cf3, 0x202000, 0x110001, 0x9})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000003c0)=@x86={0x6b, 0x9, 0x2c, 0x0, 0x10000000, 0x7f, 0x3, 0x5, 0xd, 0xa0, 0x48, 0x8, 0x0, 0x2, 0x9, 0x43, 0x3, 0xa, 0x7, '\x00', 0x1, 0xffffffffffffff7f})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0xfffffffffffffffd, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x2, 0xfffffffffffffffc, 0x7, 0x6, 0x6, 0x100000000001, 0xfffffffffffffffe], 0x8000000, 0x4fb40})
sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="8d36a2d20e6973f39ca69e82aed6de909ad87490cacc2736b5", 0x19, 0x4000000, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000140)=ANY=[], 0x1, 0x5ef, &(0x7f0000001080)="$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")

1m6.244716459s ago: executing program 7 (id=497):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2)
r1 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @broadcast}, 0x6f631b4376e74f0e, {0x2, 0x0, @multicast2}})
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000240)=[{0x48, 0x9, 0x7, 0xffbffff2}, {0x6, 0x6, 0xef}]})
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000540)=0xfff)
write$ppp(r0, &(0x7f00000001c0)="43f1", 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0)
pwrite64(r2, &(0x7f00000003c0)="1954363cd59cf14d79a09f1360fe15981daaca8f0d6f80bf7e5f9fe593901f900ce1cf179ee8bdd8b905b9cdcb0ada7dac06eb205982822e3c35786680e6c14a8398376dfc654cc9f7cc397b8af6ed557a0f74b75d770535da7ab89c8b791f130ed9f7aaccc85d6990182f6ea7a3ac09581431312c2536e40904d26ed7646c5bab9d9135da0c92b191122a66b0f683b8aec1ebf32a42d69481ffa23b95d33ab15ff620814cca3e112eb192a1cfae6448cc8dfdd1ecee7eac962ed5fe8ef6abd9a41ecfb45121f514beea83410977f13602fbc238a8aac1f1c81643c88d37bd37859088b4cdfe34336d7d69f676f4fb2ecf88e6c8c0141df07621be773f0665b08762ee3eea2afd29f9aefd82e19f78942145fa94009e80584184c04f9f77eed1e48b54718dfa0aa4f81bdc3462ffb8b868d876221481d5b064770a51b92d0e8f52256b9777e166932bbefe4dc9d2c73cef35e17b098e6b6c9c56b2b094d8be393271bc37306982ecddb0f282", 0x16c, 0x3fa)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
r4 = socket(0x10, 0x803, 0x1000000)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = accept4$unix(r2, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e, 0x80000)
ioctl$sock_ifreq(r6, 0x8942, &(0x7f0000000100)={'syz_tun\x00', @ifru_names})
bind$can_j1939(r3, &(0x7f0000001080)={0x1d, r5, 0x3, {0x2, 0xf0, 0x2}, 0xff}, 0x18)
close(r2)

1m3.139957106s ago: executing program 7 (id=509):
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000003f00000000000000007f00f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)

1m2.913114941s ago: executing program 35 (id=509):
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000003f00000000000000007f00f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)

11.639722803s ago: executing program 5 (id=715):
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl(r0, 0x8b32, &(0x7f0000000040))
r1 = socket$inet(0x2, 0x800, 0x1ff)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffff}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x6, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty, 0x1b}, 0x1c)
bind$inet(r1, 0x0, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0)
socket$inet6(0xa, 0x1, 0x0)
close(0x3)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r5, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x100000000000038b}}], 0x4000000000001cc, 0x4008081)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, 0x0, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000200000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x94}, 0x20000810)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000100010000a00200087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000800000000000000000000000000000000204000000000000000000000000000000000000000000000000000000000000000000000000a44b20a417176d306c249c0b5b04e49ca1690d99fd44f6a229a64c6f1e810602e534e483f6f1f6411424c4e38d53e33e1521774d2f6e7a8a3b370a440f09cee78ee4841c94d418d41ad04996e492852cb05af1f68321a476871e1f7a3c3cb349d3cc1c817d43c86a6b6c3bc8ec37f740aea320337a7e741a87c73c"], 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000004000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c)

11.201921924s ago: executing program 5 (id=720):
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000001300)=ANY=[@ANYBLOB="e86b72817753942341f20289a8b0e899197ab15e7917c6f8f6"], 0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
truncate(&(0x7f0000000080)='./file0\x00', 0x3a6800)

9.897691306s ago: executing program 1 (id=725):
personality(0x87bf5ac905ea0f7f)
personality(0x0)

9.767693089s ago: executing program 1 (id=726):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x6, &(0x7f0000000080)=0x5fa)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$video4linux(&(0x7f0000000500), 0x69, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000280)=@secondary)
r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3)

9.168410494s ago: executing program 5 (id=727):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000faffcaf538c5b8a349d92d3e2f719b68dd2a6cbd19a3da7306", @ANYRESOCT=r0, @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001400), 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x1)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c0000202c0000bc6724f81d", @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

7.353253709s ago: executing program 5 (id=730):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0x4, &(0x7f0000000140)={0x20000000000008, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
chdir(&(0x7f00000003c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
recvmsg(0xffffffffffffffff, 0x0, 0x1f21)
openat(0xffffffffffffff9c, 0x0, 0x101940, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000ff000000000000000003004a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x48}}, 0x0)
syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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")

6.203710247s ago: executing program 3 (id=738):
socket$l2tp(0x2, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6(0xa, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0xd0ff}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.759797288s ago: executing program 8 (id=741):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000faffcaf538c5b8a349d92d3e2f719b68dd2a6cbd19a3da7306", @ANYRESOCT=r0, @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001400), 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x1)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c0000202c0000bc6724f81d", @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

5.565911443s ago: executing program 1 (id=742):
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r2 = fanotify_init(0xf00, 0x1)
fanotify_mark(r2, 0x105, 0x40009965, r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5)
chdir(&(0x7f0000000300)='./bus\x00')
r3 = socket$inet(0x2, 0x1, 0x0)
shutdown(r3, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000600)=0x9)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000840)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140601fe8000000000000000000000000000bbfe8000000000007d8ca5666abdb3aaaa00004e22bb2343ff869356575b2fd313b8e41f923c69b97945b8702a7003600a10f7c2f830897056f561e1127216bde33d0505a7c3e37e075edfcec9a61fa7a65f52a2a5298a7b8e50041b164b2b9816468d085af9d3eb4d0ecb9dca62fb5c12c502f3118109a5c96619c95fe777abae217d7e72eaba504f1cc8c26db151ab3c26e21cbb28a740f09d8f98989a4e2751e02c892959daff813b892efe30f5b86c844e9fa721f45d8359509f86e607170a4be928a3aa7c917431c4", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780400"], 0x0)

4.973795317s ago: executing program 3 (id=743):
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r2 = fanotify_init(0xf00, 0x1)
fanotify_mark(r2, 0x105, 0x40009965, r1, 0x0) (fail_nth: 1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5)
chdir(&(0x7f0000000300)='./bus\x00')
r3 = socket$inet(0x2, 0x1, 0x0)
shutdown(r3, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000600)=0x9)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000840)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140601fe8000000000000000000000000000bbfe8000000000007d8ca5666abdb3aaaa00004e22bb2343ff869356575b2fd313b8e41f923c69b97945b8702a7003600a10f7c2f830897056f561e1127216bde33d0505a7c3e37e075edfcec9a61fa7a65f52a2a5298a7b8e50041b164b2b9816468d085af9d3eb4d0ecb9dca62fb5c12c502f3118109a5c96619c95fe777abae217d7e72eaba504f1cc8c26db151ab3c26e21cbb28a740f09d8f98989a4e2751e02c892959daff813b892efe30f5b86c844e9fa721f45d8359509f86e607170a4be928a3aa7c917431c4", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780400"], 0x0)

3.120509883s ago: executing program 1 (id=744):
r0 = gettid()
r1 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000000)={0xcc, @raw_data="abfb0142761ae7910716c2d0f13f272c8a034c458bf9c78185efff093599b48b1d3d02d0d95352bbe628352d0b0037cbe283f581f47a88dc672d8342eed4bfd6796ed614c4de1f8e9164cd74224cd679b184aaa20b0b7b1582625a05cf808673219153c71b1c8bc0a3d5664687f4929176f40dd9a2a06840f7e2e51886930fbf77ba2ab04b0ff4df496bb407117945aa67f89b97e32b3bef137996abb87d3e022eb9b8de753f082749fcfdbdc373f1fe400757d831ba3d6b35b800546bea0bbc0e3e1ba768e32a90"})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000640)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@resgid}, {@noblock_validity}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@abort}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
io_setup(0x9, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
r6 = syz_pidfd_open(0x0, 0x0)
setns(r6, 0x24020000)
r7 = fsopen(&(0x7f00000006c0)='binder\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
fsmount(r7, 0x0, 0x2)

3.027832655s ago: executing program 3 (id=745):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setns(0xc9, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @remote, 0x2}], 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90)
sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0xffffff01, 0x0, 0xa4f, 0xc0, 0x15, 0xffffff86, 0xac}, 0x9c)
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
socket$netlink(0x10, 0x3, 0x0)

2.942053017s ago: executing program 8 (id=746):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x1, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x804)

2.123885977s ago: executing program 6 (id=748):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x20}}, 0xfe44, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000000c0)={[{@usrquota}, {@usrjquota, 0x22}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@block_validity}, {@noblock_validity}, {@discard}, {@nodiscard}, {@grpquota}, {@orlov}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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")
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x20000000000, 0xa9, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff}, {0x8000000000, 0xa00, 0x40800000000000}, 0xfffffffc, 0x6e6bc0, 0x0, 0x1}}, 0xb8}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "0bc0f7", 0x0, "de9560"}}}}}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xfff3}, {0x1}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xa0, 0x1, 0x2, 0x5}]}}]}}]}, 0x44}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r6, @ANYBLOB="080005", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
unshare(0x22020600)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
pread64(r8, &(0x7f00000004c0)=""/4089, 0xfffffffffffffeb3, 0x7fd)
recvmmsg(r8, &(0x7f0000004540)=[{{&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, 0x0, 0x0, &(0x7f0000001600)=""/119, 0x77}}, {{&(0x7f0000001680)=@nl, 0x80, 0x0}, 0xf}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c80)}, 0x81}, {{&(0x7f0000002cc0), 0x80, &(0x7f0000002e80)=[{&(0x7f0000002d40)=""/45, 0x2d}, {&(0x7f0000002d80)=""/233, 0xe9}], 0x2}, 0x9}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000002ec0)=""/30, 0x1e}, {&(0x7f0000002f00)=""/214, 0xd6}, {&(0x7f0000003000)=""/237, 0xed}, {0x0}], 0x4}, 0x9}, {{&(0x7f0000003300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004400)=[{&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/97, 0x61}], 0x2, &(0x7f0000004440)=""/218, 0xda}, 0x7}], 0x6, 0x2000, &(0x7f0000004700))
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x2)
syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)

2.02074434s ago: executing program 8 (id=749):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x439, 0x5865, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @random="17e1e6c9405a"}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x40}}, 0x0)

2.00913636s ago: executing program 3 (id=750):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80d0}, 0x4000)

1.20798575s ago: executing program 8 (id=751):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r2)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000340)="1a00000002000000", 0x8)
setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) (async)
r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) (async)
sendto$inet6(r3, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8048802)

1.039783014s ago: executing program 6 (id=752):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000faffcaf538c5b8a349d92d3e2f719b68dd2a6cbd19a3da7306", @ANYRESOCT=r0, @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001400), 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x1)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r5 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c0000202c0000bc6724f81d", @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000640)='./bus\x00', 0x1400)
stat(&(0x7f0000000200)='./file0/file1\x00', &(0x7f0000000280))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0835241313288b6187916c7b0e5f1fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e0500000036df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f294880b584a15bbf3956250db0cf5e948127560df4dbc6af73f6eacdd4b6e23b100"})
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000740)='./file0\x00', 0x13040, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=macceltic,umask=00000000000000000400011,anchor=00000000000001114111,gid=forget,volume=00000000000000001023,novrs,novrs,iocharset=cp865,umask=00000000000000000001000,gid=', @ANYRESDEC=r3, @ANYBLOB="2c73657373696f6e3d30303030303030303030303030303030303030362c6d6f64653d30303030303030405dc2f83bb24e303030302c000000000000000000000026b59cf7c9d20000"], 0x1, 0xc32, &(0x7f0000000e00)="$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")

954.826546ms ago: executing program 3 (id=753):
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x400}})
r3 = syz_open_dev$video4linux(&(0x7f0000000340), 0x2, 0x226140)
r4 = socket$netlink(0x10, 0x3, 0x4)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xaaa, 0x87}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6)
setns(0xc9, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x88, r7, 0xacf5e67dd0b583a1, 0x4000000, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5f, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x7fff, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x1, 0x2, 0x2, 0x1000}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x81, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x61}}, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x88}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6)
ioctl$OCFS2_IOC_UNRESVSP(r6, 0x40305829, &(0x7f0000000080)={0x1, 0x2, 0x1, 0x3, 0x81, 0x7f})
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
ppoll(&(0x7f0000000040)=[{r6, 0x1080}, {r3, 0x540}, {r1, 0x40}, {r0, 0x80}, {r4, 0x1008}], 0x5, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x652]}, 0x8)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x0)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r9, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0)

772.82701ms ago: executing program 8 (id=754):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000005c0)=0x2, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x202800, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r2, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, 0x0, &(0x7f0000000080))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0xffffffffffffff02)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x3)
setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x8253, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x1f2b, 0x4)
getsockopt$inet6_buf(r1, 0x29, 0x96, 0x0, &(0x7f00000002c0)=0xffffffffffffffc2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = syz_open_dev$hiddev(&(0x7f0000000200), 0x4, 0x2)
r5 = socket(0x27, 0x6, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r6, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x7f}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20004010)
ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f0000000240)={0x1, 0x2, 0x5})
r7 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000180)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@test_dummy_encryption}, {@nodelalloc}, {@norecovery}, {@delalloc}, {@usrquota}, {@noinit_itable}]}, 0x1, 0xbdb, &(0x7f00000023c0)="$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")
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3)
ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000001040)={0x1, 0x0, [{0xc0010112, 0x0, 0x8}]})
quotactl_fd$Q_QUOTAON(r7, 0xffffffff80000201, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r7)

673.065413ms ago: executing program 5 (id=755):
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xffffffffffffffff)

667.201933ms ago: executing program 1 (id=756):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000faffcaf538c5b8a349d92d3e2f719b68dd2a6cbd19a3da7306", @ANYRESOCT=r0, @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001400), 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x1)
r3 = syz_open_procfs(0x0, 0x0)
r4 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="1c0000202c0000bc6724f81d", @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

505.071497ms ago: executing program 5 (id=757):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x60, 'syz0\x00', "744f50a28c35736b6398eb0341e1c0d504fd39ebf4fab554ea2183f6dcffdde4", "08b167aa57468c9f22fa31dbb64c6c84ec4ff2f927eec1dfe3360da0651be97e"}}}]}, 0x268}}, 0x0) (async)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000004680)=ANY=[@ANYBLOB='shortname=mixed,shortname=win95,flush,shortname=winnt,utf8=1,nonumtail=0,utf8=1,uni_xlate=1,nonumtail=0,uni_xlate=1,nfs=stale_rw,codepage=932,iocharset=cp850,iocharset=cp775,shortname=lower,gid=', @ANYRESHEX=0x0, @ANYBLOB='l\x00'], 0x41, 0x38c, &(0x7f0000000380)="$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") (async)
syz_usb_connect$cdc_ncm(0x0, 0x81, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010102020000202505a1a440400102030109026f0002010520260904000001020d0000052406000105240004000d240f0105310000080003005406241a04001a042413050424020607241400000300042407"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0})

498.811477ms ago: executing program 6 (id=758):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

293.344562ms ago: executing program 8 (id=759):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002dc0))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$F2FS_IOC_GET_FEATURES(r1, 0x4008af10, &(0x7f0000000040))
r2 = syz_open_dev$midi(&(0x7f0000000000), 0x23, 0x9a781)
syz_usb_disconnect(r0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40242, 0x1)
unshare(0x22020600)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@host})
clock_adjtime(0xffffffd3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x9, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0xc6, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x98, 0xddf, 0x0, 0x3ff})
unshare(0x2a020400)
poll(&(0x7f0000000040)=[{r2, 0x8439}], 0x1, 0x2)

285.970893ms ago: executing program 6 (id=760):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x1, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x804)

274.925183ms ago: executing program 1 (id=761):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000001c0)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@init_itable_val={'init_itable', 0x3d, 0xc5}}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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")
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$FUSE_INTERRUPT(r1, &(0x7f0000002bc0)={0x10, 0xffffffffffffffda}, 0x10)
write(r1, &(0x7f0000000280)='1', 0x1)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300000d000000000005000000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000100000000020c001480"], 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1/file2\x00', 0x2)

159.211346ms ago: executing program 3 (id=762):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280))
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400a390c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4004010)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0))
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write(r2, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58)
r3 = socket(0x10, 0x803, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0xd4, r4, 0x400, 0x5, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x76, 0xa8, @random="2a223c05dfb531f9a211bd3b12265ea9260f852650f3335c64f7ce8f19a7fbf956f82d3c65747cc224482711e1338abaa95ad4771a3e90cd8123aab5b4e51c6aeadc3124d9537eaf235b5d2b6a293e26e587cabfdbbeda73c7850336238e41735446cc04b127c0ec001906295c50eb1b00cb"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=""/218, 0xda}, {&(0x7f00000001c0)=""/237, 0xed}, {&(0x7f0000003640)=""/4118, 0x1016}, {&(0x7f0000002d00)=""/221, 0xdd}, {&(0x7f00000035c0)=""/65, 0x41}, {&(0x7f0000000040)=""/137, 0x89}, {&(0x7f0000000340)=""/153, 0x99}], 0x7}, 0x401}, {{0x0, 0x0, 0x0}, 0x807}], 0x4, 0x12142, 0x0)

155.379486ms ago: executing program 6 (id=763):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80d0}, 0x4000)

0s ago: executing program 6 (id=764):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711808000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fcntl$setstatus(r0, 0x4, 0x40000)

kernel console output (not intermixed with test programs):

 T5892]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  183.034856][ T5869] attempt to access beyond end of device
[  183.034856][ T5869] loop1: rw=2049, want=85144, limit=40427
[  183.040662][ T5892]  ? futex_wait_restart+0x250/0x250
[  183.052364][ T5869] attempt to access beyond end of device
[  183.052364][ T5869] loop1: rw=2049, want=85152, limit=40427
[  183.056762][ T5892]  ? lock_chain_count+0x20/0x20
[  183.056808][ T5892]  futex_wait_setup+0x4b/0x520
[  183.068586][ T5869] attempt to access beyond end of device
[  183.068586][ T5869] loop1: rw=2049, want=85160, limit=40427
[  183.073525][ T5892]  ? lockdep_hardirqs_on+0x94/0x140
[  183.085549][ T5869] attempt to access beyond end of device
[  183.085549][ T5869] loop1: rw=2049, want=85168, limit=40427
[  183.091657][ T5892]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  183.136510][ T5884] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.390: Freeing blocks not in datazone - block = 0, count = 4096
[  183.142206][ T5892]  futex_wait+0x22f/0x680
[  183.142248][ T5892]  ? __lock_acquire+0x13b3/0x7d40
[  183.142276][ T5892]  ? do_futex+0x12b0/0x12b0
[  183.151058][ T5884] Quota error (device loop2): write_blk: dquota write failed
[  183.159227][ T5892]  ? verify_lock_unused+0x140/0x140
[  183.159262][ T5892]  ? verify_lock_unused+0x140/0x140
[  183.159287][ T5892]  do_futex+0xdc2/0x12b0
[  183.159319][ T5892]  ? rcu_lock_release+0x9/0x20
[  183.159352][ T5892]  ? futex_exit_release+0x1c0/0x1c0
[  183.159382][ T5892]  ? __context_tracking_exit+0x4c/0x80
[  183.159411][ T5892]  __se_sys_futex+0x389/0x420
[  183.159430][ T5892]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  183.159456][ T5892]  ? __x64_sys_futex+0xf0/0xf0
[  183.159482][ T5892]  ? __x64_sys_futex+0x1d/0xf0
[  183.159505][ T5892]  do_syscall_64+0x4c/0xa0
[  183.159523][ T5892]  ? clear_bhb_loop+0x30/0x80
[  183.159545][ T5892]  ? clear_bhb_loop+0x30/0x80
[  183.159567][ T5892]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  183.159585][ T5892] RIP: 0033:0x7f770fc8f159
[  183.159605][ T5892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.159624][ T5892] RSP: 002b:00007f770dee70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  183.159651][ T5892] RAX: ffffffffffffffda RBX: 00007f770ff16fa8 RCX: 00007f770fc8f159
[  183.159668][ T5892] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f770ff16fa8
[  183.159680][ T5892] RBP: 00007f770ff16fa0 R08: 0000000000000000 R09: 0000000000000000
[  183.159693][ T5892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.159704][ T5892] R13: 00007f770ff17038 R14: 00007fffb2ab9730 R15: 00007fffb2ab9818
[  183.159734][ T5892]  </TASK>
[  183.365665][ T5884] Quota error (device loop2): find_free_dqentry: Can't remove block (3) from entry free list
[  183.395214][ T4367] team0 (unregistering): Port device team_slave_1 removed
[  183.432105][ T5884] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  183.463115][ T4367] team0 (unregistering): Port device team_slave_0 removed
[  183.472198][ T5884] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.390: Failed to acquire dquot type 0
[  183.501562][ T4367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.530751][ T5884] EXT4-fs (loop2): 1 orphan inode deleted
[  183.541051][ T4367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.578781][ T5884] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  183.811244][ T4367] bond0 (unregistering): Released all slaves
[  183.864250][ T1106] Bluetooth: hci2: command 0x0405 tx timeout
[  183.913147][ T5900] loop1: detected capacity change from 0 to 1024
[  184.984798][ T5922] xt_hashlimit: max too large, truncated to 1048576
[  185.060754][ T5902] loop2: detected capacity change from 0 to 2048
[  185.146187][ T5313] usb 6-1: string descriptor 0 read error: -71
[  185.153961][ T5930] ip_tables: iptables: counters copy to user failed while replacing table
[  185.165652][ T5313] usb 6-1: USB disconnect, device number 2
[  185.272467][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'.
[  185.356374][ T5937] FAULT_INJECTION: forcing a failure.
[  185.356374][ T5937] name failslab, interval 1, probability 0, space 0, times 0
[  185.495099][ T5937] CPU: 0 PID: 5937 Comm: syz.3.404 Not tainted syzkaller #0
[  185.503400][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  185.514913][ T5937] Call Trace:
[  185.518223][ T5937]  <TASK>
[  185.521262][ T5937]  dump_stack_lvl+0x188/0x250
[  185.526111][ T5937]  ? show_regs_print_info+0x20/0x20
[  185.531541][ T5937]  ? load_image+0x410/0x410
[  185.536260][ T5937]  ? __might_sleep+0xf0/0xf0
[  185.540985][ T5937]  ? __lock_acquire+0x7d40/0x7d40
[  185.547053][ T5937]  should_fail+0x383/0x4b0
[  185.552393][ T5937]  should_failslab+0x5/0x20
[  185.557366][ T5937]  slab_pre_alloc_hook+0x51/0xc0
[  185.562525][ T5937]  __kmalloc_node_track_caller+0x68/0x3a0
[  185.568461][ T5937]  ? netlink_sendmsg+0x654/0xbe0
[  185.573845][ T5937]  ? __alloc_skb+0xf4/0x750
[  185.578708][ T5937]  ? netlink_sendmsg+0x654/0xbe0
[  185.585143][ T5937]  __alloc_skb+0x22c/0x750
[  185.589623][ T5937]  ? apparmor_socket_getpeersec_dgram+0x5/0x10
[  185.596695][ T5937]  netlink_sendmsg+0x654/0xbe0
[  185.601923][ T5937]  ? netlink_getsockopt+0x570/0x570
[  185.607335][ T5937]  ? aa_sock_msg_perm+0x94/0x150
[  185.612701][ T5937]  ? apparmor_socket_sendmsg+0x88/0x230
[  185.618542][ T5937]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  185.624324][ T5937]  ? security_socket_sendmsg+0x7c/0xa0
[  185.630860][ T5937]  ? netlink_getsockopt+0x570/0x570
[  185.636163][ T5937]  ____sys_sendmsg+0x5be/0x8f0
[  185.642212][ T5937]  ? __sys_sendmsg_sock+0x30/0x30
[  185.647679][ T5937]  ? import_iovec+0x6f/0xa0
[  185.652489][ T5937]  ___sys_sendmsg+0x236/0x2e0
[  185.657968][ T5937]  ? __sys_sendmsg+0x290/0x290
[  185.663284][ T5937]  __se_sys_sendmsg+0x1b7/0x2a0
[  185.668200][ T5937]  ? __x64_sys_sendmsg+0x80/0x80
[  185.673642][ T5937]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  185.680149][ T5937]  ? lockdep_hardirqs_on+0x94/0x140
[  185.685829][ T5937]  do_syscall_64+0x4c/0xa0
[  185.690280][ T5937]  ? clear_bhb_loop+0x30/0x80
[  185.694993][ T5937]  ? clear_bhb_loop+0x30/0x80
[  185.699877][ T5937]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  185.705814][ T5937] RIP: 0033:0x7f155f03c159
[  185.710263][ T5937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.729978][ T5937] RSP: 002b:00007f155d294028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  185.738686][ T5937] RAX: ffffffffffffffda RBX: 00007f155f2c3fa0 RCX: 00007f155f03c159
[  185.747050][ T5937] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  185.748481][ T5313] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  185.755322][ T5937] RBP: 00007f155d294090 R08: 0000000000000000 R09: 0000000000000000
[  185.755341][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  185.755351][ T5937] R13: 00007f155f2c4038 R14: 00007f155f2c3fa0 R15: 00007ffd8b666428
[  185.755382][ T5937]  </TASK>
[  185.800205][ T5945] fuse: Unknown parameter '���<a���"m��h�I-
[  185.800205][ T5945] �>R�֜�HAD��q��˾�U'
[  186.009589][ T5954] FAULT_INJECTION: forcing a failure.
[  186.009589][ T5954] name failslab, interval 1, probability 0, space 0, times 0
[  186.072184][ T5954] CPU: 1 PID: 5954 Comm: syz.3.408 Not tainted syzkaller #0
[  186.081251][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  186.091805][ T5954] Call Trace:
[  186.095108][ T5954]  <TASK>
[  186.098234][ T5954]  dump_stack_lvl+0x188/0x250
[  186.103116][ T5954]  ? show_regs_print_info+0x20/0x20
[  186.108895][ T5954]  ? load_image+0x410/0x410
[  186.113806][ T5954]  ? __might_sleep+0xf0/0xf0
[  186.118643][ T5954]  ? __lock_acquire+0x7d40/0x7d40
[  186.123896][ T5954]  should_fail+0x383/0x4b0
[  186.128344][ T5954]  should_failslab+0x5/0x20
[  186.133429][ T5954]  slab_pre_alloc_hook+0x51/0xc0
[  186.139634][ T5954]  __kmalloc+0x6b/0x340
[  186.144429][ T5954]  ? security_sk_alloc+0x47/0x130
[  186.150027][ T5954]  security_sk_alloc+0x47/0x130
[  186.154915][ T5954]  sk_prot_alloc+0x101/0x210
[  186.159878][ T5954]  ? sk_alloc+0x1d/0x310
[  186.164721][ T5954]  sk_alloc+0x2f/0x310
[  186.168831][ T5954]  __netlink_create+0x6c/0x290
[  186.174300][ T5954]  ? __lock_acquire+0x7d40/0x7d40
[  186.179471][ T5954]  netlink_create+0x3a7/0x510
[  186.184337][ T5954]  __sock_create+0x473/0x910
[  186.189559][ T5954]  __sys_socket+0xe2/0x170
[  186.194394][ T5954]  __x64_sys_socket+0x76/0x80
[  186.199115][ T5954]  do_syscall_64+0x4c/0xa0
[  186.203740][ T5954]  ? clear_bhb_loop+0x30/0x80
[  186.208693][ T5954]  ? clear_bhb_loop+0x30/0x80
[  186.213840][ T5954]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  186.219786][ T5954] RIP: 0033:0x7f155f03c159
[  186.224409][ T5954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  186.237789][ T5958] loop1: detected capacity change from 0 to 1024
[  186.244788][ T5954] RSP: 002b:00007f155d273028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  186.244821][ T5954] RAX: ffffffffffffffda RBX: 00007f155f2c4090 RCX: 00007f155f03c159
[  186.244835][ T5954] RDX: 0000000000000002 RSI: 0000000000000803 RDI: 0000000000000010
[  186.244847][ T5954] RBP: 00007f155f0d306b R08: 0000000000000000 R09: 0000000000000000
[  186.244859][ T5954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  186.244870][ T5954] R13: 00007f155f2c4128 R14: 00007f155f2c4090 R15: 00007ffd8b666428
[  186.244900][ T5954]  </TASK>
[  186.274331][   T21] Bluetooth: hci1: command 0x0406 tx timeout
[  186.349500][   T21] Bluetooth: hci4: command 0x0406 tx timeout
[  186.386688][   T21] Bluetooth: hci3: command 0x0406 tx timeout
[  186.414979][ T5313] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  186.456894][ T5313] usb 6-1: config 0 interface 0 has no altsetting 0
[  186.490139][ T5313] usb 6-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  186.515906][ T5313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.699777][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'.
[  186.710479][ T5313] usb 6-1: config 0 descriptor??
[  187.418550][ T5969] loop3: detected capacity change from 0 to 2048
[  187.524186][ T5969] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.597978][ T5973] ip_tables: iptables: counters copy to user failed while replacing table
[  187.631095][ T5975] loop2: detected capacity change from 0 to 1024
[  187.703617][ T5975] hfsplus: catalog record size mismatch (type 1, got 46, expected 88)
[  187.758434][ T5313] hid-generic 0003:057E:2009.0006: item fetching failed at offset 0/6
[  187.792186][ T5313] hid-generic: probe of 0003:057E:2009.0006 failed with error -22
[  188.053444][ T5991] netlink: 'syz.1.417': attribute type 1 has an invalid length.
[  188.086291][ T5991] netlink: 224 bytes leftover after parsing attributes in process `syz.1.417'.
[  188.108486][ T4244] usb 6-1: USB disconnect, device number 3
[  188.713604][ T6005] loop1: detected capacity change from 0 to 4096
[  188.773065][ T6006] loop2: detected capacity change from 0 to 4096
[  188.838723][ T6005] NILFS (loop1): invalid segment: Checksum error in segment payload
[  188.967530][ T6005] NILFS (loop1): trying rollback from an earlier position
[  188.984849][ T6006] ntfs3: Unknown parameter ''
[  189.033130][ T6005] NILFS (loop1): recovery complete
[  189.052363][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'.
[  189.076501][ T6006] device bridge0 entered promiscuous mode
[  189.151379][ T6005] IPv6: addrconf: prefix option has invalid lifetime
[  189.162495][ T6019] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  189.185678][ T6006] bridge0: port 3(macvlan2) entered blocking state
[  189.310285][ T6006] bridge0: port 3(macvlan2) entered disabled state
[  189.337077][ T5981] loop6: detected capacity change from 0 to 32768
[  189.473755][ T6006] device bridge0 left promiscuous mode
[  189.494529][ T5981] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.416 (5981)
[  189.725526][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'.
[  189.743710][ T5981] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  189.771796][ T6022] device bridge0 entered promiscuous mode
[  189.784277][ T5981] BTRFS info (device loop6): setting nodatacow, compression disabled
[  189.801391][ T6022] bridge0: port 3(macvlan2) entered blocking state
[  189.842527][ T6022] bridge0: port 3(macvlan2) entered disabled state
[  190.054430][ T5981] BTRFS info (device loop6): setting datasum, datacow enabled
[  190.170632][ T5981] BTRFS info (device loop6): force clearing of disk cache
[  190.495683][ T5981] BTRFS info (device loop6): enabling ssd optimizations
[  190.541610][ T5981] BTRFS info (device loop6): using spread ssd allocation scheme
[  190.550180][ T6022] device bridge0 left promiscuous mode
[  190.615915][ T5981] BTRFS info (device loop6): turning on sync discard
[  190.622889][ T5981] BTRFS info (device loop6): not using ssd optimizations
[  190.630210][ T5981] BTRFS info (device loop6): not using spread ssd allocation scheme
[  190.638434][ T5981] BTRFS info (device loop6): using free space tree
[  190.654391][ T5981] BTRFS info (device loop6): has skinny extents
[  190.685744][ T6038] loop5: detected capacity change from 0 to 1024
[  191.870226][ T6063] netlink: 1 bytes leftover after parsing attributes in process `syz.3.422'.
[  192.149052][ T5981] BTRFS error (device loop6): open_ctree failed: -12
[  192.319488][ T6063] loop3: detected capacity change from 0 to 256
[  194.350501][ T6091] loop2: detected capacity change from 0 to 512
[  194.363658][ T6095] netlink: 'syz.5.432': attribute type 4 has an invalid length.
[  194.394889][ T6091] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value
[  194.427013][ T1430] ieee802154 phy0 wpan0: encryption failed: -22
[  194.564412][ T4229] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  194.596995][ T6102] trusted_key: encrypted_key: insufficient parameters specified
[  195.429849][ T6104] loop2: detected capacity change from 0 to 1024
[  195.437829][ T6108] loop5: detected capacity change from 0 to 64
[  195.664891][ T4229] usb 4-1: config 2 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  195.764359][ T4229] usb 4-1: config 2 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  195.872523][ T6124] loop2: detected capacity change from 0 to 512
[  195.920907][ T6123] bond0: (slave bond_slave_0): Releasing backup interface
[  195.929650][ T4457] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  195.954335][ T4229] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  195.969535][ T6124] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  195.979968][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.990784][ T4229] usb 4-1: Product: syz
[  195.991839][ T6124] EXT4-fs (loop2): invalid journal inode
[  195.995375][ T4229] usb 4-1: Manufacturer: syz
[  195.995396][ T4229] usb 4-1: SerialNumber: syz
[  196.015040][ T6124] EXT4-fs (loop2): can't get journal size
[  196.038601][ T6124] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #2: comm syz.2.437: blocks 4-4 from inode overlap system zone
[  196.049790][ T4229] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected
[  196.053955][ T6124] EXT4-fs (loop2): failed to initialize system zone (-117)
[  196.069598][ T6124] EXT4-fs (loop2): mount failed
[  196.101298][ T4229] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  196.121756][ T4229] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  196.156599][ T5469] hfs: walked past end of dir
[  196.240708][ T4457] usb 2-1: Using ep0 maxpacket: 32
[  196.274920][ T4229] usb 4-1: USB disconnect, device number 15
[  196.296718][ T4229] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  196.340177][ T4229] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  196.373160][ T4229] ti_usb_3410_5052 4-1:2.0: device disconnected
[  196.384461][ T4457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.445509][ T1106] wiimote 0005:057E:0306.0007: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  196.458239][ T1106] wiimote 0005:057E:0306.0007: New device registered
[  196.474906][ T4457] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[  196.489767][ T4457] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0
[  196.501909][ T4457] usb 2-1: Manufacturer: syz
[  196.510081][ T4457] usb 2-1: config 0 descriptor??
[  196.695875][ T4231] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  196.878644][ T6153] loop3: detected capacity change from 0 to 1024
[  196.974258][ T4231] usb 6-1: Using ep0 maxpacket: 16
[  197.014262][ T4457] usbhid 2-1:0.0: can't add hid device: -71
[  197.020849][ T4457] usbhid: probe of 2-1:0.0 failed with error -71
[  197.044444][ T4457] usb 2-1: USB disconnect, device number 9
[  197.114277][ T4231] usb 6-1: config 0 has no interfaces?
[  197.256362][ T6153] EXT4-fs (loop3): too many log groups per flexible block group
[  197.280712][ T6153] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  197.311290][ T6153] EXT4-fs (loop3): mount failed
[  197.464301][ T4231] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  197.473571][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.493327][ T4231] usb 6-1: Product: syz
[  197.497821][ T4231] usb 6-1: Manufacturer: syz
[  197.502848][ T4231] usb 6-1: SerialNumber: syz
[  197.521790][ T6174] loop2: detected capacity change from 0 to 1024
[  197.544507][ T4231] usb 6-1: config 0 descriptor??
[  197.544592][ T1106] wiimote 0005:057E:0306.0007: detected device: Nintendo Wii Remote (Gen 1)
[  197.595349][ T6174] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  197.647391][ T1106] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input13
[  197.667953][ T1106] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input14
[  197.682453][ T1106] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input12
[  197.704780][ T6174] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,bsddf,delalloc,resuid=0x000000000000ee01,init_itable,nodelalloc,grpid,quota,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[  197.945258][ T6189] loop1: detected capacity change from 0 to 164
[  198.007138][ T6197] loop2: detected capacity change from 0 to 256
[  198.026853][ T6195] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  198.094315][ T4173] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  198.234187][ T4231] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  198.314245][ T4173] usb 4-1: device descriptor read/64, error -71
[  198.361600][ T6210] kvm [6205]: vcpu1, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010001 data 0xbffffffffffffffd
[  198.423699][ T6202] loop6: detected capacity change from 0 to 2048
[  198.524144][ T4231] usb 2-1: Using ep0 maxpacket: 32
[  198.594425][ T4173] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  198.674699][ T4231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.718258][ T4231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.764488][ T4231] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  198.776984][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.794091][ T4173] usb 4-1: device descriptor read/64, error -71
[  198.846153][ T4231] usb 2-1: config 0 descriptor??
[  198.885510][ T4231] hub 2-1:0.0: USB hub found
[  198.914306][ T4173] usb usb4-port1: attempt power cycle
[  199.114565][ T4231] hub 2-1:0.0: 1 port detected
[  199.129365][ T6200] loop5: detected capacity change from 0 to 40427
[  199.200158][ T6200] F2FS-fs (loop5): invalid crc value
[  199.239048][ T6200] F2FS-fs (loop5): Found nat_bits in checkpoint
[  199.323802][ T6190] binder: 6188:6190 unknown command 1737
[  199.344175][ T6190] binder: 6188:6190 ioctl c0306201 200000000600 returned -22
[  199.354175][ T4173] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  199.357634][ T6200] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0
[  199.454393][ T4173] usb 4-1: device descriptor read/8, error -71
[  199.461524][ T4231] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  199.494151][ T4231] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  199.622745][ T4229] usb 6-1: USB disconnect, device number 4
[  199.624183][ T4231] usbhid 2-1:0.0: can't add hid device: -71
[  199.631287][ T6200] wiimote 0005:057E:0306.0007: Device removed
[  199.672700][ T4231] usbhid: probe of 2-1:0.0 failed with error -71
[  199.715155][ T4231] usb 2-1: USB disconnect, device number 10
[  199.754303][ T4173] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  199.854435][ T4173] usb 4-1: device descriptor read/8, error -71
[  199.857265][ T6238] loop6: detected capacity change from 0 to 16
[  199.904611][ T6238] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  199.918212][ T4318] udevd[4318]: incorrect cramfs checksum on /dev/loop6
[  199.963743][ T4318] udevd[4318]: incorrect cramfs checksum on /dev/loop6
[  199.987790][ T4173] usb usb4-port1: unable to enumerate USB device
[  200.123847][ T6247] loop1: detected capacity change from 0 to 4096
[  200.159625][ T6247] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  200.453847][ T4242] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.526364][ T4242] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.605732][ T4242] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.671214][ T4242] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.893947][ T6274] loop3: detected capacity change from 0 to 1024
[  201.083422][ T6284] fuse: Bad value for 'fd'
[  201.312230][ T6269] chnl_net:caif_netlink_parms(): no params data found
[  201.374773][ T6288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.461'.
[  201.548364][ T6269] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.585217][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.599488][ T6269] device bridge_slave_0 entered promiscuous mode
[  201.638221][ T6269] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.649619][ T6305] loop3: detected capacity change from 0 to 2048
[  201.661120][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.662719][ T6305] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  201.712073][ T6307] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  201.741204][ T6269] device bridge_slave_1 entered promiscuous mode
[  201.741928][ T6288] infiniband syz2: set active
[  201.798545][ T6288] infiniband syz2: added team_slave_0
[  201.825218][ T6269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.896326][ T6288] RDS/IB: syz2: added
[  201.919005][ T6269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.939831][ T6288] smc: adding ib device syz2 with port count 1
[  201.991756][ T6288] smc:    ib device syz2 port 1 has pnetid 
[  202.024945][ T4242] IPVS: stopping master sync thread 4327 ...
[  202.119378][ T6269] team0: Port device team_slave_0 added
[  202.147684][ T6269] team0: Port device team_slave_1 added
[  202.219141][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.243096][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.280993][ T6269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.314709][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.321798][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.351316][ T6269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.475513][ T6269] device hsr_slave_0 entered promiscuous mode
[  202.484476][ T6269] device hsr_slave_1 entered promiscuous mode
[  202.675186][ T6324] overlayfs: failed to resolve './bus': -2
[  202.799823][ T6269] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  202.833761][ T6269] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  202.834584][ T6074] Bluetooth: hci1: command 0x0409 tx timeout
[  202.863149][ T6269] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  202.910031][ T6269] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  202.949082][ T6332] overlayfs: failed to resolve './bus': -2
[  203.140860][ T6269] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.189662][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  203.208816][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  203.230308][ T6269] 8021q: adding VLAN 0 to HW filter on device team0
[  203.252448][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  203.275870][ T6344] loop3: detected capacity change from 0 to 4096
[  203.282019][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  203.310955][ T6344] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  203.312795][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.327670][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.381152][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  203.449037][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  203.484864][ T6344] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  203.486776][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  203.507190][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.514818][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.528945][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  203.539975][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  203.565056][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  203.608037][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  203.649170][ T6349] loop3: detected capacity change from 0 to 1024
[  203.660040][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  203.684598][ T6349] EXT4-fs (loop3): Ignoring removed bh option
[  203.690752][ T6349] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  203.700819][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  203.722727][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  203.742336][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  203.752374][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  203.769682][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  203.802448][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  203.815095][ T6269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  203.832399][ T6349] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,noblock_validity,nobarrier,journal_ioprio=0x0000000000000005,abort,bh,init_itable,,errors=continue. Quota mode: none.
[  203.836363][ T6354] tmpfs: Bad value for 'mpol'
[  203.980586][ T6349] EXT4-fs error (device loop3): ext4_remount:6062: comm syz.3.467: Abort forced by user
[  204.064568][ T6349] EXT4-fs (loop3): Remounting filesystem read-only
[  204.076051][ T4242] device hsr_slave_0 left promiscuous mode
[  204.088111][ T6349] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: none.
[  204.098502][ T4242] device hsr_slave_1 left promiscuous mode
[  204.108767][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.121533][ T4242] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.149835][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.171764][ T4242] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.217622][ T4242] device bridge_slave_1 left promiscuous mode
[  204.232947][ T4242] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.243734][ T4242] device bridge_slave_0 left promiscuous mode
[  204.283560][ T4242] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.291622][ T4173] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  204.325178][ T4242] device veth1_macvtap left promiscuous mode
[  204.342255][ T4242] device veth0_macvtap left promiscuous mode
[  204.361889][ T4242] device veth1_vlan left promiscuous mode
[  204.374540][ T4242] device veth0_vlan left promiscuous mode
[  204.449766][ T6376] loop3: detected capacity change from 0 to 8192
[  204.516006][ T6376] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  204.529673][ T6376] REISERFS (device loop3): using ordered data mode
[  204.538860][ T6376] reiserfs: using flush barriers
[  204.545728][ T6376] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  204.563356][ T6376] REISERFS (device loop3): checking transaction log (loop3)
[  204.584159][ T4173] usb 2-1: Using ep0 maxpacket: 8
[  204.701895][ T4242] team0 (unregistering): Port device team_slave_1 removed
[  204.707943][ T6376] REISERFS (device loop3): Using tea hash to sort names
[  204.720963][ T4242] team0 (unregistering): Port device team_slave_0 removed
[  204.725263][ T6376] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  204.746356][ T4173] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  204.753260][ T4242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.755207][ T6376] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  204.773794][ T4173] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  204.782501][ T4173] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  204.782963][ T4242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.799444][ T4173] usb 2-1: config 250 has no interface number 0
[  204.807914][ T4173] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  204.817199][   T26] audit: type=1800 audit(1791113387.388:46): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.470" name="file1" dev="loop3" ino=4 res=0 errno=0
[  204.820009][ T4173] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  204.854136][ T4173] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36
[  204.870102][ T4173] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  204.888175][ T4173] usb 2-1: config 250 interface 228 has no altsetting 0
[  204.905292][ T4457] Bluetooth: hci1: command 0x041b tx timeout
[  204.952001][ T4242] bond0 (unregistering): Released all slaves
[  204.991832][ T6269] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.011200][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  205.023281][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  205.034312][ T4173] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  205.049314][ T4173] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  205.080519][ T4173] usb 2-1: Product: syz
[  205.096623][ T4173] usb 2-1: SerialNumber: syz
[  205.196135][ T4173] hub 2-1:250.228: bad descriptor, ignoring hub
[  205.211406][ T4173] hub: probe of 2-1:250.228 failed with error -5
[  205.421073][ T4173] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  205.422005][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  205.452016][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  205.493246][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  205.502652][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  205.522418][ T6269] device veth0_vlan entered promiscuous mode
[  205.533141][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  205.551035][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  205.589667][ T6269] device veth1_vlan entered promiscuous mode
[  205.649080][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  205.672220][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  205.688049][ T4228] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  205.714917][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  205.731080][ T6362] udc-core: couldn't find an available UDC or it's busy
[  205.736428][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  205.743329][ T6362] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  205.763543][ T6269] device veth0_macvtap entered promiscuous mode
[  205.782475][ T6269] device veth1_macvtap entered promiscuous mode
[  205.801089][ T6362] udc-core: couldn't find an available UDC or it's busy
[  205.820599][ T6362] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  205.829496][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.842920][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.861026][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.891982][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.924175][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.935787][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.948771][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.960773][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.974790][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.991959][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  206.003943][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  206.033396][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  206.044237][ T4228] usb 4-1: not running at top speed; connect to a high speed hub
[  206.094611][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  206.121466][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.132651][ T4228] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.160015][ T4228] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  206.175967][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.182235][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.225910][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.227123][ T6416] loop6: detected capacity change from 0 to 2048
[  206.246916][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.260962][ T4228] usb 4-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  206.269100][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.284266][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.294900][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.305785][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.317793][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.333306][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  206.352899][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  206.406616][ T6269] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.426844][ T6269] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.454542][ T6269] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.473043][ T6416] EXT4-fs (loop6): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000063,nodioread_nolock,,errors=continue. Quota mode: none.
[  206.492558][ T6269] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.559226][ T6424] openvswitch: netlink: Actions may not be safe on all matching packets
[  206.691911][ T4228] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  206.766547][ T4228] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : 2 (exp. 26).
[  206.806986][ T4228] uvcvideo 4-1:1.1: Failed to initialize the device (-5).
[  206.816117][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.838929][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.925776][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  206.945824][   T26] audit: type=1800 audit(1791113389.508:47): pid=6426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.472" name="file1" dev="loop6" ino=15 res=0 errno=0
[  206.952566][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.984710][ T4231] Bluetooth: hci1: command 0x040f tx timeout
[  207.069160][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.092932][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  208.142967][ T4584] usb 2-1: USB disconnect, device number 11
[  208.218635][ T4584] usblp0: removed
[  208.322117][ T6448] loop6: detected capacity change from 0 to 256
[  208.435106][ T6448] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  208.463264][ T4584] usb 4-1: USB disconnect, device number 20
[  208.494373][ T6447] loop1: detected capacity change from 0 to 8192
[  208.979559][ T6447] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  209.067446][ T4173] Bluetooth: hci1: command 0x0419 tx timeout
[  209.238409][ T6447] REISERFS (device loop1): using ordered data mode
[  209.495305][ T6447] reiserfs: using flush barriers
[  209.529228][ T6447] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  209.564473][ T6447] REISERFS (device loop1): checking transaction log (loop1)
[  209.835049][ T6485] loop3: detected capacity change from 0 to 1024
[  210.030857][ T6447] REISERFS (device loop1): Using tea hash to sort names
[  210.094443][ T6447] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  210.228976][ T6493] loop6: detected capacity change from 0 to 128
[  210.355633][ T6493] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  210.447828][ T6493] hpfs: filesystem error: improperly stopped
[  210.486775][ T6493] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  210.532399][ T6493] hpfs: You really don't want any checks? You are crazy...
[  210.581988][ T6493] hpfs: Code page index out of array
[  210.598970][ T6508] loop5: detected capacity change from 0 to 2048
[  210.604312][ T6493] hpfs: code page support is disabled
[  210.664440][ T6493] hpfs: hpfs_map_4sectors(): unaligned read
[  210.711605][ T6493] hpfs: hpfs_map_4sectors(): unaligned read
[  210.734192][ T6493] hpfs: filesystem error: unable to find root dir
[  210.741424][ T6513] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  210.818681][ T6493] hpfs: hpfs_map_sector(): read error
[  210.900938][ T6493] hpfs: hpfs_map_sector(): read error
[  212.699755][ T6530] loop7: detected capacity change from 0 to 1024
[  212.784029][    C0] sched: RT throttling activated
[  212.905878][ T6537] loop3: detected capacity change from 0 to 21
[  212.978515][ T6537] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  213.449214][   T26] audit: type=1326 audit(1791113396.018:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.1.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2f1b9159 code=0x7ffc0000
[  213.655970][   T26] audit: type=1326 audit(1791113396.018:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.1.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2f1b9159 code=0x7ffc0000
[  213.836649][   T26] audit: type=1326 audit(1791113396.048:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.1.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f4f2f1755ac code=0x7ffc0000
[  213.868194][ T6269] hfsplus: bad catalog entry type
[  214.024157][   T26] audit: type=1326 audit(1791113396.048:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.1.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4f2f17560e code=0x7ffc0000
[  214.164242][ T6562] loop5: detected capacity change from 0 to 16
[  214.194147][   T26] audit: type=1326 audit(1791113396.048:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.1.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f2f1b8deb code=0x7ffc0000
[  214.229917][ T6562] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  214.251127][ T4318] udevd[4318]: incorrect cramfs checksum on /dev/loop5
[  214.296276][ T6559] binder: 6558:6559 ioctl c0306201 200000000180 returned -14
[  214.314131][   T26] audit: type=1326 audit(1791113396.048:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.1.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f2f1b9159 code=0x7ffc0000
[  214.434292][   T26] audit: type=1326 audit(1791113396.048:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.1.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2f1b9159 code=0x7ffc0000
[  214.482117][ T6569] loop3: detected capacity change from 0 to 1024
[  214.516263][   T26] audit: type=1326 audit(1791113396.048:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.1.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2f1b9159 code=0x7ffc0000
[  214.568327][   T26] audit: type=1326 audit(1791113396.048:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.1.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2f1b9159 code=0x7ffc0000
[  214.631370][   T26] audit: type=1326 audit(1791113396.098:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.1.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2f1b9159 code=0x7ffc0000
[  214.694104][ T4584] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  214.822448][ T6580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.835941][ T6546] loop1: detected capacity change from 0 to 2048
[  214.921268][ T6546] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  214.934255][ T4584] usb 6-1: Using ep0 maxpacket: 8
[  215.060467][ T4584] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  215.090061][ T4584] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  215.127249][ T4584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.252878][ T4584] usb 6-1: config 0 descriptor??
[  215.279716][ T6587] loop6: detected capacity change from 0 to 40427
[  215.326540][ T4584] gspca_main: vc032x-2.14.0 probing 046d:0892
[  215.341053][ T6587] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  215.349901][ T6587] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  215.363900][ T6595] input: syz1 as /devices/virtual/input/input15
[  215.400718][ T6598] loop1: detected capacity change from 0 to 256
[  215.457105][ T6587] F2FS-fs (loop6): Found nat_bits in checkpoint
[  215.542147][ T6587] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  215.550898][ T6587] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  215.579121][ T6598] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d)
[  215.980002][ T6587] handle_bad_sector: 89 callbacks suppressed
[  215.980026][ T6587] attempt to access beyond end of device
[  215.980026][ T6587] loop6: rw=2049, want=80560, limit=40427
[  216.014171][ T6587] attempt to access beyond end of device
[  216.014171][ T6587] loop6: rw=2049, want=81920, limit=40427
[  216.054361][ T6587] attempt to access beyond end of device
[  216.054361][ T6587] loop6: rw=2049, want=53248, limit=40427
[  216.151430][ T6587] attempt to access beyond end of device
[  216.151430][ T6587] loop6: rw=2049, want=69632, limit=40427
[  216.176595][ T6587] attempt to access beyond end of device
[  216.176595][ T6587] loop6: rw=2049, want=69640, limit=40427
[  216.190438][ T6587] attempt to access beyond end of device
[  216.190438][ T6587] loop6: rw=2049, want=69648, limit=40427
[  216.203163][ T6587] attempt to access beyond end of device
[  216.203163][ T6587] loop6: rw=2049, want=69656, limit=40427
[  216.215617][ T6587] attempt to access beyond end of device
[  216.215617][ T6587] loop6: rw=2049, want=69664, limit=40427
[  216.227405][ T6587] attempt to access beyond end of device
[  216.227405][ T6587] loop6: rw=2049, want=69672, limit=40427
[  216.239096][ T6587] attempt to access beyond end of device
[  216.239096][ T6587] loop6: rw=2049, want=69680, limit=40427
[  216.532598][ T6616] ip_tables: iptables: counters copy to user failed while replacing table
[  216.654166][ T4584] gspca_vc032x: reg_w err -71
[  216.659139][ T4584] vc032x: probe of 6-1:0.0 failed with error -71
[  216.689364][ T4584] usb 6-1: USB disconnect, device number 5
[  216.698135][ T4311] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.822257][ T4311] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.878615][ T4228] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  216.959798][ T4311] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.029550][ T4311] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.286413][ T4228] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  217.357116][ T4228] usb 4-1: config 1 interface 2 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  217.629344][ T4228] usb 4-1: config 1 interface 2 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  217.956626][ T4228] usb 4-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  217.992705][ T4228] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00
[  218.015256][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.190131][ T4228] snd-ua101: probe of 4-1:1.0 failed with error -12
[  218.331418][ T6648] loop6: detected capacity change from 0 to 1024
[  218.511459][ T6648] EXT4-fs (loop6): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  218.537114][ T6648] EXT4-fs (loop6): Ignoring removed orlov option
[  218.547425][ T6648] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data
[  218.975076][ T6658] loop3: detected capacity change from 0 to 256
[  219.285801][ T6658] exfat: Deprecated parameter 'utf8'
[  219.317681][ T6648] loop6: detected capacity change from 0 to 512
[  219.323144][ T6658] exfat: Deprecated parameter 'utf8'
[  219.351340][ T6658] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xff6615b4, utbl_chksum : 0xe619d30d)
[  219.414248][ T6648] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  219.526332][ T4280] usb 4-1: USB disconnect, device number 21
[  219.588382][ T6667] loop5: detected capacity change from 0 to 8192
[  219.601195][ T6648] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.514: bg 0: block 4: invalid block bitmap
[  219.693600][ T6667] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  219.752933][ T6667] REISERFS (device loop5): using ordered data mode
[  219.770696][ T6648] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  219.788026][ T6667] reiserfs: using flush barriers
[  219.794473][ T6648] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.514: invalid indirect mapped block 1 (level 1)
[  219.812358][ T6667] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  219.848550][ T6648] EXT4-fs (loop6): 1 truncate cleaned up
[  219.854587][ T6667] REISERFS (device loop5): checking transaction log (loop5)
[  219.862571][ T6648] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  219.998585][ T6667] REISERFS (device loop5): Using tea hash to sort names
[  220.034679][ T6667] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  220.079266][ T6639] chnl_net:caif_netlink_parms(): no params data found
[  220.194459][ T4173] Bluetooth: hci1: command 0x0409 tx timeout
[  220.237953][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  220.265199][ T1106] Process accounting resumed
[  220.276837][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  220.287266][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  220.301329][ T6685] device bridge_slave_0 left promiscuous mode
[  220.309814][ T6667] overlayfs: './file0' not a directory
[  220.318270][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.355561][ T6685] device bridge_slave_1 left promiscuous mode
[  220.375013][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.489405][ T6685] bond0: (slave bond_slave_0): Releasing backup interface
[  220.555287][ T6685] bond0: (slave bond_slave_1): Releasing backup interface
[  220.673520][ T6685] team0: Port device team_slave_0 removed
[  220.745744][ T6685] team0: Port device team_slave_1 removed
[  220.752789][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.814236][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.856943][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.858894][ T6704] loop5: detected capacity change from 0 to 256
[  220.878344][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.995095][ T6689] team0: Mode changed to "loadbalance"
[  221.047896][ T6704] FAT-fs (loop5): IO charset ut/8 not found
[  221.126199][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.519'.
[  221.403795][ T6639] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.411369][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.420145][ T6639] device bridge_slave_0 entered promiscuous mode
[  221.545407][ T6724] FAULT_INJECTION: forcing a failure.
[  221.545407][ T6724] name failslab, interval 1, probability 0, space 0, times 0
[  221.558461][ T6724] CPU: 1 PID: 6724 Comm: syz.5.523 Not tainted syzkaller #0
[  221.565980][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  221.576065][ T6724] Call Trace:
[  221.579462][ T6724]  <TASK>
[  221.582538][ T6724]  dump_stack_lvl+0x188/0x250
[  221.587360][ T6724]  ? show_regs_print_info+0x20/0x20
[  221.592598][ T6724]  ? load_image+0x410/0x410
[  221.597144][ T6724]  ? __might_sleep+0xf0/0xf0
[  221.601766][ T6724]  ? __lock_acquire+0x7d40/0x7d40
[  221.606828][ T6724]  ? netlink_insert+0xe90/0x11f0
[  221.611915][ T6724]  should_fail+0x383/0x4b0
[  221.616370][ T6724]  should_failslab+0x5/0x20
[  221.621069][ T6724]  slab_pre_alloc_hook+0x51/0xc0
[  221.626042][ T6724]  kmem_cache_alloc_node+0x47/0x2c0
[  221.631406][ T6724]  ? __alloc_skb+0xf4/0x750
[  221.636035][ T6724]  __alloc_skb+0xf4/0x750
[  221.640572][ T6724]  netlink_sendmsg+0x654/0xbe0
[  221.645378][ T6724]  ? netlink_getsockopt+0x570/0x570
[  221.650874][ T6724]  ? aa_sock_msg_perm+0x94/0x150
[  221.655878][ T6724]  ? apparmor_socket_sendmsg+0x88/0x230
[  221.661549][ T6724]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  221.667040][ T6724]  ? security_socket_sendmsg+0x7c/0xa0
[  221.672855][ T6724]  ? netlink_getsockopt+0x570/0x570
[  221.678171][ T6724]  ____sys_sendmsg+0x5be/0x8f0
[  221.683066][ T6724]  ? __sys_sendmsg_sock+0x30/0x30
[  221.688126][ T6724]  ? import_iovec+0x6f/0xa0
[  221.692660][ T6724]  ___sys_sendmsg+0x236/0x2e0
[  221.697682][ T6724]  ? __sys_sendmsg+0x290/0x290
[  221.703003][ T6724]  __se_sys_sendmsg+0x1b7/0x2a0
[  221.708687][ T6724]  ? __x64_sys_sendmsg+0x80/0x80
[  221.713796][ T6724]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  221.719934][ T6724]  ? lockdep_hardirqs_on+0x94/0x140
[  221.725440][ T6724]  do_syscall_64+0x4c/0xa0
[  221.729879][ T6724]  ? clear_bhb_loop+0x30/0x80
[  221.734646][ T6724]  ? clear_bhb_loop+0x30/0x80
[  221.739484][ T6724]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  221.745609][ T6724] RIP: 0033:0x7fa83d96d159
[  221.750205][ T6724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.769841][ T6724] RSP: 002b:00007fa83bb83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  221.778445][ T6724] RAX: ffffffffffffffda RBX: 00007fa83dbf5180 RCX: 00007fa83d96d159
[  221.786592][ T6724] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000006
[  221.794889][ T6724] RBP: 00007fa83bb83090 R08: 0000000000000000 R09: 0000000000000000
[  221.803025][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  221.811253][ T6724] R13: 00007fa83dbf5218 R14: 00007fa83dbf5180 R15: 00007ffe564ee328
[  221.819265][ T6724]  </TASK>
[  221.943546][ T6639] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.964615][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.973907][ T6639] device bridge_slave_1 entered promiscuous mode
[  222.049527][ T6699] loop1: detected capacity change from 0 to 32768
[  222.163301][ T6639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.219624][ T6699] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  222.256268][ T6639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.274438][ T4457] Bluetooth: hci1: command 0x041b tx timeout
[  222.289053][ T6699] JBD2: Ignoring recovery information on journal
[  222.371348][ T6735] netlink: 'syz.5.526': attribute type 8 has an invalid length.
[  222.401160][ T6699] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  222.522483][ T6639] team0: Port device team_slave_0 added
[  222.532292][ T6639] team0: Port device team_slave_1 added
[  222.624749][ T6639] batman_adv: batadv0: Adding interface: batadv_slave_0
[  222.624770][ T6639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.624799][ T6639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  222.640431][ T6639] batman_adv: batadv0: Adding interface: batadv_slave_1
[  222.640451][ T6639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.640479][ T6639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  222.703089][ T4190] ocfs2: Unmounting device (7,1) on (node local)
[  222.826535][ T4311] device hsr_slave_0 left promiscuous mode
[  222.845624][ T4311] device hsr_slave_1 left promiscuous mode
[  222.867866][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.883123][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.933172][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.956674][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.980502][ T4311] device bridge_slave_1 left promiscuous mode
[  223.060273][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.096597][ T4311] device bridge_slave_0 left promiscuous mode
[  223.103114][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.186807][ T4311] device veth1_macvtap left promiscuous mode
[  223.193110][ T4311] device veth0_macvtap left promiscuous mode
[  223.222937][ T4311] device veth1_vlan left promiscuous mode
[  223.242796][ T4311] device veth0_vlan left promiscuous mode
[  223.286241][ T6754] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  223.295471][ T6754] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  223.628831][ T6766] loop1: detected capacity change from 0 to 40427
[  223.680532][ T6766] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  223.688979][ T6766] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  223.846164][ T6766] F2FS-fs (loop1): Found nat_bits in checkpoint
[  223.960554][ T6766] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  223.967950][ T6766] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  224.324352][ T4280] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  224.644275][ T4280] usb 6-1: Using ep0 maxpacket: 8
[  224.824412][ T4280] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  224.833137][ T4173] Bluetooth: hci1: command 0x040f tx timeout
[  224.859088][ T4280] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  224.890055][ T4280] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  224.912516][ T4311] team0 (unregistering): Port device team_slave_1 removed
[  224.917597][ T4280] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  224.934914][ T4280] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  224.945908][ T4280] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.947616][ T4311] team0 (unregistering): Port device team_slave_0 removed
[  224.979543][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  225.004989][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  225.109755][ T4311] bond0 (unregistering): Released all slaves
[  225.202524][ T6639] device hsr_slave_0 entered promiscuous mode
[  225.209105][ T6802] loop6: detected capacity change from 0 to 2048
[  225.214333][ T4280] usb 6-1: GET_CAPABILITIES returned 0
[  225.228254][ T4280] usbtmc 6-1:16.0: can't read capabilities
[  225.248635][ T6802] NILFS: invalid option "cp=0x000000000000000": invalid checkpoint number 0
[  225.291644][ T6639] device hsr_slave_1 entered promiscuous mode
[  225.414093][ T4173] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  225.502312][ T6809] ip_tables: iptables: counters copy to user failed while replacing table
[  225.532340][ T6810] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  225.591977][ T4280] usb 6-1: USB disconnect, device number 6
[  225.777817][ T6639] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  225.818218][ T6639] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  225.835277][ T4173] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  225.865705][ T6639] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  225.916643][ T6639] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  225.962088][ T4173] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  225.986934][ T4173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  225.996448][ T4173] usb 4-1: SerialNumber: syz
[  226.411830][ T6639] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.920754][ T6070] Bluetooth: hci1: command 0x0419 tx timeout
[  227.181536][ T4173] cdc_ether 4-1:1.0: skipping garbage
[  227.384282][ T4173] usb 4-1: bad CDC descriptors
[  227.420670][ T6639] 8021q: adding VLAN 0 to HW filter on device team0
[  227.599273][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  227.627070][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  227.652732][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  227.679743][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  227.704932][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.712404][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.728371][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  227.740455][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  227.784599][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.792326][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.826759][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  227.845059][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  227.864790][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  227.878997][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  227.961555][ T6639] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  228.003915][ T6639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  228.045574][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  228.055772][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  228.076468][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  228.120469][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  228.149794][ T6826] loop6: detected capacity change from 0 to 32768
[  228.162472][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  228.194894][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  228.224316][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  228.266424][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  228.301522][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  228.310504][ T6826] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz"
[  228.349218][ T6826] dlm: no local IP address has been set
[  228.378631][ T6826] dlm: cannot start dlm midcomms -107
[  228.424592][ T4232] usb 4-1: USB disconnect, device number 22
[  228.454114][ T6826] gfs2: fsid=syz:syz: dlm_new_lockspace error -107
[  228.606009][ T6852] loop3: detected capacity change from 0 to 256
[  228.659916][ T6852] FAT-fs (loop3): Unrecognized mount option "uni_xlat" or missing value
[  228.855576][ T6860] loop6: detected capacity change from 0 to 8
[  228.905740][ T6865] loop3: detected capacity change from 0 to 256
[  228.912942][ T6863] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  228.921118][ T6863] IPv6: NLM_F_CREATE should be set when creating new route
[  228.928794][ T6863] IPv6: NLM_F_CREATE should be set when creating new route
[  228.945856][ T6860] SQUASHFS error: zlib decompression failed, data probably corrupt
[  228.974206][ T6860] SQUASHFS error: Failed to read block 0x9b: -5
[  228.985419][ T6860] SQUASHFS error: Unable to read metadata cache entry [99]
[  228.993228][ T6860] SQUASHFS error: Unable to read inode 0x127
[  229.065672][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  229.073233][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  229.111547][ T6639] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.136620][ T6869] netlink: 100 bytes leftover after parsing attributes in process `syz.1.548'.
[  229.462279][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.523562][ T6889] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  230.031249][ T6924] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  230.057689][ T6074] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  230.085027][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  230.101703][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  230.208447][ T6928] loop5: detected capacity change from 0 to 256
[  230.598118][ T6926] loop3: detected capacity change from 0 to 65536
[  230.784774][ T6639] device veth0_vlan entered promiscuous mode
[  230.813730][ T6639] device veth1_vlan entered promiscuous mode
[  230.847582][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  230.856333][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  230.865104][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  230.957129][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  230.978556][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  231.044488][ T6074] usb 2-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  231.094568][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  231.127071][ T6074] usb 2-1: config 1 interface 0 has no altsetting 0
[  231.144849][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  231.169031][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  231.200645][ T6926] XFS (loop3): Mounting V5 Filesystem
[  231.230982][ T6639] device veth0_macvtap entered promiscuous mode
[  231.278957][ T6639] device veth1_macvtap entered promiscuous mode
[  231.285887][ T6074] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  231.306696][ T6074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  231.323583][ T6074] usb 2-1: SerialNumber: syz
[  231.378260][ T6926] XFS (loop3): Ending clean mount
[  231.379702][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.464371][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.498460][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.512659][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.529979][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.541073][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.554128][ T6639] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.662536][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  231.692875][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  231.723354][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  231.753029][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  231.836311][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.865812][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.912467][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.935008][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.954767][ T6074] cdc_ether: probe of 2-1:1.0 failed with error -71
[  231.959640][ T6965] loop5: detected capacity change from 0 to 2048
[  231.985472][ T6074] usb 2-1: USB disconnect, device number 12
[  231.994099][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.018864][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.030888][ T6639] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.051782][ T6639] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.061145][ T6639] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.071068][ T6639] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.080467][ T6639] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.091800][ T4197] XFS (loop3): Unmounting Filesystem
[  232.093479][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  232.159682][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  232.275130][ T6972] loop5: detected capacity change from 0 to 512
[  232.432023][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.473727][ T6972] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,sysvgroups,grpjquota=,. Quota mode: writeback.
[  232.499933][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.525290][ T6972] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.537313][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  232.639645][ T4367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.694708][ T4367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.758421][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  233.445613][ T7000] device pim6reg1 entered promiscuous mode
[  233.603474][ T7005] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  233.694705][ T7010] loop1: detected capacity change from 0 to 1024
[  233.850976][ T7010] EXT4-fs (loop1): Ignoring removed bh option
[  233.974415][ T7010] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  234.065231][ T7010] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,noblock_validity,nobarrier,journal_ioprio=0x0000000000000005,abort,bh,init_itable,,errors=continue. Quota mode: none.
[  234.303625][ T7010] EXT4-fs error (device loop1): ext4_remount:6062: comm syz.1.569: Abort forced by user
[  234.362918][ T7010] EXT4-fs (loop1): Remounting filesystem read-only
[  234.394601][ T7010] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none.
[  235.410021][ T7041] FAULT_INJECTION: forcing a failure.
[  235.410021][ T7041] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  235.464203][ T7041] CPU: 0 PID: 7041 Comm: syz.6.575 Not tainted syzkaller #0
[  235.471736][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  235.482814][ T7041] Call Trace:
[  235.486661][ T7041]  <TASK>
[  235.490330][ T7041]  dump_stack_lvl+0x188/0x250
[  235.495226][ T7041]  ? show_regs_print_info+0x20/0x20
[  235.500472][ T7041]  ? load_image+0x410/0x410
[  235.505025][ T7041]  ? __lock_acquire+0x7d40/0x7d40
[  235.510370][ T7041]  should_fail+0x383/0x4b0
[  235.515057][ T7041]  _copy_from_user+0x2e/0x170
[  235.520057][ T7041]  iovec_from_user+0x142/0x370
[  235.525214][ T7041]  __import_iovec+0x70/0x490
[  235.529859][ T7041]  import_iovec+0x6f/0xa0
[  235.534421][ T7041]  do_readv+0x232/0x460
[  235.538710][ T7041]  ? do_iter_readv_writev+0x5f0/0x5f0
[  235.544136][ T7041]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  235.550189][ T7041]  ? lock_chain_count+0x20/0x20
[  235.555084][ T7041]  ? lockdep_hardirqs_on+0x94/0x140
[  235.560322][ T7041]  do_syscall_64+0x4c/0xa0
[  235.565245][ T7041]  ? clear_bhb_loop+0x30/0x80
[  235.569971][ T7041]  ? clear_bhb_loop+0x30/0x80
[  235.574692][ T7041]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  235.580723][ T7041] RIP: 0033:0x7f770fc8f159
[  235.585177][ T7041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  235.605166][ T7041] RSP: 002b:00007f770dee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  235.613626][ T7041] RAX: ffffffffffffffda RBX: 00007f770ff16fa0 RCX: 00007f770fc8f159
[  235.621637][ T7041] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003
[  235.629643][ T7041] RBP: 00007f770dee7090 R08: 0000000000000000 R09: 0000000000000000
[  235.637743][ T7046] overlayfs: missing 'lowerdir'
[  235.638021][ T7041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  235.656171][ T7041] R13: 00007f770ff17038 R14: 00007f770ff16fa0 R15: 00007fffb2ab9818
[  235.656211][ T7041]  </TASK>
[  235.824452][ T7058] bond0: ARP monitoring cannot be used with MII monitoring
[  235.970264][ T7069] loop8: detected capacity change from 0 to 1024
[  235.986774][ T7067] loop1: detected capacity change from 0 to 128
[  235.994134][ T4229] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  236.063619][ T7067] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  236.169713][ T7067] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  236.258653][ T7069] netlink: 76 bytes leftover after parsing attributes in process `syz.8.582'.
[  237.294322][ T4229] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  237.303268][ T4229] usb 6-1: config 0 has no interface number 0
[  237.311003][ T4229] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  237.323486][ T4229] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.338738][ T4229] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  237.393604][ T7104] loop1: detected capacity change from 0 to 64
[  237.412940][ T4229] usb 6-1: config 0 interface 1 has no altsetting 0
[  237.420483][ T7100] loop6: detected capacity change from 0 to 1024
[  237.494647][ T7100] EXT4-fs (loop6): Ignoring removed bh option
[  237.514364][ T4229] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  237.554328][ T7100] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  237.577816][ T4229] usb 6-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0
[  237.657903][ T4229] usb 6-1: Manufacturer: syz
[  237.717811][ T4229] usb 6-1: config 0 descriptor??
[  237.827535][ T7100] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,noblock_validity,nobarrier,journal_ioprio=0x0000000000000005,abort,bh,init_itable,,errors=continue. Quota mode: none.
[  237.976844][ T7100] EXT4-fs error (device loop6): ext4_remount:6062: comm syz.6.588: Abort forced by user
[  238.042803][ T7100] EXT4-fs (loop6): Remounting filesystem read-only
[  238.049975][ T7100] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: none.
[  238.421488][ T7104] CacheFiles: mkdir cache failed with error -5
[  238.443409][ T7056] loop5: detected capacity change from 0 to 1024
[  238.450220][ T4229] uclogic 0003:145F:0212.0008: pen parameters not found
[  238.466486][ T4229] uclogic 0003:145F:0212.0008: interface is invalid, ignoring
[  238.485721][ T7125] ip_tables: iptables: counters copy to user failed while replacing table
[  238.582094][ T7104] CacheFiles: Failed to register: -5
[  238.593125][ T7056] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities
[  238.968409][ T7097] loop3: detected capacity change from 0 to 32768
[  239.059088][ T7097] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  239.085505][ T7097] BTRFS info (device loop3): using free space tree
[  239.092396][ T7097] BTRFS info (device loop3): has skinny extents
[  239.181639][ T1106] usb 6-1: USB disconnect, device number 7
[  239.259544][   T26] kauditd_printk_skb: 73 callbacks suppressed
[  239.259562][   T26] audit: type=1807 audit(1791113421.828:131): action=measure res=1
[  239.385762][ T7158] loop1: detected capacity change from 0 to 1024
[  239.562986][   T26] audit: type=1800 audit(1791113422.128:132): pid=7166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.597" name="addr_list" dev="configfs" ino=44486 res=0 errno=0
[  239.623204][ T7097] BTRFS info (device loop3): enabling ssd optimizations
[  240.074106][ T1106] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  240.083352][ T7142] ima: policy update failed
[  240.094698][   T26] audit: type=1802 audit(1791113422.668:133): pid=7142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.595" res=0 errno=0
[  240.434264][ T1106] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.476503][ T1106] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  240.540350][ T7210] loop1: detected capacity change from 0 to 512
[  240.563347][ T1106] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  240.605026][ T1106] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.608255][ T7214] tipc: Started in network mode
[  240.636764][ T7210] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  240.667093][ T1106] usb 6-1: config 0 descriptor??
[  240.690249][ T7214] tipc: Node identity 4, cluster identity 4711
[  240.707593][ T7214] tipc: Node number set to 4
[  241.032349][ T7210] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  241.074932][ T7210] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  241.101865][ T7227] loop3: detected capacity change from 0 to 64
[  241.283321][ T1106] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0
[  241.292998][ T1106] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0
[  241.322587][ T1106] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0009/input/input16
[  241.340104][ T7210] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.606: Allocating blocks 41-42 which overlap fs metadata
[  241.433894][ T7210] Quota error (device loop1): write_blk: dquota write failed
[  241.442228][ T7210] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  241.459469][ T7210] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  241.461027][ T1106] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0
[  241.470645][ T7210] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.606: Failed to acquire dquot type 1
[  241.517997][ T7210] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  241.563035][ T7210] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.606: corrupted inode contents
[  241.603721][ T7210] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #12: comm syz.1.606: mark_inode_dirty error
[  241.630428][ T7210] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.606: corrupted inode contents
[  241.655229][ T7227] CacheFiles: mkdir cache failed with error -5
[  241.677819][ T7210] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.606: mark_inode_dirty error
[  241.685317][ T7227] CacheFiles: Failed to register: -5
[  241.708520][ T7210] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.606: corrupted inode contents
[  241.731740][ T7210] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  241.746952][ T7210] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.606: corrupted inode contents
[  241.782798][ T7210] EXT4-fs error (device loop1): ext4_truncate:4286: inode #12: comm syz.1.606: mark_inode_dirty error
[  241.804846][ T7210] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  241.814896][ T7210] EXT4-fs (loop1): 1 truncate cleaned up
[  241.820750][ T7210] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,noblock_validity,mblk_io_submit,noinit_itable,noinit_itable,grpjquota=,jqfmt=vfsv1,max_dir_size_kb=0x0000000000000006,barrier=0x00000000000007ff2,errors=continue. Quota mode: writeback.
[  241.923115][ T7256] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  242.022218][ T7256] CIFS: Attempting to mount \\::1\share
[  242.048574][ T7259] bpf: Bad value for 'mode'
[  242.054846][ T7256] CIFS: VFS: No username specified
[  242.102251][ T7262] FAULT_INJECTION: forcing a failure.
[  242.102251][ T7262] name failslab, interval 1, probability 0, space 0, times 0
[  242.118803][ T7262] CPU: 0 PID: 7262 Comm: syz.8.610 Not tainted syzkaller #0
[  242.127036][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  242.138245][ T7262] Call Trace:
[  242.142213][ T7262]  <TASK>
[  242.145223][ T7262]  dump_stack_lvl+0x188/0x250
[  242.150975][ T7262]  ? show_regs_print_info+0x20/0x20
[  242.157221][ T7262]  ? load_image+0x410/0x410
[  242.162077][ T7262]  ? __might_sleep+0xf0/0xf0
[  242.166974][ T7262]  ? __lock_acquire+0x7d40/0x7d40
[  242.172160][ T7262]  ? netlink_insert+0xe90/0x11f0
[  242.177501][ T7262]  should_fail+0x383/0x4b0
[  242.182193][ T7262]  should_failslab+0x5/0x20
[  242.186924][ T7262]  slab_pre_alloc_hook+0x51/0xc0
[  242.192301][ T7262]  kmem_cache_alloc_node+0x47/0x2c0
[  242.198033][ T7262]  ? __alloc_skb+0xf4/0x750
[  242.202682][ T7262]  __alloc_skb+0xf4/0x750
[  242.207152][ T7262]  netlink_sendmsg+0x654/0xbe0
[  242.212052][ T7262]  ? netlink_getsockopt+0x570/0x570
[  242.218370][ T7262]  ? aa_sock_msg_perm+0x94/0x150
[  242.223601][ T7262]  ? apparmor_socket_sendmsg+0x88/0x230
[  242.229357][ T7262]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  242.234853][ T7262]  ? security_socket_sendmsg+0x7c/0xa0
[  242.241308][ T7262]  ? netlink_getsockopt+0x570/0x570
[  242.246753][ T7262]  ____sys_sendmsg+0x5be/0x8f0
[  242.251664][ T7262]  ? __sys_sendmsg_sock+0x30/0x30
[  242.256940][ T7262]  ? import_iovec+0x6f/0xa0
[  242.261609][ T7262]  ___sys_sendmsg+0x236/0x2e0
[  242.266439][ T7262]  ? __sys_sendmsg+0x290/0x290
[  242.271297][ T7262]  __se_sys_sendmsg+0x1b7/0x2a0
[  242.276466][ T7262]  ? __x64_sys_sendmsg+0x80/0x80
[  242.281754][ T7262]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  242.287819][ T7262]  ? lockdep_hardirqs_on+0x94/0x140
[  242.293111][ T7262]  do_syscall_64+0x4c/0xa0
[  242.297649][ T7262]  ? clear_bhb_loop+0x30/0x80
[  242.303254][ T7262]  ? clear_bhb_loop+0x30/0x80
[  242.308479][ T7262]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  242.314410][ T7262] RIP: 0033:0x7ffa22b6e159
[  242.318849][ T7262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  242.338967][ T7262] RSP: 002b:00007ffa20dc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  242.347783][ T7262] RAX: ffffffffffffffda RBX: 00007ffa22df5fa0 RCX: 00007ffa22b6e159
[  242.356064][ T7262] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003
[  242.364361][ T7262] RBP: 00007ffa20dc6090 R08: 0000000000000000 R09: 0000000000000000
[  242.372384][ T7262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  242.380471][ T7262] R13: 00007ffa22df6038 R14: 00007ffa22df5fa0 R15: 00007fff09c45b08
[  242.388672][ T7262]  </TASK>
[  242.784121][ T6074] usb 6-1: reset high-speed USB device number 8 using dummy_hcd
[  243.231887][ T7256] loop3: detected capacity change from 0 to 32768
[  243.375597][ T7256] JBD2: Ignoring recovery information on journal
[  243.449385][ T7286] FAULT_INJECTION: forcing a failure.
[  243.449385][ T7286] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  243.483035][ T7301] CacheFiles: Failed to register: -95
[  243.523242][ T7303] x_tables: unsorted underflow at hook 2
[  243.594277][ T7286] CPU: 0 PID: 7286 Comm: syz.1.616 Not tainted syzkaller #0
[  243.601952][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  243.612120][ T7286] Call Trace:
[  243.615420][ T7286]  <TASK>
[  243.618383][ T7286]  dump_stack_lvl+0x188/0x250
[  243.623114][ T7286]  ? show_regs_print_info+0x20/0x20
[  243.628477][ T7286]  ? load_image+0x410/0x410
[  243.633047][ T7286]  ? __lock_acquire+0x7d40/0x7d40
[  243.638191][ T7286]  should_fail+0x383/0x4b0
[  243.642849][ T7286]  prepare_alloc_pages+0x1e3/0x5b0
[  243.648046][ T7286]  __alloc_pages+0x11b/0x480
[  243.652943][ T7286]  ? zone_statistics+0x170/0x170
[  243.658320][ T7286]  ? PageHuge+0x92/0x130
[  243.662862][ T7286]  alloc_pages_vma+0x2bc/0x790
[  243.668018][ T7286]  ? new_page+0x24f/0x3c0
[  243.672769][ T7286]  migrate_pages+0xa0d/0x34a0
[  243.678001][ T7286]  ? mbind_range+0x9b0/0x9b0
[  243.682916][ T7286]  ? next_demotion_node+0x190/0x190
[  243.688268][ T7286]  ? vmacache_find+0x238/0x590
[  243.693100][ T7286]  ? remove_migration_ptes+0x130/0x130
[  243.698604][ T7286]  ? find_vma+0xd2/0x230
[  243.702886][ T7286]  ? mbind_range+0x91e/0x9b0
[  243.707685][ T7286]  __se_sys_mbind+0x64c/0x770
[  243.712692][ T7286]  ? __x64_sys_mbind+0xf0/0xf0
[  243.715129][ T7309] FAULT_INJECTION: forcing a failure.
[  243.715129][ T7309] name failslab, interval 1, probability 0, space 0, times 0
[  243.717665][ T7286]  ? lock_chain_count+0x20/0x20
[  243.735776][ T7286]  ? __x64_sys_mbind+0x1d/0xf0
[  243.740774][ T7286]  do_syscall_64+0x4c/0xa0
[  243.745242][ T7286]  ? clear_bhb_loop+0x30/0x80
[  243.750305][ T7286]  ? clear_bhb_loop+0x30/0x80
[  243.755197][ T7286]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  243.761667][ T7286] RIP: 0033:0x7f4f2f1b9159
[  243.766487][ T7286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.786456][ T7286] RSP: 002b:00007f4f2d411028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  243.795106][ T7286] RAX: ffffffffffffffda RBX: 00007f4f2f440fa0 RCX: 00007f4f2f1b9159
[  243.803289][ T7286] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000
[  243.811482][ T7286] RBP: 00007f4f2f25006b R08: 0000000000000000 R09: 0000000000000002
[  243.819494][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.827486][ T7286] R13: 00007f4f2f441038 R14: 00007f4f2f440fa0 R15: 00007fff8a56c258
[  243.835649][ T7286]  </TASK>
[  243.838959][ T7309] CPU: 1 PID: 7309 Comm: syz.5.624 Not tainted syzkaller #0
[  243.846561][ T7309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  243.856735][ T7309] Call Trace:
[  243.860089][ T7309]  <TASK>
[  243.863223][ T7309]  dump_stack_lvl+0x188/0x250
[  243.868215][ T7309]  ? show_regs_print_info+0x20/0x20
[  243.873448][ T7309]  ? load_image+0x410/0x410
[  243.877981][ T7309]  ? __might_sleep+0xf0/0xf0
[  243.882696][ T7309]  ? __lock_acquire+0x7d40/0x7d40
[  243.887932][ T7309]  ? mark_lock+0x94/0x320
[  243.889599][ T7256] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  243.892645][ T7309]  should_fail+0x383/0x4b0
[  243.907019][ T7309]  should_failslab+0x5/0x20
[  243.912637][ T7309]  slab_pre_alloc_hook+0x51/0xc0
[  243.917795][ T7309]  __kmalloc+0x6b/0x340
[  243.922072][ T7309]  ? tomoyo_realpath_from_path+0xed/0x5e0
[  243.928052][ T7309]  tomoyo_realpath_from_path+0xed/0x5e0
[  243.933861][ T7309]  tomoyo_path_number_perm+0x251/0x6b0
[  243.939379][ T7309]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  243.945149][ T7309]  ? ksys_write+0x1d4/0x260
[  243.949950][ T7309]  security_file_ioctl+0x6c/0xa0
[  243.955220][ T7309]  __se_sys_ioctl+0x48/0x170
[  243.960219][ T7309]  do_syscall_64+0x4c/0xa0
[  243.965824][ T7309]  ? clear_bhb_loop+0x30/0x80
[  243.970642][ T7309]  ? clear_bhb_loop+0x30/0x80
[  243.975809][ T7309]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  243.982483][ T7309] RIP: 0033:0x7fa83d96d159
[  243.986944][ T7309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  244.008350][ T7309] RSP: 002b:00007fa83bbc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  244.017836][ T7309] RAX: ffffffffffffffda RBX: 00007fa83dbf4fa0 RCX: 00007fa83d96d159
[  244.026204][ T7309] RDX: 0000200000000000 RSI: 000000000000618e RDI: 0000000000000003
[  244.026672][ T7256] netem: change failed
[  244.034452][ T7309] RBP: 00007fa83bbc5090 R08: 0000000000000000 R09: 0000000000000000
[  244.034477][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  244.034488][ T7309] R13: 00007fa83dbf5038 R14: 00007fa83dbf4fa0 R15: 00007ffe564ee328
[  244.034518][ T7309]  </TASK>
[  244.075398][ T6070] usb 6-1: USB disconnect, device number 8
[  244.077168][ T7309] ERROR: Out of memory at tomoyo_realpath_from_path.
[  244.089268][ T7313] loop6: detected capacity change from 0 to 1024
[  244.167025][   T26] audit: type=1326 audit(1791113426.738:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7316 comm="syz.8.626" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa22b6e159 code=0x0
[  244.201820][ T7313] EXT4-fs (loop6): Ignoring removed bh option
[  244.225660][ T4197] ocfs2: Unmounting device (7,3) on (node local)
[  244.238992][ T7313] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  244.515091][ T7313] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,noblock_validity,nobarrier,journal_ioprio=0x0000000000000005,abort,bh,init_itable,,errors=continue. Quota mode: none.
[  244.817837][ T7335] loop3: detected capacity change from 0 to 512
[  244.885320][ T7313] EXT4-fs error (device loop6): ext4_remount:6062: comm syz.6.621: Abort forced by user
[  244.914314][ T7335] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  244.940243][ T7313] EXT4-fs (loop6): Remounting filesystem read-only
[  244.955850][ T7335] EXT4-fs (loop3): invalid journal inode
[  244.975568][ T7335] EXT4-fs (loop3): can't get journal size
[  244.982897][ T7313] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: none.
[  245.007923][ T7335] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #2: comm syz.3.627: blocks 4-4 from inode overlap system zone
[  245.039937][ T7335] EXT4-fs (loop3): failed to initialize system zone (-117)
[  245.058193][ T7335] EXT4-fs (loop3): mount failed
[  245.244134][ T4173] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  245.668937][ T4173] usb 6-1: config 8 has an invalid interface number: 80 but max is 0
[  245.689920][ T4173] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  245.724118][ T4173] usb 6-1: config 8 has no interface number 0
[  245.730464][ T4173] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping
[  245.793574][ T4173] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  245.824149][ T4173] usb 6-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  245.844214][ T4173] usb 6-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14
[  245.873610][ T7362] 9pnet: Could not find request transport: f� rfdno=0x0000000000000008�wfdno=0x0000000000000006
[  245.884956][ T7362] 9pnet: Unknown protocol version 9p�0m�x0
[  245.885001][ T4173] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[  245.940433][ T4173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.968690][ T7366] loop1: detected capacity change from 0 to 164
[  246.005169][ T4173] usb 6-1: NFC: intf ffff88805ec29000 id ffffffff8cb63960
[  246.303331][ T7370] rock: directory entry would overflow storage
[  246.311153][ T7370] rock: sig=0x4f50, size=4, remaining=3
[  246.316963][ T7370] iso9660: Corrupted directory entry in block 5 of inode 1792
[  246.353076][ T4173] usb 6-1: USB disconnect, device number 9
[  246.506809][ T7373] loop3: detected capacity change from 0 to 1024
[  246.621894][ T7366] rock: directory entry would overflow storage
[  246.628896][ T7366] rock: sig=0x4f50, size=4, remaining=3
[  246.634689][ T7366] iso9660: Corrupted directory entry in block 5 of inode 1792
[  246.691228][ T7373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  246.713249][ T7373] UDF-fs: error (device loop3): udf_read_inode: (ino 832) failed !bh
[  246.722350][ T7373] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=48, partition=0
[  247.560295][ T7398] loop5: detected capacity change from 0 to 512
[  247.657142][ T7398] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  247.683681][ T7398] EXT4-fs (loop5): invalid journal inode
[  247.701607][ T7398] EXT4-fs (loop5): can't get journal size
[  247.778710][ T7398] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #2: comm syz.5.642: blocks 4-4 from inode overlap system zone
[  247.839663][ T7398] EXT4-fs (loop5): failed to initialize system zone (-117)
[  247.864423][ T7398] EXT4-fs (loop5): mount failed
[  248.993628][ T7411] loop5: detected capacity change from 0 to 512
[  249.946593][ T7411] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.644: bg 0: block 5: invalid block bitmap
[  249.997463][ T7411] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  250.012190][ T7429] loop1: detected capacity change from 0 to 128
[  250.034678][ T7411] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.644: invalid indirect mapped block 3 (level 2)
[  250.076284][ T7429] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  250.101799][ T7411] EXT4-fs (loop5): 1 orphan inode deleted
[  250.120399][ T7429] hpfs: filesystem error: improperly stopped
[  250.134330][ T7411] EXT4-fs (loop5): 1 truncate cleaned up
[  250.146794][ T7429] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  250.168128][ T7411] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback.
[  250.180684][ T7429] hpfs: You really don't want any checks? You are crazy...
[  250.204121][ T7429] hpfs: Code page index out of array
[  250.221963][ T7429] hpfs: code page support is disabled
[  250.241056][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.644'.
[  250.246703][ T7429] hpfs: hpfs_map_4sectors(): unaligned read
[  250.277057][ T7429] hpfs: hpfs_map_4sectors(): unaligned read
[  250.282805][ T7432] ip_tables: iptables: counters copy to user failed while replacing table
[  250.283501][ T7429] hpfs: filesystem error: unable to find root dir
[  250.657226][ T7454] loop1: detected capacity change from 0 to 136
[  250.824959][ T7459] netlink: 60 bytes leftover after parsing attributes in process `syz.8.652'.
[  250.846932][ T7454] rock: directory entry would overflow storage
[  250.873821][ T7454] rock: sig=0x4f50, size=4, remaining=3
[  250.914398][ T7454] iso9660: Corrupted directory entry in block 2 of inode 1472
[  250.935539][ T7427] loop3: detected capacity change from 0 to 32768
[  251.061630][ T7427] XFS (loop3): Mounting V5 Filesystem
[  251.074178][ T4229] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  251.195650][ T7427] XFS (loop3): Ending clean mount
[  251.210407][ T7427] XFS (loop3): Quotacheck needed: Please wait.
[  251.355814][ T7427] XFS (loop3): Quotacheck: Done.
[  251.452149][ T4197] XFS (loop3): Unmounting Filesystem
[  251.495246][ T4229] usb 6-1: unable to get BOS descriptor or descriptor too short
[  251.566803][ T4229] usb 6-1: not running at top speed; connect to a high speed hub
[  251.662834][ T4229] usb 6-1: config 1 has an invalid interface number: 81 but max is 0
[  251.666578][ T7483] loop8: detected capacity change from 0 to 8192
[  251.684212][ T4229] usb 6-1: config 1 has no interface number 0
[  251.690664][ T4229] usb 6-1: config 1 interface 81 altsetting 215 endpoint 0x7 has invalid wMaxPacketSize 0
[  251.707111][ T4229] usb 6-1: config 1 interface 81 has no altsetting 0
[  251.740637][ T7483] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal
[  251.765571][ T7483] REISERFS (device loop8): using ordered data mode
[  251.773204][ T7483] reiserfs: using flush barriers
[  251.784972][ T7483] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  251.794189][ T6067] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  251.802052][ T7483] REISERFS (device loop8): checking transaction log (loop8)
[  251.904195][ T4229] usb 6-1: New USB device found, idVendor=0499, idProduct=7862, bcdDevice=3b.d1
[  251.934365][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.943365][ T4229] usb 6-1: Product: syz
[  251.968562][ T4229] usb 6-1: Manufacturer: syz
[  251.978690][ T4229] usb 6-1: SerialNumber: syz
[  252.158982][ T7483] REISERFS (device loop8): Using tea hash to sort names
[  252.189989][ T7483] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage.
[  252.272578][ T7458] device veth2 entered promiscuous mode
[  252.302325][ T7483] netlink: 'syz.8.655': attribute type 3 has an invalid length.
[  252.314197][ T7224] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  252.327365][ T7483] netlink: 'syz.8.655': attribute type 2 has an invalid length.
[  252.364175][ T6067] usb 2-1: Using ep0 maxpacket: 16
[  252.574272][ T7224] usb 4-1: Using ep0 maxpacket: 8
[  252.695405][ T7224] usb 4-1: config 5 has an invalid interface number: 54 but max is 0
[  252.851445][ T7224] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  253.041341][ T7224] usb 4-1: config 5 has no interface number 0
[  253.082423][ T4318] udevd[4318]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.81/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  253.102104][ T4229] usb 6-1: USB disconnect, device number 10
[  253.134371][ T7224] usb 4-1: config 5 interface 54 has no altsetting 0
[  253.214294][ T6067] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.246178][ T6067] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.276213][ T6067] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  253.314212][ T6067] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  253.323432][ T6067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.353726][ T6067] usb 2-1: config 0 descriptor??
[  253.359038][ T7224] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 9.3a
[  253.398381][ T6067] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17
[  253.424116][ T7224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.432261][ T7224] usb 4-1: Product: syz
[  253.447591][ T3541] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  253.454409][ T7224] usb 4-1: Manufacturer: syz
[  253.480813][ T7224] usb 4-1: SerialNumber: syz
[  253.529743][ T3541] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  253.588473][ T3541] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  253.619055][ T3541] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  253.699133][ T4426] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  253.743788][ T3541] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  253.778496][ T3541] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  253.845143][ T7224] cdc_ether 4-1:5.54: skipping garbage
[  253.845394][ T7524] loop8: detected capacity change from 0 to 8192
[  253.850749][ T7224] cdc_ether 4-1:5.54: More than one union descriptor, skipping ...
[  253.850766][ T7224] cdc_ether 4-1:5.54: skipping garbage
[  253.850781][ T7224] usb 4-1: bad CDC descriptors
[  253.851127][ T7224] usb 4-1: unsupported MDLM descriptors
[  253.864392][ T3541] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  253.891392][ T7224] cdc_acm 4-1:5.54: skipping garbage
[  253.901177][ T7224] cdc_acm 4-1:5.54: More than one union descriptor, skipping ...
[  253.929839][ T7224] cdc_acm 4-1:5.54: skipping garbage
[  253.967352][ T7524] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal
[  254.008459][ T7224] usb 4-1: USB disconnect, device number 23
[  254.024180][ T7524] REISERFS (device loop8): using ordered data mode
[  254.037208][ T7524] reiserfs: using flush barriers
[  254.091594][ T7524] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  254.141373][ T6067] usb 2-1: USB disconnect, device number 13
[  254.195025][ T7524] REISERFS (device loop8): checking transaction log (loop8)
[  254.531946][ T7524] REISERFS (device loop8): Using tea hash to sort names
[  254.559870][ T7524] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage.
[  254.722518][ T7520] loop5: detected capacity change from 0 to 40427
[  254.785015][ T7527] tipc: Started in network mode
[  254.790265][ T7527] tipc: Node identity 2e7766554433221100ffeeddccbbaa99, cluster identity 4711
[  254.848764][ T7520] F2FS-fs (loop5): invalid crc value
[  254.898128][ T7520] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  255.165692][ T4242] tipc: Left network mode
[  255.341067][ T7565] FAULT_INJECTION: forcing a failure.
[  255.341067][ T7565] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  255.424392][ T7565] CPU: 0 PID: 7565 Comm: syz.6.669 Not tainted syzkaller #0
[  255.432029][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  255.442502][ T7565] Call Trace:
[  255.445814][ T7565]  <TASK>
[  255.448946][ T7565]  dump_stack_lvl+0x188/0x250
[  255.453659][ T7565]  ? show_regs_print_info+0x20/0x20
[  255.459102][ T7565]  ? load_image+0x410/0x410
[  255.463919][ T7565]  ? __lock_acquire+0x7d40/0x7d40
[  255.469562][ T7565]  should_fail+0x383/0x4b0
[  255.474128][ T7565]  strncpy_from_user+0x32/0x350
[  255.479107][ T7565]  getname_flags+0xf2/0x4f0
[  255.481820][ T7520] F2FS-fs (loop5): Start checkpoint disabled!
[  255.483706][ T7565]  user_path_at_empty+0x2a/0x190
[  255.483741][ T7565]  do_utimes+0x12e/0x2a0
[  255.483765][ T7565]  ? vfs_utimes+0x5b0/0x5b0
[  255.483792][ T7565]  __x64_sys_utimes+0x159/0x250
[  255.508977][ T7565]  ? __ia32_sys_futimesat+0x270/0x270
[  255.514811][ T7565]  ? lock_chain_count+0x20/0x20
[  255.520232][ T7565]  ? __secure_computing+0x10d/0x2f0
[  255.525664][ T7565]  do_syscall_64+0x4c/0xa0
[  255.530567][ T7565]  ? clear_bhb_loop+0x30/0x80
[  255.531872][ T7520] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e7
[  255.535371][ T7565]  ? clear_bhb_loop+0x30/0x80
[  255.535402][ T7565]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  255.535424][ T7565] RIP: 0033:0x7f770fc8f159
[  255.558501][ T7565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.580796][ T7565] RSP: 002b:00007f770dee7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb
[  255.589440][ T7565] RAX: ffffffffffffffda RBX: 00007f770ff16fa0 RCX: 00007f770fc8f159
[  255.597626][ T7565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  255.606235][ T7565] RBP: 00007f770dee7090 R08: 0000000000000000 R09: 0000000000000000
[  255.614328][ T7565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.622524][ T7565] R13: 00007f770ff17038 R14: 00007f770ff16fa0 R15: 00007fffb2ab9818
[  255.631557][ T7565]  </TASK>
[  255.875586][ T1430] ieee802154 phy0 wpan0: encryption failed: -22
[  256.832166][ T7580] loop3: detected capacity change from 0 to 4096
[  256.874921][ T7580] ntfs3: Unknown parameter '0177777777777777777777700000000000000000000003'
[  256.933945][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.671'.
[  257.009048][ T7597] loop6: detected capacity change from 0 to 64
[  257.062983][ T7597] hfs: unable to parse mount options
[  257.273369][  T144] handle_bad_sector: 1514 callbacks suppressed
[  257.273390][  T144] attempt to access beyond end of device
[  257.273390][  T144] loop5: rw=2049, want=45104, limit=40427
[  257.385908][ T4230] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  257.408507][ T7608] loop6: detected capacity change from 0 to 1024
[  257.490118][ T7608] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  257.594425][ T4230] usb 4-1: device descriptor read/64, error -71
[  257.896283][ T4230] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  258.030585][ T7623] loop5: detected capacity change from 0 to 1024
[  258.092118][ T7623] EXT4-fs (loop5): Ignoring removed bh option
[  258.114446][ T4230] usb 4-1: device descriptor read/64, error -71
[  258.121609][ T7623] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  258.261046][ T7623] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,noblock_validity,nobarrier,journal_ioprio=0x0000000000000005,abort,bh,init_itable,,errors=continue. Quota mode: none.
[  258.292898][ T4230] usb usb4-port1: attempt power cycle
[  258.519980][ T7623] EXT4-fs error (device loop5): ext4_remount:6062: comm syz.5.680: Abort forced by user
[  258.562508][ T7623] EXT4-fs (loop5): Remounting filesystem read-only
[  259.252950][ T7623] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: none.
[  259.414164][ T4230] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  259.524523][ T4230] usb 4-1: device descriptor read/8, error -71
[  259.601539][ T7615] loop6: detected capacity change from 0 to 40427
[  259.645258][ T7659] comedi comedi1: 8255: I/O port conflict (0x4,4)
[  259.654612][ T7659] comedi comedi1: 8255: I/O port conflict (0x5,4)
[  259.661412][ T7659] comedi comedi1: 8255: I/O port conflict (0x4,4)
[  259.668382][ T7659] comedi comedi1: 8255: I/O port conflict (0x20,4)
[  259.675376][ T7659] comedi comedi1: 8255: I/O port conflict (0x14000000,4)
[  259.682606][ T7659] comedi comedi1: 8255: I/O port conflict (0x20,4)
[  259.689234][ T7659] comedi comedi1: 8255: I/O port conflict (0x3,4)
[  259.696090][ T7659] comedi comedi1: 8255: I/O port conflict (0x8,4)
[  259.702620][ T7659] comedi comedi1: 8255: I/O port conflict (0x8,4)
[  259.709805][ T7659] comedi comedi1: 8255: I/O port conflict (0xcf7,4)
[  259.716724][ T7659] comedi comedi1: 8255: I/O port conflict (0x2,4)
[  259.723466][ T7659] comedi comedi1: 8255: I/O port conflict (0x13,4)
[  259.730253][ T7659] comedi comedi1: 8255: I/O port conflict (0x4000bd55,4)
[  259.738295][ T7659] comedi comedi1: 8255: I/O port conflict (0x3,4)
[  259.744880][ T7659] comedi comedi1: 8255: I/O port conflict (0x6,4)
[  259.751847][ T7659] comedi comedi1: 8255: I/O port conflict (0x3ff,4)
[  259.758598][ T7659] comedi comedi1: 8255: I/O port conflict (0xa,4)
[  259.765120][ T7659] comedi comedi1: 8255: I/O port conflict (0x7fffffff,4)
[  259.772844][ T7659] comedi comedi1: 8255: I/O port conflict (0x2,4)
[  259.779373][ T7659] comedi comedi1: 8255: I/O port conflict (0x1,4)
[  259.785897][ T7659] comedi comedi1: 8255: I/O port conflict (0x4,4)
[  259.820087][ T7659] loop5: detected capacity change from 0 to 1024
[  259.834295][ T7615] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x1ffff
[  260.228600][ T7659] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.687: Invalid block bitmap block 0 in block_group 0
[  260.258032][ T7659] Quota error (device loop5): write_blk: dquota write failed
[  260.266124][ T7659] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  260.279507][ T7659] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.687: Failed to acquire dquot type 0
[  260.297307][ T7659] EXT4-fs error (device loop5): ext4_free_blocks:6231: comm syz.5.687: Freeing blocks not in datazone - block = 0, count = 4096
[  260.329237][ T7659] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.687: Invalid inode bitmap blk 0 in block_group 0
[  260.358790][  T154] Quota error (device loop5): remove_tree: Getting block too big (0 >= 8)
[  260.369271][ T7659] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem
[  260.379930][ T7659] EXT4-fs (loop5): 1 orphan inode deleted
[  260.386174][ T7659] EXT4-fs (loop5): mounted filesystem without journal. Opts: ��; ,errors=continue. Quota mode: writeback.
[  260.447319][ T7615] F2FS-fs (loop6): invalid crc value
[  260.474447][  T154] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0
[  260.537162][ T7615] F2FS-fs (loop6): Found nat_bits in checkpoint
[  260.654241][ T4173] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  260.662071][ T4230] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  260.747072][ T7615] F2FS-fs (loop6): Start checkpoint disabled!
[  260.836795][ T7673] block nbd1: shutting down sockets
[  260.934368][ T4230] usb 4-1: device not accepting address 27, error -71
[  260.967117][ T4230] usb usb4-port1: unable to enumerate USB device
[  261.094064][ T7675] loop5: detected capacity change from 0 to 2048
[  261.102379][ T7683] device pim6reg1 entered promiscuous mode
[  261.109391][ T4173] usb 9-1: unable to get BOS descriptor or descriptor too short
[  261.164419][ T4173] usb 9-1: not running at top speed; connect to a high speed hub
[  261.172874][ T4173] usb 9-1: too many configurations: 210, using maximum allowed: 8
[  261.253760][ T7683] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  261.330603][ T4173] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  261.344520][ T4173] usb 9-1: can't read configurations, error -22
[  261.530682][ T4173] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  262.005051][ T4173] usb 9-1: unable to get BOS descriptor or descriptor too short
[  262.134521][ T4173] usb 9-1: not running at top speed; connect to a high speed hub
[  262.311586][ T4173] usb 9-1: too many configurations: 210, using maximum allowed: 8
[  262.464442][ T4173] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  262.473062][ T4173] usb 9-1: can't read configurations, error -22
[  262.535352][ T4173] usb usb9-port1: attempt power cycle
[  262.704322][ T7714] loop3: detected capacity change from 0 to 1024
[  262.712241][ T7716] loop5: detected capacity change from 0 to 1024
[  262.723908][ T7720] binder: 7719:7720 ioctl 40089413 2000000002c0 returned -22
[  262.743582][ T7716] hfsplus: unable to parse mount options
[  262.771008][ T7721] binder: 7719:7721 ioctl 40089413 2000000002c0 returned -22
[  262.789847][ T7714] EXT4-fs (loop3): Ignoring removed bh option
[  262.821930][ T7721] binder_alloc: binder_alloc_mmap_handler: 7719 200000ffd000-200001000000 already mapped failed -16
[  262.838751][ T7714] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  262.871008][ T7720] binder: 7719:7720 ioctl c0306201 200000000300 returned -14
[  262.938350][ T7714] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,noblock_validity,nobarrier,journal_ioprio=0x0000000000000005,abort,bh,init_itable,,errors=continue. Quota mode: none.
[  262.966821][ T7727] netlink: 140 bytes leftover after parsing attributes in process `syz.5.701'.
[  262.984277][ T4173] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  263.074339][ T7714] EXT4-fs error (device loop3): ext4_remount:6062: comm syz.3.698: Abort forced by user
[  263.146984][ T7737] loop1: detected capacity change from 0 to 1024
[  263.195288][ T7714] EXT4-fs (loop3): Remounting filesystem read-only
[  263.234499][ T4173] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  263.289924][ T4173] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.311243][ T7742] loop6: detected capacity change from 0 to 1024
[  263.333402][ T7737] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  263.362936][ T7742] hfsplus: unable to parse mount options
[  263.547379][ T7714] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: none.
[  263.609718][ T4173] usb 9-1: config 0 descriptor??
[  263.872554][ T4173] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  264.744024][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  264.764015][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  264.774016][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  264.784016][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  264.794016][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  264.804014][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  264.814014][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  264.824015][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  264.834018][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  266.392141][ T7708] loop8: detected capacity change from 0 to 1024
[  267.525014][ T7737] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback.
[  267.554476][ T4173] usb 9-1: USB disconnect, device number 4
[  267.646195][ T7758] FAULT_INJECTION: forcing a failure.
[  267.646195][ T7758] name failslab, interval 1, probability 0, space 0, times 0
[  267.734191][ T7758] CPU: 0 PID: 7758 Comm: syz.5.709 Not tainted syzkaller #0
[  267.741999][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  267.752390][ T7758] Call Trace:
[  267.755729][ T7758]  <TASK>
[  267.758706][ T7758]  dump_stack_lvl+0x188/0x250
[  267.763441][ T7758]  ? show_regs_print_info+0x20/0x20
[  267.768696][ T7758]  ? load_image+0x410/0x410
[  267.773499][ T7758]  ? __might_sleep+0xf0/0xf0
[  267.778483][ T7758]  ? __lock_acquire+0x7d40/0x7d40
[  267.783531][ T7758]  should_fail+0x383/0x4b0
[  267.788000][ T7758]  should_failslab+0x5/0x20
[  267.792499][ T7758]  slab_pre_alloc_hook+0x51/0xc0
[  267.797444][ T7758]  __kmalloc_node+0x6d/0x3a0
[  267.802026][ T7758]  ? memcg_alloc_page_obj_cgroups+0x7d/0x120
[  267.807998][ T7758]  ? mod_objcg_mlstate+0x2e0/0x2e0
[  267.813116][ T7758]  memcg_alloc_page_obj_cgroups+0x7d/0x120
[  267.819030][ T7758]  slab_post_alloc_hook+0xba/0x380
[  267.824325][ T7758]  __kmalloc_node+0x1ae/0x3a0
[  267.829377][ T7758]  ? kvmalloc_node+0x84/0x130
[  267.834086][ T7758]  kvmalloc_node+0x84/0x130
[  267.838735][ T7758]  seq_read_iter+0x1de/0xc50
[  267.843474][ T7758]  seq_read+0x3dc/0x4f0
[  267.847889][ T7758]  ? seq_open+0x130/0x130
[  267.852404][ T7758]  ? common_file_perm+0x171/0x1c0
[  267.857450][ T7758]  ? fsnotify_perm+0x254/0x560
[  267.862311][ T7758]  ? seq_open+0x130/0x130
[  267.866786][ T7758]  vfs_read+0x2ff/0xd50
[  267.871042][ T7758]  ? __lock_acquire+0x7d40/0x7d40
[  267.876073][ T7758]  ? kernel_read+0x1e0/0x1e0
[  267.880693][ T7758]  ? mutex_lock_nested+0x17/0x20
[  267.886680][ T7758]  ? __fdget_pos+0x2bf/0x370
[  267.891486][ T7758]  ? ksys_read+0x70/0x260
[  267.896026][ T7758]  ksys_read+0x153/0x260
[  267.900533][ T7758]  ? vfs_write+0xd70/0xd70
[  267.905437][ T7758]  ? lockdep_hardirqs_on+0x94/0x140
[  267.911014][ T7758]  do_syscall_64+0x4c/0xa0
[  267.915434][ T7758]  ? clear_bhb_loop+0x30/0x80
[  267.920311][ T7758]  ? clear_bhb_loop+0x30/0x80
[  267.925480][ T7758]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  267.931385][ T7758] RIP: 0033:0x7fa83d96d159
[  267.935806][ T7758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  267.956268][ T7758] RSP: 002b:00007fa83bbc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  267.965118][ T7758] RAX: ffffffffffffffda RBX: 00007fa83dbf4fa0 RCX: 00007fa83d96d159
[  267.973194][ T7758] RDX: 0000000000001000 RSI: 0000200000000180 RDI: 0000000000000003
[  267.982179][ T7758] RBP: 00007fa83bbc5090 R08: 0000000000000000 R09: 0000000000000000
[  267.991670][ T7758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  267.999938][ T7758] R13: 00007fa83dbf5038 R14: 00007fa83dbf4fa0 R15: 00007ffe564ee328
[  268.008513][ T7758]  </TASK>
[  268.111094][ T7770] loop6: detected capacity change from 0 to 2048
[  268.273966][ T7770] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  268.305339][ T7770] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.354216][ T7223] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  268.509580][ T7784] netlink: 104 bytes leftover after parsing attributes in process `syz.5.715'.
[  268.794105][ T7223] usb 4-1: Using ep0 maxpacket: 8
[  269.684730][ T7804] loop5: detected capacity change from 0 to 8192
[  269.704638][ T7223] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  269.757440][ T7223] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  269.779585][ T7223] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  269.799210][ T7804] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  269.849946][ T7804] REISERFS (device loop5): using ordered data mode
[  269.856996][ T7223] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  269.880808][ T7804] reiserfs: using flush barriers
[  269.896878][ T7223] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  269.914339][ T7804] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  269.990535][ T7223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.029843][ T7804] REISERFS (device loop5): checking transaction log (loop5)
[  270.274239][ T7223] usb 4-1: GET_CAPABILITIES returned 0
[  270.280256][ T7223] usbtmc 4-1:16.0: can't read capabilities
[  270.431123][ T7815] loop6: detected capacity change from 0 to 32768
[  270.503924][ T7223] usb 4-1: USB disconnect, device number 28
[  270.517458][ T7815] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.721 (7815)
[  270.563433][ T7804] REISERFS (device loop5): Using tea hash to sort names
[  270.591677][ T7804] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  270.610502][ T7815] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  270.621630][ T7815] BTRFS info (device loop6): using free space tree
[  270.629756][ T7815] BTRFS info (device loop6): has skinny extents
[  270.690007][ T7804] overlayfs: './file0' not a directory
[  271.014343][ T7815] BTRFS info (device loop6): enabling ssd optimizations
[  272.584755][ T7858] syz.6.721 (7858): drop_caches: 2
[  273.232351][ T7891] zram0: detected capacity change from 0 to 8
[  273.379428][ T7891] loop3: detected capacity change from 0 to 512
[  273.501675][ T7891] EXT4-fs (loop3): Unrecognized mount option "dont_hash" or missing value
[  276.440644][ T7926] FAULT_INJECTION: forcing a failure.
[  276.440644][ T7926] name failslab, interval 1, probability 0, space 0, times 0
[  276.454901][ T7926] CPU: 1 PID: 7926 Comm: syz.3.743 Not tainted syzkaller #0
[  276.462498][ T7926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  276.473787][ T7926] Call Trace:
[  276.477280][ T7926]  <TASK>
[  276.480234][ T7926]  dump_stack_lvl+0x188/0x250
[  276.484960][ T7926]  ? show_regs_print_info+0x20/0x20
[  276.490777][ T7926]  ? load_image+0x410/0x410
[  276.495597][ T7926]  ? __lock_acquire+0x7d40/0x7d40
[  276.500858][ T7926]  should_fail+0x383/0x4b0
[  276.505403][ T7926]  should_failslab+0x5/0x20
[  276.510113][ T7926]  slab_pre_alloc_hook+0x51/0xc0
[  276.515162][ T7926]  ? fanotify_add_mark+0x411/0xd30
[  276.520297][ T7926]  kmem_cache_alloc+0x3d/0x280
[  276.525103][ T7926]  fanotify_add_mark+0x411/0xd30
[  276.530450][ T7926]  ? fanotify_events_supported+0x1d7/0x2f0
[  276.536793][ T7926]  do_fanotify_mark+0xc4a/0xda0
[  276.541687][ T7926]  ? copy_fid_info_to_user+0x670/0x670
[  276.547430][ T7926]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  276.553539][ T7926]  ? lock_chain_count+0x20/0x20
[  276.558472][ T7926]  __x64_sys_fanotify_mark+0xb1/0xc0
[  276.563802][ T7926]  do_syscall_64+0x4c/0xa0
[  276.568250][ T7926]  ? clear_bhb_loop+0x30/0x80
[  276.572954][ T7926]  ? clear_bhb_loop+0x30/0x80
[  276.577663][ T7926]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  276.583591][ T7926] RIP: 0033:0x7f155f03c159
[  276.588032][ T7926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  276.607931][ T7926] RSP: 002b:00007f155d273028 EFLAGS: 00000246 ORIG_RAX: 000000000000012d
[  276.616858][ T7926] RAX: ffffffffffffffda RBX: 00007f155f2c4090 RCX: 00007f155f03c159
[  276.625611][ T7926] RDX: 0000000040009965 RSI: 0000000000000105 RDI: 0000000000000006
[  276.634776][ T7926] RBP: 00007f155d273090 R08: 0000000000000000 R09: 0000000000000000
[  276.644004][ T7926] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001
[  276.652036][ T7926] R13: 00007f155f2c4128 R14: 00007f155f2c4090 R15: 00007ffd8b666428
[  276.660485][ T7926]  </TASK>
[  277.375816][ T7935] loop1: detected capacity change from 0 to 1024
[  277.990598][ T7935] EXT4-fs (loop1): Ignoring removed bh option
[  278.125022][ T7935] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  278.182507][ T7951] loop6: detected capacity change from 0 to 512
[  278.341570][ T7951] EXT4-fs (loop6): Ignoring removed orlov option
[  278.348369][ T7951] EXT4-fs (loop6): journaled quota format not specified
[  278.419111][ T7952] netlink: 'syz.6.748': attribute type 4 has an invalid length.
[  278.896286][ T7935] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,noblock_validity,nobarrier,journal_ioprio=0x0000000000000005,abort,bh,init_itable,,errors=continue. Quota mode: none.
[  278.948510][ T7935] EXT4-fs error (device loop1): ext4_remount:6062: comm syz.1.744: Abort forced by user
[  278.978017][ T7967] device vlan2 entered promiscuous mode
[  279.007834][ T7935] EXT4-fs (loop1): Remounting filesystem read-only
[  279.086778][ T7967] device bridge0 entered promiscuous mode
[  279.093037][ T7935] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none.
[  279.121304][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  279.323030][ T7969] loop6: detected capacity change from 0 to 2048
[  279.844118][ T7221] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  279.865895][ T8005] loop1: detected capacity change from 0 to 1024
[  279.933107][ T8005] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,init_itable=0x00000000000000c5,,errors=continue. Quota mode: none.
[  279.988356][ T7220] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  280.187023][ T7221] usb 6-1: Using ep0 maxpacket: 32
[  280.242021][ T8005] ==================================================================
[  280.242131][ T8005] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x580/0xda0
[  280.242163][ T8005] Read of size 256 at addr ffff888060e98760 by task syz.1.761/8005
[  280.242182][ T8005] 
[  280.242190][ T8005] CPU: 1 PID: 8005 Comm: syz.1.761 Not tainted syzkaller #0
[  280.242210][ T8005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  280.242222][ T8005] Call Trace:
[  280.242230][ T8005]  <TASK>
[  280.242240][ T8005]  dump_stack_lvl+0x188/0x250
[  280.242268][ T8005]  ? show_regs_print_info+0x20/0x20
[  280.242288][ T8005]  ? _printk+0xda/0x130
[  280.242316][ T8005]  ? load_image+0x410/0x410
[  280.242335][ T8005]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  280.242369][ T8005]  print_address_description+0x60/0x2d0
[  280.242395][ T8005]  ? fbcon_prepare_logo+0x580/0xda0
[  280.242415][ T8005]  kasan_report+0xdf/0x130
[  280.242441][ T8005]  ? fbcon_prepare_logo+0x580/0xda0
[  280.242467][ T8005]  kasan_check_range+0x235/0x290
[  280.242489][ T8005]  ? fbcon_prepare_logo+0x580/0xda0
[  280.242511][ T8005]  memcpy+0x25/0x60
[  280.242532][ T8005]  fbcon_prepare_logo+0x580/0xda0
[  280.242571][ T8005]  fbcon_init+0x12f1/0x2310
[  280.242612][ T8005]  visual_init+0x2dd/0x650
[  280.242640][ T8005]  do_bind_con_driver+0x859/0x1030
[  280.242680][ T8005]  store_bind+0x794/0xa20
[  280.242712][ T8005]  ? sysfs_kf_read+0x350/0x350
[  280.242731][ T8005]  kernfs_fop_write_iter+0x3a8/0x500
[  280.242762][ T8005]  vfs_write+0x748/0xd70
[  280.242794][ T8005]  ? file_end_write+0x250/0x250
[  280.242839][ T8005]  ? mutex_lock_nested+0x17/0x20
[  280.242858][ T8005]  ? __fdget_pos+0x2bf/0x370
[  280.242878][ T8005]  ? ksys_write+0x70/0x260
[  280.242902][ T8005]  ksys_write+0x153/0x260
[  280.242926][ T8005]  ? __ia32_sys_read+0x80/0x80
[  280.242953][ T8005]  ? lockdep_hardirqs_on+0x94/0x140
[  280.242991][ T8005]  do_syscall_64+0x4c/0xa0
[  280.243011][ T8005]  ? clear_bhb_loop+0x30/0x80
[  280.243032][ T8005]  ? clear_bhb_loop+0x30/0x80
[  280.243057][ T8005]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  280.243081][ T8005] RIP: 0033:0x7f4f2f1b9159
[  280.243102][ T8005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.243121][ T8005] RSP: 002b:00007f4f2d411028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  280.243147][ T8005] RAX: ffffffffffffffda RBX: 00007f4f2f440fa0 RCX: 00007f4f2f1b9159
[  280.243163][ T8005] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005
[  280.243177][ T8005] RBP: 00007f4f2f25006b R08: 0000000000000000 R09: 0000000000000000
[  280.243191][ T8005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.243205][ T8005] R13: 00007f4f2f441038 R14: 00007f4f2f440fa0 R15: 00007fff8a56c258
[  280.243243][ T8005]  </TASK>
[  280.243251][ T8005] 
[  280.243257][ T8005] Allocated by task 7924:
[  280.243268][ T8005]  __kasan_kmalloc+0xaf/0xe0
[  280.243288][ T8005]  __alloc_skb+0x22c/0x750
[  280.243308][ T8005]  skb_copy+0x122/0x6f0
[  280.243327][ T8005]  mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0
[  280.243352][ T8005]  mac80211_hwsim_tx_frame+0x1b5/0x200
[  280.243370][ T8005]  mac80211_hwsim_beacon_tx+0x4d0/0x900
[  280.243388][ T8005]  __iterate_interfaces+0x225/0x4c0
[  280.243408][ T8005]  ieee80211_iterate_active_interfaces_atomic+0xb3/0x140
[  280.243430][ T8005]  mac80211_hwsim_beacon+0x9b/0x180
[  280.243451][ T8005]  __hrtimer_run_queues+0x4ea/0xb60
[  280.243472][ T8005]  hrtimer_run_softirq+0x176/0x240
[  280.243489][ T8005]  handle_softirqs+0x336/0x830
[  280.243507][ T8005]  __irq_exit_rcu+0x13b/0x230
[  280.243524][ T8005]  irq_exit_rcu+0x5/0x20
[  280.243541][ T8005]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  280.243563][ T8005]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  280.243585][ T8005] 
[  280.243591][ T8005] Freed by task 4311:
[  280.243600][ T8005]  kasan_set_track+0x4b/0x70
[  280.243619][ T8005]  kasan_set_free_info+0x1f/0x40
[  280.243639][ T8005]  ____kasan_slab_free+0xd5/0x110
[  280.243660][ T8005]  slab_free_freelist_hook+0xec/0x170
[  280.243679][ T8005]  kfree+0xef/0x2a0
[  280.243695][ T8005]  skb_release_data+0x667/0x830
[  280.243715][ T8005]  kfree_skb_reason+0xaf/0x110
[  280.243733][ T8005]  ieee80211_iface_work+0x781/0xc50
[  280.243755][ T8005]  cfg80211_wiphy_work+0x224/0x260
[  280.243776][ T8005]  process_one_work+0x867/0xff0
[  280.243795][ T8005]  worker_thread+0xad7/0x12a0
[  280.243814][ T8005]  kthread+0x42e/0x520
[  280.243831][ T8005]  ret_from_fork+0x1f/0x30
[  280.243850][ T8005] 
[  280.243855][ T8005] Last potentially related work creation:
[  280.243863][ T8005]  kasan_save_stack+0x35/0x60
[  280.243883][ T8005]  kasan_record_aux_stack+0xb8/0x100
[  280.243904][ T8005]  kvfree_call_rcu+0x105/0x7f0
[  280.243922][ T8005]  hash_ipportip6_add+0x1681/0x2240
[  280.243941][ T8005]  hash_ipportip6_uadt+0x812/0xa60
[  280.243959][ T8005]  call_ad+0x387/0x9a0
[  280.243986][ T8005]  ip_set_ad+0x816/0x9c0
[  280.243999][ T8005]  nfnetlink_rcv_msg+0xbf7/0x1180
[  280.244017][ T8005]  netlink_rcv_skb+0x1e9/0x430
[  280.244033][ T8005]  nfnetlink_rcv+0x2b4/0x2450
[  280.244049][ T8005]  netlink_unicast+0x78f/0x940
[  280.244067][ T8005]  netlink_sendmsg+0x8ba/0xbe0
[  280.244082][ T8005]  ____sys_sendmsg+0x5be/0x8f0
[  280.244118][ T8005]  ___sys_sendmsg+0x236/0x2e0
[  280.244134][ T8005]  __sys_sendmmsg+0x2ba/0x500
[  280.244152][ T8005]  __x64_sys_sendmmsg+0x9c/0xb0
[  280.244170][ T8005]  do_syscall_64+0x4c/0xa0
[  280.244187][ T8005]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  280.244208][ T8005] 
[  280.244214][ T8005] The buggy address belongs to the object at ffff888060e98400
[  280.244214][ T8005]  which belongs to the cache kmalloc-512 of size 512
[  280.244232][ T8005] The buggy address is located 352 bytes to the right of
[  280.244232][ T8005]  512-byte region [ffff888060e98400, ffff888060e98600)
[  280.244251][ T8005] The buggy address belongs to the page:
[  280.244260][ T8005] page:ffffea000183a600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60e98
[  280.244283][ T8005] head:ffffea000183a600 order:2 compound_mapcount:0 compound_pincount:0
[  280.244299][ T8005] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  280.244330][ T8005] raw: 00fff00000010200 0000000000000000 0000000b00000001 ffff888016c41c80
[  280.244348][ T8005] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  280.244359][ T8005] page dumped because: kasan: bad access detected
[  280.244369][ T8005] page_owner tracks the page as allocated
[  280.244377][ T8005] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4189, ts 65538756318, free_ts 65537977616
[  280.244408][ T8005]  get_page_from_freelist+0x24f6/0x2670
[  280.244430][ T8005]  __alloc_pages+0x1ee/0x480
[  280.244450][ T8005]  new_slab+0xc0/0x4b0
[  280.244465][ T8005]  ___slab_alloc+0x807/0xdd0
[  280.244481][ T8005]  kmem_cache_alloc_trace+0xf9/0x290
[  280.244499][ T8005]  device_add+0xb2/0x1050
[  280.244517][ T8005]  device_create+0x266/0x300
[  280.244535][ T8005]  macvtap_device_event+0x2ce/0x3f0
[  280.244554][ T8005]  raw_notifier_call_chain+0xcb/0x160
[  280.244573][ T8005]  register_netdevice+0x12a8/0x1720
[  280.244593][ T8005]  macvlan_common_newlink+0x1119/0x18a0
[  280.244611][ T8005]  macvtap_newlink+0x150/0x1d0
[  280.244630][ T8005]  rtnl_newlink+0x139e/0x1920
[  280.244649][ T8005]  rtnetlink_rcv_msg+0x7f1/0xf10
[  280.244670][ T8005]  netlink_rcv_skb+0x1e9/0x430
[  280.244686][ T8005]  netlink_unicast+0x78f/0x940
[  280.244707][ T8005] page last free stack trace:
[  280.244714][ T8005]  free_unref_page_prepare+0x637/0x6c0
[  280.244735][ T8005]  free_unref_page+0x8f/0x2a0
[  280.244753][ T8005]  stack_depot_save+0x42f/0x460
[  280.244770][ T8005]  kasan_set_track+0x62/0x70
[  280.244785][ T8005]  kasan_set_free_info+0x1f/0x40
[  280.244801][ T8005]  ____kasan_slab_free+0xd5/0x110
[  280.244818][ T8005]  slab_free_freelist_hook+0xec/0x170
[  280.244835][ T8005]  kfree+0xef/0x2a0
[  280.244848][ T8005]  kobject_uevent_env+0x36c/0x890
[  280.244864][ T8005]  netdev_queue_update_kobjects+0x1d7/0x3e0
[  280.244883][ T8005]  netdev_register_kobject+0x273/0x320
[  280.244902][ T8005]  register_netdevice+0x10e8/0x1720
[  280.244918][ T8005]  macvlan_common_newlink+0x1119/0x18a0
[  280.244937][ T8005]  macvtap_newlink+0x150/0x1d0
[  280.244955][ T8005]  rtnl_newlink+0x139e/0x1920
[  280.244983][ T8005]  rtnetlink_rcv_msg+0x7f1/0xf10
[  280.245004][ T8005] 
[  280.245010][ T8005] Memory state around the buggy address:
[  280.245021][ T8005]  ffff888060e98600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  280.245036][ T8005]  ffff888060e98680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  280.245050][ T8005] >ffff888060e98700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  280.245062][ T8005]                                                        ^
[  280.245074][ T8005]  ffff888060e98780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  280.245089][ T8005]  ffff888060e98800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  280.245100][ T8005] ==================================================================
[  280.245109][ T8005] Disabling lock debugging due to kernel taint
[  280.245213][ T8005] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  280.245223][ T8005] CPU: 1 PID: 8005 Comm: syz.1.761 Tainted: G    B             syzkaller #0
[  280.245241][ T8005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  280.245250][ T8005] Call Trace:
[  280.245255][ T8005]  <TASK>
[  280.245262][ T8005]  dump_stack_lvl+0x188/0x250
[  280.245283][ T8005]  ? show_regs_print_info+0x20/0x20
[  280.245301][ T8005]  ? load_image+0x410/0x410
[  280.245323][ T8005]  panic+0x2f8/0x850
[  280.245340][ T8005]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  280.245362][ T8005]  ? bpf_jit_dump+0xd0/0xd0
[  280.245379][ T8005]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  280.245399][ T8005]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  280.245419][ T8005]  ? _raw_spin_unlock+0x40/0x40
[  280.245438][ T8005]  ? fbcon_prepare_logo+0x580/0xda0
[  280.245455][ T8005]  check_panic_on_warn+0x80/0xa0
[  280.245474][ T8005]  ? fbcon_prepare_logo+0x580/0xda0
[  280.245493][ T8005]  end_report+0x6d/0xf0
[  280.245511][ T8005]  kasan_report+0x102/0x130
[  280.245529][ T8005]  ? fbcon_prepare_logo+0x580/0xda0
[  280.245549][ T8005]  kasan_check_range+0x235/0x290
[  280.245570][ T8005]  ? fbcon_prepare_logo+0x580/0xda0
[  280.245587][ T8005]  memcpy+0x25/0x60
[  280.245601][ T8005]  fbcon_prepare_logo+0x580/0xda0
[  280.245623][ T8005]  fbcon_init+0x12f1/0x2310
[  280.245642][ T8005]  visual_init+0x2dd/0x650
[  280.245660][ T8005]  do_bind_con_driver+0x859/0x1030
[  280.245684][ T8005]  store_bind+0x794/0xa20
[  280.245705][ T8005]  ? sysfs_kf_read+0x350/0x350
[  280.245720][ T8005]  kernfs_fop_write_iter+0x3a8/0x500
[  280.245743][ T8005]  vfs_write+0x748/0xd70
[  280.245762][ T8005]  ? file_end_write+0x250/0x250
[  280.245783][ T8005]  ? mutex_lock_nested+0x17/0x20
[  280.245799][ T8005]  ? __fdget_pos+0x2bf/0x370
[  280.245813][ T8005]  ? ksys_write+0x70/0x260
[  280.245829][ T8005]  ksys_write+0x153/0x260
[  280.245847][ T8005]  ? __ia32_sys_read+0x80/0x80
[  280.245863][ T8005]  ? lockdep_hardirqs_on+0x94/0x140
[  280.245883][ T8005]  do_syscall_64+0x4c/0xa0
[  280.245900][ T8005]  ? clear_bhb_loop+0x30/0x80
[  280.245917][ T8005]  ? clear_bhb_loop+0x30/0x80
[  280.245936][ T8005]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  280.245955][ T8005] RIP: 0033:0x7f4f2f1b9159
[  280.245980][ T8005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.245996][ T8005] RSP: 002b:00007f4f2d411028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  280.246016][ T8005] RAX: ffffffffffffffda RBX: 00007f4f2f440fa0 RCX: 00007f4f2f1b9159
[  280.246029][ T8005] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005
[  280.246041][ T8005] RBP: 00007f4f2f25006b R08: 0000000000000000 R09: 0000000000000000
[  280.246053][ T8005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.246064][ T8005] R13: 00007f4f2f441038 R14: 00007f4f2f440fa0 R15: 00007fff8a56c258
[  280.246083][ T8005]  </TASK>
[  280.246420][ T8005] Kernel Offset: disabled
[  281.459590][ T8005] Rebooting in 86400 seconds..