last executing test programs:

2m21.683683152s ago: executing program 0 (id=122):
socket(0x2, 0x80805, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x2, @empty}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000110000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)

2m21.404961602s ago: executing program 32 (id=123):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f0000001980)=[{&(0x7f0000000080)='?', 0x1}, {&(0x7f0000000840)="fa69ba99315edd3ff5f6f25ffe1d9b4027b19ed8ca20ade873aca16e7cc5a9e64f4bbf5e1d0a501a62741facbb27b4e0a8121913564706fc40b6ebba7aa21f68cccb8e46092e29445504fa9438ab851304fbd4f85f922bee8e3850cf83dbc6e8c40c68954cc21a285facc9a3ad1b7d45262f9ba7248b577fe4820700000000000000", 0x82}, {&(0x7f0000000940)="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", 0xf7e}], 0x3)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x20000008, 0x0)

2m21.361045294s ago: executing program 0 (id=125):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c '], 0xa)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

2m21.260640305s ago: executing program 0 (id=127):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

2m21.066302s ago: executing program 0 (id=128):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000080), 0x2, 0x55ae, &(0x7f000000ac40)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc400941b, &(0x7f0000000000)={0x1, 0x1400})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='pids.events\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0)

2m19.341215945s ago: executing program 0 (id=139):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0x200002e6)
fcntl$setpipe(r1, 0x407, 0x7000000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2m17.790561772s ago: executing program 0 (id=147):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=")
r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20)
fallocate(r0, 0x0, 0x0, 0x8800000)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
fallocate(r2, 0x20, 0x0, 0x8000)

2m17.765947518s ago: executing program 33 (id=147):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=")
r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20)
fallocate(r0, 0x0, 0x0, 0x8800000)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
fallocate(r2, 0x20, 0x0, 0x8000)

2m4.169831345s ago: executing program 5 (id=264):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0x1, 0xa1d, 0x6, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xc, 0x80, 0x0, 0xffff040e, 0x3, 0xe8, 0x4, 0x7, 0x5, 0xa5, 0x4, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1, 0x10, '\x00', 0x2, 0xfffffffffffffe01})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xfec00000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3c, 0x83}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {0xd000, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x2, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26}, {0x80a0000}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x40]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m3.848472127s ago: executing program 5 (id=267):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0)
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x50080, 0x10)
newfstatat(0xffffffffffffff9c, &(0x7f0000004980)='./file0\x00', 0x0, 0x1000)

2m3.65017705s ago: executing program 5 (id=270):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0485510, &(0x7f0000000100)={0x0, 0x1, 0x3, 0x4, &(0x7f00000000c0)=[{}]})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x204c884)
write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375)

2m3.233910165s ago: executing program 5 (id=274):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306)
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

2m2.608761171s ago: executing program 5 (id=281):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50)
r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
r3 = fanotify_init(0x0, 0x1000)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r3, 0x71, 0x101a, r4, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18)

2m2.286303392s ago: executing program 5 (id=283):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

2m2.147312956s ago: executing program 34 (id=283):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1m50.962026025s ago: executing program 7 (id=382):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(0x3)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"})
r2 = syz_open_pts(r1, 0x141601)
write(r2, &(0x7f0000000000)="d5", 0xb840c58f)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setstatus(r3, 0x4, 0x2800)
splice(r0, 0x0, r4, 0x0, 0x39000, 0x0)

1m49.997484739s ago: executing program 7 (id=388):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r1=>0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
pipe2(&(0x7f00000012c0), 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000006c0)=[0x1, 0x6, 0x0, 0x0])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1m49.654367926s ago: executing program 7 (id=395):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1eb)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18b980, 0x11c)
close_range(r0, 0xffffffffffffffff, 0x0)

1m49.474031023s ago: executing program 7 (id=397):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES8=r2], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

1m48.881316294s ago: executing program 7 (id=402):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000680)=ANY=[], 0x1, 0x18a, &(0x7f0000000380)="$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")
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000000280)=""/4096, 0x9005)

1m47.728868745s ago: executing program 7 (id=409):
r0 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000000)={0x2, 0x1, 0x1, 0x0, 'syz1\x00', 0x109a7})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x120}}, 0x0)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201008300000020532b240040000102030109026900030104007f080b0100010a20020904000000010120000924010700060900b209040100000102200009040101010102200009050109000206998008250101181e000009040200000102200009040201010102200009058204"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020)
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000000))

1m47.491442841s ago: executing program 35 (id=409):
r0 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000000)={0x2, 0x1, 0x1, 0x0, 'syz1\x00', 0x109a7})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x120}}, 0x0)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201008300000020532b240040000102030109026900030104007f080b0100010a20020904000000010120000924010700060900b209040100000102200009040101010102200009050109000206998008250101181e000009040200000102200009040201010102200009058204"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020)
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000000))

1m12.659705273s ago: executing program 6 (id=681):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100))
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2})
exit(0x2616)
close(0x3)

1m12.538548891s ago: executing program 8 (id=682):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, <r1=>0x0}, 0x2020)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_fuse_handle_req(r0, &(0x7f0000002140)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715be861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a420c35322f9cf8060550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x5, 0x2, 0x7, 0x8, 0x0, 0x0, {0x43, 0x3, 0x6, 0xffff, 0x1000, 0x80000000000000ff, 0x0, 0x0, 0x120, 0x2000, 0x10001, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x2, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000040))

1m12.462517617s ago: executing program 8 (id=683):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000280)=0x8)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup2(r0, r3)
sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000300)={0xa, 0x4e23, 0x570a81f2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000003c0)="3a0d883155d6", 0x6}], 0x1, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x148}, 0x4000050)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={r2}, 0x8)

1m12.404096096s ago: executing program 8 (id=684):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r1=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r2})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x1, 0x4}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000)

1m12.345731156s ago: executing program 8 (id=685):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x400a8, 0x0, 0x5, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0/file0/../file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, 0x0)

1m12.226724053s ago: executing program 8 (id=687):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x1}}, 0x30)
fchdir(0xffffffffffffffff)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = epoll_create(0xb213)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0000000})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000280)={0x2000000})

1m12.034645079s ago: executing program 8 (id=688):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x700000c, 0x11, r0, 0x100000000)

1m11.888289522s ago: executing program 36 (id=688):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x700000c, 0x11, r0, 0x100000000)

1m11.737422164s ago: executing program 6 (id=691):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000740)=[@decrefs, @release], 0x0, 0x0, 0x0})

1m11.563980443s ago: executing program 6 (id=692):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400000000fbdbdf2500000008", @ANYRES32=r1, @ANYBLOB="8a450200000000001c00128009000100626f6e64000000000c00028005000d0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500000000", @ANYRES32=r5, @ANYBLOB="00030000800000000a0001"], 0x2c}}, 0x884)

1m11.278519241s ago: executing program 6 (id=693):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002})

1m10.623454421s ago: executing program 6 (id=700):
r0 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0)
r4 = fanotify_init(0x8, 0x1)
fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0)
close(0x3)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e0)
write$binfmt_misc(r2, &(0x7f00000006c0)="0c95e038", 0x4)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

1m8.993510894s ago: executing program 6 (id=707):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
fanotify_init(0x10, 0x1000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000)
setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)

1m8.760056321s ago: executing program 37 (id=707):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
fanotify_init(0x10, 0x1000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000)
setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)

4.833480952s ago: executing program 1 (id=1202):
socket(0x2, 0x2, 0x1)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0)

4.722798632s ago: executing program 1 (id=1203):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa0}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0", 0x5}], 0x1}}], 0x2, 0x2090)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='nv', 0x2)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/4111, 0x100f, 0x1, 0x0}, &(0x7f0000000180)=0x40)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

4.451827422s ago: executing program 2 (id=1205):
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x64180, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000)
sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x15}, @remote}}}], 0x20}}, {{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @multicast1}}}], 0x20}}], 0x2, 0x4000800)
sendto$packet(r0, 0x0, 0x0, 0x40, &(0x7f00000000c0)={0x11, 0x1, r4, 0x1, 0x94, 0x6, @broadcast}, 0x14)

4.131753544s ago: executing program 3 (id=1210):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000280)=[{r1, 0xd142}], 0x1, 0x0, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

3.262106175s ago: executing program 9 (id=1211):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

3.260806875s ago: executing program 1 (id=1221):
r0 = fanotify_init(0x200, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0)
shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newsa={0x150, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x6}, {@in=@loopback, 0x4d4, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x2}, {0x0, 0x0, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x1, 0x4}, {0xf6}, 0x70bd26, 0x0, 0xa, 0x1, 0x9}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x60, "5d5c0fe2d35eb7cbf26b5c606d741a6759ecb6"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="77548c3970d0a797f17978aacb6ca5f10bf126213e71f547243d991fe063e7eac3de46034418f5b496bce2ac722e787846e0d6fd009f0e627840651f1c283c3d075cb19444f34af28b0bcaed3f73fd7ae6d294ea01d0b06e71536e1536e81534fcb2acc4b2047e9d15bc005e19c2bbedf2eb2c2b5e0cc8cc502ec0d815dea75b4b5e7633c6a44f756466fe400e51edb15acad1477df004e9f8e810c889a300de2339845258274b1e06e17f0f975b7034d8c5c60f5f4058905404d710d0d0371be40626099abe", 0xc6, 0xfffffffffffffff8)
r3 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00')
read$eventfd(r3, &(0x7f0000000280), 0x8)

3.254924754s ago: executing program 2 (id=1212):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef)

3.18005293s ago: executing program 1 (id=1213):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x84, 0x2c, 0xca7, 0x70bd25, 0x400000, {0x0, 0x0, 0x0, 0x0, {0x4, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0xd, 0xa, 0x9, 0xfb, 0x80, 0x1000, 0x5, 0x0, [{0x7ff, 0x6, 0x1, 0x6}, {0x1ff, 0x7, 0xdac, 0x40}, {0x2, 0x7, 0x4, 0x3}, {0xfffffffb, 0x9, 0x9}]}}]}}]}, 0x84}}, 0x20040054)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17)

3.01864935s ago: executing program 2 (id=1215):
r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0)
ftruncate(r0, 0x8800000)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = io_uring_setup(0x4822, &(0x7f00000005c0)={0x0, 0x4362, 0x1000, 0x1, 0xfb})
close_range(r2, 0xffffffffffffffff, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58)
r3 = accept$alg(r1, 0x0, 0x0)
r4 = dup3(r3, r1, 0x0)
sendmsg$inet(r3, 0x0, 0x4090)
sendfile(r4, r0, 0x0, 0x1000009)

2.974844803s ago: executing program 9 (id=1217):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cc, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x880, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0x5)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})

2.803483981s ago: executing program 9 (id=1218):
mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1)
r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x718bb647156ec3b7)
chdir(&(0x7f0000000000)='./bus\x00')
linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000)
open(&(0x7f0000000140)='./file0\x00', 0x8040, 0x30)

2.749196941s ago: executing program 3 (id=1220):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="89f7ee0c7cdad9b4b47380c988cafb141949ac460295b2a668902c6e60b7796316c6c94121c48b58c7271a4dd235ed15dad0344f29b2f8473204c1", 0x3b}], 0x1)

2.648963843s ago: executing program 4 (id=1222):
syz_read_part_table(0x5bf, &(0x7f0000000280)="$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")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@barrier_val={'barrier', 0x3d, 0x6}}, {}, {@dioread_nolock}, {@resuid}, {@resuid}, {@noload}, {@noauto_da_alloc}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8fffb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20)
r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x400, 0x0, 0x1, 0x0, 0x0)
fallocate(r1, 0x20, 0x4000, 0xa000000)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x44, &(0x7f0000006800)=ANY=[], 0xfe, 0x67b, &(0x7f0000006180)="$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")

2.433865734s ago: executing program 4 (id=1223):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

2.433291764s ago: executing program 9 (id=1233):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0)
rmdir(&(0x7f0000000280)='./file1\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
link(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='./bus\x00')

2.432852154s ago: executing program 3 (id=1224):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab})
socket(0x28, 0x5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000040)

2.35415494s ago: executing program 9 (id=1225):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d", 0xf}, {&(0x7f0000000680)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d271d30d1a5fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635", 0xb6}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857", 0xda}], 0x1}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)

2.351099509s ago: executing program 3 (id=1226):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r2, <r3=>0x0})
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000080)={r3})
mmap(&(0x7f0000002000/0x3000)=nil, 0x3020, 0x1000004, 0x13, r4, 0x100000000)
r5 = dup(r0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

1.472644639s ago: executing program 4 (id=1227):
r0 = fanotify_init(0x200, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0)
shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newsa={0x150, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x6}, {@in=@loopback, 0x4d4, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x2}, {0x0, 0x0, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x1, 0x4}, {0xf6}, 0x70bd26, 0x0, 0xa, 0x1, 0x9}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x60, "5d5c0fe2d35eb7cbf26b5c606d741a6759ecb6"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="77548c3970d0a797f17978aacb6ca5f10bf126213e71f547243d991fe063e7eac3de46034418f5b496bce2ac722e787846e0d6fd009f0e627840651f1c283c3d075cb19444f34af28b0bcaed3f73fd7ae6d294ea01d0b06e71536e1536e81534fcb2acc4b2047e9d15bc005e19c2bbedf2eb2c2b5e0cc8cc502ec0d815dea75b4b5e7633c6a44f756466fe400e51edb15acad1477df004e9f8e810c889a300de2339845258274b1e06e17f0f975b7034d8c5c60f5f4058905404d710d0d0371be40626099abe", 0xc6, 0xfffffffffffffff8)
r3 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00')
read$eventfd(r3, &(0x7f0000000280), 0x8)

1.471660648s ago: executing program 1 (id=1228):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000380)='Q', 0x1}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0x31}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.328827502s ago: executing program 2 (id=1229):
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
pipe2(&(0x7f0000000000)={<r0=>0x0, <r1=>0x0}, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x40000020, r0, 0x0)
vmsplice(r1, &(0x7f0000001700)=[{&(0x7f00000001c0)="80", 0x1}], 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1, 0xb)

1.328030662s ago: executing program 4 (id=1240):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
listen(r0, 0xfffffff8)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = fcntl$dupfd(r1, 0x406, r1)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==")
close_range(r0, 0xffffffffffffffff, 0x0)

1.235462635s ago: executing program 2 (id=1230):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000cf00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1003}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x48}}, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup2(r3, r4)
sendmmsg$inet(r4, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9", 0x76}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1, 0x0, 0x0, 0x180}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f00000012c0)}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0xa9}, {&(0x7f0000002380)}], 0x5}}], 0x4, 0x0)

1.107550222s ago: executing program 3 (id=1231):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

185.740483ms ago: executing program 9 (id=1232):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000280)=[{r1, 0xd142}], 0x1, 0x0, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

181.738713ms ago: executing program 2 (id=1234):
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28)
close(r0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
shutdown(r1, 0x2)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
r6 = pidfd_getfd(r5, r3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}})

180.680792ms ago: executing program 4 (id=1235):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x15, 0x3, 'fo\x00', 0x28, 0x5, 0x72}, 0x2c)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa014102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

103.080949ms ago: executing program 3 (id=1236):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
syz_io_uring_setup(0x4bf3, &(0x7f0000000040)={0x0, 0xe303, 0xf000, 0x5, 0x2c9}, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

72.127533ms ago: executing program 1 (id=1237):
syz_read_part_table(0x5bf, &(0x7f0000000280)="$eJzs079LZFcUAOD7xgwvJpgZgsQijeCUJgFTaDEDERmHaTIiJtgE0gULUxhSWIiiFqnM+g+s+KuxkS0XhG0WXRCFsRKLLcR6QbGxmsWZpytisaDuqnxf8c68e8+Z8x7nvsCjlgqvkl+1OIQQh5bkNr6aNXVtJV2/Noff1or95faB3sGhEKLw7m3Ln6kkIzq/NH2oeJHESvIv5birurjdd7KW3enY28otX9RtpBrdRg9XMvWFv+bv+I15StYLm5mZ2bHS3HhhZL80cfRz+Kqx0b2Un/y9LT+cHKyNRnx53/1z1Z7V3VrlOGQvPoKG2l035kG4Pv+F1umD6bNfo/DvT53fHryefJacgdPocz8pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw1K03h8zM7Fhpbrww8s9/Ifyx/EPx+/+Lf893L+Un47b8cKqRt5G6sfyLW/cvbF72nypNHOWqPau7tcrx85Yf01vVs643SV5ndNtOPETJ/MP5/PdLE0cLrV9e7tWuzPw0CuG768Vff7LHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAekWJ/uX2gd3AohKh+35fKps9jLW7sR0leOomVZL0cd1UXt/tO1rI7HXtbueWBOLTX61IhTIUQRg9XMiH8clPLpkb45l7fi4/zPgAA///uynWQ")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@barrier_val={'barrier', 0x3d, 0x6}}, {}, {@dioread_nolock}, {@resuid}, {@resuid}, {@noload}, {@noauto_da_alloc}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8fffb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20)
r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x400, 0x0, 0x1, 0x0, 0x0)
fallocate(r1, 0x20, 0x4000, 0xa000000)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x44, &(0x7f0000006800)=ANY=[], 0xfe, 0x67b, &(0x7f0000006180)="$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")

0s ago: executing program 4 (id=1238):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
close(0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f00000002c0)=@random="8c0b", 0x2, 0x2)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

kernel console output (not intermixed with test programs):


[   75.259079][ T4768] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0
[   75.278910][    T9] loop: Write error at byte offset 9223372036860018687, length 4096.
[   75.299515][    C1] blk_update_request: I/O error, dev loop1, sector 10240 op 0x1:(WRITE) flags 0x1800 phys_seg 3 prio class 0
[   75.311445][    C1] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[   75.330568][ T4357] loop: Write error at byte offset 9223372036860035071, length 4096.
[   75.356083][    C0] blk_update_request: I/O error, dev loop1, sector 10272 op 0x1:(WRITE) flags 0x1800 phys_seg 2 prio class 0
[   75.367769][    C0] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[   75.383246][ T4357] loop: Write error at byte offset 9223372036860047359, length 4096.
[   75.398894][ T4357] loop: Write error at byte offset 9223372036861657087, length 4096.
[   75.414687][    C0] blk_update_request: I/O error, dev loop1, sector 10296 op 0x1:(WRITE) flags 0x1800 phys_seg 1 prio class 0
[   75.426318][    C0] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0
[   75.479760][    C0] blk_update_request: I/O error, dev loop1, sector 13440 op 0x1:(WRITE) flags 0x1800 phys_seg 1 prio class 0
[   75.491380][    C0] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0
[   75.501515][ T4325] BTRFS: error (device loop1) in btrfs_commit_transaction:2449: errno=-5 IO failure (Error while writing out transaction)
[   75.531665][ T4774] overlayfs: failed to clone lowerpath
[   75.544305][ T4325] BTRFS info (device loop1): forced readonly
[   75.569768][ T4325] BTRFS warning (device loop1): Skipping commit of aborted transaction.
[   75.589159][ T4777] fuse: Bad value for 'fd'
[   75.609061][ T4325] BTRFS: error (device loop1) in cleanup_transaction:2021: errno=-5 IO failure
[   75.639873][ T4768] BTRFS warning (device loop1): Skipping commit of aborted transaction.
[   75.669774][ T4768] BTRFS: error (device loop1) in cleanup_transaction:2021: errno=-5 IO failure
[   75.688787][ T4768] BTRFS error (device loop1): scrub: failed to commit transaction to fix super block errors: -5
[   75.864542][ T4785] netlink: 'syz.0.118': attribute type 1 has an invalid length.
[   75.938051][ T4781] loop2: detected capacity change from 0 to 4096
[   76.000734][ T4781] EXT4-fs (loop2): inline encryption not supported
[   76.287931][ T4781] EXT4-fs (loop2): Test dummy encryption mode enabled
[   76.302691][ T1324] cfg80211: failed to load regulatory.db
[   76.330901][ T4781] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   76.358239][ T4781] System zones: 0-5
[   76.407585][ T4781] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback.
[   76.480287][ T4806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'.
[   76.548079][ T4807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'.
[   76.624473][ T1308] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.676726][ T4809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'.
[   76.708628][ T4810] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.116: corrupted xattr entries
[   76.763441][ T1308] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.878107][ T1308] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.967810][ T1308] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.840993][ T4826] chnl_net:caif_netlink_parms(): no params data found
[   77.956822][ T4823] loop0: detected capacity change from 0 to 32768
[   78.056044][ T4823] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.128 (4823)
[   78.091570][ T4826] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.110766][ T4826] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.122232][ T4823] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   78.137249][ T4826] device bridge_slave_0 entered promiscuous mode
[   78.143590][ T4823] BTRFS info (device loop0): using free space tree
[   78.143629][ T4823] BTRFS info (device loop0): has skinny extents
[   78.168757][ T4826] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.182860][ T4826] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.198748][ T4826] device bridge_slave_1 entered promiscuous mode
[   78.298745][ T4823] BTRFS info (device loop0): enabling ssd optimizations
[   78.354573][ T4826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.439521][ T4826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.509995][ T4823] loop0: detected capacity change from 32768 to 0
[   78.518363][ T4893] BTRFS info (device loop0): scrub: started on devid 1
[   78.564655][    C1] blk_update_request: I/O error, dev loop0, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   78.587982][ T4826] team0: Port device team_slave_0 added
[   78.590821][ T4239] loop: Write error at byte offset 9223372036860018687, length 4096.
[   78.595812][ T4895] loop2: detected capacity change from 0 to 1024
[   78.602880][ T4893] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0
[   78.649516][    C1] blk_update_request: I/O error, dev loop0, sector 10240 op 0x1:(WRITE) flags 0x1800 phys_seg 2 prio class 0
[   78.661165][    C1] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[   78.671603][ T4239] loop: Write error at byte offset 9223372036860035071, length 4096.
[   78.698660][ T4239] loop: Write error at byte offset 9223372036860047359, length 4096.
[   78.722445][    C1] blk_update_request: I/O error, dev loop0, sector 10272 op 0x1:(WRITE) flags 0x1800 phys_seg 2 prio class 0
[   78.734064][    C1] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[   78.746959][ T4239] loop: Write error at byte offset 9223372036861657087, length 4096.
[   78.762633][    C1] blk_update_request: I/O error, dev loop0, sector 10296 op 0x1:(WRITE) flags 0x1800 phys_seg 1 prio class 0
[   78.774261][    C1] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0
[   78.784243][    C1] blk_update_request: I/O error, dev loop0, sector 13440 op 0x1:(WRITE) flags 0x1800 phys_seg 1 prio class 0
[   78.795829][    C1] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0
[   78.805522][ T4895] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   78.809825][ T4234] BTRFS: error (device loop0) in btrfs_commit_transaction:2449: errno=-5 IO failure (Error while writing out transaction)
[   78.834610][ T4234] BTRFS info (device loop0): forced readonly
[   78.841198][ T4234] BTRFS warning (device loop0): Skipping commit of aborted transaction.
[   78.849830][ T4234] BTRFS: error (device loop0) in cleanup_transaction:2021: errno=-5 IO failure
[   78.851510][ T1308] device hsr_slave_0 left promiscuous mode
[   78.869660][ T4893] BTRFS warning (device loop0): Skipping commit of aborted transaction.
[   78.878004][ T4893] BTRFS: error (device loop0) in cleanup_transaction:2021: errno=-5 IO failure
[   78.887154][ T4893] BTRFS error (device loop0): scrub: failed to commit transaction to fix super block errors: -5
[   78.975663][ T1308] device hsr_slave_1 left promiscuous mode
[   79.019137][ T4895] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none.
[   79.110635][ T1308] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.158615][ T1308] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.276474][ T1308] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.319028][ T1308] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.355165][ T1308] device bridge_slave_1 left promiscuous mode
[   79.368283][ T1308] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.420228][ T4407] Bluetooth: hci1: command 0x0409 tx timeout
[   79.426809][ T1308] device bridge_slave_0 left promiscuous mode
[   79.440101][ T1308] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.458418][ T1308] device veth1_macvtap left promiscuous mode
[   79.467747][ T1308] device veth0_macvtap left promiscuous mode
[   79.474369][ T1308] device veth1_vlan left promiscuous mode
[   79.480728][ T1308] device veth0_vlan left promiscuous mode
[   79.711882][ T4907] loop2: detected capacity change from 0 to 8192
[   79.773198][ T4176]  loop2: p4 < >
[   79.818669][ T4907]  loop2: p4 < >
[   79.881087][ T1308] team0 (unregistering): Port device team_slave_1 removed
[   79.923138][ T1308] team0 (unregistering): Port device team_slave_0 removed
[   79.958002][ T1308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.991472][ T1308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.066146][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   80.128155][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   80.173152][ T1308] bond0 (unregistering): Released all slaves
[   80.200071][ T4210] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   80.229660][ T4826] team0: Port device team_slave_1 added
[   80.293604][ T4916] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.307155][ T4916] bond0: (slave bond1): Enslaving as an active interface with an up link
[   80.335795][ T4919] netlink: 14 bytes leftover after parsing attributes in process `syz.3.143'.
[   80.424882][ T4919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.452237][ T4919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.475868][ T4919] bond0 (unregistering): (slave bond1): Releasing backup interface
[   80.505112][ T4919] bond0 (unregistering): Released all slaves
[   80.527117][ T4925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.146'.
[   80.559872][ T4210] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   80.575403][ T4210] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   80.603052][ T4210] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[   80.616825][ T4210] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   80.634279][ T4210] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   80.723921][ T4826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.755673][ T4826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.788700][ T4210] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   80.797964][ T4210] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   80.812913][ T4210] usb 3-1: Product: syz
[   80.817097][ T4210] usb 3-1: Manufacturer: syz
[   80.818242][ T4826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.846789][ T4826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.865091][ T4826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.883627][ T4210] cdc_wdm 3-1:1.0: skipping garbage
[   80.907256][ T4210] cdc_wdm 3-1:1.0: skipping garbage
[   80.928750][ T4210] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[   80.938058][ T4826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.941173][ T4210] cdc_wdm 3-1:1.0: Unknown control protocol
[   81.051524][ T4826] device hsr_slave_0 entered promiscuous mode
[   81.058513][ T4826] device hsr_slave_1 entered promiscuous mode
[   81.065642][ T4826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.074764][ T4826] Cannot create hsr debugfs directory
[   81.256212][ T4929] chnl_net:caif_netlink_parms(): no params data found
[   81.499600][ T4210] Bluetooth: hci1: command 0x041b tx timeout
[   81.503207][ T4929] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.512840][ T4929] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.521126][ T4929] device bridge_slave_0 entered promiscuous mode
[   81.529963][ T4929] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.537108][ T4929] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.545283][ T4929] device bridge_slave_1 entered promiscuous mode
[   81.546707][ T4210] usb 3-1: USB disconnect, device number 2
[   81.561993][ T4826] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   81.613429][ T4826] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   81.692997][ T4959] netlink: 64 bytes leftover after parsing attributes in process `syz.3.152'.
[   81.713790][ T4826] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   81.750641][ T4826] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   81.780121][ T4929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.837676][ T4929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.958375][ T4929] team0: Port device team_slave_0 added
[   82.005968][ T4929] team0: Port device team_slave_1 added
[   82.099766][ T4929] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.106735][ T4929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.138766][ T4974] overlayfs: failed to clone upperpath
[   82.155763][ T4929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.176414][ T4929] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.213935][ T4929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.279401][ T4929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.408664][ T4929] device hsr_slave_0 entered promiscuous mode
[   82.439765][ T4929] device hsr_slave_1 entered promiscuous mode
[   82.487228][ T4929] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.495607][ T4929] Cannot create hsr debugfs directory
[   82.547346][ T4826] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.658452][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   82.687917][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.711333][ T4791] Bluetooth: hci2: command 0x0409 tx timeout
[   82.725055][ T4826] 8021q: adding VLAN 0 to HW filter on device team0
[   82.848677][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   82.878478][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.899826][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.906902][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.930028][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   82.958717][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   83.010038][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.017122][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.042668][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   83.061342][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   83.091819][ T4999] netlink: 68 bytes leftover after parsing attributes in process `syz.4.163'.
[   83.113415][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   83.129007][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   83.159687][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   83.181381][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   83.204743][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   83.234877][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   83.267003][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   83.267030][ T4999] Zero length message leads to an empty skb
[   83.278882][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   83.302374][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   83.320162][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.456618][ T4929] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   83.510124][ T4929] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   83.553638][ T4929] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   83.589964][ T4325] Bluetooth: hci1: command 0x040f tx timeout
[   83.613888][ T4929] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   83.780812][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   83.789827][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   83.817794][ T4826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.866800][ T4929] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.926004][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   83.941939][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   83.977753][ T4929] 8021q: adding VLAN 0 to HW filter on device team0
[   84.014440][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   84.034432][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   84.079499][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.086588][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.155901][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   84.187331][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   84.223853][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   84.265275][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.272429][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.314979][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   84.328000][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   84.341609][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   84.362960][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   84.383114][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   84.412099][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   84.426476][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   84.510522][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   84.546606][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.565464][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   84.592437][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.616415][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   84.681360][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.694508][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.715756][ T4826] device veth0_vlan entered promiscuous mode
[   84.747188][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.757951][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.785732][ T4826] device veth1_vlan entered promiscuous mode
[   84.792567][   T26] Bluetooth: hci2: command 0x041b tx timeout
[   84.825372][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.838803][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.875444][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   84.993408][ T4826] device veth0_macvtap entered promiscuous mode
[   85.016948][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   85.043206][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.072853][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.098061][ T4826] device veth1_macvtap entered promiscuous mode
[   85.120528][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   85.137692][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.175318][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   85.194112][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   85.220268][ T4929] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.257478][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.300854][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.324750][ T4826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.378174][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.420986][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.451388][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.472766][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.483368][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.510985][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.527428][ T4826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.543192][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.570173][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.620230][ T4826] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.629191][ T4826] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.669195][ T4826] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.678250][ T4798] Bluetooth: hci1: command 0x0419 tx timeout
[   85.694684][ T5113] fuse: Bad value for 'fd'
[   85.696415][ T4826] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.729898][ T5115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.186'.
[   85.863619][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   85.873241][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.973048][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   85.994488][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.020999][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   86.030916][ T5123] raw_sendmsg: syz.4.189 forgot to set AF_INET. Fix it!
[   86.058762][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   86.094297][ T4929] device veth0_vlan entered promiscuous mode
[   86.116057][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.124184][ T4929] device veth1_vlan entered promiscuous mode
[   86.153121][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.176853][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   86.191151][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.332124][ T4929] device veth0_macvtap entered promiscuous mode
[   86.351616][ T5147] loop2: detected capacity change from 0 to 512
[   86.357859][ T4929] device veth1_macvtap entered promiscuous mode
[   86.369851][ T5060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.377673][ T5060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.398892][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   86.412581][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   86.432535][ T5147] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   86.442704][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.473985][ T5147] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   86.474847][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   86.510013][ T5147] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   86.526578][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.610123][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   86.618771][ T5147] EXT4-fs (loop2): 1 truncate cleaned up
[   86.625278][ T5147] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,nombcache,nodiscard,abort,grpjquota=,quota,,errors=continue. Quota mode: writeback.
[   86.642347][ T4929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.719580][ T4929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.745149][ T4929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.797178][ T4929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.849734][ T4929] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.860328][ T4230] Bluetooth: hci2: command 0x040f tx timeout
[   86.874711][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.936899][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.982347][ T4929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.019555][ T4929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.049496][ T4929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.081117][ T4929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.119045][ T4929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.138824][ T4929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.161318][ T4929] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.224544][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   87.268362][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   87.348716][ T4929] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.361924][ T4929] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.380301][ T4929] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.389297][ T4929] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.663868][ T5060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.677169][ T5060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.720230][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.727596][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.737878][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.786565][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   88.151977][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.203'.
[   88.272363][ T5207] loop6: detected capacity change from 0 to 512
[   88.405179][ T5207] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   88.447862][ T5207] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   88.520389][ T5207] EXT4-fs (loop6): 1 truncate cleaned up
[   88.539432][ T5207] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,nombcache,nodiscard,abort,grpjquota=,quota,,errors=continue. Quota mode: writeback.
[   88.996155][ T4793] Bluetooth: hci2: command 0x0419 tx timeout
[   89.792317][ T5245] kvm: pic: non byte write
[   90.005446][ T5264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.222'.
[   90.028269][ T5264] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.037498][ T5264] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.046299][ T5264] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.055117][ T5264] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.176601][ T5264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.222'.
[   90.245204][ T5273] process 'syz.4.225' launched '/dev/fd/7' with NULL argv: empty string added
[   91.466029][ T5312] fuse: Bad value for 'fd'
[   91.645395][ T5316] loop6: detected capacity change from 0 to 1024
[   91.715684][ T5316] EXT4-fs (loop6): Ignoring removed bh option
[   91.751549][ T5316] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5
[   91.751549][ T5316] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   91.751549][ T5316] 
[   91.848177][ T5316] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   91.976250][ T5316] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,noblock_validity,init_itable=0x0000000000004068,bh,max_dir_size_kb=0x00000000004007b2,data_err=ignore,nouid32,quota,user_xattr,noacl,dioread_nolock,,errors=continue. Quota mode: writeback.
[   92.015498][ T5341] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.243'.
[   92.026158][ T5340] fuse: Bad value for 'fd'
[   92.036446][ T5341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.243'.
[   92.259704][ T5353] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   92.298603][ T5316] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #2: block 16: comm syz.6.237: lblock 0 mapped to illegal pblock 16 (length 1)
[   92.501617][ T5360] overlayfs: failed to clone upperpath
[   93.363405][ T5362] loop6: detected capacity change from 0 to 32768
[   93.544279][ T5362] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[   93.598133][ T5362] JBD2: Ignoring recovery information on journal
[   93.724989][ T5362] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[   93.802047][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.261'.
[   94.246416][ T5439] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   94.374887][ T4929] ocfs2: Unmounting device (7,6) on (node local)
[   95.163552][ T5474] loop5: detected capacity change from 0 to 1024
[   95.322972][ T5474] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback.
[   95.401354][ T5491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.279'.
[   95.432762][ T5474] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback.
[   95.462424][ T5491] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[   95.519670][ T4791] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   95.573058][ T5474] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback.
[   95.600960][ T5453] loop2: detected capacity change from 0 to 40427
[   95.630143][ T5453] F2FS-fs (loop2): invalid crc value
[   95.646731][ T5453] F2FS-fs (loop2): Found nat_bits in checkpoint
[   95.750205][ T5453] F2FS-fs (loop2): Start checkpoint disabled!
[   95.773166][ T5453] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   95.890264][ T4791] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   95.901159][ T4791] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   95.919858][  T154] attempt to access beyond end of device
[   95.919858][  T154] loop2: rw=2049, want=40976, limit=40427
[   95.925378][ T4791] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   95.957693][ T4791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.004180][ T1308] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.131380][ T1308] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.193538][ T5511] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   96.234936][ T4791] usb 7-1: usb_control_msg returned -32
[   96.249516][ T4791] usbtmc 7-1:16.0: can't read capabilities
[   96.263241][ T1308] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.343330][ T1308] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.628609][ T5531] Illegal XDP return value 4291275016, expect packet loss!
[   96.824242][ T4409] usb 7-1: USB disconnect, device number 2
[   97.033748][ T5524] chnl_net:caif_netlink_parms(): no params data found
[   97.079604][ T5556] netlink: 'syz.3.293': attribute type 10 has an invalid length.
[   97.095823][ T5518] loop2: detected capacity change from 0 to 32768
[   97.149422][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   97.183131][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   97.190750][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   97.200057][ T5518] XFS (loop2): Mounting V5 Filesystem
[   97.207535][ T5563] device bridge_slave_0 left promiscuous mode
[   97.215842][ T5563] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.227507][ T5563] device bridge_slave_1 left promiscuous mode
[   97.239799][ T5563] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.297292][ T5518] XFS (loop2): Ending clean mount
[   97.345013][ T5563] team0: Port device team_slave_0 removed
[   97.370132][ T5563] team0: Port device team_slave_1 removed
[   97.395134][ T5563] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.403925][ T5563] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.433940][ T5563] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.534560][ T5579] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   97.687347][ T4187] XFS (loop2): Unmounting Filesystem
[   97.707735][ T5524] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.743771][ T5524] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.754138][ T5524] device bridge_slave_0 entered promiscuous mode
[   97.764310][ T5524] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.771465][ T5524] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.780067][ T5524] device bridge_slave_1 entered promiscuous mode
[   97.827909][ T5598] loop6: detected capacity change from 0 to 736
[   97.871078][ T5524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.913215][ T5524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.083821][ T4929] rock: directory entry would overflow storage
[   98.104125][ T5524] team0: Port device team_slave_0 added
[   98.104477][ T4929] rock: sig=0x4f50, size=4, remaining=3
[   98.133337][ T5524] team0: Port device team_slave_1 added
[   98.143988][ T4929] iso9660: Corrupted directory entry in block 2 of inode 1472
[   98.176862][ T4929] iso9660: Corrupted directory entry in block 2 of inode 1472
[   98.246164][ T1308] device hsr_slave_0 left promiscuous mode
[   98.263502][ T1308] device hsr_slave_1 left promiscuous mode
[   98.271467][ T1308] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.302762][ T1308] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.337639][ T1308] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.360078][ T1308] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.408193][ T1308] device bridge_slave_1 left promiscuous mode
[   98.417713][ T1308] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.459506][ T1308] device bridge_slave_0 left promiscuous mode
[   98.465720][ T1308] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.515746][ T5626] VFS: Mount too revealing
[   98.524418][ T1308] device veth1_macvtap left promiscuous mode
[   98.542217][ T1308] device veth0_macvtap left promiscuous mode
[   98.548298][ T1308] device veth1_vlan left promiscuous mode
[   98.559635][ T4791] Bluetooth: hci1: command 0x0409 tx timeout
[   98.575725][ T1308] device veth0_vlan left promiscuous mode
[   99.037830][ T1308] team0 (unregistering): Port device team_slave_1 removed
[   99.128075][ T1308] team0 (unregistering): Port device team_slave_0 removed
[   99.193946][ T1308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.226617][ T1308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.351008][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[   99.440677][ T1308] bond0 (unregistering): Released all slaves
[   99.508074][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.517881][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.543882][    C1] vkms_vblank_simulate: vblank timer overrun
[   99.565859][ T5524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.606346][ T5643] netlink: 'syz.2.311': attribute type 6 has an invalid length.
[   99.626331][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.634669][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.660557][    C1] vkms_vblank_simulate: vblank timer overrun
[   99.719065][ T5654] overlayfs: failed to clone upperpath
[   99.754150][ T5524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.821485][ T5658] netlink: 'syz.4.314': attribute type 10 has an invalid length.
[   99.893843][ T5658] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   99.925415][ T5663] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.315'.
[   99.949126][ T5658] bond0: (slave bond_slave_0): Slave does not support ipsec offload
[   99.958447][ T5663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.315'.
[   99.984008][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  100.024876][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  100.065214][ T5662] device bridge_slave_0 left promiscuous mode
[  100.082245][ T5662] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.109339][ T5662] device bridge_slave_1 left promiscuous mode
[  100.115998][ T5662] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.134378][ T5662] bond0: (slave bond_slave_0): Releasing backup interface
[  100.180363][ T5662] bond0: (slave bond_slave_1): Releasing backup interface
[  100.236676][ T5662] team0: Port device team_slave_0 removed
[  100.268139][ T5662] team0: Port device team_slave_1 removed
[  100.290265][ T5662] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.297864][ T5662] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.322709][ T5662] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.337853][ T5662] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.362663][ T5662] bond0: (slave netdevsim0): Releasing backup interface
[  100.433855][ T5672] netlink: 'syz.3.318': attribute type 10 has an invalid length.
[  100.527720][ T5672] team0: Device veth1_vlan failed to register rx_handler
[  100.582756][ T5524] device hsr_slave_0 entered promiscuous mode
[  100.599990][ T5524] device hsr_slave_1 entered promiscuous mode
[  100.609562][ T5524] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.617244][ T5524] Cannot create hsr debugfs directory
[  100.621813][ T4409] Bluetooth: hci1: command 0x041b tx timeout
[  100.761515][ T5681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.322'.
[  100.941490][ T5690] netlink: 52 bytes leftover after parsing attributes in process `syz.2.325'.
[  100.982249][ T5690] netlink: 52 bytes leftover after parsing attributes in process `syz.2.325'.
[  101.157066][ T5524] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  101.197408][ T5524] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  101.234729][ T5706] netlink: 'syz.2.330': attribute type 1 has an invalid length.
[  101.286254][ T5706] netlink: 63747 bytes leftover after parsing attributes in process `syz.2.330'.
[  101.330693][ T5524] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  101.350759][ T5524] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  101.456407][ T5718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.333'.
[  101.746060][ T5733] loop2: detected capacity change from 0 to 128
[  101.777563][ T5524] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.858014][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  101.880707][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  101.888515][ T5733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'.
[  101.929075][ T5524] 8021q: adding VLAN 0 to HW filter on device team0
[  101.950561][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  101.981200][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  102.020848][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.027929][ T5060] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.067233][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  102.104839][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  102.120219][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.139886][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.146989][ T5060] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.212298][ T5750] netlink: 44 bytes leftover after parsing attributes in process `syz.3.340'.
[  102.236874][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  102.268235][ T5743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.340'.
[  102.354419][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  102.371453][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  102.411099][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  102.459266][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  102.530331][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  102.538771][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  102.619888][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  102.658146][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  102.672146][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  102.676786][ T4407] kernel write not supported for file bpf-prog (pid: 4407 comm: kworker/0:14)
[  102.699657][ T4407] Bluetooth: hci1: command 0x040f tx timeout
[  102.718916][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  102.752660][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  103.449847][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  103.457365][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  103.534937][ T5524] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.379547][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  104.400670][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  104.477103][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  104.486083][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  104.529911][ T5524] device veth0_vlan entered promiscuous mode
[  104.537123][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  104.579941][ T5840] loop6: detected capacity change from 0 to 8
[  104.600606][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  104.627482][ T5524] device veth1_vlan entered promiscuous mode
[  104.693383][ T5842] binder: 5841:5842 unknown command 0
[  104.722276][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  104.752003][ T5842] binder: 5841:5842 ioctl c0306201 2000000001c0 returned -22
[  104.779894][ T4407] Bluetooth: hci1: command 0x0419 tx timeout
[  104.781433][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  104.844400][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  104.898589][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  104.918936][ T5524] device veth0_macvtap entered promiscuous mode
[  104.951174][ T5524] device veth1_macvtap entered promiscuous mode
[  105.076203][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.119085][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.153663][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.199924][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  105.219815][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  105.267053][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  105.306575][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  105.346507][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.388693][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.469568][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.516790][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  105.536947][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  105.622697][ T5524] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.639248][ T5524] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.654302][ T5524] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.668315][ T5524] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.931918][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.950222][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.980648][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  106.045195][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.054529][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.085973][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  106.261716][ T5891] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  106.761377][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.768898][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.398078][ T5886] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.439093][ T5886] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.733866][ T5886] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.743202][ T5886] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.752803][ T5886] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.761692][ T5886] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.831101][ T5886] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.840083][ T5886] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.848945][ T5886] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.858042][ T5886] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.884302][ T5912] __nla_validate_parse: 2 callbacks suppressed
[  107.884318][ T5912] netlink: 51 bytes leftover after parsing attributes in process `syz.3.376'.
[  108.023216][ T5930] loop6: detected capacity change from 0 to 8
[  108.094592][ T5930] squashfs: Unknown parameter './file1'
[  108.297752][ T5947] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.387'.
[  108.492579][ T5956] loop6: detected capacity change from 0 to 2048
[  108.575909][ T5956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.742570][   T25] audit: type=1800 audit(1773265808.001:3): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.395" name="eth0" dev="overlay" ino=42151 res=0 errno=0
[  108.900092][ T5979] loop7: detected capacity change from 0 to 128
[  109.048181][ T5979] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  109.060874][ T5979] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  109.130117][ T5954] UDF-fs: warning (device loop6): udf_truncate_tail_extent: Too long extent after EOF in inode 1438: i_size: 315392 lbcount: 319488 extent 65+9216
[  109.487300][ T5524] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  109.526743][ T5524] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  109.548021][ T5524] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  109.577934][ T5524] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  109.606855][ T5524] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  109.636724][ T5524] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  109.667532][ T5524] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  109.710632][ T5524] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  109.744124][ T5524] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  109.760508][ T6007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  109.773519][ T5524] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  109.787422][ T6007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  110.505644][ T4239] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.644252][ T4239] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.738385][ T4239] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.864549][ T4239] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.929920][ T6049] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.411'.
[  111.128951][ T6046] loop2: detected capacity change from 0 to 4096
[  111.455135][ T6067] loop6: detected capacity change from 0 to 8
[  111.475440][ T6067] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  111.490686][ T4176] udevd[4176]: incorrect cramfs checksum on /dev/loop6
[  111.553746][ T4176] udevd[4176]: incorrect cramfs checksum on /dev/loop6
[  111.615535][ T6067] cramfs: Error -5 while decompressing!
[  111.626211][ T6067] cramfs: ffffffff964030c2(26)->ffff88804cdc4000(4096)
[  111.642075][ T4187] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  111.646491][ T6067] cramfs: Error -3 while decompressing!
[  111.655051][ T4187] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  111.685574][ T6067] cramfs: ffffffff964030dc(16)->ffff88804cdc5000(4096)
[  111.715138][ T6067] cramfs: Error -5 while decompressing!
[  111.746366][ T6067] cramfs: ffffffff964030c2(26)->ffff88804cdc4000(4096)
[  111.790311][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  111.852422][ T6058] chnl_net:caif_netlink_parms(): no params data found
[  111.859412][   T25] audit: type=1800 audit(1773265811.101:4): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.415" name="file2" dev="loop6" ino=348 res=0 errno=0
[  112.060113][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.137281][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.200998][ T6089] tipc: Failed to remove unknown binding: 66,1,1/0:661389598/661389600
[  112.203555][ T6058] device bridge_slave_0 entered promiscuous mode
[  112.231940][ T6089] tipc: Failed to remove unknown binding: 66,1,1/0:661389598/661389600
[  112.269557][ T6089] tipc: Failed to remove unknown binding: 66,1,1/0:661389598/661389600
[  112.293700][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.311894][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.342380][ T6058] device bridge_slave_1 entered promiscuous mode
[  112.487944][ T6058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.512798][ T6103] loop6: detected capacity change from 0 to 512
[  112.553419][ T6058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.587594][ T6103] EXT4-fs (loop6): Ignoring removed orlov option
[  112.612613][ T6103] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  112.704321][ T6103] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  112.713325][ T6058] team0: Port device team_slave_0 added
[  112.722912][ T6058] team0: Port device team_slave_1 added
[  112.794985][ T6103] EXT4-fs error (device loop6): ext4_iget_extra_inode:4566: inode #15: comm syz.6.425: corrupted in-inode xattr
[  112.870700][ T6103] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.425: couldn't read orphan inode 15 (err -117)
[  112.890425][ T4239] device hsr_slave_0 left promiscuous mode
[  112.898615][ T4239] device hsr_slave_1 left promiscuous mode
[  112.927530][ T6103] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,debug,noblock_validity,noload,nombcache,orlov,min_batch_time=0x0000000000000002,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none.
[  112.968839][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.983642][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.020874][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.048783][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.091758][ T4239] device bridge_slave_1 left promiscuous mode
[  113.117097][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.170238][ T4239] device bridge_slave_0 left promiscuous mode
[  113.180098][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.313648][ T4239] device veth1_macvtap left promiscuous mode
[  113.319820][ T4239] device veth0_macvtap left promiscuous mode
[  113.353211][ T4239] device veth1_vlan left promiscuous mode
[  113.359038][ T4239] device veth0_vlan left promiscuous mode
[  113.421768][ T1107] Bluetooth: hci1: command 0x0409 tx timeout
[  114.146736][ T4239] team0 (unregistering): Port device team_slave_1 removed
[  114.200065][ T4239] team0 (unregistering): Port device team_slave_0 removed
[  114.249889][ T4239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.289955][ T4239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.463605][ T4239] bond0 (unregistering): Released all slaves
[  114.601607][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.621513][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.663169][ T6058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.712067][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.719416][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.752059][ T6058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.908197][ T6058] device hsr_slave_0 entered promiscuous mode
[  114.915489][ T6187] loop6: detected capacity change from 0 to 512
[  114.946041][ T6058] device hsr_slave_1 entered promiscuous mode
[  114.971080][ T6058] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  114.978648][ T6058] Cannot create hsr debugfs directory
[  115.432532][ T6058] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  115.467676][ T6058] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  115.499759][ T1107] Bluetooth: hci5: command 0x1003 tx timeout
[  115.499776][ T4230] Bluetooth: hci1: command 0x041b tx timeout
[  115.506149][ T4189] Bluetooth: hci5: sending frame failed (-49)
[  115.530773][ T6058] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  115.558654][ T6058] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  115.829526][ T6058] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.873849][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  115.888458][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  115.925561][ T6058] 8021q: adding VLAN 0 to HW filter on device team0
[  115.952176][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  115.959607][ T6198] loop6: detected capacity change from 0 to 32768
[  115.968513][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  116.002835][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.009938][ T5060] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.063182][ T6198] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.445 (6198)
[  116.093738][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  116.114905][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  116.126327][ T6198] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  116.146287][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  116.157344][ T6198] BTRFS info (device loop6): setting nodatasum
[  116.179781][ T6198] BTRFS info (device loop6): force zlib compression, level 3
[  116.190572][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.197635][ T5060] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.206578][ T6198] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8)
[  116.233286][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  116.236762][ T6198] BTRFS info (device loop6): use lzo compression, level 0
[  116.261917][ T6198] BTRFS info (device loop6): turning on flush-on-commit
[  116.276852][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  116.279136][ T6198] BTRFS info (device loop6): enabling auto defrag
[  116.306046][ T6198] BTRFS info (device loop6): max_inline at 4096
[  116.322471][ T6198] BTRFS info (device loop6): using free space tree
[  116.332349][ T6198] BTRFS info (device loop6): has skinny extents
[  116.340596][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  116.401135][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  116.449634][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  116.484945][ T6198] BTRFS info (device loop6): enabling ssd optimizations
[  116.487345][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  116.549356][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  116.600212][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  116.640043][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  116.668152][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  116.707480][ T6058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  116.772826][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  117.028199][ T4176] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop6 scanned by udevd (4176)
[  117.075825][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  117.086719][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  117.115937][ T6058] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.590566][ T1107] Bluetooth: hci1: command 0x040f tx timeout
[  117.596723][ T1107] Bluetooth: hci5: command 0x1001 tx timeout
[  117.630107][ T4189] Bluetooth: hci5: sending frame failed (-49)
[  117.741361][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  117.767349][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  117.783641][ T6272] syz.6.454 sent an empty control message without MSG_MORE.
[  117.818434][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  117.867145][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  117.907984][ T6058] device veth0_vlan entered promiscuous mode
[  117.941525][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  117.966802][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  117.979776][ T6058] device veth1_vlan entered promiscuous mode
[  118.043469][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  118.066387][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  118.087256][ T6058] device veth0_macvtap entered promiscuous mode
[  118.121938][ T6058] device veth1_macvtap entered promiscuous mode
[  118.182880][ T6058] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.213436][ T6058] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.250903][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  118.272817][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  118.318741][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  118.370526][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  118.400272][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  118.429813][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  118.471404][ T6058] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.500790][ T6058] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.532212][ T6058] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.559572][ T6058] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.754043][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.768357][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.858473][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  118.886484][ T5060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.898649][ T5060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.925342][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  119.106140][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.8.410'.
[  119.161896][ T6296] loop6: detected capacity change from 0 to 32768
[  119.245468][ T6296] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.460 (6296)
[  119.303534][ T6313] loop8: detected capacity change from 0 to 1024
[  119.357912][ T6296] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  119.414544][ T6296] BTRFS info (device loop6): force zlib compression, level 3
[  119.471722][ T6313] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  119.509735][ T6296] BTRFS info (device loop6): force clearing of disk cache
[  119.520009][ T6296] BTRFS info (device loop6): setting nodatasum
[  119.526190][ T6296] BTRFS info (device loop6): allowing degraded mounts
[  119.608581][ T6296] BTRFS info (device loop6): enabling disk space caching
[  119.637481][ T6296] BTRFS info (device loop6): disk space caching is enabled
[  119.653278][ T6296] BTRFS info (device loop6): has skinny extents
[  119.660107][ T4409] Bluetooth: hci5: command 0x1009 tx timeout
[  119.667272][ T4409] Bluetooth: hci1: command 0x0419 tx timeout
[  120.031343][ T6296] BTRFS info (device loop6): clearing free space tree
[  120.038698][ T6296] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  120.068477][ T6296] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  120.325607][ T6296] BTRFS info (device loop6): balance: start -d -m
[  120.374393][ T6296] BTRFS info (device loop6): relocating block group 6881280 flags data|metadata
[  120.670335][ T6296] BTRFS info (device loop6): relocating block group 5242880 flags data|metadata
[  121.228454][ T6398] all (unregistering): Released all slaves
[  121.358610][ T6405] overlayfs: failed to clone upperpath
[  121.358833][ T6296] BTRFS info (device loop6): found 9 extents, stage: move data extents
[  121.419857][   T26] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  121.487347][ T6296] BTRFS info (device loop6): found 1 extents, stage: update data pointers
[  121.564524][ T6296] BTRFS info (device loop6): balance: ended with status: 0
[  121.689725][   T26] usb 9-1: Using ep0 maxpacket: 32
[  121.836566][   T26] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.857938][   T26] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.909580][   T26] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  121.957270][   T26] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.020323][   T26] usb 9-1: config 0 descriptor??
[  122.253726][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'.
[  122.288300][ T6445] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.297227][ T6445] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.306646][ T6445] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.315415][ T6445] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.384678][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'.
[  122.565282][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'.
[  122.612642][   T26] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0
[  122.935359][ T4798] usb 9-1: USB disconnect, device number 2
[  123.126154][ T6478] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  123.126154][ T6478] The task syz.3.494 (6478) triggered the difference, watch for misbehavior.
[  124.299771][ T1823] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  124.919709][ T1823] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  124.938987][ T1823] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.979325][ T1823] usb 9-1: Product: syz
[  124.999526][ T1823] usb 9-1: Manufacturer: syz
[  125.017248][ T1823] usb 9-1: SerialNumber: syz
[  125.058313][ T1823] usb 9-1: config 0 descriptor??
[  125.130294][ T1823] hub 9-1:0.0: bad descriptor, ignoring hub
[  125.149093][ T1823] hub: probe of 9-1:0.0 failed with error -5
[  125.339824][ T1823] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  125.400286][ T1823] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  125.476269][ T1823] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  125.511181][ T1823] usb 9-1: media controller created
[  125.593618][ T1823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  125.827024][ T1823] DVB: Unable to find symbol dib7000p_attach()
[  125.839748][ T1823] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  126.069590][ T1823] rc_core: IR keymap rc-dib0700-rc5 not found
[  126.078790][ T1823] Registered IR keymap rc-empty
[  126.104537][ T1823] dvb-usb: could not initialize remote control.
[  126.119758][ T1823] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  126.189618][ T1823] usb 9-1: USB disconnect, device number 3
[  126.280407][ T1823] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  126.813454][    T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  127.059716][    T7] usb 3-1: Using ep0 maxpacket: 16
[  127.139518][ T1823] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  127.341404][    T7] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  127.371590][    T7] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  127.396005][ T1823] usb 9-1: Using ep0 maxpacket: 32
[  127.404891][    T7] usb 3-1: Product: syz
[  127.410101][    T7] usb 3-1: Manufacturer: syz
[  127.426061][    T7] usb 3-1: SerialNumber: syz
[  127.460323][    T7] usb 3-1: config 0 descriptor??
[  127.519747][ T1823] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.549073][ T1823] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  127.852223][ T1823] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  127.871505][ T1823] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.906109][ T1823] usb 9-1: Product: syz
[  127.908573][ T6594] device batadv_slave_0 left promiscuous mode
[  127.911945][ T1823] usb 9-1: Manufacturer: syz
[  127.960145][    T7] usb 3-1: USB disconnect, device number 3
[  127.966313][ T1823] usb 9-1: SerialNumber: syz
[  128.007633][ T1823] usb 9-1: config 0 descriptor??
[  128.408140][ T1823] usb 9-1: USB disconnect, device number 4
[  128.826993][ T6701] overlayfs: failed to clone upperpath
[  129.014463][ T6710] netlink: 20 bytes leftover after parsing attributes in process `syz.4.550'.
[  129.075442][ T6710] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.084484][ T6710] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.093281][ T6710] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.102008][ T6710] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.155079][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.550'.
[  130.251865][ T6752] sd 0:0:1:0: PR command failed: 2
[  130.257128][ T6752] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  130.285676][ T6752] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  131.548748][ T6767] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  131.588808][ T6767] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  131.675820][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'.
[  132.432947][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.440376][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.552406][ T6793] loop6: detected capacity change from 0 to 764
[  132.623630][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.630003][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  133.660907][ T6780] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.819873][ T6780] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.382213][ T6780] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.391829][ T6780] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.400861][ T6780] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.409853][ T6780] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.529811][ T4325] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  134.572758][ T6814] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  134.720976][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'.
[  134.733802][ T6825] device hsr_slave_0 left promiscuous mode
[  134.755793][ T6825] device hsr_slave_1 left promiscuous mode
[  134.929718][ T4325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.951308][ T4325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.981970][ T4325] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  135.008646][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.045889][ T4325] usb 3-1: config 0 descriptor??
[  135.482838][ T6877] loop8: detected capacity change from 0 to 128
[  135.531824][ T4325] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x2
[  135.558144][ T4325] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0
[  135.603343][ T6877] attempt to access beyond end of device
[  135.603343][ T6877] loop8: rw=2049, want=140, limit=128
[  135.643364][ T6877] attempt to access beyond end of device
[  135.643364][ T6877] loop8: rw=2049, want=140, limit=128
[  135.666720][ T6877] Buffer I/O error on dev loop8, logical block 69, lost async page write
[  135.685519][ T6877] attempt to access beyond end of device
[  135.685519][ T6877] loop8: rw=2049, want=142, limit=128
[  135.708922][ T6877] Buffer I/O error on dev loop8, logical block 70, lost async page write
[  135.730420][ T6877] attempt to access beyond end of device
[  135.730420][ T6877] loop8: rw=2049, want=144, limit=128
[  135.754713][ T6877] Buffer I/O error on dev loop8, logical block 71, lost async page write
[  135.777324][ T6877] attempt to access beyond end of device
[  135.777324][ T6877] loop8: rw=2049, want=140, limit=128
[  135.802756][ T6877] Buffer I/O error on dev loop8, logical block 69, lost async page write
[  135.821309][ T6877] attempt to access beyond end of device
[  135.821309][ T6877] loop8: rw=2049, want=142, limit=128
[  135.848356][ T6877] Buffer I/O error on dev loop8, logical block 70, lost async page write
[  135.865833][ T6877] attempt to access beyond end of device
[  135.865833][ T6877] loop8: rw=2049, want=144, limit=128
[  135.898418][ T6877] Buffer I/O error on dev loop8, logical block 71, lost async page write
[  136.159357][ T6887] loop8: detected capacity change from 0 to 512
[  136.224535][ T6887] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback.
[  136.240540][ T6887] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  136.312843][   T25] audit: type=1800 audit(1773265835.571:5): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.602" name="file1" dev="loop8" ino=15 res=0 errno=0
[  136.412926][ T4325] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device
[  136.430747][ T4325] pyra 0003:1E7D:2CF6.0002: couldn't install mouse
[  136.452350][ T4325] pyra: probe of 0003:1E7D:2CF6.0002 failed with error -71
[  136.499799][ T4325] usb 3-1: USB disconnect, device number 4
[  136.616593][ T6899] fido_id[6899]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  138.244293][ T6961] loop6: detected capacity change from 0 to 128
[  139.389810][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.637'.
[  139.464706][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.6.637'.
[  139.895559][ T7018] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  140.377223][ T7013] loop6: detected capacity change from 0 to 32768
[  140.453188][ T7013] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.641 (7013)
[  140.540325][ T7013] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  140.549087][ T7013] BTRFS info (device loop6): setting nodatasum
[  140.603544][ T7013] BTRFS info (device loop6): force zlib compression, level 3
[  140.639495][ T7013] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8)
[  140.648723][ T7013] BTRFS info (device loop6): use lzo compression, level 0
[  140.719539][ T7013] BTRFS info (device loop6): turning on flush-on-commit
[  140.756605][ T7013] BTRFS info (device loop6): enabling auto defrag
[  140.789517][ T7013] BTRFS info (device loop6): max_inline at 4096
[  140.795793][ T7013] BTRFS info (device loop6): using free space tree
[  140.839820][ T7013] BTRFS info (device loop6): has skinny extents
[  140.934717][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.648'.
[  140.997322][ T7048] netlink: 'syz.3.648': attribute type 2 has an invalid length.
[  141.126851][ T7013] BTRFS info (device loop6): enabling ssd optimizations
[  142.689559][ T4404] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  143.029488][ T4404] usb 3-1: Using ep0 maxpacket: 32
[  143.169628][ T4404] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.209456][ T4404] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  143.256300][ T7116] loop6: detected capacity change from 0 to 32768
[  143.320326][ T7116] XFS: attr2 mount option is deprecated.
[  143.449567][ T7116] XFS (loop6): Mounting V5 Filesystem
[  143.480449][ T4404] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  143.505557][ T4404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.513829][ T4404] usb 3-1: Product: syz
[  143.518060][ T4404] usb 3-1: Manufacturer: syz
[  143.522771][ T4404] usb 3-1: SerialNumber: syz
[  143.543006][ T4404] usb 3-1: config 0 descriptor??
[  143.583097][ T7116] XFS (loop6): Ending clean mount
[  143.608041][ T7116] XFS (loop6): Quotacheck needed: Please wait.
[  143.726202][ T7116] XFS (loop6): Quotacheck: Done.
[  143.849360][ T4404] usb 3-1: USB disconnect, device number 5
[  143.918376][ T4929] XFS (loop6): Unmounting Filesystem
[  144.019010][ T7158] netlink: 'syz.8.665': attribute type 10 has an invalid length.
[  144.057340][ T7158] device veth0_vlan left promiscuous mode
[  144.100955][ T7158] device veth0_vlan entered promiscuous mode
[  144.128605][ T7158] team0: Device veth0_vlan failed to register rx_handler
[  144.365124][ T7174] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  144.478048][ T7177] tipc: Started in network mode
[  144.493177][ T7177] tipc: Node identity 7f000001, cluster identity 4711
[  144.535660][ T7177] tipc: Enabled bearer <udp:syz2>, priority 10
[  144.547469][ T7177] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  144.644607][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.6.671'.
[  144.829884][ T7195] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  144.844317][ T7195] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  145.027776][ T7202] kvm: pic: non byte write
[  145.589970][    T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  145.642962][ T4325] tipc: Node number set to 2130706433
[  145.995906][    T7] usb 3-1: config 0 has no interfaces?
[  146.003941][    T7] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  146.027739][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.073569][    T7] usb 3-1: config 0 descriptor??
[  146.371500][ T7214] kvm [7211]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00
[  146.407813][ T7214] kvm [7211]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00
[  146.424340][ T7214] APIC base relocation is unsupported by KVM
[  146.505444][    T7] usb 3-1: USB disconnect, device number 6
[  146.806913][ T7293] device bond1 entered promiscuous mode
[  147.016970][ T7305] loop6: detected capacity change from 0 to 512
[  147.125359][ T7305] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  147.170954][ T7305] EXT4-fs (loop6): 1 truncate cleaned up
[  147.176627][ T7305] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none.
[  147.283747][ T7298] chnl_net:caif_netlink_parms(): no params data found
[  147.393325][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.423798][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.437698][ T7298] device bridge_slave_0 entered promiscuous mode
[  147.447409][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.454969][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.465863][ T7298] device bridge_slave_1 entered promiscuous mode
[  147.489029][ T7298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.500767][ T7305] loop_set_status: loop6 () has still dirty pages (nrpages=1)
[  147.566384][ T7298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.651473][ T4929] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  147.703417][ T7298] team0: Port device team_slave_0 added
[  147.722385][ T7298] team0: Port device team_slave_1 added
[  147.796527][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.833070][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.955627][ T7298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.991925][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.016303][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.137819][ T7298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.267698][ T7298] device hsr_slave_0 entered promiscuous mode
[  148.297456][ T7298] device hsr_slave_1 entered promiscuous mode
[  148.328798][ T7298] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  148.357851][ T7298] Cannot create hsr debugfs directory
[  148.797367][ T7298] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  148.833473][ T7298] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  148.891446][ T7298] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  148.911021][ T7298] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  148.940189][ T1823] Bluetooth: hci1: command 0x0409 tx timeout
[  149.176650][ T7372] xt_CT: You must specify a L4 protocol and not use inversions on it
[  149.229753][ T7298] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.267943][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  149.285025][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  149.322880][ T7298] 8021q: adding VLAN 0 to HW filter on device team0
[  149.370000][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  149.399773][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  149.449716][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.456786][ T5060] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.544355][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  149.580897][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  149.600263][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  149.639679][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.646758][ T5060] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.689782][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  149.725937][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  149.762639][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  149.782845][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  149.820240][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  149.835279][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  149.865452][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  149.905594][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  149.955967][ T7298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  150.056998][ T7298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  150.130605][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  150.164462][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  150.489129][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  151.019763][   T26] Bluetooth: hci1: command 0x041b tx timeout
[  151.243239][ T1308] tipc: Disabling bearer <udp:syz2>
[  151.260559][ T1308] tipc: Left network mode
[  151.347513][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  151.359077][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  151.413275][ T7298] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.485664][ T7392] chnl_net:caif_netlink_parms(): no params data found
[  151.717254][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.759638][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.818937][ T7392] device bridge_slave_0 entered promiscuous mode
[  151.849746][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.869486][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.895724][ T7392] device bridge_slave_1 entered promiscuous mode
[  151.914446][ T7457] overlayfs: failed to clone upperpath
[  152.019962][ T7392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.059647][   T26] Bluetooth: hci2: command 0x0409 tx timeout
[  152.073026][ T7392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.207611][ T7392] team0: Port device team_slave_0 added
[  152.240738][ T7392] team0: Port device team_slave_1 added
[  152.288932][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  152.307783][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  152.434666][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.469637][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.517217][ T7441] loop2: detected capacity change from 0 to 40427
[  152.529008][ T7392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.577895][ T7441] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff
[  152.588855][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.599202][ T7441] F2FS-fs (loop2): invalid crc value
[  152.609299][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.636187][ T7392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.659216][ T7298] device veth0_vlan entered promiscuous mode
[  152.678964][ T7441] F2FS-fs (loop2): Found nat_bits in checkpoint
[  152.707229][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  152.716198][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  152.730752][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  152.746821][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  152.790808][ T7466] netlink: 'syz.3.726': attribute type 5 has an invalid length.
[  152.819700][ T7441] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  152.883501][ T7298] device veth1_vlan entered promiscuous mode
[  152.921080][ T7392] device hsr_slave_0 entered promiscuous mode
[  152.945994][ T7392] device hsr_slave_1 entered promiscuous mode
[  152.977907][ T7392] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  153.004196][ T7392] Cannot create hsr debugfs directory
[  153.040418][ T7441] attempt to access beyond end of device
[  153.040418][ T7441] loop2: rw=2049, want=45104, limit=40427
[  153.101123][ T6436] Bluetooth: hci1: command 0x040f tx timeout
[  153.189942][ T7298] device veth0_macvtap entered promiscuous mode
[  153.236535][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  153.259926][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  153.301197][ T7298] device veth1_macvtap entered promiscuous mode
[  153.325019][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  153.336792][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  153.490779][ T7298] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.508190][ T7298] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.525836][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  153.534763][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  153.545416][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  153.555876][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  153.667967][ T7298] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.713484][ T7298] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.728935][ T7298] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.758280][ T7298] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.836337][ T1308] device hsr_slave_0 left promiscuous mode
[  153.845552][ T1308] device hsr_slave_1 left promiscuous mode
[  153.852488][ T1308] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.861451][ T1308] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.875659][ T1308] device bridge_slave_1 left promiscuous mode
[  153.882370][ T1308] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.893654][ T1308] device bridge_slave_0 left promiscuous mode
[  153.900557][ T1308] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.920408][ T1308] bond1 (unregistering): Released all slaves
[  154.122360][ T1308] team0 (unregistering): Port device team_slave_1 removed
[  154.137991][ T1308] team0 (unregistering): Port device team_slave_0 removed
[  154.139702][ T4793] Bluetooth: hci2: command 0x041b tx timeout
[  154.153903][ T1308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  154.171750][ T1308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  154.236845][ T1308] bond0 (unregistering): Released all slaves
[  154.599800][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.625415][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.659771][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  154.719044][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.765308][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.831649][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  155.124199][ T7392] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  155.180097][ T4798] Bluetooth: hci1: command 0x0419 tx timeout
[  155.210289][ T7392] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  155.241642][ T7550] netlink: 104 bytes leftover after parsing attributes in process `syz.2.743'.
[  155.253470][ T7392] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  155.301684][ T7392] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  155.547513][ T7392] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.617573][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  155.639142][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  155.681828][ T7392] 8021q: adding VLAN 0 to HW filter on device team0
[  155.720108][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  155.759917][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  155.788666][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.795768][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.850760][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  155.875202][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  155.901659][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  155.940822][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.947932][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.986103][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  156.013634][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  156.045726][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  156.075679][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  156.105133][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  156.150865][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  156.183903][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  156.219825][   T26] Bluetooth: hci2: command 0x040f tx timeout
[  156.231046][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  156.239400][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  156.351392][ T7392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  156.389766][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  156.440095][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  156.462534][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  156.884695][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  156.918365][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  156.950988][ T7392] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.076080][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  157.096904][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  157.154711][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  157.174036][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  157.213971][ T7392] device veth0_vlan entered promiscuous mode
[  157.235121][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  157.248348][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  157.281476][ T7392] device veth1_vlan entered promiscuous mode
[  157.382809][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  157.398370][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  157.437263][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  157.487827][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  157.522369][ T7392] device veth0_macvtap entered promiscuous mode
[  157.559228][ T7392] device veth1_macvtap entered promiscuous mode
[  157.637894][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.698197][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.764186][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.794791][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  157.813940][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  157.852348][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  157.889072][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  157.925185][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.959492][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.010823][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.020994][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  158.053684][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  158.098566][ T7392] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.172005][ T7392] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.205916][ T7392] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.241038][ T7392] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.301354][ T4325] Bluetooth: hci2: command 0x0419 tx timeout
[  158.484468][ T5060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.502939][ T5060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.571435][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  158.626134][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.642017][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.682525][ T7649] netlink: 14 bytes leftover after parsing attributes in process `syz.4.767'.
[  158.759826][ T7649] bond0 (unregistering): Released all slaves
[  158.793863][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  159.802279][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.9.776'.
[  159.821586][ T7690] tipc: Started in network mode
[  159.831651][ T7690] tipc: Node identity 026a39b6eaa5, cluster identity 4711
[  159.850991][ T7690] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.933695][ T7690] device syzkaller0 entered promiscuous mode
[  159.937585][ T7674] loop2: detected capacity change from 0 to 32768
[  159.959387][ T7689] tipc: Resetting bearer <eth:syzkaller0>
[  160.019912][ T7689] tipc: Disabling bearer <eth:syzkaller0>
[  160.072941][ T7674] XFS (loop2): Mounting V5 Filesystem
[  160.280774][ T7674] XFS (loop2): Ending clean mount
[  160.346795][ T7674] XFS (loop2): Quotacheck needed: Please wait.
[  160.407414][ T4357] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 
[  160.434890][ T4357] XFS (loop2): Unmount and run xfs_repair
[  160.443490][ T4357] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  160.457924][ T4357] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  160.489904][ T4357] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  160.498792][ T4357] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  160.513025][ T4357] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  160.525551][ T4357] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  160.535912][ T4357] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  160.547187][ T4357] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  160.556710][ T4357] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  160.568713][ T4357] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74
[  160.592223][ T7674] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  160.735385][ T7674] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 
[  160.749386][ T7674] XFS (loop2): Unmount and run xfs_repair
[  160.756484][ T7674] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  160.777763][ T7674] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  160.803558][ T7674] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  160.813599][ T7674] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  160.822877][ T7674] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  160.832876][ T7674] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  160.844968][ T7674] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  160.863098][ T7674] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  160.877502][ T7674] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  160.897301][ T7674] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74
[  160.917381][ T7674] XFS (loop2): page discard on page ffffea0001636d00, inode 0x244b, offset 0.
[  161.047774][ T4187] XFS (loop2): Unmounting Filesystem
[  163.055870][ T7784] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.066200][ T7784] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.075551][ T7784] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.086028][ T7784] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.344198][ T7784] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.353217][ T7784] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.362152][ T7784] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.371179][ T7784] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.610691][ T7855] netlink: 'syz.3.818': attribute type 1 has an invalid length.
[  163.642873][ T7855] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.667652][ T7858] bond0: (slave ip6erspan0): making interface the new active one
[  163.781520][ T7858] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link
[  163.836492][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  164.377860][ T7889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.826'.
[  164.408933][ T7891] loop2: detected capacity change from 0 to 764
[  164.460982][ T7891] ISOFS: Logical zone size(255) < hardware blocksize(1024)
[  164.469098][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.826'.
[  164.496039][ T7894] 9pnet: p9_errstr2errno: server reported unknown error 184467440
[  164.934803][ T7914] loop1: detected capacity change from 0 to 256
[  165.137299][ T7833] ODEBUG: Out of memory. ODEBUG disabled
[  166.150470][ T7927] overlayfs: failed to clone upperpath
[  166.406504][ T7905] loop2: detected capacity change from 0 to 32768
[  166.409244][ T7940] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  166.419896][ T7940] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  166.500373][ T7940] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  166.506790][ T7940] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  166.513938][ T7940] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  166.520372][ T7940] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  166.527026][ T7940] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  166.533466][ T7940] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  166.573602][ T7940] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  166.580071][ T7940] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  166.606310][ T7905] XFS (loop2): Mounting V5 Filesystem
[  166.700825][ T7905] XFS (loop2): Ending clean mount
[  167.156338][ T4187] XFS (loop2): Unmounting Filesystem
[  167.274775][ T7990] overlayfs: failed to clone upperpath
[  167.629911][ T8003] team0: Port device vlan2 added
[  167.776476][ T8011] tipc: Started in network mode
[  167.827422][ T8011] tipc: Node identity 4, cluster identity 4711
[  167.905818][ T8011] tipc: Node number set to 4
[  167.967928][ T8015] netlink: 'syz.9.857': attribute type 1 has an invalid length.
[  168.220088][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[  168.230461][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[  168.239800][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[  168.969236][ T8037] loop1: detected capacity change from 0 to 8
[  169.048346][ T8037] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  169.080319][ T4176] udevd[4176]: incorrect cramfs checksum on /dev/loop1
[  169.194320][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[  169.239463][ T8039] cramfs: Error -3 while decompressing!
[  169.247974][ T8039] cramfs: ffffffff96407038(16)->ffff888057975000(4096)
[  169.258372][ T8039] cramfs: Error -3 while decompressing!
[  169.271579][ T8039] cramfs: ffffffff96407038(16)->ffff888057975000(4096)
[  169.315078][   T25] audit: type=1800 audit(1773265868.551:6): pid=8039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.861" name="file0" dev="loop1" ino=244 res=0 errno=0
[  169.444877][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[  169.503910][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[  169.516060][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  169.526376][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  169.537014][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  170.000829][ T8067] netlink: 'syz.4.869': attribute type 1 has an invalid length.
[  170.082759][ T8067] 8021q: adding VLAN 0 to HW filter on device bond2
[  170.093862][ T8067] bond0: (slave bond2): making interface the new active one
[  170.103479][ T8067] bond0: (slave bond2): Enslaving as an active interface with an up link
[  170.118797][ T8072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.869'.
[  170.135998][ T8072] device bond0 entered promiscuous mode
[  170.152473][ T8072] device bond2 entered promiscuous mode
[  170.158641][ T8072] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.237230][ T4232] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  170.604903][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'.
[  170.629597][ T4232] usb 3-1: Using ep0 maxpacket: 8
[  170.821503][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  170.950933][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  171.145564][ T4232] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  171.391255][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  171.475473][ T4232] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  171.485964][ T4232] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  171.512859][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.548627][ T8121] loop1: detected capacity change from 0 to 1024
[  171.723331][ T4232] usb 3-1: config 0 descriptor??
[  171.723988][ T8121] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,grpid,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  171.759330][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  171.767619][ T8059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  171.873813][ T8134] overlayfs: failed to clone upperpath
[  171.932907][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.880'.
[  172.166231][ T8153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.886'.
[  172.214438][ T8059] udc-core: couldn't find an available UDC or it's busy
[  172.223793][ T8059] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  172.242795][ T4404] usb 3-1: USB disconnect, device number 7
[  172.339253][ T8157] netlink: 'syz.1.887': attribute type 10 has an invalid length.
[  172.415200][ T8157] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  172.454496][ T5060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.464712][ T5060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.517289][ T8182] kvm: pic: single mode not supported
[  173.518375][ T8182] kvm: pic: single mode not supported
[  173.526376][ T8182] kvm: pic: single mode not supported
[  173.531927][ T8182] kvm: pic: level sensitive irq not supported
[  173.543308][ T8182] kvm: pic: single mode not supported
[  173.549686][ T8182] kvm: pic: level sensitive irq not supported
[  173.555240][ T8182] kvm: pic: single mode not supported
[  173.563129][ T8182] kvm: pic: single mode not supported
[  173.568536][ T8182] kvm: pic: level sensitive irq not supported
[  173.575697][ T8182] kvm: pic: level sensitive irq not supported
[  173.607742][ T8182] kvm: pic: single mode not supported
[  173.613912][ T8182] kvm: pic: level sensitive irq not supported
[  173.724454][ T8198] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  173.926208][ T8212] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  174.277977][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'.
[  174.449032][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.907'.
[  175.091823][ T8251] netlink: 52 bytes leftover after parsing attributes in process `syz.4.913'.
[  175.137305][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.913'.
[  175.896696][ T4232] Bluetooth: hci4: command 0x0406 tx timeout
[  175.951623][ T4798] Bluetooth: hci3: command 0x0406 tx timeout
[  175.964191][ T4798] Bluetooth: hci0: command 0x0406 tx timeout
[  176.389567][ T4230] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  176.446098][ T8279] overlayfs: failed to clone upperpath
[  176.759916][ T4230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.808409][ T4230] usb 2-1: config 0 has no interfaces?
[  176.819627][ T4230] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  176.852964][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.900204][ T4230] usb 2-1: config 0 descriptor??
[  177.251892][ T8316] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  177.297009][ T8316] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  177.308633][ T8316] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  178.124825][ T8372] loop9: detected capacity change from 0 to 128
[  178.270433][ T8372] attempt to access beyond end of device
[  178.270433][ T8372] loop9: rw=2049, want=140, limit=128
[  178.281780][ T8380] loop2: detected capacity change from 0 to 764
[  178.293057][ T8372] attempt to access beyond end of device
[  178.293057][ T8372] loop9: rw=2049, want=140, limit=128
[  178.313291][ T8372] Buffer I/O error on dev loop9, logical block 69, lost async page write
[  178.339689][ T8372] attempt to access beyond end of device
[  178.339689][ T8372] loop9: rw=2049, want=142, limit=128
[  178.379532][ T8372] Buffer I/O error on dev loop9, logical block 70, lost async page write
[  178.410498][ T8372] attempt to access beyond end of device
[  178.410498][ T8372] loop9: rw=2049, want=144, limit=128
[  178.449716][ T8372] Buffer I/O error on dev loop9, logical block 71, lost async page write
[  178.557311][   T26] usb 2-1: USB disconnect, device number 2
[  178.601575][ T8372] attempt to access beyond end of device
[  178.601575][ T8372] loop9: rw=2049, want=140, limit=128
[  178.651704][ T8372] Buffer I/O error on dev loop9, logical block 69, lost async page write
[  178.687334][ T8372] attempt to access beyond end of device
[  178.687334][ T8372] loop9: rw=2049, want=142, limit=128
[  178.763103][ T8372] Buffer I/O error on dev loop9, logical block 70, lost async page write
[  178.819123][ T8372] attempt to access beyond end of device
[  178.819123][ T8372] loop9: rw=2049, want=144, limit=128
[  178.837477][ T8402] device batadv_slave_0 entered promiscuous mode
[  178.849622][ T8372] Buffer I/O error on dev loop9, logical block 71, lost async page write
[  178.980891][ T8407] loop2: detected capacity change from 0 to 7
[  179.028004][ T4176] Dev loop2: unable to read RDB block 7
[  179.039286][ T4176]  loop2: unable to read partition table
[  179.069214][ T4176] loop2: partition table beyond EOD, truncated
[  179.110804][ T8407] Dev loop2: unable to read RDB block 7
[  179.116543][ T8407]  loop2: unable to read partition table
[  179.139713][ T8407] loop2: partition table beyond EOD, truncated
[  179.145937][ T8407] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  179.216035][ T3561] Dev loop2: unable to read RDB block 7
[  179.239612][ T3561]  loop2: unable to read partition table
[  179.260122][ T3561] loop2: partition table beyond EOD, truncated
[  179.755585][ T8410] infiniband syz1: set active
[  179.776091][ T8410] infiniband syz1: added syz_tun
[  180.106211][ T8432] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  180.115550][ T8410] RDS/IB: syz1: added
[  180.141620][ T8410] smc: adding ib device syz1 with port count 1
[  180.155320][ T8432] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  180.167284][ T8410] smc:    ib device syz1 port 1 has pnetid 
[  180.288115][    C0] rdma_rxe: no route to ff02:0000:0000:0000:0000:0000:0000:0001
[  180.295808][    C0] rdma_rxe: Host not reachable
[  180.302547][    C0] rdma_rxe: no route to ff02:0000:0000:0000:0000:0000:0000:0001
[  180.310212][    C0] rdma_rxe: Host not reachable
[  184.217049][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.224465][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.733705][ T8553] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.787942][ T8553] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.196177][ T8553] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.205565][ T8553] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.214713][ T8553] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.223715][ T8553] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.336292][ T8589] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  185.345290][ T8593] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  185.719507][ T4230] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  186.119587][ T4230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  186.141305][ T4230] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  186.173338][ T4230] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  186.191420][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.229836][ T4230] usb 3-1: config 0 descriptor??
[  186.505426][ T4232] usb 3-1: USB disconnect, device number 8
[  186.739607][ T4230] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  187.129633][ T4230] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.157130][ T4230] usb 10-1: config 0 has no interfaces?
[  187.169489][ T4230] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  187.203611][ T4230] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.239202][ T4230] usb 10-1: config 0 descriptor??
[  189.283459][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1010'.
[  189.386778][ T8748] netlink: 'syz.1.1010': attribute type 2 has an invalid length.
[  189.405624][ T4798] usb 10-1: USB disconnect, device number 2
[  194.066479][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.072860][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  194.570200][ T8794] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.583985][ T8794] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.627677][ T8794] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.660640][ T8794] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.920031][ T8794] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  195.928990][ T8794] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  195.938372][ T8794] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  195.947278][ T8794] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  196.058355][ T8794] device bond0 left promiscuous mode
[  196.063925][ T8794] device bond2 left promiscuous mode
[  196.167237][ T4239] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.312725][ T4239] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.445046][ T4239] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.555073][ T4239] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.652662][ T8886] Bluetooth: (null): Invalid header checksum
[  196.705596][ T8891] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  197.121260][ T8905] device syzkaller1 entered promiscuous mode
[  198.317857][ T4239] device hsr_slave_0 left promiscuous mode
[  198.341434][ T4239] device hsr_slave_1 left promiscuous mode
[  198.394969][ T4239] device veth1_macvtap left promiscuous mode
[  198.418888][ T4239] device veth0_macvtap left promiscuous mode
[  198.469672][ T4239] device veth1_vlan left promiscuous mode
[  198.489696][ T4239] device veth0_vlan left promiscuous mode
[  198.882636][ T8963] overlayfs: failed to clone upperpath
[  200.079900][ T4239] bond0 (unregistering): Released all slaves
[  200.566459][ T8991] loop1: detected capacity change from 0 to 4096
[  200.677076][ T8991] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  201.404037][ T9011] overlayfs: failed to clone upperpath
[  203.382486][ T9082] fuse: Bad value for 'fd'
[  204.342856][ T9096] device syzkaller1 entered promiscuous mode
[  204.372045][ T9101] binder: 9097:9101 ioctl c0306201 2000000003c0 returned -14
[  204.660248][ T9115] fuse: root generation should be zero
[  204.709576][   T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  204.949478][   T26] usb 2-1: Using ep0 maxpacket: 16
[  205.069736][   T26] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.093543][   T26] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b29, bcdDevice= 0.00
[  205.126071][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.193926][   T26] usb 2-1: config 0 descriptor??
[  205.261947][   T26] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  205.300895][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1125'.
[  205.529243][   T26] usb 2-1: USB disconnect, device number 3
[  206.154272][ T9184] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.204553][ T9184] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.567068][ T9208] loop1: detected capacity change from 0 to 1024
[  206.634398][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1141'.
[  206.642645][ T9208] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  206.734554][ T9208] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none.
[  206.880634][   T25] audit: type=1800 audit(1773265906.141:7): pid=9208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1139" name="file1" dev="loop1" ino=15 res=0 errno=0
[  207.384693][ T9269] overlayfs: upper fs does not support file handles, falling back to index=off.
[  207.423376][ T9273] device bridge2 entered promiscuous mode
[  210.122118][ T9363] net_ratelimit: 68 callbacks suppressed
[  210.122128][ T9363] IPVS: fo: FWM 3 0x00000003 - no destination available
[  210.143812][ T9363] IPVS: fo: FWM 3 0x00000003 - no destination available
[  210.298267][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1172'.
[  210.310391][ T9370] overlayfs: workdir and upperdir must reside under the same mount
[  211.001290][ T9397] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1178'.
[  211.047581][ T9397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.115732][ T9397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.161965][ T9397] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  211.174650][ T9397] bond0 (unregistering): Released all slaves
[  211.358886][ T9412] tipc: Failed to remove unknown binding: 66,0,0/0:1862613772/1862613773
[  211.404672][ T9412] tipc: Failed to remove unknown binding: 66,0,0/0:1862613772/1862613773
[  211.504763][ T9420] qfq: no options
[  212.647776][ T9490] tipc: Failed to remove unknown binding: 66,0,0/4:768527035/768527036
[  212.674983][ T9490] tipc: Failed to remove unknown binding: 66,0,0/4:768527035/768527036
[  213.464299][ T9514] overlayfs: upper fs does not support file handles, falling back to index=off.
[  213.873366][ T9524] netlink: 'syz.2.1205': attribute type 1 has an invalid length.
[  213.930893][ T9524] 8021q: adding VLAN 0 to HW filter on device bond2
[  214.072692][ T9528] bond2: (slave ip6erspan0): making interface the new active one
[  214.103649][ T9528] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[  214.128369][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  215.561563][ T9577] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  216.937213][ T9608] kvm: pic: non byte write
[  218.178359][ T9629] IPVS: fo: FWM 3 0x00000003 - no destination available
[  218.193483][ T9634] netlink: 'syz.3.1236': attribute type 1 has an invalid length.
[  218.212095][ T9636] loop1: detected capacity change from 0 to 2048
[  218.223652][ T9629] IPVS: fo: FWM 3 0x00000003 - no destination available
[  218.232550][ T9629] IPVS: fo: FWM 3 0x00000003 - no destination available
[  218.248342][ T9636]  loop1: p1 p3 p4
[  218.248342][ T9636]  p1: <solaris:  cannot handle version 2 vtoc>
[  218.270515][ T9636] loop1: p4 size 589824 extends beyond EOD, truncated
[  218.292078][ T9634] 8021q: adding VLAN 0 to HW filter on device bond3
[  218.296093][ T3561]  loop1: p1 p3 p4
[  218.296093][ T3561]  p1: <solaris:  cannot handle version 2 vtoc>
[  218.300656][ T9634] bond2: (slave bond3): making interface the new active one
[  218.314202][ T3561] loop1: p4 size 589824 extends beyond EOD, truncated
[  218.344597][ T9634] bond2: (slave bond3): Enslaving as an active interface with an up link
[  218.354607][ T9642] netlink: 'syz.4.1238': attribute type 10 has an invalid length.
[  218.366237][ T9643] ------------[ cut here ]------------
[  218.390147][ T9643] wlan1: Failed check-sdata-in-driver check, flags: 0x4
[  218.417443][ T9643] WARNING: CPU: 0 PID: 9643 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550
[  218.429253][ T9643] Modules linked in:
[  218.433520][ T9643] CPU: 0 PID: 9643 Comm: syz.4.1238 Not tainted syzkaller #0
[  218.441115][ T9643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  218.452187][ T9643] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550
[  218.459319][ T9643] Code: 39 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 20 20 39 8b 4c 89 e6 89 ea e8 05 86 71 00 <0f> 0b e9 07 fd ff ff e8 a9 2d 39 f8 0f 0b e9 b1 fe ff ff e8 9d 2d
[  218.483524][ T9643] RSP: 0018:ffffc900037bf4c8 EFLAGS: 00010246
[  218.489865][ T9643] RAX: d92aed4d9675b500 RBX: 0000000000400000 RCX: 0000000000080000
[  218.498228][ T9643] RDX: ffffc9000c531000 RSI: 00000000000098ba RDI: 00000000000098bb
[  218.508989][ T9643] RBP: 0000000000000004 R08: ffff8880b9033d7f R09: 1ffff110172067af
[  218.517392][ T9643] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff888060008000
[  218.526363][ T9643] R13: ffff888060009290 R14: ffff888078778e40 R15: ffff88806000a268
[  218.541620][ T9643] FS:  00007f76de8e26c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  218.550952][ T9643] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  218.557569][ T9643] CR2: 00007fc19d17fe80 CR3: 000000006914c000 CR4: 00000000003506e0
[  218.566035][ T9643] Call Trace:
[  218.569323][ T9643]  <TASK>
[  218.583362][ T9643]  ? netif_carrier_off+0x31/0xc0
[  218.588917][ T9643]  ieee80211_ocb_leave+0x26f/0x320
[  218.603873][ T9643]  __cfg80211_leave_ocb+0x219/0x3f0
[  218.609236][ T9643]  cfg80211_leave_ocb+0x53/0x70
[  218.611596][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  218.614301][ T9643]  cfg80211_change_iface+0x4f1/0xeb0
[  218.631943][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  218.639619][ T9643]  nl80211_set_interface+0x5a7/0x7e0
[  218.647199][ T9643]  ? nl80211_dump_interface+0x5c0/0x5c0
[  218.647885][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  218.653755][ T9643]  ? mutex_lock_nested+0x17/0x20
[  218.667589][ T9643]  genl_rcv_msg+0xcea/0xf90
[  218.672749][ T9643]  ? genl_bind+0x380/0x380
[  218.677195][ T9643]  ? verify_lock_unused+0x140/0x140
[  218.681349][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  218.682504][ T9643]  ? verify_lock_unused+0x140/0x140
[  218.697447][ T9643]  ? nl80211_dump_interface+0x5c0/0x5c0
[  218.698911][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  218.703715][ T9643]  netlink_rcv_skb+0x1f5/0x440
[  218.717651][ T9643]  ? genl_bind+0x380/0x380
[  218.718864][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  218.722116][ T9643]  ? netlink_ack+0xb50/0xb50
[  218.722145][ T9643]  ? __lock_acquire+0x7d10/0x7d10
[  218.722178][ T9643]  ? down_read+0x1aa/0x2e0
[  218.722205][ T9643]  genl_rcv+0x24/0x40
[  218.722232][ T9643]  netlink_unicast+0x774/0x920
[  218.722264][ T9643]  netlink_sendmsg+0x8ba/0xbe0
[  218.722293][ T9643]  ? netlink_getsockopt+0x570/0x570
[  218.722318][ T9643]  ? aa_sock_msg_perm+0x94/0x150
[  218.722342][ T9643]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  218.722365][ T9643]  ? security_socket_sendmsg+0x7c/0xa0
[  218.722391][ T9643]  __sys_sendto+0x46d/0x620
[  218.722419][ T9643]  ? __ia32_sys_getpeername+0x80/0x80
[  218.722454][ T9643]  ? __lock_acquire+0x7d10/0x7d10
[  218.796169][ T9643]  ? lock_chain_count+0x20/0x20
[  218.801075][ T9643]  ? vtime_user_exit+0x2c8/0x3e0
[  218.806020][ T9643]  __x64_sys_sendto+0xda/0xf0
[  218.811275][ T9643]  do_syscall_64+0x4c/0xa0
[  218.815683][ T9643]  ? clear_bhb_loop+0x30/0x80
[  218.820424][ T9643]  ? clear_bhb_loop+0x30/0x80
[  218.825103][ T9643]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  218.831050][ T9643] RIP: 0033:0x7f76e0669fce
[  218.835463][ T9643] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  218.855121][ T9643] RSP: 002b:00007f76de8e0de8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  218.863615][ T9643] RAX: ffffffffffffffda RBX: 00007f76de8e26c0 RCX: 00007f76e0669fce
[  218.871630][ T9643] RDX: 0000000000000024 RSI: 00007f76de8e0fe0 RDI: 0000000000000007
[  218.879656][ T9643] RBP: 0000000000000000 R08: 00007f76de8e0e64 R09: 000000000000000c
[  218.887628][ T9643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  218.895755][ T9643] R13: 0000000000000000 R14: 00007f76de8e0fe0 R15: 0000000000000000
[  218.904186][ T9643]  </TASK>
[  218.907215][ T9643] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  218.914472][ T9643] CPU: 0 PID: 9643 Comm: syz.4.1238 Not tainted syzkaller #0
[  218.921825][ T9643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  218.931859][ T9643] Call Trace:
[  218.935131][ T9643]  <TASK>
[  218.938056][ T9643]  dump_stack_lvl+0x188/0x250
[  218.942723][ T9643]  ? show_regs_print_info+0x20/0x20
[  218.947921][ T9643]  ? load_image+0x400/0x400
[  218.952409][ T9643]  panic+0x2e5/0x810
[  218.956288][ T9643]  ? bpf_jit_dump+0xd0/0xd0
[  218.960789][ T9643]  ? ieee80211_bss_info_change_notify+0x37b/0x550
[  218.967213][ T9643]  __warn+0x248/0x2b0
[  218.971180][ T9643]  ? ieee80211_bss_info_change_notify+0x37b/0x550
[  218.977579][ T9643]  report_bug+0x1b7/0x2e0
[  218.981894][ T9643]  handle_bug+0x3a/0x70
[  218.986033][ T9643]  exc_invalid_op+0x16/0x40
[  218.990538][ T9643]  asm_exc_invalid_op+0x16/0x20
[  218.995395][ T9643] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550
[  219.002428][ T9643] Code: 39 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 20 20 39 8b 4c 89 e6 89 ea e8 05 86 71 00 <0f> 0b e9 07 fd ff ff e8 a9 2d 39 f8 0f 0b e9 b1 fe ff ff e8 9d 2d
[  219.022038][ T9643] RSP: 0018:ffffc900037bf4c8 EFLAGS: 00010246
[  219.028093][ T9643] RAX: d92aed4d9675b500 RBX: 0000000000400000 RCX: 0000000000080000
[  219.036055][ T9643] RDX: ffffc9000c531000 RSI: 00000000000098ba RDI: 00000000000098bb
[  219.044025][ T9643] RBP: 0000000000000004 R08: ffff8880b9033d7f R09: 1ffff110172067af
[  219.051976][ T9643] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff888060008000
[  219.059926][ T9643] R13: ffff888060009290 R14: ffff888078778e40 R15: ffff88806000a268
[  219.067890][ T9643]  ? ieee80211_bss_info_change_notify+0x37b/0x550
[  219.074288][ T9643]  ? netif_carrier_off+0x31/0xc0
[  219.079231][ T9643]  ieee80211_ocb_leave+0x26f/0x320
[  219.084343][ T9643]  __cfg80211_leave_ocb+0x219/0x3f0
[  219.089551][ T9643]  cfg80211_leave_ocb+0x53/0x70
[  219.094394][ T9643]  cfg80211_change_iface+0x4f1/0xeb0
[  219.099676][ T9643]  nl80211_set_interface+0x5a7/0x7e0
[  219.104960][ T9643]  ? nl80211_dump_interface+0x5c0/0x5c0
[  219.110516][ T9643]  ? mutex_lock_nested+0x17/0x20
[  219.115467][ T9643]  genl_rcv_msg+0xcea/0xf90
[  219.119994][ T9643]  ? genl_bind+0x380/0x380
[  219.124429][ T9643]  ? verify_lock_unused+0x140/0x140
[  219.129639][ T9643]  ? verify_lock_unused+0x140/0x140
[  219.134852][ T9643]  ? nl80211_dump_interface+0x5c0/0x5c0
[  219.140389][ T9643]  netlink_rcv_skb+0x1f5/0x440
[  219.145133][ T9643]  ? genl_bind+0x380/0x380
[  219.149530][ T9643]  ? netlink_ack+0xb50/0xb50
[  219.154100][ T9643]  ? __lock_acquire+0x7d10/0x7d10
[  219.159110][ T9643]  ? down_read+0x1aa/0x2e0
[  219.163511][ T9643]  genl_rcv+0x24/0x40
[  219.167470][ T9643]  netlink_unicast+0x774/0x920
[  219.172217][ T9643]  netlink_sendmsg+0x8ba/0xbe0
[  219.176963][ T9643]  ? netlink_getsockopt+0x570/0x570
[  219.182146][ T9643]  ? aa_sock_msg_perm+0x94/0x150
[  219.187091][ T9643]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  219.192359][ T9643]  ? security_socket_sendmsg+0x7c/0xa0
[  219.197796][ T9643]  __sys_sendto+0x46d/0x620
[  219.202286][ T9643]  ? __ia32_sys_getpeername+0x80/0x80
[  219.207643][ T9643]  ? __lock_acquire+0x7d10/0x7d10
[  219.212654][ T9643]  ? lock_chain_count+0x20/0x20
[  219.217484][ T9643]  ? vtime_user_exit+0x2c8/0x3e0
[  219.222404][ T9643]  __x64_sys_sendto+0xda/0xf0
[  219.227063][ T9643]  do_syscall_64+0x4c/0xa0
[  219.231466][ T9643]  ? clear_bhb_loop+0x30/0x80
[  219.236145][ T9643]  ? clear_bhb_loop+0x30/0x80
[  219.240804][ T9643]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  219.246693][ T9643] RIP: 0033:0x7f76e0669fce
[  219.251088][ T9643] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  219.270671][ T9643] RSP: 002b:00007f76de8e0de8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  219.279067][ T9643] RAX: ffffffffffffffda RBX: 00007f76de8e26c0 RCX: 00007f76e0669fce
[  219.287024][ T9643] RDX: 0000000000000024 RSI: 00007f76de8e0fe0 RDI: 0000000000000007
[  219.294988][ T9643] RBP: 0000000000000000 R08: 00007f76de8e0e64 R09: 000000000000000c
[  219.302943][ T9643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  219.310949][ T9643] R13: 0000000000000000 R14: 00007f76de8e0fe0 R15: 0000000000000000
[  219.318913][ T9643]  </TASK>
[  219.322233][ T9643] Kernel Offset: disabled
[  219.326845][ T9643] Rebooting in 86400 seconds..