last executing test programs:

24m21.571416488s ago: executing program 32 (id=20):
syz_mount_image$fuse(0x0, 0x0, 0x280028, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x800)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000600), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000000640), 0x4000087, 0x2, 0x0)
eventfd2(0x5, 0x1)
io_submit(0x0, 0x0, &(0x7f00000006c0))
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x51, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000007c0)=@new_dev={0x83, 0x48, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000800))
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x2, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)

3m23.43544338s ago: executing program 33 (id=4453):
syz_clone3(&(0x7f0000000380)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0], 0x1}, 0x58)

2m56.057863483s ago: executing program 4 (id=4524):
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3)
fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000700)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000780)=0x7)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000800)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000880), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000980), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mkdir(&(0x7f0000000040)='dir0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='dir0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x2, 0xa, 0x3, 0x2, 0x2, 0x0, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x34000}, 0x0)

2m55.845757095s ago: executing program 4 (id=4526):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x8000004}}, {@nombcache}, {@inlinecrypt}]}, 0x6, 0x623, &(0x7f0000000a00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000001040)='.\x00', 0x498101, 0x0)

2m54.536895268s ago: executing program 34 (id=4528):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000011c0), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001240)={0x10000000000000cf, 0x0, [{}]})

2m54.494481521s ago: executing program 4 (id=4530):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000800)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000840)={'syzkaller0\x00', 0x1})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r2, &(0x7f0000000880)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233"], 0x4a)

2m54.164290026s ago: executing program 35 (id=4531):
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3)
fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000700)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000780)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x7, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
connect$unix(r2, &(0x7f0000000800)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000880), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000980), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6)
fsopen(&(0x7f0000000a00)='pipefs\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mkdir(&(0x7f0000000040)='dir0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='dir0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x2, 0xa, 0x3, 0x2, 0x2, 0x0, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x34000}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x103a42, 0x4)
read$FUSE(r6, &(0x7f00000018c0)={0x2020}, 0x2020)

2m53.896127123s ago: executing program 4 (id=4534):
fsopen(0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5fc, &(0x7f0000000640)="$eJzs3U1vXFcdB+DfnfglE0TqtklbEAgrWYAakXg8beoFEgEh5EWFKrHppgsrmSRWJm5lu8itECS8bvkGLULOFlYsEItIsOYjYIlFFkjsvTO6d+7Y09hx7MbujJvnkc6cc+ace+65/9x7PPeOognw3Jp/N+MPU2T+0ttrZX1jvd3dWG/f7ZeTTCZpJGO9LMVSUown19JL+Vr5Zj1c8aT9vPfJW3OPWg/u92pjdar6N/bb7mDu1SnTSU7V+VGNd/2Zxyu2j7AM2MV+4GDYtna5d5jNn/G6BUZB0fu7uctUcibJ6fpzQOrVofHFzu7oHWqVAwAAgBPqhc1sZi1nhz0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEnq3/8v6tTol6dT9H//f6J+L3X5RHs47AkAAAAAAAAAwBH41mY2s5az/fpWUX3nf6GqnKtev5IPs5JOlnM5a1nIalaznFaSqYGBJtYWVleXWwfYcnbPLWe/mOMFAAAAAAAAgC+pX2V+5/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYBUVyqpdV6Vy/PJXGWJLTSSbKfveSv/fLJ9nDXvZoctgTAQAAgGP0wmY2s5az/fpWUd3zv1Ld95/Oh1nKahazmm46uVE9C+jd9Tc21tvdjfX23TLtHvcH/zvUNKoR03v2sPeeZ6oe56v2P00k8/lxfppLmc47Wc5ifpaFrKaT6fyoKi2kyFT99GKqP8+953vtM7V3njbX16qZNHMzi9XcLud63k83N9KojqHqs/8e75fRKb5fO2CMbtR5eUR/qPPRMFVFZHw7IjN17MtovLh/JA55njy+p1Ya28+gzh1DzM/UeRnr3410zGcHzr5X9o9EcuE/3/zr7e7Snds3Vy6NziF9To9Hoj0QiVefq0hM1NHoraL91bL09NXyQrXt2SzmJ3k/N9LJm5nLm5nNG3kjM5nL1YG4nn/6tXYryWGutYvfqQvNJL+v89FQxvXFgbgOrnRTVdvgOztReunoV6Sxr9eFch+/rvPR8HgkWgOReHn/SPxxq3xd6S7dWb698MEB9/ftOi8v29+O1Npcni8vlf9YVe2zZ0fZ9vKeba2q7dx2W2NX2/l/f7Vue9qVOlF/hts90mzV9uqebe2q7bWBtr0+5QAw8s68fmai+d/mv5qfNn/TvN18+/QPJ+cmvzGR8X+O/e3UXxoPGt8rXs+n+cXO/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD5rXz08Z2FbrezrKBwYgtj9dk8KvMZ9cLkAfoMeWECjt2V1bsfXFn56OPvLt5duNW51Vlqt1tXZ+euzs1evXJzsduZ6b0Oe5rAMdj5oz/smQAAAAAAAAAAAAAH9Wz/nWDrl71ROn9uJk/sPOxjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE62+Xcz/jBFWjOXZ8r6xnq7W6Z+eafnWJJGkuLnSfGP5Fp6KVMDwxVP2s97n7w196j14P7OWGP9/o39tjuYe3XKdJJTdX5U411/5vGK7SMsA3axHzgYtv8HAAD///K0CRA=")
mount$bind(&(0x7f0000000dc0)='.\x00', &(0x7f0000000e00)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000e40)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$bind(&(0x7f0000000f80)='.\x00', &(0x7f0000000fc0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000001000)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000001040)={0x2020}, 0x2020)

2m53.519013691s ago: executing program 4 (id=4535):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000801c, &(0x7f0000000080)=ANY=[], 0x8, 0x1545, &(0x7f0000000400)="$eJzs3AuYjtX2APC19t7vGJK+JrkMe+/18qXBNkmSS0KuSZLkSG4JSZMkCYkht6QhCblOkssQkss0Jo37/ZJ70uRIkiQkJNn/R0dH/c/l3/mfTv7Pf9bved7HXt5vrW+97/qe+d7vneebr7qPqN2sTo0mRAT/FvzLP8kAEAsAQwDgGgAIAKB8XPm4i/tzS0z+956E/b4eSLvSHbArieefs/H8czaef87G88/ZeP45G88/Z+P552w8f8Zysq2zCl/LW87d+P5/Tsbv//+PHCoz8bP1Za7v8S+k8PxzNp5/zsbzz9l4/jkbzz9n4/n//1f9n+zj+edsPH/GcrK/3gs+773/P3A/mrc/drvSrz/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYznDWX+ZAoCf11e6L8YYY4wxxhhjjP1+fK4r3QFjjDHGGGOMMcb+8xAESFAQQAzkgljIDXngKsgLV0M+uAYicC3EwXWQH66HAlAQCkFhiIciUBQ0GLBAEEIxKA5RuAFKwI2QACWhFJQGB2UgEW6CsnAzlINboDzcChXgNqgIlaAyVIHboSrcAdWgOtSAO6Em1ILaUAfqQj24C+rD3dAA7oGGcC80gvugMdwPTeABaAp/gmbwIDSHh6AFtIRW0Bra/Dp/8m/Lfw56w/PQB/pCMvSD/vACDICBMAgGwxB4EYbCSzAMXoYUGA4j4BUYCa/CKHgNRsMYGAuvwzgYDxNgIkyCyZAKb8AUeBOmwlswDabDDJgJaTALZsPbMAfmwjx4B+bDu7AAFsIiWAzp8B5kwBLIhPdhKXwAWbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGt8CFsg+2wA3bCLtgNe+Aj2Asfwz74BLLh038x/8x/y++BgIACBSpUGIMxGIuxmAfzYF7Mi/kwH0YwgnEYh/kxPxbAAlgIC2E8xmNRLIoGDRISFsNiGMUolsASmIAJMT+/sBIxEcvizVgOy2F5LI8VsAJWxEpYCatgFayKVbEaVsMaWANrYk2sjbWxLtbFu7A+1scG2AAbYkNshI2wMTbGJtgEm2JTbIbNsDk2xxbYAlthK2yDbbAttsV22A47YAfsiB2xE3bCJEzCztgZu2AX7IpdsRt2w+7YHXtgT+yJz+Fz+Dw+j32xpuiH/bE/DsABOAgH42B8EYfiS/gSvowpOBxH4Cv4Cr6Ko/A0jsYxOBbHYlUxHifgRCQxGVMxFafgFJyKU3EaTsfpOBPTcBbOxtk4B+fiXHwH5+O7+C4uxIW4GNMxHTNwCWZiJi7FM5iFy3A5rsCVuApX4hpci2twPW7A9bgJN+EW3IIf4oe4HbfjTtyJu3E3foQf4cf4MaZgNmbjftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPIEn8QSewlN4Gs/gWTyL5/Acnsdn4r9ourvkuhQQFymhRIyIEbEiVuQReURekVfkE/lEREREnIgT+UV+UUAUEIVEIREv4kVRUVQYYQSJUBQTxURUREUJUUIkiARRSpQSTjiRKBJFWVFWlBPlRHlxq6ggbhMVRSXR3lURVURV0cFVE9VFDVFD1BS1RG1RR9QR9UQ9UV/UFw1EA9FQNBSNxH2iseiHg/ABcXEyzcRwbC5GYAvRUrQSrcWr+LBoK0ZhO9FedBCPijE4GjuJti5JPCE6iwnYRTwlJuLTopuYjN3Fs6KH6Cl6iedEb9HO9RF9xTTsJ/qLmThADBSDxGAxB2uJixOrLV4WKWK4GCFeEYvxVTFKvCZGizFirHhdjBPjxQQxUUwSk0WqeENMEW+KqeItMU1MFzPETJEmZonZ4m0xR8wV88Q7Yr54VywQC8UisViki/dEhlgiMsX7Yqn4QGSJZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2ig/FNrFd7BA7xS6xW+wRH4m94mOxT3wissWnYr/4szggPhMHxefikPhCHBZfiiPiK3FUfC2OiW/EcXFCnBTfilPiO3FanBFnxffinPhBnBc/igvCC5AohZRSyUDGyFwyVuaWeeRVMq+8WuaT18iIvFbGyetkfnm9LCALykKysIyXRWRRqaWRVpIMZTFZXEblDbKEvFEmyJKylCwtnSwjE+VNsqy8WZaTt8jy8lZZQd4mK8pKsrKsIm+XVeUdspqsLmvIO2VNWUvWlnVkXVlP3iXry7tlA3mPbCjvlY3kfbKxvF82kQ/IpogA8kHZXD4kW8iWslVdkG3kw7KtfES2k+1lB/mo7Cgfk53k4zJJPiE7yydlF/mU7Cqflt3kM7K7fFb2kD1lL/mjvCC97CP7ymTZT/aXL8gBcqAcJAfLIfJFOVS+JIfJl2WKHC5HyFfkSPmqHCVfk6PlGDlWvi7HyfFygpwoJ8nJMlW+IafIN+VU+ZacJqfLGXKmTJOz5KBLleb9JT8WAP5h/pt/J3/YT8++RW6VH8ptcrvcIXfKXXK33CP3yL1yr9wn98lsmS33y/3ygDwgD8qD8pA8JA/Lw/KIPCKPyqPymDwmj8sT8nv5rTwlv5On5Rl5Rn4vz8lz8vylcwAKlVBSKRWoGJVLxarcKo+6SuVVV6t86hoVUdeqOHWdyq+uVwVUQVVIFVbxqogqqrQyyipSoSqmiquoukGVUDeqBFVSlVKllYu99C7wv81XZVSiukn9sj8JAP+9vzaqjWqr2qp2qp3qoDqojqqj6qQ6qSSVpDqrzqqL6qK6qq6qm+qmuqvuqofqoXqpXqq36q36qD4qWSWr/uoFNUANVIPUYDVEvaiGqqFqmBqmUlSKGqFGqJFqpBqlRqnRarQaq8aqcWqcmqAmqElqkkpVqWqKmqKmqqlqmpqmZqgZKk2lqdlqtpqj5qh5ap6ar+arBWqBWqQWqXSVrjJUhspUmWqpWqqy1DK1TK1QK9QqtUqtUWvUOrVObVAb1Ca1SWWprWqr2qa2qR1qh9qldqk9ao/aq/aqfWqfylbZar/arw6oA+qgOqgOqUPqsDqsjqgj6qg6qo6pY+q4Oq5OqpPqlDqlTqvT6qw6q86pc+q8Oq8uqAsXL/sCEYhABSqICWKC2CA2yBPkCfIGeYN8Qb4gEkSCuCAuyB9cHxQICgaFgsJBfFAkKBrowAQ2oCAMigXFg2hwQ1AiuDFICEoGpYLSgQvKBInBTUHZ4OagXHBLUD64NagQ3BZUDCoFlYMqwe1B1eCOoFpQPagR3BnUDGoFtYM6Qd2gXnBXUD+4O2gQ3BM0DO4NGgX3BY2D+4MmwQNB0+BPQbPgwaB58FDQImgZtApaB21+1/reny74iOuj++pk3U/31y/oAXqgHqQH6yH6RT1Uv6SH6Zd1ih6uR+hX9Ej9qh6lX9Oj9Rg9Vr+ux+nxeoKeqCfpyTpVv6Gn6Df1VP2Wnqan6xl6pk7Ts/Rs/baeo+fqefodPV+/qxfohXqRXqzT9Xs6Qy/Rmfp9vVR/oLP0Mr1cr9Ar9Sq9Wq/Ra/U6vV5v0Bv1pg1Sb9Fb9Ycx2/R2vUPv1Lv0br1Hf6T36o/1Pv2Jztaf6v36z/qA/kwf1J/rQ/oLfVh/qY/or/RR/bU+pr/Rx/UJfVJ/q0/p7/RpfUaf1d/rc/oHfV7/qC9of/Hi/uLbu1FGmRgTY2JNrMlj8pi8Jq/JZ/KZiImYOBNn8pv8poApYAqZQibexJuipqi5iAyZYqaYiZqoKWFKmASTYEqZUsYZZxJNoilryppyppwpb8qbCqaCqWgqmsqmsrnd3G7uMHeY6qa6udPcaWqZWqaOqWPqmXqmvqlvGpgGpqFpaBqZRqaxaWyamCamqWlqmplmprlpblqYFqaVaWXamDamrWlr2pl2poPpYDqajqaT6WSSTJLpbDqbLqaL6Wq6mm6mm+luupsepofpZXqZ3qa36WP6mGSTbPqb/maAGWAGmUFmiBlihpqhZpgZZlJMihlhRpiRZqQZZUaZ0WaMGWteN+PMeDPBTDSTzGSTalLNFDPFTDVTzTQzzcwwM0yaSTOzzWwzx8wx88w8M9/MNwvMArPILDLpJt1kmAyTaTJBmaUmy2SZ5Wa5WWlWmtVmtVlr1pr1Zr3ZaDaazWaz2Wq2mm1mm9lhdphdZpfZY/aYvWav2Wf2mWyTbfab/eaAOWAOmoPmkDlkDpvD5og5Yo6ao+aYOWaOm+PmpDlpTplT5rQ5bc6as+ac+cGcNz+aC8abWCsgj73K5rVX23z2Ghtrc9tfxoVsYRtvi9iiVtsCtuCvYmOtTbAlbSlbWjlbxibam36O7c9xRVvJVrZV7O22qr3DVvubuJ69y9a3d9sG9h5bx9b9VdzQ3msb2QdtY/uQbWJb2qa2tW1mH7TN7UO2hW1pW9nWtqN9zHayj9sk+4TtbJ/8mzjDLrFr7Tq73m6we+3H9qz93h6xX9lz9gfbx/a1Q+yLdqh9yQ6zL9sUO/xv4rH2dTvOjrcT7EQ7yU7+m3iGnWnT7Cw72yLMsXN/Eb9tL8bp9j073wIusAvtIrv4p/hiT5n2fbvUfmCz7DK73K6wK+0qu9qu+WuvK+wmu9lusXvsR3ab3W532J12l939U3zxOPbZT2y2/dQetl/aA/Yze9AetYfsFz/FF4/vqP3aHrPf2OP2hD1pv7Wn7Hf2tD3z0/FfPPZv7Y/2gvUWCEmQJEUBxVAuiqXclIeuorx0NeWjayhC11IcXUf56XoqQAWpEBWmeCpCRUmTIUtEIRWj4hSlG6gE3UgJVJJKUWlyVIYS6SYqSzdTObqFytOtVIFuo4pUiSpTFbqdqtIdVI2qUw26k2pSLapNdagu1aO7qD7dTQ3oHmpI91Ijuo8a0/3UhB6gpvQnakYPUnN6iFpQS2pFrakNPUxt6RFqR+2pAz1KHekx6kSPUxI9QZ3pSepCT1FXepq60TPUnZ6lHtSTetFz1Juepz7Ul5KpH/WnF2gADaRBNJiG0Is0lF6iYfQypdBwGkGv0Eh6lUbRazSaxtBYep3G0XiaQBNpEk2mVHqDptCbNJXeomk0nWbQTEqjWTSb3qY5NJfm0Ts0n96lBbSQFtFiSqf3KIOWUCa9T0vpA8qiZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaUPaRttpx20k3bRbtpDH9Fe+pj20SeUTZ/SfvozHaDP6CB9TofoCzpMX9IR+oqO0td0jL6h43RCXrpCo9N0hs7S93SOfqDz9CNdIE8QYihCGaowCGPCXGFsmDvME14V5g2vDvOF14SR8NowLrwuzB9eHxYIC4aFwsJhfFgkLBrq0IQ2pDAMi4XFw2h4Q1givDFMCEuGpcLSoQvLhInhTWHZ8OawXHhLWD68NawQ3hZWDCuFD95TJbw9rBreEVYLq4c1wjvDmmGtsHZYJ6wb1gvvCuuHd4cNwnvCcuG9YaPwvrBxeH/YJHwgbBr+KWwWPhg2Dx8KW4Qtw1Zh67BN+HDYNnwkbBe2DzuEj4Ydw8fCTuHjYVLoEeDJf7L/ibBz+GSYHPYL+4cvhC+E3t8tF0UXR9Oj70UzokuimdH3o0ujH0Szosuiy6Mroiujq6Kro2uia6PrckN0Q3RjdFN0c3RL1Ps6ucChE0465QIX43K5WJfb5XFXubzuapfPXeMi7loX565z+d31roAr6Aq5wi7eFXFFnXbGWUcudMVccRd1N7gS7kaX4Eq6Uq60c66MS3StXRvXxrV1j7h2rr3r4B51j7rH3GPucfe4e8J1dk+6Lu4p19U97bq5Z9wz7lnXw/V0vdxzrrd73vVxfV2yS3b9XX83wA1wg9wgN8QNcUPdUDfMDXMpLsWNcCPcSDfSjXKj3Gg32o11Y904N85NcBPcJDfJpbpUN8VNcVPdVDfNTXMz3AyX5tLcbDfbzXFz3Dw3z81PmO8WuAVukVvk0l26y3AZLtNluqVuqctyWW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0u22W7/W6/O+AOuIPuc3fIfeEOuy/dEfeVO+q+dsfcN+64O+FOum/dKfedO+3OuLPue3fO/eDOux/dBeddauSNyJTIm5Gpkbci0yLTIzMiMyNpkVmR2ZG3I3MicyPzIu9E5kfejSyILIwsiiyOpEfei2RElkQyI+9HlkY+iGRFlkWWR1ZEVkZWRbwvsi30xXxxH/U3+BL+Rp/gS/pSvrR3voxP9Df5sv5mX87f4sv7W30Ff5uv6Cv5yv4h38K39K18a9/GP+zb+kd8O9/ed/CP+o7+Md/JP+6T/BO+s3/Sd/FP+a7+ad/NP+O7+2d9D9/T9/LP+d7+ed/H9/XJvp/v71/wA/xAP8gP9kP8i36of8kP8y/7FD/cj/Cv+JH+VT/Kv+ZH+zF+rH/dj/Pj/QQ/0U/yk32qf8NP8W/6qf4tP81P9zP8TJ/mZ/nZ/m0/x8/18/w7fr5/1y/wC/0iv9in+/d8hl/iM/37fqn/wGf5ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX5zAAD+Q7/Nb/c7/E6/y+/2e/xHfq//2O/zn/hs/6nf7//sD/jP/EH/uT/kv/CH/Zf+iP/KH/Vf+2P+G3/cn/An/bf+lP/On/Zn/Fn/vT/nf/Dn/Y/+An9njTHGGGPsN/mfvuvf7+/8n7i0XdQfAK7eXvjpX+5XALCxwF/WA0V8xwgAPNG3+wM/bzVrJicnX3psloSg+EIAiFzO/+kXyJfiZdABHoMkaA9l/25/A0XPc/TX+j9/pL1cH497H70VIM8vcmLhcny5/s3/oP7Dj47NqBCejft1/+cvnbeL/UcXAiQUv5yTGy7Hl+uX+wf1C7alf35+cn+WCtDuFzl54XJ8uX4iPAJPQtKvHskYY4wxxhhjjP3FQFG5a+Xf8Pk8Xl3OyQWX4//p8zljjDHGGGOMMcauvKd79nr84aSk9l3/94vcl0r9u3V+4+LnGxG/Z+WYP6r5P3yx69LZ+oOeVPwfOGRe/C6LK/QDiTHGGGOMMfYfc/mi/19I6oX/wY4YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLGc54/4c2JX+hgZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxK+2/AgAA//9OSCwT")
mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000001a80)='./file0/file0\x00', 0x0)

2m52.84109443s ago: executing program 4 (id=4537):
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
clock_gettime(0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
syz_clone(0x49842e00, 0x0, 0x0, 0x0, 0x0, 0x0)

2m52.25274882s ago: executing program 36 (id=4537):
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
clock_gettime(0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
syz_clone(0x49842e00, 0x0, 0x0, 0x0, 0x0, 0x0)

2m51.729514703s ago: executing program 5 (id=4539):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000140)={0x0, 0x20300, 0x8, 0x10, 0x200, &(0x7f0000000300)="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"})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'})
r3 = getpid()
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00')
sync_file_range(r4, 0xe35f, 0x2, 0x6)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x1c, 0x18, 0xa01, 0x70bd29, 0x200000, {0x4}, [@typed={0x8, 0x26, 0x0, 0x0, @pid=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000080)="9d54e2a466c822d76d2efc64de5955d815a26547635ba6a92c9624c1a0ff0f1400b29fed2c92467e154b430bc9d5aef2078387c4bce1ad85a14b4c46e5625a156b9b1a1c6dd8e78d1574ea7cc7125c9112746f6f2f7cb1f398")

2m51.495973647s ago: executing program 5 (id=4540):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
chmod(&(0x7f0000000100)='.\x00', 0x31f)
setresuid(0x0, 0xee01, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/modules\x00', 0x0, 0x0)

2m51.393644687s ago: executing program 5 (id=4541):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000800)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000840)={'syzkaller0\x00', 0x1})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r2, &(0x7f0000000880)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233"], 0x4a)

2m48.717052179s ago: executing program 5 (id=4542):
fsopen(0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6c733d64656661756c742c6465636f6d706f73652c706172743d3078303030303030303030303030303030392c706172743d3078303030303030303030303030303030392c006009785eda8b7d61e025ecbde093924e76933b3a39ae5392c9347cd15ff5913db02d1b9d2b522770566b0bc301e6385d7e3a4dc76bfe187361dfd218ca7dfa8a6440fb5b33ac0a14fa09e7749b848c65db2fdefd28f9017f1c427b3b93cc682e82b107c47e1995b464c3067a722b84f8b512b24ee9cf39c96acf157e7b15f4a534feb85bce35292b70e2efc17288b6cb86252e7dce195b0f507118f00f00003d3abbe154bd6707bd286e5decea1d0ee56db2c0516dd06ded5e524d5bfced14e4b61d3611b475c9ed41e43a72dab99647adca9d6911a54a058820ebdd6084ed28d0aa70fce60bb0da450fe4a1e9c0b24537917212570a913d1c67d5ee0ba541700d22e6060845398b4c66e5d3afbb4bb1ea0e354358645212f51c22abf0e481dd992a85f3c02e6d6fafc6854f52ef"], 0x5, 0x5fc, &(0x7f0000000640)="$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")
mount$bind(&(0x7f0000000dc0)='.\x00', &(0x7f0000000e00)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000e40)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$bind(&(0x7f0000000f80)='.\x00', &(0x7f0000000fc0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000001000)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000001040)={0x2020}, 0x2020)

2m48.439068197s ago: executing program 5 (id=4543):
socket(0x10, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xc41a, &(0x7f0000000340)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0x80000001}}, {@noload}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@debug}, {@barrier}, {@nogrpid}, {@test_dummy_encryption_v1}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000ac0)="$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")
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000840)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000940), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6)
socket$inet6(0xa, 0x3, 0x7)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200)=0x7, 0x4)

2m47.985912563s ago: executing program 5 (id=4544):
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3)
fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000700)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, 0x0)
connect$unix(r1, &(0x7f0000000800)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000880), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000980), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mkdir(&(0x7f0000000040)='dir0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='dir0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x2, 0xa, 0x3, 0x2, 0x2, 0x0, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x34000}, 0x0)

2m47.489437154s ago: executing program 37 (id=4544):
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3)
fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000700)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, 0x0)
connect$unix(r1, &(0x7f0000000800)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000880), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000980), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mkdir(&(0x7f0000000040)='dir0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='dir0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x2, 0xa, 0x3, 0x2, 0x2, 0x0, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x34000}, 0x0)

2m26.2781909s ago: executing program 7 (id=4587):
r0 = socket$unix(0x1, 0x1, 0x0)
accept4$vsock_stream(r0, 0x0, 0x0, 0x800)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000100850000001b000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
exit(0x100000000000035)
tkill(r3, 0x12)
ptrace(0x4206, r3)
wait4(r3, 0x0, 0x8, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r2}, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r4)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80)
syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14552, &(0x7f0000000140)=ANY=[], 0x0, 0x1211, &(0x7f0000000780)="$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")
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
unlink(&(0x7f0000001a00)='./file1\x00')
r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f0000000740))

2m25.233822576s ago: executing program 7 (id=4598):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x88840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x6, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000008c0)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xdddd1000, {}, 0x1, 0x1}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffffffffffff00", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f387400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000079cbee4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m24.70391663s ago: executing program 7 (id=4605):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000240)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)

2m24.454294475s ago: executing program 7 (id=4607):
fsopen(0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5fc, &(0x7f0000000640)="$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")
mount$bind(0x0, &(0x7f0000000e40)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$bind(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000f80)='.\x00', &(0x7f0000000fc0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000001000)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000001040)={0x2020}, 0x2020)

2m23.391913864s ago: executing program 7 (id=4612):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000a00)={'wlan1\x00', @random="0001ff8d00"})

2m21.009114406s ago: executing program 7 (id=4619):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)="30eb483820d08c8fa599c53ea5e06bfd42577153a60a4252", 0x18)

2m20.542128653s ago: executing program 38 (id=4619):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)="30eb483820d08c8fa599c53ea5e06bfd42577153a60a4252", 0x18)

1m36.125069688s ago: executing program 1 (id=4814):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0x5001})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000004c0)=0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'syzkaller1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newtfilter={0x98, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x68, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x777, 0x20000000, 0x6, 0xd24b}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x5b7b}]}}]}, 0x98}}, 0x4044004)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000d00)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x64)

1m35.61998227s ago: executing program 1 (id=4819):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@local]}]}}}], 0x18}}], 0x2, 0x0)

1m35.473051445s ago: executing program 1 (id=4820):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x7)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a004000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000004c0), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000500), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6)
rt_sigqueueinfo(0x0, 0x20, &(0x7f0000000580)={0x2, 0xc2, 0xff7ffffe})
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000004c0)={0xed, 0x0, 0xfffffffffffffffd})
bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x5, 0x13, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @ldst={0x0, 0x3, 0x6, 0x4, 0x0, 0x6}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x5, 0xb4, &(0x7f0000000e80)=""/180, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000fc0)={0x4, 0x8, 0x5, 0x94b}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000001580)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1], &(0x7f00000015c0)=[{0x2, 0x1, 0x4, 0x5}, {0x5, 0x5, 0xb, 0x3}, {0x1, 0x2, 0x1}, {0x1, 0x3, 0xd, 0xb}, {0x4, 0x4, 0xa, 0x8}, {0x5, 0x1, 0xd, 0x9}], 0x10, 0xc}, 0x94)
connect$bt_l2cap(r0, &(0x7f0000000600)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r0, &(0x7f0000000640), 0x0, 0x0)
setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000d00)=0x2, 0x4)
shutdown(r0, 0x1)

1m34.497024784s ago: executing program 1 (id=4829):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
getgroups(0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
shmctl$IPC_SET(0x0, 0x1, 0x0)
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=r0, @ANYRES16], 0x1, 0xc5f, &(0x7f0000000180)="$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")
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0)
setuid(0xee01)
r2 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x18)
prctl$PR_SET_SECUREBITS(0x1c, 0x11)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r3, r2, 0x0, 0x3a)
r4 = shmget(0x2, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./proc\x00', &(0x7f0000001080)='proc\x00', 0x4000, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write$UHID_INPUT(r5, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006)
r6 = getegid()
r7 = socket(0x29, 0x2, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000e00)={0x0, <r8=>0x0}, &(0x7f0000000e40)=0x5)
r9 = getpgrp(0xffffffffffffffff)
openat$cgroup_ro(r2, &(0x7f0000000fc0)='memory.events\x00', 0x0, 0x0)
shmctl$IPC_SET(r4, 0x1, &(0x7f0000000f00)={{0x0, 0xffffffffffffffff, r6, r8, 0x0, 0x93, 0x5}, 0x4, 0xfffffffffffffff3, 0x1, 0x9, r9, 0x0, 0x6})
arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000f80))

1m34.177401577s ago: executing program 1 (id=4834):
syz_mount_image$erofs(&(0x7f0000000e40), &(0x7f0000000e80)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0x3, 0x17e, &(0x7f0000000f00)="$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")
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000004c0))
unshare(0x2020600)
unshare(0x2020600)

1m33.676474608s ago: executing program 1 (id=4839):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x88840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000200)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656d0f20d86635080000000f22d8650f01cfc6f8000f0d35", 0x31}], 0x1, 0x2, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x46, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd1638000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025d0339c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000e0ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c2c28e5b0000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdf9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m32.801267026s ago: executing program 39 (id=4839):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x88840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000200)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656d0f20d86635080000000f22d8650f01cfc6f8000f0d35", 0x31}], 0x1, 0x2, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x46, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd1638000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025d0339c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000e0ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c2c28e5b0000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdf9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m12.871520063s ago: executing program 0 (id=4930):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
fcntl$lock(r0, 0x26, &(0x7f0000000740)={0x1, 0x1, 0x5, 0x1ff, r1})

1m12.469136704s ago: executing program 0 (id=4932):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x80, 0x10000, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x10, 0x5, 0x9, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1e, 0x2}}}, 0x24}}, 0x0)

1m11.546901517s ago: executing program 0 (id=4935):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000000), 0x10)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffd8ee, @any, 0x1}, 0x10)

1m11.257168437s ago: executing program 0 (id=4936):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x10081, &(0x7f0000000540)={[{@noinit_itable}, {@nobh}, {@barrier}, {@sb={'sb', 0x3d, 0x1}}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x45e, &(0x7f00000005c0)="$eJzs20tvG0UcAPD/rpOWvkgo5dEHECiIiEfSpAV64AAIpF6QkOBQjiFNq9K0QU2QaFXRgFA5on4C4IjEJ+AEFwScqLjCHSFVqBcKB7Ro7d3UdexgO0md1r+ftMmMd+yZ/86OPbtjB9C3RvI/ScT2iPg1IoZq2ZsLjNT+Xb92Yfrvaxemk8iyN/9MquX+unZhuixaPm9bkRlNI9JPktjbpN75c+dPTc3Ozpwt8uMLp98bnz93/tmTp6dOzJyYOTN5+PChgxMvPD/53JrEuSNv654P5/btPvL25denj15+58ev8/ZuL/bXx1EzvOo6R2Lk5mNZ54lVv/rGsqMunQz0sCF0pBIReXcNVsf/UFTiRucNxWsf97RxwLrKsizbvOzRSplYzIA7WBK9bgHQG+UHfX79W263cPrRc1dfrl0A5XFfL7banoFIizKDDde3a2kkIo4u/vN5vsXSfYhN61QbAEDEt/n855lm87807q8rd3exNjQcEfdExM6IuDcidkXEfRHVsg9ExIMd1j/SkF8+/7yypavA2pTP/14s1rZunv+Vs78YrhS5HdX4B5PjJ2dnDhTHZDQGN+f5iRXq+O7VXz5rta9+/pdvef3lXLBoxx8DDTfojk0tTK0m5npXP4rYM9As/mRp7Sr/vzsi9nTx+vkxO/nUV/ta7f//+FewButM2ZcRT9b6fzEa4i8lK69Pjt8VszMHxsuzYrmffr70Rqv6u4j/pVWEu0ze/1ubnv9L8Q8n9eu1853Xcem3T1teU3Z7/m9K3qqmyyulD6YWFs5ORGxKFpc/PnnjuWW+LJ/HP7q/+fjfGfHvF8Xz9kZEfhI/FBEPR8QjRdsfjYjHImL/CvH/8Mrj73Yf//rK4z/W2P9XYoX+7zxROfX9N93Hn/f/oWpqtHiknfe/dhu4uqMHAAAAt4e0+h34JB1bSqfp2FjtO/y7Yms6Oze/8PTxuffPHKt9V344BtPyTtdQ3f3QieLecJmfbMgfrN43zrIs21LNj03Pza7XmjrQnm0txn/u90qvWwesu47W0Vr9og24Lfm9JvQv4x/6l/EP/cv4h/7VbPxfjLjeg6YAt5jPf+hfxj/0L+Mf+pfxD31p/txAB7+Wbz+x88gav+Adm6hsjGZ0nIh0QzSju0S6MZpRS2yOiHYLX4xb1bBevzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsjf8CAAD//4Ym6EQ=")
mkdir(&(0x7f0000000000)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2100060, &(0x7f00000000c0))
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)

1m9.811767364s ago: executing program 0 (id=4939):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xfffffffffffffffb, 0x20041)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x3, 0x800, 0x0, 0x8, 0x0})

1m8.76783837s ago: executing program 0 (id=4942):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000000200000000000000000008500000036000000950000000000000049db185086ea6334aa453ec969352991eb38f162575a68c0e574b1758d28a5aa8e86720031a818d25477fc738a2157e500171427cceeb8adc298f40b9affaa9ceb28e1ac72f4d412696ddf196f7380423f5d1cff072e84bf03770a9bf0bede62157b45b5a2ef59cea5048ffb"], &(0x7f0000000180)='GPL\x00', 0x5, 0xc5, &(0x7f00000001c0)=""/197}, 0x80)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r2, 0x25, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000580)={r3, r1, 0x4}, 0x10)

1m7.789969359s ago: executing program 40 (id=4942):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000000200000000000000000008500000036000000950000000000000049db185086ea6334aa453ec969352991eb38f162575a68c0e574b1758d28a5aa8e86720031a818d25477fc738a2157e500171427cceeb8adc298f40b9affaa9ceb28e1ac72f4d412696ddf196f7380423f5d1cff072e84bf03770a9bf0bede62157b45b5a2ef59cea5048ffb"], &(0x7f0000000180)='GPL\x00', 0x5, 0xc5, &(0x7f00000001c0)=""/197}, 0x80)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r2, 0x25, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000580)={r3, r1, 0x4}, 0x10)

32.304952887s ago: executing program 8 (id=5032):
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)

32.134811514s ago: executing program 8 (id=5033):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844)

31.841165034s ago: executing program 8 (id=5036):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x0, "b64fedb1f3512da470be2bb3204670e41b051d82f4eeb34da511c659f388"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)

31.674400031s ago: executing program 8 (id=5038):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x6, 0x817, &(0x7f0000000100)="$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")
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000c40), 0x8000, 0x0)
setns(r0, 0x40000000)
accept4(r0, 0x0, 0x0, 0x80000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = epoll_create1(0x80000)
epoll_pwait(r1, &(0x7f0000000e80), 0x0, 0x2d516fb6, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000e40)=<r2=>0x0)
timer_delete(r2)
r3 = syz_mount_image$fuse(0x0, &(0x7f0000000b80)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0)
mkdirat(r3, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
r4 = socket$key(0xf, 0x3, 0x2)
fgetxattr(r4, &(0x7f0000000ec0)=@known='security.selinux\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000940)=0xca, 0xac5)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
syz_clone3(&(0x7f0000000980)={0x23a00080, &(0x7f0000000a00)=<r6=>0xffffffffffffffff, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58)
readv(r6, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)=@ipv4_newnexthop={0x18, 0x68, 0x300, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x9}}, 0x18}}, 0x400c040)

30.864593433s ago: executing program 8 (id=5043):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000280)={0x2d2, 0xeeee8000, 0x4, r2, 0x11})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x27800000000, 0x0, 0x1, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000380)={0x9, 0x1ff8, 0x0, r2})

30.037287167s ago: executing program 8 (id=5044):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x3, 0x6}, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00', <r2=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x881, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0x87, 0x6, @broadcast}, 0x14)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="3c0000001200010100"], 0x3c}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001c00)={0x1, &(0x7f0000001c40)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
accept$unix(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x6e)
syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000580)='./bus\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c4161a1779daeac00"/18, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="56ba"], 0x1, 0x153e, &(0x7f0000000640)="$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")

29.394662932s ago: executing program 41 (id=5044):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x3, 0x6}, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00', <r2=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x881, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0x87, 0x6, @broadcast}, 0x14)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="3c0000001200010100"], 0x3c}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001c00)={0x1, &(0x7f0000001c40)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
accept$unix(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x6e)
syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000580)='./bus\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c4161a1779daeac00"/18, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="56ba"], 0x1, 0x153e, &(0x7f0000000640)="$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")

11.575263674s ago: executing program 2 (id=5115):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0)

11.02526191s ago: executing program 2 (id=5116):
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08070c085f16"], 0xb)

10.324955431s ago: executing program 2 (id=5119):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
timer_create(0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0xa20, 0x8000c65)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2)
sendfile(r2, r2, 0x0, 0x8000000f3aa6ea)

9.93694049s ago: executing program 6 (id=5121):
socket(0x10, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xc41a, &(0x7f0000000340)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0x80000001}}, {@noload}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@debug}, {@barrier}, {@nogrpid}, {@test_dummy_encryption_v1}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000ac0)="$eJzs289vFFUcAPDvbFt+YyviDxC1ij8af7S0oHLwgtGEi4mJHvBYSyFIoYbWRAiR6gGPhpNH9WjiX+BJLkY9abzq3ZgQw0U0kYyZ3ZllaXeX7W63C+znk0x33uybed83M6998940gL41mv1IIrZFxG8RMRwRA8szjFY+rl09P/PP1fMzSaTpW38l2W7x99XzM0XWJP/cmifGStVNKyycPXdyem5u9kyenlg89f7EwtlzL5w4NX189vjs6amDBw/sn3z5pakX16Se27NYd380v2fX4XcuvTFz5NK7P36TBbct/762HhUjHZc5GqMNT8BTHR/99rI9/2x4wbktZW19MCKGyu1/OAbKqYrheP2TngYHdFWapunGFVurPYClFLiLJdHrCIDeKP7QZ8+/xbKO3Y+eu3Ko8gCU1ftavlS+GYxSnmeo5vl2rY1GxJGlf7/Ilqg7DgEAsLa+y/o/z9fr/5XigZp89+RzQyMRcW9E7IiI+yJiZ0TcH1HO+2BEPLTK8keXpW+Ufz0fhPplc/u1u7UrhyJ5JZ/burn/V/T+YmQgT20v138oOXZibnZffk7GYmhjlp5sUsbl1379rNF3tf2/bMnKL/qCeRx/Di4boDs6vTjdSZ1rXfm4PAZ4YWX9k+pMQBIRuyJidxvH3xQRJ579ek91w4aag+aa17+JwTYCWib9KuKZyvVfimX1j5pQm8xPTmyKudl9E8VdsdJPP198s1H5t77+3ZVd/y117/9q/UeS2vnahdWXcfH3Txs+07R7/29I3i6vF7fTh9OLi2cmIzYkSyu3T93Yt0gX+bP6j+2t3/53RFz/Mt/v4YjIbuJHIuLRiHgsj/3xiHgiIvY2qf8Prz75Xvv1766s/kdXdf1XvzJw8vtvG5Xf2vU/UF4by7e08vuv1QA7OXcAAABwpyiV34FPSuPV9VJpfLzyDv/O2FKam19YfO7Y/Aenj1belR+JoVIx0jVcMx46mY+5FOmpfKy4SO8vjxunaZpuLqfHZ+bnujWnDrRma4P2n/ljoNfRAV1Xnkc7+Hlrmf2HF9xVbppHH+pdHMD6W4P3aIA7lPYP/Uv7h/5Vr/1fiLjWg1CAdebvP/Qv7R/6l/YP/Uv7h77Uyf/1N1vZcbhbR74TVy5HRKM8A20feWNEdBrh01vb3T1KvT6rra8U77RVt5TqZP6vVxFm17HVzBdivQLr8S8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANfJ/AAAA///tr+cS")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000840)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000008c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000940), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6)
socket$inet6(0xa, 0x3, 0x7)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200)=0x7, 0x4)

8.901100716s ago: executing program 2 (id=5123):
r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b0510000101020001090239000201008032090400000000000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000080)={0x100, 0x0, 0x1, 0x14, 0x4})
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r2)
ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29)

6.901038899s ago: executing program 9 (id=5126):
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000700)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000780)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
connect$unix(r1, &(0x7f0000000800)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000880), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000980), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6)
fsopen(&(0x7f0000000a00)='pipefs\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000080)='dir0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x2, 0xa, 0x3, 0x2, 0x2, 0x0, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x34000}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x103a42, 0x4)
read$FUSE(r3, &(0x7f00000018c0)={0x2020}, 0x2020)

5.998268731s ago: executing program 9 (id=5129):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000f80)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449", 0x80)

5.753191936s ago: executing program 2 (id=5130):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5.551874816s ago: executing program 9 (id=5132):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x0, 0x0)

4.766018466s ago: executing program 6 (id=5133):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0)

4.123088611s ago: executing program 9 (id=5135):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000f80)={0xfffffffffffffffb, 0xffffffffffffffff, 0x31, {0x7, 0x8000000000000003}, 0xb}, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.487228276s ago: executing program 6 (id=5136):

3.311626624s ago: executing program 9 (id=5137):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f0000000400000004000000100000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x6, &(0x7f0000000200)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000300), &(0x7f0000000340)=@tcp=r0}, 0x20)
write(r0, &(0x7f0000000380)='h', 0x100000)

3.069231299s ago: executing program 2 (id=5138):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x6010)

2.985825837s ago: executing program 9 (id=5139):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200"], 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

2.953488391s ago: executing program 6 (id=5140):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000f80)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449", 0x80)

2.417118375s ago: executing program 6 (id=5142):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x3, 0x1, 0xa000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.562484081s ago: executing program 6 (id=5144):
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
open(&(0x7f00000002c0)='.\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r2, 0x0, 0x53, &(0x7f0000000300)={0x7, 0x7, 0x2, 'syz0\x00'}, &(0x7f0000000340)=0x28)
setns(0xc9, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x48, r4, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x1e, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast}}, @supported_rates={0x1, 0x4, [{0x4, 0x1}, {0x48, 0x1}, {0x17, 0x1}, {0xb}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8891}, 0x80080c0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x103, 0x4, 0x551, 0x2}})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94)
syz_open_dev$sndpcmc(0x0, 0x8, 0xa4000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r6, 0x8b1a, &(0x7f0000000040))

1.507100997s ago: executing program 3 (id=5145):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file0\x00', 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1/file0\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file2\x00', 0x8, 0x1)
mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x40, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000480)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x0)

1.310630977s ago: executing program 3 (id=5146):
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000700)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000780)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
connect$unix(r1, &(0x7f0000000800)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000880), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000980), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6)
fsopen(&(0x7f0000000a00)='pipefs\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000080)='dir0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x2, 0xa, 0x3, 0x2, 0x2, 0x0, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x34000}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x103a42, 0x4)
read$FUSE(r3, &(0x7f00000018c0)={0x2020}, 0x2020)

361.083394ms ago: executing program 3 (id=5147):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003ac0)={&(0x7f0000003b00)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x6, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50)

189.209431ms ago: executing program 3 (id=5148):

132.276877ms ago: executing program 3 (id=5149):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)="e0c45c0e76ad11570ae0458ddb5e03a9134ca3d905ebbf0d1da1688f7c129c5f06c0bb6eff5f4baf4e71c22ba06689ee5ddcc02b62fc2ee6742cd6ee00f8b9b8379b321ca5f4ce6c6a7cf8233fa539aff894f146b41f91575aeddfd7fdb102861d06f42abbd190e109a568402c66599483c15384ef8c6d064fd48f7de025e17d4957298d283475dce7f973e74f5222361f865028a4f9a006d2c9c81f75a611bf817d9376ddc2bfeb5f4c4b884927f6829f3f9bec9d9bac4d7240c022a673", 0xbe)
sendfile(r0, r0, 0x0, 0x3)

0s ago: executing program 3 (id=5150):
r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0x0)
ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x9, 0x5, 0x800, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000})
mount(0x0, 0x0, 0x0, 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_fuse_handle_req(r2, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6})
ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0)
ioctl$GET_ARRAY_INFO(r1, 0x80480911, &(0x7f0000000280))
pwrite64(r1, &(0x7f0000000300)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x19, 0x1000)
ioctl$GET_DISK_INFO(r1, 0x80140912, 0x0)
openat$md_sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$STOP_ARRAY(r1, 0x932, 0x0)

kernel console output (not intermixed with test programs):

] hsr_slave_0: entered promiscuous mode
[ 1415.828495][T22088] hsr_slave_1: entered promiscuous mode
[ 1415.868531][ T1120] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1415.937463][T22080] hsr_slave_0: entered promiscuous mode
[ 1415.944965][T22080] hsr_slave_1: entered promiscuous mode
[ 1415.951396][T22080] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1415.959319][T22080] Cannot create hsr debugfs directory
[ 1415.988599][T22148] rxe_eth0 speed is unknown, defaulting to 1000
[ 1416.176110][T22106] chnl_net:caif_netlink_parms(): no params data found
[ 1416.463457][ T1120] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1416.585885][ T1120] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1416.612800][T22106] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1416.620044][T22106] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1416.627628][T22106] bridge_slave_0: entered allmulticast mode
[ 1416.635525][T22106] bridge_slave_0: entered promiscuous mode
[ 1416.652208][T22106] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1416.659513][T22106] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1416.666844][T22106] bridge_slave_1: entered allmulticast mode
[ 1416.674320][T22106] bridge_slave_1: entered promiscuous mode
[ 1416.708387][ T1120] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1416.789531][ T1120] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1416.894339][T22106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1416.945876][T22106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1417.127352][T22148] chnl_net:caif_netlink_parms(): no params data found
[ 1417.188662][T22106] team0: Port device team_slave_0 added
[ 1417.195399][T22080] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1417.218186][T22080] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1417.224988][T21490] Bluetooth: hci1: command tx timeout
[ 1417.261768][T22106] team0: Port device team_slave_1 added
[ 1417.302617][T21490] Bluetooth: hci3: command tx timeout
[ 1417.319856][T22080] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1417.430597][T22080] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1417.641644][T22106] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1417.648839][T22106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1417.675713][T22106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1417.693028][T22106] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1417.699983][T22106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1417.728459][T22106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1417.815275][T22088] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1417.827628][T22148] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1417.838532][T22148] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1417.847901][T22148] bridge_slave_0: entered allmulticast mode
[ 1417.855527][T22148] bridge_slave_0: entered promiscuous mode
[ 1417.863035][T21490] Bluetooth: hci0: command tx timeout
[ 1417.864130][T22148] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1417.871534][T21490] Bluetooth: hci2: command tx timeout
[ 1417.877039][T22148] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1417.889649][T22148] bridge_slave_1: entered allmulticast mode
[ 1417.897641][T22148] bridge_slave_1: entered promiscuous mode
[ 1417.920885][T22088] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1417.931500][T22088] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1418.013419][T22148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1418.035316][T22088] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1418.102470][T22148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1418.134293][T22106] hsr_slave_0: entered promiscuous mode
[ 1418.141045][T22106] hsr_slave_1: entered promiscuous mode
[ 1418.148039][T22106] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1418.155858][T22106] Cannot create hsr debugfs directory
[ 1418.279843][T22148] team0: Port device team_slave_0 added
[ 1418.334283][T22148] team0: Port device team_slave_1 added
[ 1418.479755][T22148] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1418.488313][T22148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1418.516446][T22148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1418.537905][T22148] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1418.545687][T22148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1418.571990][T22148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1418.967955][T22148] hsr_slave_0: entered promiscuous mode
[ 1418.981645][T22148] hsr_slave_1: entered promiscuous mode
[ 1419.004248][T22148] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1419.011863][T22148] Cannot create hsr debugfs directory
[ 1419.331674][T22080] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1419.386434][T21490] Bluetooth: hci3: command tx timeout
[ 1419.449079][T22106] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1419.486310][T22106] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1419.512050][T22106] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1419.522883][T22106] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1419.538966][T22088] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1419.635099][T22080] 8021q: adding VLAN 0 to HW filter on device team0
[ 1419.694142][T13248] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1419.701320][T13248] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1419.769697][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1419.776963][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1419.801000][T22148] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1419.821892][T22148] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1419.856196][T22088] 8021q: adding VLAN 0 to HW filter on device team0
[ 1419.922964][T22148] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1419.954914][T21490] Bluetooth: hci0: command tx timeout
[ 1419.964758][T13247] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1419.971918][T13247] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1420.006770][T22148] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1420.133133][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1420.140331][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1420.208562][ T1120] hsr_slave_0: left promiscuous mode
[ 1420.217166][ T1120] hsr_slave_1: left promiscuous mode
[ 1420.226490][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1420.234826][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1420.243753][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1420.251192][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1420.260692][ T1120] bridge_slave_1: left allmulticast mode
[ 1420.267218][ T1120] bridge_slave_1: left promiscuous mode
[ 1420.273335][ T1120] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1420.285219][ T1120] bridge_slave_0: left allmulticast mode
[ 1420.290918][ T1120] bridge_slave_0: left promiscuous mode
[ 1420.304856][ T1120] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1420.327682][ T1120] hsr_slave_0: left promiscuous mode
[ 1420.345930][ T1120] hsr_slave_1: left promiscuous mode
[ 1420.352095][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1420.377384][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1420.393446][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1420.400907][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1420.417793][ T1120] bridge_slave_1: left allmulticast mode
[ 1420.428147][ T1120] bridge_slave_1: left promiscuous mode
[ 1420.438238][ T1120] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1420.457749][ T1120] bridge_slave_0: left allmulticast mode
[ 1420.469372][ T1120] bridge_slave_0: left promiscuous mode
[ 1420.478643][ T1120] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1420.601153][ T1120] veth1_macvtap: left promiscuous mode
[ 1420.612710][ T1120] veth0_macvtap: left promiscuous mode
[ 1420.618428][ T1120] veth1_vlan: left promiscuous mode
[ 1420.631345][ T1120] veth0_vlan: left promiscuous mode
[ 1420.640916][ T1120] veth1_macvtap: left promiscuous mode
[ 1420.652679][ T1120] veth0_macvtap: left promiscuous mode
[ 1420.658399][ T1120] veth1_vlan: left promiscuous mode
[ 1420.672344][ T1120] veth0_vlan: left promiscuous mode
[ 1421.671231][ T1120] team0 (unregistering): Port device team_slave_1 removed
[ 1421.730750][ T1120] team0 (unregistering): Port device team_slave_0 removed
[ 1421.787757][ T1120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1421.846425][ T1120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1422.030803][T21490] Bluetooth: hci0: command tx timeout
[ 1422.285008][ T1120] bond0 (unregistering): Released all slaves
[ 1423.025114][ T1120] team0 (unregistering): Port device team_slave_1 removed
[ 1423.086046][ T1120] team0 (unregistering): Port device team_slave_0 removed
[ 1423.139584][ T1120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1423.166064][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.209556][ T1120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1423.617688][ T1120] bond0 (unregistering): Released all slaves
[ 1424.058914][T22106] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1424.115816][T21490] Bluetooth: hci0: command tx timeout
[ 1424.210001][T22106] 8021q: adding VLAN 0 to HW filter on device team0
[ 1424.258846][T22148] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1424.305664][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1424.312897][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1424.386360][T12160] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1424.393640][T12160] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1424.451339][T22148] 8021q: adding VLAN 0 to HW filter on device team0
[ 1424.538799][T12158] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1424.546022][T12158] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1424.584667][T12158] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1424.591814][T12158] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1424.692385][T22080] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1424.867832][T22088] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1425.528652][T22106] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1425.591340][T22080] veth0_vlan: entered promiscuous mode
[ 1425.607759][T22148] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1425.655939][T22080] veth1_vlan: entered promiscuous mode
[ 1425.775321][T22080] veth0_macvtap: entered promiscuous mode
[ 1425.821100][T22080] veth1_macvtap: entered promiscuous mode
[ 1425.898743][T22080] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1425.958192][T22080] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1425.989854][T22088] veth0_vlan: entered promiscuous mode
[ 1426.041578][T22080] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1426.052349][T22080] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1426.068816][T22080] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1426.078379][T22080] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1426.103964][T22088] veth1_vlan: entered promiscuous mode
[ 1426.236687][T22088] veth0_macvtap: entered promiscuous mode
[ 1426.289630][T22088] veth1_macvtap: entered promiscuous mode
[ 1426.443519][T22088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1426.468925][T22088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1426.491081][T22088] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1426.519664][T12158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1426.530280][T12158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1426.568780][T22088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1426.581178][T22088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1426.601173][T22088] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1426.650055][T22088] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1426.660750][T22088] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1426.678054][T22088] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1426.689523][T22088] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1426.713664][T13243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1426.721636][T13243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1426.938064][T22148] veth0_vlan: entered promiscuous mode
[ 1426.993704][T22148] veth1_vlan: entered promiscuous mode
[ 1427.017596][T22106] veth0_vlan: entered promiscuous mode
[ 1427.095460][T22106] veth1_vlan: entered promiscuous mode
[ 1427.117272][T12076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1427.133573][T12076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1427.174110][T22279] syzkaller0: entered promiscuous mode
[ 1427.179652][T22279] syzkaller0: entered allmulticast mode
[ 1427.255480][T13247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1427.266427][T13247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1427.268466][T22148] veth0_macvtap: entered promiscuous mode
[ 1427.289777][T22148] veth1_macvtap: entered promiscuous mode
[ 1427.369992][T22106] veth0_macvtap: entered promiscuous mode
[ 1427.407742][T22106] veth1_macvtap: entered promiscuous mode
[ 1427.441085][T22148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1427.471971][T22148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1427.488126][T22148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1427.500084][T22148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1427.518134][T22148] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1427.581002][T22148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1427.612704][T22148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1427.639008][T22148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1427.664471][T22148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1427.682404][T22148] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1427.706422][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1427.719664][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1427.730736][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1427.743244][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1427.753562][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1427.778663][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1427.806514][T22106] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1427.848046][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1427.892770][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1427.904997][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1427.928523][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1427.946381][T22295] loop7: detected capacity change from 0 to 512
[ 1427.953426][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1427.969351][T22295] EXT4-fs: test_dummy_encryption requires encrypt feature
[ 1427.997438][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1428.079061][T22299] loop6: detected capacity change from 0 to 128
[ 1428.127402][T22106] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1428.165635][T22299] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[ 1428.227843][T22148] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1428.302553][T22148] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1428.365690][T22148] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1428.431176][T22148] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1428.508045][T22106] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1428.531794][T22106] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1428.552620][T22106] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1428.578415][T22106] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1428.578943][T22299] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[ 1428.868811][T13248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1428.905012][T13248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1428.940521][T22314] loop7: detected capacity change from 0 to 256
[ 1428.971179][T12158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1429.001473][T12158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1429.064290][T12158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1429.075016][T12158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1429.160244][T13248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1429.182696][T13825] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[ 1429.232182][T13248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1429.440382][T13825] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1429.473132][T13825] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1429.509568][T13825] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1429.522319][T13825] usb 7-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00
[ 1429.562323][T13825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1429.600419][T13825] usb 7-1: config 0 descriptor??
[ 1430.447430][T13825] asus 0003:0B05:1807.0004: unknown main item tag 0x0
[ 1430.454514][T13825] asus 0003:0B05:1807.0004: ignoring exceeding usage max
[ 1430.464470][T13825] asus 0003:0B05:1807.0004: unbalanced delimiter at end of report description
[ 1430.512186][T13825] asus 0003:0B05:1807.0004: Asus hid parse failed: -22
[ 1430.524386][T13825] asus: probe of 0003:0B05:1807.0004 failed with error -22
[ 1430.628499][T22331] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4554'.
[ 1430.695278][T22331] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4554'.
[ 1430.736278][T13825] usb 7-1: USB disconnect, device number 2
[ 1430.754476][T22337] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4554'.
[ 1430.779936][T22337] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4554'.
[ 1430.808112][T22337] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4554'.
[ 1431.097841][T22346] netlink: 'syz.8.4557': attribute type 1 has an invalid length.
[ 1431.485089][T22356] loop6: detected capacity change from 0 to 128
[ 1431.505141][T22356] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[ 1431.520622][T22358] loop8: detected capacity change from 0 to 164
[ 1431.570204][T22358] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[ 1431.682867][T22358] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[ 1431.864289][T22366] binder: 22361:22366 ioctl c0306201 200000000240 returned -14
[ 1432.079201][T22371] ip_tables: iptables: counters copy to user failed while replacing table
[ 1432.868598][T22371] loop8: detected capacity change from 0 to 512
[ 1432.932981][T22371] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1432.989820][T22371] EXT4-fs (loop8): 1 truncate cleaned up
[ 1433.011064][T22371] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1433.149134][T22386] loop6: detected capacity change from 0 to 512
[ 1433.200626][T22386] EXT4-fs: test_dummy_encryption requires encrypt feature
[ 1433.799194][T22106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1433.813812][T22400] loop6: detected capacity change from 0 to 128
[ 1433.844094][T22400] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[ 1435.039138][T22421] syzkaller0: entered promiscuous mode
[ 1435.075950][T22421] syzkaller0: entered allmulticast mode
[ 1435.170043][T22427] loop9: detected capacity change from 0 to 2048
[ 1435.301357][T22432] loop9: detected capacity change from 0 to 1024
[ 1435.309995][T22432] EXT4-fs: inline encryption not supported
[ 1435.320879][T22432] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1435.475557][T22436] syzkaller0: entered promiscuous mode
[ 1435.551321][T22432] EXT4-fs error (device loop9): ext4_free_blocks:6699: comm syz.9.4580: Freeing blocks not in datazone - block = 0, count = 4096
[ 1435.569480][T22432] EXT4-fs (loop9): Remounting filesystem read-only
[ 1435.576220][T22432] EXT4-fs (loop9): 1 orphan inode deleted
[ 1435.584398][T22432] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1435.620659][T22436] syzkaller0: entered allmulticast mode
[ 1436.088110][T22148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1436.115444][T13243] EXT4-fs (loop9): Quota write (off=2048, len=1024) cancelled because transaction is not started
[ 1436.127082][T13243] Quota error (device loop9): write_blk: dquota write failed
[ 1436.134812][T13243] Quota error (device loop9): remove_free_dqentry: Can't write block (2) with free entries
[ 1436.148540][T13243] EXT4-fs (loop9): Quota write (off=2048, len=1024) cancelled because transaction is not started
[ 1436.161792][T13243] Quota error (device loop9): write_blk: dquota write failed
[ 1436.169645][T13243] Quota error (device loop9): free_dqentry: Can't move quota data block (2) to free list
[ 1436.180169][T13243] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started
[ 1436.213434][T13243] Quota error (device loop9): v2_write_file_info: Can't write info structure
[ 1436.660613][T22474] syzkaller0: entered promiscuous mode
[ 1436.682793][T22474] syzkaller0: entered allmulticast mode
[ 1436.842018][T22473] loop7: detected capacity change from 0 to 8192
[ 1436.883342][T22473] FAT-fs (loop7): Unrecognized mount option "" or missing value
[ 1437.346329][   T28] audit: type=1800 audit(1793735620.011:53): pid=22490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4595" name="c_chmask" dev="configfs" ino=68617 res=0 errno=0
[ 1437.805270][T22508] syzkaller0: entered promiscuous mode
[ 1437.810824][T22508] syzkaller0: entered allmulticast mode
[ 1438.427980][T22524] loop7: detected capacity change from 0 to 1024
[ 1439.352901][T22539] lo: entered allmulticast mode
[ 1439.362237][T22539] tunl0: entered allmulticast mode
[ 1439.372347][T22539] gre0: entered allmulticast mode
[ 1439.381766][T22539] gretap0: entered allmulticast mode
[ 1439.394475][T22539] erspan0: entered allmulticast mode
[ 1439.403439][T22539] ip_vti0: entered allmulticast mode
[ 1441.423004][T22556] syzkaller0: entered promiscuous mode
[ 1441.428562][T22556] syzkaller0: entered allmulticast mode
[ 1441.578158][T22561] loop9: detected capacity change from 0 to 2048
[ 1441.896449][T13247] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1442.245093][T13247] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1442.430290][T13247] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1442.659940][T13247] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1443.406364][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1443.426518][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1443.437018][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1443.468244][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1443.479516][ T5098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1443.487899][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1443.530860][T22596] loop8: detected capacity change from 0 to 2048
[ 1443.683780][T22339] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1443.705701][T22596] loop8: detected capacity change from 0 to 1024
[ 1443.713091][T22596] EXT4-fs: inline encryption not supported
[ 1443.734520][T22596] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1443.779896][T22596] EXT4-fs error (device loop8): ext4_free_blocks:6699: comm syz.8.4629: Freeing blocks not in datazone - block = 0, count = 4096
[ 1443.816992][T22596] EXT4-fs (loop8): Remounting filesystem read-only
[ 1443.823795][T22596] EXT4-fs (loop8): 1 orphan inode deleted
[ 1443.830850][T22596] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1443.865835][T22590] rxe_eth0 speed is unknown, defaulting to 1000
[ 1443.956461][T22106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1444.014783][T13248] EXT4-fs (loop8): Quota write (off=2048, len=1024) cancelled because transaction is not started
[ 1444.049870][T13248] Quota error (device loop8): write_blk: dquota write failed
[ 1444.082812][T13248] Quota error (device loop8): remove_free_dqentry: Can't write block (2) with free entries
[ 1444.106566][T22608] loop6: detected capacity change from 0 to 4096
[ 1444.122782][T13248] EXT4-fs (loop8): Quota write (off=2048, len=1024) cancelled because transaction is not started
[ 1444.134347][T22608] EXT4-fs: Ignoring removed nobh option
[ 1444.140149][T22608] EXT4-fs: Ignoring removed bh option
[ 1444.163900][T13248] Quota error (device loop8): write_blk: dquota write failed
[ 1444.184084][T13248] Quota error (device loop8): free_dqentry: Can't move quota data block (2) to free list
[ 1444.213778][T13248] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started
[ 1444.253551][T22608] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1444.301358][T22608] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1444.302733][T13248] Quota error (device loop8): v2_write_file_info: Can't write info structure
[ 1445.467211][T22615] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[ 1445.547997][ T5098] Bluetooth: hci2: command tx timeout
[ 1445.714085][T22080] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1446.696736][T22660] loop9: detected capacity change from 0 to 2048
[ 1446.848354][T22590] chnl_net:caif_netlink_parms(): no params data found
[ 1446.937139][T22666] loop9: detected capacity change from 0 to 128
[ 1446.963893][T22666] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[ 1447.060148][T13247] hsr_slave_0: left promiscuous mode
[ 1447.119584][T13247] hsr_slave_1: left promiscuous mode
[ 1447.140833][T13247] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1447.166275][T13247] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1447.194551][T13247] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1447.227959][T13247] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1447.249055][T13247] bridge_slave_1: left allmulticast mode
[ 1447.262680][T13247] bridge_slave_1: left promiscuous mode
[ 1447.278711][T13247] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1447.319867][T13247] bridge_slave_0: left allmulticast mode
[ 1447.337512][T13247] bridge_slave_0: left promiscuous mode
[ 1447.363358][T13247] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1447.453979][T13247] veth1_macvtap: left promiscuous mode
[ 1447.461333][T13247] veth0_macvtap: left promiscuous mode
[ 1447.476580][T13247] veth1_vlan: left promiscuous mode
[ 1447.482065][T13247] veth0_vlan: left promiscuous mode
[ 1447.622909][ T5098] Bluetooth: hci2: command tx timeout
[ 1449.720855][ T5098] Bluetooth: hci2: command tx timeout
[ 1449.744095][T13247] team0 (unregistering): Port device team_slave_1 removed
[ 1449.794778][T22704] loop8: detected capacity change from 0 to 256
[ 1449.911769][T13247] team0 (unregistering): Port device team_slave_0 removed
[ 1449.980704][T13247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1450.072903][T13247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1450.646100][T13247] bond0 (unregistering): Released all slaves
[ 1451.171329][T22590] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1451.222813][T22590] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1451.230098][T22590] bridge_slave_0: entered allmulticast mode
[ 1451.266021][T22590] bridge_slave_0: entered promiscuous mode
[ 1451.290417][T22590] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1451.326061][T22590] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1451.344099][T22590] bridge_slave_1: entered allmulticast mode
[ 1451.362362][T22590] bridge_slave_1: entered promiscuous mode
[ 1451.502010][T22590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1451.546555][T22590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1451.658745][T22590] team0: Port device team_slave_0 added
[ 1451.695478][T22590] team0: Port device team_slave_1 added
[ 1451.767025][T22723] syzkaller0: entered promiscuous mode
[ 1451.779065][T22723] syzkaller0: entered allmulticast mode
[ 1451.783256][ T5098] Bluetooth: hci2: command tx timeout
[ 1451.804700][T22590] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1451.835205][T22590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1451.899240][T22590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1451.926836][T22590] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1451.940911][T22590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1452.064419][T22590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1452.369933][T22590] hsr_slave_0: entered promiscuous mode
[ 1452.398122][T22590] hsr_slave_1: entered promiscuous mode
[ 1452.676953][T22747] netlink: 'syz.8.4657': attribute type 1 has an invalid length.
[ 1453.174997][T22762] loop9: detected capacity change from 0 to 1024
[ 1453.214089][T22762] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1453.353943][T22762] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1453.759770][T22779] fuse: Unknown parameter '0000000000000000000000000000000000000000'
[ 1453.901744][T22148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1454.920315][T22793] rxe_eth0 speed is unknown, defaulting to 1000
[ 1455.245868][T22590] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1455.277088][T22590] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1455.318322][T22590] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1455.351778][T22590] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1455.740591][T22590] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1455.818802][T22590] 8021q: adding VLAN 0 to HW filter on device team0
[ 1455.851804][T12160] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1455.859006][T12160] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1455.923576][T12160] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1455.931326][T12160] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1456.729281][T22590] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1456.874202][T22841] syzkaller0: entered promiscuous mode
[ 1456.882458][T22841] syzkaller0: entered allmulticast mode
[ 1456.917606][T22590] veth0_vlan: entered promiscuous mode
[ 1457.031480][T22590] veth1_vlan: entered promiscuous mode
[ 1457.191316][T22590] veth0_macvtap: entered promiscuous mode
[ 1457.233805][T22590] veth1_macvtap: entered promiscuous mode
[ 1457.289006][T22590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1457.322509][T22590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1457.340594][T22590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1457.361387][T22590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1457.379063][T22590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1457.390519][T22590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1457.428038][T22590] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1457.450567][T22590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1457.462983][T22590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1457.474577][T22590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1457.499297][T22590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1457.519635][T22590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1457.531618][T22590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1457.544451][T22590] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1457.562441][T22590] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1457.573382][T22590] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1457.582327][T22590] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1457.597697][T22590] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1457.828814][T13247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1457.862085][T13247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1457.896062][T22865] loop9: detected capacity change from 0 to 2048
[ 1457.921550][T12160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1457.941368][T12160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1457.957535][T22865] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1458.849402][T22879] netlink: 'syz.6.4689': attribute type 1 has an invalid length.
[ 1458.899819][T22881] syzkaller0: entered promiscuous mode
[ 1458.908879][T22881] syzkaller0: entered allmulticast mode
[ 1459.039544][T22883] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4690'.
[ 1459.283915][T22891] loop8: detected capacity change from 0 to 128
[ 1459.311552][T22891] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1459.559253][T22889] loop1: detected capacity change from 0 to 8192
[ 1459.587856][T22889] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1459.712441][T22901] netlink: 'syz.8.4698': attribute type 1 has an invalid length.
[ 1459.925165][T22904] syzkaller0: entered promiscuous mode
[ 1459.935362][T22904] syzkaller0: entered allmulticast mode
[ 1461.998067][T22929] netlink: 'syz.8.4706': attribute type 12 has an invalid length.
[ 1462.203325][T22938] netlink: 'syz.8.4708': attribute type 1 has an invalid length.
[ 1462.228170][T22941] loop6: detected capacity change from 0 to 256
[ 1462.269939][T22941] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d)
[ 1464.747790][T22970] loop8: detected capacity change from 0 to 256
[ 1464.821674][T22988] syzkaller0: entered promiscuous mode
[ 1464.851988][T22970] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[ 1464.872146][T22988] syzkaller0: entered allmulticast mode
[ 1464.892782][T22970] exFAT-fs (loop8): start_clu is invalid cluster(0x400)
[ 1465.317374][T23007] loop8: detected capacity change from 0 to 512
[ 1465.341544][T23007] EXT4-fs: test_dummy_encryption requires encrypt feature
[ 1465.574345][T23003] syzkaller0: entered promiscuous mode
[ 1465.579893][T23003] syzkaller0: entered allmulticast mode
[ 1465.903871][T23022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4724'.
[ 1467.193712][T23044] syzkaller0: entered promiscuous mode
[ 1467.199358][T23044] syzkaller0: entered allmulticast mode
[ 1467.320243][T23053] loop1: detected capacity change from 0 to 1024
[ 1467.743090][T23068] loop1: detected capacity change from 0 to 2048
[ 1467.744503][T23060] syzkaller0: entered promiscuous mode
[ 1467.773868][T23060] syzkaller0: entered allmulticast mode
[ 1467.851488][T23066] loop9: detected capacity change from 0 to 8192
[ 1467.869861][T23066] FAT-fs (loop9): Unrecognized mount option "" or missing value
[ 1467.973623][T23072] loop1: detected capacity change from 0 to 128
[ 1467.983559][T23072] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[ 1469.353929][T23090] loop8: detected capacity change from 0 to 512
[ 1469.383659][T23090] EXT4-fs: test_dummy_encryption requires encrypt feature
[ 1469.840751][T23102] syzkaller0: entered promiscuous mode
[ 1469.857504][T23102] syzkaller0: entered allmulticast mode
[ 1470.553029][T23114] loop1: detected capacity change from 0 to 8192
[ 1470.572440][T23114] FAT-fs (loop1): Unrecognized mount option "" or missing value
[ 1471.761872][T23139] loop6: detected capacity change from 0 to 8
[ 1471.824044][T23139] SQUASHFS error: Failed to read block 0x6e6: -5
[ 1471.890007][T23139] SQUASHFS error: Unable to read metadata cache entry [6e4]
[ 1471.901432][T23139] SQUASHFS error: Unable to read directory block [6aa:26]
[ 1471.910782][T23143] SQUASHFS error: Unable to read metadata cache entry [6e4]
[ 1471.959192][T23143] SQUASHFS error: Unable to read directory block [6e4:0]
[ 1472.021998][T23147] syzkaller0: entered promiscuous mode
[ 1472.029542][T23147] syzkaller0: entered allmulticast mode
[ 1472.911834][T23162] loop9: detected capacity change from 0 to 128
[ 1472.932000][T23162] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[ 1473.519979][ T7583] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1473.822927][ T7583] usb 9-1: Using ep0 maxpacket: 16
[ 1473.926992][ T7583] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1474.093575][ T7583] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1474.178943][ T7583] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1474.222578][ T7583] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1474.233742][T23187] netlink: 'syz.9.4764': attribute type 1 has an invalid length.
[ 1474.269648][ T7583] usb 9-1: SerialNumber: syz
[ 1474.331818][ T7583] hub 9-1:1.0: bad descriptor, ignoring hub
[ 1474.348347][ T7583] hub: probe of 9-1:1.0 failed with error -5
[ 1474.361390][T23182] loop6: detected capacity change from 0 to 8192
[ 1474.394246][ T7583] usb 9-1: bad CDC descriptors
[ 1474.404821][T23182] FAT-fs (loop6): Unrecognized mount option "" or missing value
[ 1474.682940][T18958] usb 9-1: USB disconnect, device number 2
[ 1475.732055][T23211] loop8: detected capacity change from 0 to 128
[ 1475.779777][T23211] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1476.112075][T23223] loop8: detected capacity change from 0 to 256
[ 1477.268952][T23229] syzkaller0: entered promiscuous mode
[ 1477.283447][T23229] syzkaller0: entered allmulticast mode
[ 1478.170022][T23252] loop6: detected capacity change from 0 to 128
[ 1478.394268][T23252] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[ 1478.624144][T23259] xt_hashlimit: size too large, truncated to 1048576
[ 1478.649435][T23253] loop9: detected capacity change from 0 to 8192
[ 1478.675912][T23253] FAT-fs (loop9): Unrecognized mount option "" or missing value
[ 1479.684832][T23282] FAULT_INJECTION: forcing a failure.
[ 1479.684832][T23282] name failslab, interval 1, probability 0, space 0, times 0
[ 1479.722658][T23282] CPU: 0 PID: 23282 Comm: syz.8.4784 Not tainted syzkaller #0
[ 1479.730190][T23282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1479.740287][T23282] Call Trace:
[ 1479.743599][T23282]  <TASK>
[ 1479.746578][T23282]  dump_stack_lvl+0x18c/0x250
[ 1479.751344][T23282]  ? show_regs_print_info+0x20/0x20
[ 1479.756607][T23282]  ? load_image+0x420/0x420
[ 1479.761158][T23282]  ? __might_sleep+0xe0/0xe0
[ 1479.765793][T23282]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1479.770871][T23282]  should_fail_ex+0x394/0x4c0
[ 1479.775630][T23282]  should_failslab+0x9/0x20
[ 1479.780180][T23282]  slab_pre_alloc_hook+0x59/0x300
[ 1479.785253][T23282]  kmem_cache_alloc+0x5a/0x2d0
[ 1479.790067][T23282]  ? __proc_create+0x373/0x8b0
[ 1479.794868][T23282]  __proc_create+0x373/0x8b0
[ 1479.799511][T23282]  ? proc_symlink+0x260/0x260
[ 1479.804218][T23282]  ? _raw_write_unlock+0x28/0x40
[ 1479.809178][T23282]  ? proc_register+0x5d5/0x7f0
[ 1479.813976][T23282]  proc_create_reg+0x8b/0x110
[ 1479.818669][T23282]  proc_create_net_data+0x99/0x1b0
[ 1479.823811][T23282]  ? fib_default_rule_add+0x4f/0x390
[ 1479.829135][T23282]  ? bpf_iter_fini_seq_net+0xc0/0xc0
[ 1479.834461][T23282]  ? netlink_set_err+0x3b0/0x3b0
[ 1479.839432][T23282]  ? fib_default_rule_add+0x1fe/0x390
[ 1479.844861][T23282]  fib_proc_init+0xc6/0x140
[ 1479.849398][T23282]  fib_net_init+0x213/0x370
[ 1479.853923][T23282]  ? __in_dev_get_rtnl+0xb0/0xb0
[ 1479.858882][T23282]  ? ip_fib_net_exit+0x380/0x380
[ 1479.863876][T23282]  ? devinet_init_net+0x390/0x5c0
[ 1479.868925][T23282]  ops_init+0x391/0x640
[ 1479.873110][T23282]  setup_net+0x3b6/0xa20
[ 1479.877379][T23282]  ? copy_net_ns+0x530/0x530
[ 1479.881995][T23282]  ? copy_net_ns+0x347/0x530
[ 1479.886604][T23282]  ? down_read_killable+0x1d0/0x340
[ 1479.891829][T23282]  copy_net_ns+0x361/0x530
[ 1479.896277][T23282]  create_new_namespaces+0x3ce/0x700
[ 1479.901603][T23282]  unshare_nsproxy_namespaces+0x11a/0x160
[ 1479.907407][T23282]  ksys_unshare+0x4fa/0x8f0
[ 1479.911980][T23282]  ? sighand_ctor+0x50/0x50
[ 1479.916515][T23282]  ? lock_chain_count+0x20/0x20
[ 1479.921400][T23282]  ? syscall_enter_from_user_mode+0x25/0x80
[ 1479.927335][T23282]  __x64_sys_unshare+0x38/0x40
[ 1479.932133][T23282]  do_syscall_64+0x55/0xb0
[ 1479.936602][T23282]  ? clear_bhb_loop+0x40/0x90
[ 1479.941309][T23282]  ? clear_bhb_loop+0x40/0x90
[ 1479.946016][T23282]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1479.951939][T23282] RIP: 0033:0x7f059859fb19
[ 1479.956375][T23282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1479.976003][T23282] RSP: 002b:00007f0599514028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1479.984469][T23282] RAX: ffffffffffffffda RBX: 00007f0598825fa0 RCX: 00007f059859fb19
[ 1479.992465][T23282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200
[ 1480.000460][T23282] RBP: 00007f0598637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1480.008468][T23282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1480.016466][T23282] R13: 00007f0598826038 R14: 00007f0598825fa0 R15: 00007ffc8e153ee8
[ 1480.024483][T23282]  </TASK>
[ 1480.162013][T23290] syzkaller0: entered promiscuous mode
[ 1480.186948][T23290] syzkaller0: entered allmulticast mode
[ 1481.528109][T23317] loop8: detected capacity change from 0 to 128
[ 1481.542362][T23310] syzkaller0: entered promiscuous mode
[ 1481.568309][T23310] syzkaller0: entered allmulticast mode
[ 1481.587677][T23317] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1482.210102][T23333] loop9: detected capacity change from 0 to 8192
[ 1482.228067][T23333] FAT-fs (loop9): Unrecognized mount option "" or missing value
[ 1483.719940][T23363] loop8: detected capacity change from 0 to 128
[ 1483.805873][T23363] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1483.866613][T23365] syzkaller0: entered promiscuous mode
[ 1483.896876][T23365] syzkaller0: entered allmulticast mode
[ 1484.601876][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.764270][T23390] futex_wake_op: syz.6.4806 tries to shift op by 144; fix this program
[ 1484.774738][T23389] loop1: detected capacity change from 0 to 512
[ 1484.817990][T23389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1484.851487][T23389] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1484.948761][   T28] audit: type=1800 audit(1793735667.591:54): pid=23389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4807" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 1485.061146][T22590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1486.364281][T23417] syzkaller0: entered promiscuous mode
[ 1486.369843][T23417] syzkaller0: entered allmulticast mode
[ 1486.460615][T23426] loop8: detected capacity change from 0 to 512
[ 1486.543301][T23426] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1486.575343][T23426] ext4 filesystem being mounted at /90/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1486.695107][T23432] loop6: detected capacity change from 0 to 1024
[ 1486.703559][T23432] EXT4-fs: Ignoring removed i_version option
[ 1486.783196][T23432] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1486.820926][T23432] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1486.856317][T22106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1486.866371][T23432] EXT4-fs (loop6): revision level too high, forcing read-only mode
[ 1486.895865][T23432] EXT4-fs (loop6): orphan cleanup on readonly fs
[ 1486.941023][T23432] EXT4-fs error (device loop6): ext4_free_blocks:6699: comm syz.6.4816: Freeing blocks not in datazone - block = 0, count = 4096
[ 1487.022802][T23432] EXT4-fs (loop6): Remounting filesystem read-only
[ 1487.032866][T23432] EXT4-fs (loop6): 1 orphan inode deleted
[ 1487.039927][T23432] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1487.171721][T22080] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1487.680317][T23461] syzkaller0: entered promiscuous mode
[ 1487.689207][T23461] syzkaller0: entered allmulticast mode
[ 1488.124820][T23476] loop1: detected capacity change from 0 to 2048
[ 1488.167874][T23476] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1488.369639][T22590] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh
[ 1488.403191][T22590] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh
[ 1488.458160][T23488] loop9: detected capacity change from 0 to 128
[ 1488.537078][T23488] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1488.644715][T23488] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1488.763323][T22148] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1488.882735][T23497] syzkaller0: entered promiscuous mode
[ 1488.902562][T23497] syzkaller0: entered allmulticast mode
[ 1489.113268][T23499] syzkaller0: entered promiscuous mode
[ 1489.140394][T23499] syzkaller0: entered allmulticast mode
[ 1489.976485][T23519] loop6: detected capacity change from 0 to 2048
[ 1490.053305][T22339] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1490.304022][T23528] loop6: detected capacity change from 0 to 1024
[ 1490.373394][T23528] EXT4-fs: inline encryption not supported
[ 1490.387546][T23528] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1490.583138][T23528] EXT4-fs error (device loop6): ext4_free_blocks:6699: comm syz.6.4842: Freeing blocks not in datazone - block = 0, count = 4096
[ 1490.628445][T23538] loop9: detected capacity change from 0 to 256
[ 1490.693171][T21490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1490.705333][T21490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1490.715218][T21490] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1490.722365][T23528] EXT4-fs (loop6): Remounting filesystem read-only
[ 1490.741767][T23538] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d)
[ 1490.754348][T21490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1490.765173][T21490] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1490.772711][T21490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1490.780400][T23528] EXT4-fs (loop6): 1 orphan inode deleted
[ 1490.790888][T23528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1490.815861][T12076] EXT4-fs (loop6): Quota write (off=2048, len=1024) cancelled because transaction is not started
[ 1490.873027][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1490.886307][T12076] Quota error (device loop6): write_blk: dquota write failed
[ 1490.895063][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1490.974354][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1490.989035][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1490.999394][ T5098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1491.007942][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1491.282792][T12076] Quota error (device loop6): remove_free_dqentry: Can't write block (2) with free entries
[ 1491.506311][T12076] EXT4-fs (loop6): Quota write (off=2048, len=1024) cancelled because transaction is not started
[ 1491.548557][T23539] rxe_eth0 speed is unknown, defaulting to 1000
[ 1491.598539][T12076] Quota error (device loop6): write_blk: dquota write failed
[ 1491.648579][T12076] Quota error (device loop6): free_dqentry: Can't move quota data block (2) to free list
[ 1491.659460][T12076] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[ 1491.669787][T12076] Quota error (device loop6): v2_write_file_info: Can't write info structure
[ 1491.743267][T23548] syzkaller0: entered promiscuous mode
[ 1491.748857][T23548] syzkaller0: entered allmulticast mode
[ 1492.381894][T23562] syzkaller0: entered promiscuous mode
[ 1492.407483][T23562] syzkaller0: entered allmulticast mode
[ 1492.591909][T23574] loop8: detected capacity change from 0 to 512
[ 1492.696530][T23574] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[ 1492.804708][T22080] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1492.835261][T23574] EXT4-fs (loop8): 1 truncate cleaned up
[ 1492.857235][T23574] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1493.019505][   T28] audit: type=1800 audit(1793735675.681:55): pid=23574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4851" name="file1" dev="loop8" ino=15 res=0 errno=0
[ 1493.079975][T21490] Bluetooth: hci2: command tx timeout
[ 1493.129561][T23539] chnl_net:caif_netlink_parms(): no params data found
[ 1493.199017][   T28] audit: type=1800 audit(1793735675.861:56): pid=23574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4851" name="file1" dev="loop8" ino=15 res=0 errno=0
[ 1493.244913][T23539] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1493.252184][T23539] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1493.259974][T23539] bridge_slave_0: entered allmulticast mode
[ 1493.267717][T23539] bridge_slave_0: entered promiscuous mode
[ 1493.276986][T23539] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1493.284512][T23539] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1493.291748][T23539] bridge_slave_1: entered allmulticast mode
[ 1493.300250][T23539] bridge_slave_1: entered promiscuous mode
[ 1493.344057][T23539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1493.356931][T23539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1493.643110][T23539] team0: Port device team_slave_0 added
[ 1493.652388][T23539] team0: Port device team_slave_1 added
[ 1493.685466][T22106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1493.765954][T23608] loop6: detected capacity change from 0 to 2048
[ 1493.832169][T23608] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1493.853913][T23539] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1493.861007][T23539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1493.892269][T23539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1493.906302][T23539] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1493.913351][T23539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1493.940193][T23539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1493.961617][T23608] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1494.010905][T23539] hsr_slave_0: entered promiscuous mode
[ 1494.035026][T23539] hsr_slave_1: entered promiscuous mode
[ 1494.046929][T23539] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1494.068476][T23539] Cannot create hsr debugfs directory
[ 1494.190523][T23620] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.4855: bg 0: block 345: padding at end of block bitmap is not set
[ 1494.239146][   T28] audit: type=1804 audit(1793735676.901:57): pid=23622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4855" name="/newroot/89/file0/file1" dev="loop6" ino=15 res=1 errno=0
[ 1494.251817][T23620] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 117
[ 1494.343672][T23620] EXT4-fs (loop6): This should not happen!! Data will be lost
[ 1494.343672][T23620] 
[ 1494.511730][T22080] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1495.149552][T21490] Bluetooth: hci2: command tx timeout
[ 1495.318299][T23642] syzkaller0: entered promiscuous mode
[ 1495.340202][T23642] syzkaller0: entered allmulticast mode
[ 1496.012303][T23681] loop6: detected capacity change from 0 to 512
[ 1496.046748][T23681] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1496.079716][T23681] EXT4-fs error (device loop6): ext4_orphan_get:1408: inode #15: comm syz.6.4870: inode has both inline data and extents flags
[ 1496.107199][T23681] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.4870: couldn't read orphan inode 15 (err -117)
[ 1496.151662][T23681] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1496.214322][T22080] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1496.440249][T18958] smpboot: CPU 1 is now offline
[ 1496.452013][T23539] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1496.510822][T23539] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1496.565778][T23539] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1496.621626][T23696] rxe_eth0 speed is unknown, defaulting to 1000
[ 1496.684597][T23539] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1497.067416][T23539] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1497.185464][T23539] 8021q: adding VLAN 0 to HW filter on device team0
[ 1497.223234][T21490] Bluetooth: hci2: command tx timeout
[ 1497.346725][T13248] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1497.353944][T13248] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1497.418838][T13248] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1497.426019][T13248] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1497.847971][T23716] loop9: detected capacity change from 0 to 1024
[ 1497.855134][T23716] EXT4-fs: inline encryption not supported
[ 1497.898177][T23716] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1497.950161][T23716] EXT4-fs error (device loop9): ext4_free_blocks:6699: comm syz.9.4877: Freeing blocks not in datazone - block = 0, count = 4096
[ 1497.965556][T23716] EXT4-fs (loop9): Remounting filesystem read-only
[ 1497.972178][T23716] EXT4-fs (loop9): 1 orphan inode deleted
[ 1497.978853][T23716] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1498.003475][ T5876] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1498.363755][T22148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1498.407267][T12076] EXT4-fs (loop9): Quota write (off=2048, len=1024) cancelled because transaction is not started
[ 1498.439339][T12076] Quota error (device loop9): write_blk: dquota write failed
[ 1498.476047][T12076] Quota error (device loop9): remove_free_dqentry: Can't write block (2) with free entries
[ 1498.547415][T12076] EXT4-fs (loop9): Quota write (off=2048, len=1024) cancelled because transaction is not started
[ 1498.598853][T12076] Quota error (device loop9): write_blk: dquota write failed
[ 1498.654460][T12076] Quota error (device loop9): free_dqentry: Can't move quota data block (2) to free list
[ 1498.698157][T12076] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started
[ 1498.770770][T12076] Quota error (device loop9): v2_write_file_info: Can't write info structure
[ 1499.130831][T23539] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1499.195868][T23737] loop9: detected capacity change from 0 to 256
[ 1499.303175][T21490] Bluetooth: hci2: command tx timeout
[ 1499.309185][T23737] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d)
[ 1499.931410][T23539] veth0_vlan: entered promiscuous mode
[ 1500.001879][T23539] veth1_vlan: entered promiscuous mode
[ 1500.203155][T23539] veth0_macvtap: entered promiscuous mode
[ 1500.551682][T23539] veth1_macvtap: entered promiscuous mode
[ 1500.647379][T23539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1500.700087][T23539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1500.752277][T23539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1500.800636][T23539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1500.856700][T23539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1500.889407][T23748] syz.9.4882 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1500.917525][T23539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1501.016559][T23539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1501.058564][T23539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1501.126847][T23539] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1501.196450][T23539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1501.266676][T23539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1501.328451][T23539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1501.385530][T23539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1501.457220][T23539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1501.509603][T23539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1501.570364][T23539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1501.598443][T23765] binder: 23763:23765 ioctl c0306201 200000000240 returned -14
[ 1501.617106][T23539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1501.650438][T23539] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1501.717000][T23539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1501.748381][T23539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1501.796023][T23539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1501.822098][T23539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1502.206582][T13248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1502.257537][T13248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1502.378432][T13248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1502.444646][T13248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1502.881698][T23798] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4840'.
[ 1503.010690][T23798] loop0: detected capacity change from 0 to 256
[ 1503.084987][T23798] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0x0008ffff)
[ 1503.190334][T23798] exFAT-fs (loop0): Filesystem has been set read-only
[ 1503.263381][T23798] exFAT-fs (loop0): failed to count the number of clusters in root
[ 1503.283865][T23809] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4894'.
[ 1503.316255][T23798] exFAT-fs (loop0): failed to recognize exfat type
[ 1503.348898][T23809] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4894'.
[ 1503.399102][T23809] netlink: 'syz.9.4894': attribute type 2 has an invalid length.
[ 1503.495430][T23814] loop8: detected capacity change from 0 to 164
[ 1503.597470][T23814] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[ 1503.675444][T23814] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[ 1503.756782][T23814] iso9660: Corrupted directory entry in block 4 of inode 1792
[ 1504.323125][T23832] netlink: 'syz.9.4902': attribute type 1 has an invalid length.
[ 1504.415282][T23832] netlink: 84 bytes leftover after parsing attributes in process `syz.9.4902'.
[ 1504.807304][T23846] loop6: detected capacity change from 0 to 512
[ 1504.897030][T23846] EXT4-fs: Ignoring removed nobh option
[ 1505.072159][T23846] fscrypt (loop6, inode 2): Error -61 getting encryption context
[ 1505.162794][T23846] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61
[ 1505.171248][T23846] EXT4-fs error (device loop6): ext4_orphan_get:1408: inode #13: comm syz.6.4906: inode has both inline data and extents flags
[ 1505.253093][T23860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4911'.
[ 1505.289119][T23859] loop9: detected capacity change from 0 to 512
[ 1505.361539][T23864] loop8: detected capacity change from 0 to 128
[ 1505.393862][T23859] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1505.400929][T23846] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.4906: couldn't read orphan inode 13 (err -117)
[ 1505.453907][T23864] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[ 1505.527286][T23859] EXT4-fs error (device loop9): ext4_orphan_get:1408: inode #15: comm syz.9.4908: inode has both inline data and extents flags
[ 1505.579834][T23864] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1505.639210][T23846] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1505.670022][T23859] EXT4-fs error (device loop9): ext4_orphan_get:1413: comm syz.9.4908: couldn't read orphan inode 15 (err -117)
[ 1505.738177][T23859] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1505.985888][T22080] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1506.124597][T22148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1506.257501][T22106] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1506.400098][T23881] loop0: detected capacity change from 0 to 1024
[ 1506.481057][T23881] hfsplus: umask requires a value
[ 1506.547610][T23881] hfsplus: unable to parse mount options
[ 1507.558704][T23886] netlink: 'syz.6.4916': attribute type 1 has an invalid length.
[ 1507.684856][T23886] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4916'.
[ 1508.835701][T23920] loop6: detected capacity change from 0 to 512
[ 1509.135222][T23920] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1509.142047][T23920] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1509.499198][T23920] EXT4-fs (loop6): 1 truncate cleaned up
[ 1509.562193][T23920] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1509.978939][T23940] loop9: detected capacity change from 0 to 256
[ 1510.147048][T23940] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d)
[ 1510.235588][T23946] loop8: detected capacity change from 0 to 256
[ 1510.252661][T23944] netlink: 'syz.0.4932': attribute type 1 has an invalid length.
[ 1510.292659][T13825] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[ 1510.303335][T23944] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4932'.
[ 1510.365979][T23946] FAT-fs (loop8): Directory bread(block 64) failed
[ 1510.717671][T23946] FAT-fs (loop8): Directory bread(block 65) failed
[ 1510.748559][T13825] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1510.778514][T23946] FAT-fs (loop8): Directory bread(block 66) failed
[ 1510.825156][T13825] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1510.837492][T23946] FAT-fs (loop8): Directory bread(block 67) failed
[ 1510.922982][T23946] FAT-fs (loop8): Directory bread(block 68) failed
[ 1510.929556][T23946] FAT-fs (loop8): Directory bread(block 69) failed
[ 1510.942808][T13825] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1511.013810][T23946] FAT-fs (loop8): Directory bread(block 70) failed
[ 1511.029204][T13825] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1511.063509][T23946] FAT-fs (loop8): Directory bread(block 71) failed
[ 1511.080239][T13825] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 1511.102790][T23946] FAT-fs (loop8): Directory bread(block 72) failed
[ 1511.109432][T23946] FAT-fs (loop8): Directory bread(block 73) failed
[ 1511.129719][T13825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1511.183021][T13825] usb 7-1: config 0 descriptor??
[ 1511.391292][T23946] syz.8.4933: attempt to access beyond end of device
[ 1511.391292][T23946] loop8: rw=524288, sector=1768, nr_sectors = 4 limit=256
[ 1511.418433][T23962] loop0: detected capacity change from 0 to 512
[ 1511.436077][T23962] EXT4-fs: Ignoring removed nobh option
[ 1511.500052][T23946] syz.8.4933: attempt to access beyond end of device
[ 1511.500052][T23946] loop8: rw=0, sector=1768, nr_sectors = 4 limit=256
[ 1511.519246][T23962] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1511.553578][T23962] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[ 1511.610672][T23966] syz.8.4933: attempt to access beyond end of device
[ 1511.610672][T23966] loop8: rw=0, sector=1768, nr_sectors = 4 limit=256
[ 1511.627586][   T28] audit: type=1800 audit(1793735694.271:58): pid=23946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4933" name="file1" dev="loop8" ino=1048890 res=0 errno=0
[ 1511.662941][T23920] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4926'.
[ 1511.692421][T23962] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.4936: attempt to clear invalid blocks 2 len 1
[ 1511.767346][   T28] audit: type=1800 audit(1793735694.421:59): pid=23966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4933" name="file1" dev="loop8" ino=1048890 res=0 errno=0
[ 1511.808377][T23962] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[ 1511.870012][T13825] input: HID 17ef:6047 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:17EF:6047.0005/input/input12
[ 1511.931705][T23962] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.4936: invalid indirect mapped block 1819239214 (level 0)
[ 1512.000259][T23971] syz.8.4933: attempt to access beyond end of device
[ 1512.000259][T23971] loop8: rw=2049, sector=1800, nr_sectors = 4 limit=256
[ 1512.094186][T23962] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.4936: invalid indirect mapped block 1819239214 (level 1)
[ 1512.164241][T13825] lenovo 0003:17EF:6047.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0
[ 1512.269800][T23962] EXT4-fs (loop0): 1 truncate cleaned up
[ 1512.312291][T23962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1512.496588][T23962] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[ 1512.565736][T23962] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[ 1512.706655][T23539] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[ 1512.858633][T23539] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds
[ 1512.959148][T23539] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds
[ 1513.231813][T23778] usb 7-1: reset full-speed USB device number 4 using dummy_hcd
[ 1513.631708][T23539] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1514.006657][T22080] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1514.191395][T18958] usb 7-1: USB disconnect, device number 4
[ 1514.539076][T13243] tipc: Left network mode
[ 1515.320756][T24009] loop6: detected capacity change from 0 to 2048
[ 1516.021308][T24027] loop9: detected capacity change from 0 to 16
[ 1516.033999][T21490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1516.047693][T21490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1516.066530][T21490] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1516.074640][T21490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1516.103026][T21490] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1516.110684][T21490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1516.192377][T24027] erofs: (device loop9): mounted with root inode @ nid 36.
[ 1516.220494][T24031] loop8: detected capacity change from 0 to 512
[ 1516.265276][T24027] erofs: (device loop9): z_erofs_readahead: readahead error at folio 2 @ nid 89
[ 1516.326397][T24031] EXT4-fs error (device loop8): ext4_orphan_get:1408: inode #15: comm syz.8.4951: inode has both inline data and extents flags
[ 1516.399407][T24027] erofs: (device loop9): z_erofs_readahead: readahead error at folio 1 @ nid 89
[ 1516.437632][T24031] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.4951: couldn't read orphan inode 15 (err -117)
[ 1516.505587][T24036] erofs: (device loop9): erofs_read_inode: bogus i_mode (0) @ nid 0
[ 1516.524379][T24031] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1516.584978][T24027] erofs: (device loop9): z_erofs_readahead: readahead error at folio 0 @ nid 89
[ 1516.663058][T24036] erofs: (device loop9): erofs_read_inode: bogus i_mode (0) @ nid 0
[ 1516.687934][T24026] rxe_eth0 speed is unknown, defaulting to 1000
[ 1516.708128][T24027] erofs: (device loop9): z_erofs_read_folio: read error -117 @ 0 of nid 89
[ 1516.735409][T22106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1516.778306][   T28] audit: type=1800 audit(1793735699.441:60): pid=24027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4950" name="file2" dev="loop9" ino=89 res=0 errno=0
[ 1517.781446][T13243] bond7: (slave gretap1): Releasing active interface
[ 1517.824528][T24049] rxe_eth0 speed is unknown, defaulting to 1000
[ 1518.183923][T21490] Bluetooth: hci2: command tx timeout
[ 1518.226766][T24060] loop8: detected capacity change from 0 to 2048
[ 1519.123751][T24026] chnl_net:caif_netlink_parms(): no params data found
[ 1519.238478][T24075] Bluetooth: MGMT ver 1.22
[ 1519.576640][T13243] hsr_slave_0: left promiscuous mode
[ 1519.584584][T23778] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1519.608767][T13243] hsr_slave_1: left promiscuous mode
[ 1519.633749][T13243] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1519.675403][T24083] loop6: detected capacity change from 0 to 128
[ 1519.682004][T13243] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1519.709024][T13243] bridge_slave_1: left allmulticast mode
[ 1519.728259][T13243] bridge_slave_1: left promiscuous mode
[ 1519.759530][T13243] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1519.778211][T24083] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1519.803539][T23778] usb 9-1: Using ep0 maxpacket: 16
[ 1519.828170][T23778] usb 9-1: config 0 has an invalid interface number: 34 but max is 0
[ 1519.846773][T23778] usb 9-1: config 0 has no interface number 0
[ 1519.853784][T13243] bridge_slave_0: left allmulticast mode
[ 1519.876749][T23778] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1519.887360][T13243] bridge_slave_0: left promiscuous mode
[ 1519.903735][T24083] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1519.915168][T13243] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1519.932634][T23778] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1519.990949][T23778] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1520.011014][T13243] pim6reg (unregistering): left allmulticast mode
[ 1520.019230][T23778] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1520.051203][T23778] usb 9-1: Product: syz
[ 1520.063467][T23778] usb 9-1: Manufacturer: syz
[ 1520.068090][T23778] usb 9-1: SerialNumber: syz
[ 1520.101245][T23778] usb 9-1: config 0 descriptor??
[ 1520.140534][T24077] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1520.166435][T24077] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1520.181462][T22080] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1520.266820][T21490] Bluetooth: hci2: command tx timeout
[ 1520.424067][T24077] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1520.431364][T24077] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1520.496327][T13243] bond7 (unregistering): Released all slaves
[ 1520.676749][T23778] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[ 1520.709552][T23778] asix: probe of 9-1:0.34 failed with error -61
[ 1520.829440][T24090] loop6: detected capacity change from 0 to 2048
[ 1520.867569][T24090] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1520.927813][T24090] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[ 1520.950345][T13243] bond6 (unregistering): Released all slaves
[ 1521.001996][T24090] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1521.307208][T13243] bond5 (unregistering): Released all slaves
[ 1522.819552][T24094] futex_wake_op: syz.6.4963 tries to shift op by 144; fix this program
[ 1522.834715][T21490] Bluetooth: hci2: command tx timeout
[ 1522.903446][T18958] usb 9-1: USB disconnect, device number 3
[ 1523.319472][T13243] bond4 (unregistering): (slave lo): Releasing backup interface
[ 1523.328651][T13243] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 1523.357463][T13243] bond4 (unregistering): Released all slaves
[ 1523.417606][T24105] loop6: detected capacity change from 0 to 128
[ 1523.526569][T24105] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1523.634241][T24105] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1524.503301][T13243] bond3 (unregistering): Released all slaves
[ 1524.906311][T21490] Bluetooth: hci2: command tx timeout
[ 1524.918878][T13243] bond2 (unregistering): Released all slaves
[ 1524.998450][T13243] bond1 (unregistering): (slave geneve2): Releasing active interface
[ 1525.327115][T13243] bond1 (unregistering): Released all slaves
[ 1526.102008][T13243] team0 (unregistering): Port device team_slave_1 removed
[ 1526.243465][T24115] loop8: detected capacity change from 0 to 256
[ 1526.251805][T13243] team0 (unregistering): Port device team_slave_0 removed
[ 1526.283934][T24115] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d)
[ 1526.749580][T13243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1526.868715][T13243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1527.458949][T13243] bond0 (unregistering): Released all slaves
[ 1527.758766][T24026] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1527.798101][T24026] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1527.830583][T24026] bridge_slave_0: entered allmulticast mode
[ 1527.860119][T24026] bridge_slave_0: entered promiscuous mode
[ 1527.925099][T24026] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1527.962695][T24026] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1527.979355][T24026] bridge_slave_1: entered allmulticast mode
[ 1528.013854][T24026] bridge_slave_1: entered promiscuous mode
[ 1528.171988][T24026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1528.255307][T24026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1528.462374][T24026] team0: Port device team_slave_0 added
[ 1528.724171][T24026] team0: Port device team_slave_1 added
[ 1528.738344][T22080] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1529.103053][T24026] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1529.110048][T24026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1529.287961][T24026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1529.407218][T24026] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1529.446906][T24026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1529.591574][T24026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1530.007068][T13243] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1530.128309][T24026] hsr_slave_0: entered promiscuous mode
[ 1530.163667][T24026] hsr_slave_1: entered promiscuous mode
[ 1530.198572][T24026] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1530.244167][T24026] Cannot create hsr debugfs directory
[ 1530.463188][T13243] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1530.547825][T24162] loop6: detected capacity change from 0 to 2048
[ 1530.679440][T13243] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1530.703026][T24162] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1530.809878][T24162] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[ 1530.958847][T24162] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1530.987115][T13243] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1531.517981][T13825] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1531.734656][T13825] usb 10-1: Using ep0 maxpacket: 32
[ 1531.752264][T13825] usb 10-1: config 0 has an invalid interface number: 196 but max is 0
[ 1531.787034][T13825] usb 10-1: config 0 has no interface number 0
[ 1531.798874][T24179] loop8: detected capacity change from 0 to 512
[ 1531.808921][T13825] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[ 1531.830086][T24179] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1531.861380][T13825] usb 10-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1531.928786][T13825] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1531.944252][T24179] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000]
[ 1531.966515][T24179] Quota error (device loop8): v2_read_file_info: Free block number 1 out of range (1, 6).
[ 1532.001730][T13825] usb 10-1: config 0 interface 196 has no altsetting 0
[ 1532.050555][T13825] usb 10-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[ 1532.061971][T24179] EXT4-fs warning (device loop8): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[ 1532.088067][T13825] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1532.138415][T24179] EXT4-fs (loop8): mount failed
[ 1532.150603][T13825] usb 10-1: Product: syz
[ 1532.175887][T13825] usb 10-1: Manufacturer: syz
[ 1532.180599][T13825] usb 10-1: SerialNumber: syz
[ 1532.274787][T13825] usb 10-1: config 0 descriptor??
[ 1532.281109][T24170] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1532.326897][T24179] loop8: detected capacity change from 0 to 512
[ 1532.372760][T24179] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1532.436262][T24179] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[ 1532.486901][T24179] EXT4-fs (loop8): Errors on filesystem, clearing orphan list.
[ 1532.557645][T24179] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1532.721543][T24179] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters
[ 1532.782758][T13825] ipheth 10-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[ 1532.811422][T13825] ipheth: probe of 10-1:0.196 failed with error -22
[ 1532.935701][T22106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1533.008314][T13825] usb 10-1: USB disconnect, device number 2
[ 1533.164779][T24198] loop8: detected capacity change from 0 to 1024
[ 1534.388979][T24218] loop8: detected capacity change from 0 to 256
[ 1534.458504][T24218] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[ 1534.646953][   T28] audit: type=1800 audit(1793735717.311:61): pid=24222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4989" name="file2" dev="loop8" ino=1048898 res=0 errno=0
[ 1534.913613][   T28] audit: type=1800 audit(1793735717.581:62): pid=24218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4989" name="file1" dev="loop8" ino=1048899 res=0 errno=0
[ 1535.076344][T24226] loop6: detected capacity change from 0 to 512
[ 1535.180607][T24226] EXT4-fs (loop6): orphan cleanup on readonly fs
[ 1535.333254][T24226] EXT4-fs warning (device loop6): ext4_enable_quotas:7193: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[ 1535.518090][T24226] EXT4-fs (loop6): Cannot turn on quotas: error -22
[ 1535.597654][T24226] EXT4-fs error (device loop6): ext4_ext_check_inode:532: inode #13: comm syz.6.4991: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[ 1535.778972][T24226] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.4991: couldn't read orphan inode 13 (err -117)
[ 1535.952856][T11468] usb 9-1: new low-speed USB device number 4 using dummy_hcd
[ 1535.969071][T24226] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1536.003180][T24026] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1536.059102][T24026] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1536.130182][T13243] hsr_slave_0: left promiscuous mode
[ 1536.142438][T24226] EXT4-fs error (device loop6): ext4_lookup:1860: comm syz.6.4991: inode #15: comm syz.6.4991: iget: illegal inode #
[ 1536.183525][T13243] hsr_slave_1: left promiscuous mode
[ 1536.196490][T13243] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1536.222625][T11468] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[ 1536.240923][T13243] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1536.262144][T11468] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1536.295682][T11468] usb 9-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00
[ 1536.325808][T13243] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1536.349458][T11468] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1536.372538][T13243] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1536.394017][T22080] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1536.404492][T11468] usb 9-1: config 0 descriptor??
[ 1536.410527][T24233] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1536.433623][T13243] bridge_slave_1: left allmulticast mode
[ 1536.439654][T13243] bridge_slave_1: left promiscuous mode
[ 1536.491921][T13243] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1536.561557][T13243] bridge_slave_0: left allmulticast mode
[ 1536.584362][T13243] bridge_slave_0: left promiscuous mode
[ 1536.630674][T13243] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1536.765531][T13243] veth1_macvtap: left promiscuous mode
[ 1536.791245][T13243] veth0_macvtap: left promiscuous mode
[ 1536.798019][T13243] veth1_vlan: left promiscuous mode
[ 1536.818977][T13243] veth0_vlan: left promiscuous mode
[ 1538.406772][T11468] apple 0003:05AC:0242.0006: unknown main item tag 0x0
[ 1538.438776][T11468] apple 0003:05AC:0242.0006: unbalanced collection at end of report description
[ 1538.479681][T11468] apple 0003:05AC:0242.0006: parse failed
[ 1538.559316][T11468] apple: probe of 0003:05AC:0242.0006 failed with error -22
[ 1538.609364][T11468] usb 9-1: USB disconnect, device number 4
[ 1538.748335][T24245] loop6: detected capacity change from 0 to 512
[ 1538.853595][T24245] EXT4-fs (loop6): 1 truncate cleaned up
[ 1538.881543][T24245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1538.981541][T24245] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.4994: bg 0: block 465: padding at end of block bitmap is not set
[ 1539.059740][T24245] EXT4-fs (loop6): Remounting filesystem read-only
[ 1539.261027][T22080] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1539.673835][T24264] loop9: detected capacity change from 0 to 512
[ 1539.709338][T24264] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1539.761667][T24264] EXT4-fs error (device loop9): ext4_orphan_get:1408: inode #15: comm syz.9.5001: inode has both inline data and extents flags
[ 1539.830934][T24264] EXT4-fs error (device loop9): ext4_orphan_get:1413: comm syz.9.5001: couldn't read orphan inode 15 (err -117)
[ 1539.879281][T24264] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1540.020821][T22148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1540.662740][T13243] team0 (unregistering): Port device team_slave_1 removed
[ 1540.750423][T24276] loop8: detected capacity change from 0 to 256
[ 1540.802347][T24276] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[ 1540.986855][T13243] team0 (unregistering): Port device team_slave_0 removed
[ 1541.264906][T13243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1541.463039][T13243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1543.172175][T24285] loop8: detected capacity change from 0 to 8
[ 1544.371602][T13243] bond0 (unregistering): Released all slaves
[ 1544.381970][   T28] audit: type=1326 audit(1793735727.041:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24297 comm="syz.9.5015" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fbb9fb19 code=0x7ffc0000
[ 1544.457593][   T28] audit: type=1326 audit(1793735727.041:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24297 comm="syz.9.5015" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fbb9fb19 code=0x7ffc0000
[ 1544.517616][   T28] audit: type=1326 audit(1793735727.041:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24297 comm="syz.9.5015" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fbb9fb19 code=0x7ffc0000
[ 1544.571034][T24026] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1544.582205][   T28] audit: type=1326 audit(1793735727.041:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24297 comm="syz.9.5015" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fbb9fb19 code=0x7ffc0000
[ 1544.621709][T24026] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1544.712618][T11468] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1544.732684][   T28] audit: type=1326 audit(1793735727.071:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24297 comm="syz.9.5015" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f35fbb9fb19 code=0x7ffc0000
[ 1544.899964][   T28] audit: type=1326 audit(1793735727.071:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24297 comm="syz.9.5015" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fbb9fb19 code=0x7ffc0000
[ 1544.997830][T11468] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1545.066061][T11468] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1545.080967][T24026] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1545.096193][   T28] audit: type=1326 audit(1793735727.071:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24297 comm="syz.9.5015" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fbb9fb19 code=0x7ffc0000
[ 1545.198266][T11468] usb 10-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1545.220154][T24026] 8021q: adding VLAN 0 to HW filter on device team0
[ 1545.239310][T11468] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1545.256110][   T28] audit: type=1326 audit(1793735727.071:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24297 comm="syz.9.5015" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fbb9fb19 code=0x7ffc0000
[ 1545.322209][T11468] usb 10-1: Product: syz
[ 1545.349398][T11468] usb 10-1: Manufacturer: syz
[ 1545.364429][T13248] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1545.371565][T13248] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1545.389238][T11468] usb 10-1: SerialNumber: syz
[ 1545.419972][T24308] loop6: detected capacity change from 0 to 1024
[ 1545.462756][   T28] audit: type=1326 audit(1793735727.091:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24297 comm="syz.9.5015" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fbb9fb19 code=0x7ffc0000
[ 1545.505571][T13248] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1545.512755][T13248] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1545.820076][T11468] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1546.117305][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.183635][   T28] audit: type=1326 audit(1793735727.091:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24297 comm="syz.9.5015" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35fbb6034e code=0x7ffc0000
[ 1546.233297][T11468] usb 10-1: 2:1 : no UAC_FORMAT_TYPE desc
[ 1546.386181][T11468] usb 10-1: USB disconnect, device number 3
[ 1546.590053][T22339] udevd[22339]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1546.730490][T24317] loop8: detected capacity change from 0 to 256
[ 1546.828841][T24317] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1547.464427][T24026] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1547.586187][T24026] veth0_vlan: entered promiscuous mode
[ 1547.690901][T24026] veth1_vlan: entered promiscuous mode
[ 1547.814319][T24026] veth0_macvtap: entered promiscuous mode
[ 1547.867788][T24026] veth1_macvtap: entered promiscuous mode
[ 1547.959377][T24026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1547.997807][T24026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1548.032582][T24026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1548.062315][T24026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1548.101126][T24026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1548.142565][T24026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1548.195770][T24026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1548.231254][T24026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1548.283841][T24026] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1548.374989][T24026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1548.450787][T24026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1548.471891][T24346] loop8: detected capacity change from 0 to 512
[ 1548.502351][T24026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1548.544813][T24346] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1548.573039][T24026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1548.621582][T24346] EXT4-fs error (device loop8): ext4_orphan_get:1408: inode #15: comm syz.8.5026: inode has both inline data and extents flags
[ 1548.652732][T24026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1548.697061][T24346] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.5026: couldn't read orphan inode 15 (err -117)
[ 1548.720197][T24026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1548.774912][T24346] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1548.794597][T24026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1548.841395][T24026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1548.881066][T24026] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1548.954068][T24026] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1548.996832][T24026] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1549.062726][T24026] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1549.071466][T24026] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1549.122184][T22106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1549.583852][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1549.647625][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1549.792683][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1549.822902][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1550.176125][T24374] netlink: 'syz.3.4943': attribute type 1 has an invalid length.
[ 1550.254287][T24374] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4943'.
[ 1550.774384][T24388] x_tables: duplicate underflow at hook 2
[ 1550.992111][T24395] loop8: detected capacity change from 0 to 764
[ 1552.104818][T24417] loop9: detected capacity change from 0 to 512
[ 1552.214603][T24417] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1552.286270][T24417] EXT4-fs error (device loop9): ext4_orphan_get:1408: inode #15: comm syz.9.5041: inode has both inline data and extents flags
[ 1552.380133][T24417] EXT4-fs error (device loop9): ext4_orphan_get:1413: comm syz.9.5041: couldn't read orphan inode 15 (err -117)
[ 1552.487350][T24417] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1552.816745][T22148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1554.547142][ T5098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1554.557940][ T5098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1554.566307][ T5098] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1554.576848][ T5098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1554.585093][ T5098] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1554.600876][ T5098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1554.725501][T24462] rxe_eth0 speed is unknown, defaulting to 1000
[ 1554.735437][T24465] loop6: detected capacity change from 0 to 512
[ 1554.860761][T24465] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1555.029919][T24465] EXT4-fs error (device loop6): ext4_orphan_get:1408: inode #15: comm syz.6.5054: inode has both inline data and extents flags
[ 1555.189218][T24465] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.5054: couldn't read orphan inode 15 (err -117)
[ 1555.323244][T24465] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1555.719148][T22080] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1555.960877][T24462] chnl_net:caif_netlink_parms(): no params data found
[ 1556.613631][T24462] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1556.649749][T24462] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1556.662733][ T5098] Bluetooth: hci3: command tx timeout
[ 1556.689829][T24462] bridge_slave_0: entered allmulticast mode
[ 1556.720256][T24462] bridge_slave_0: entered promiscuous mode
[ 1556.761621][T24462] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1556.791860][T24462] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1556.819166][T24462] bridge_slave_1: entered allmulticast mode
[ 1556.851093][T24462] bridge_slave_1: entered promiscuous mode
[ 1556.991770][T24462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1557.048809][T24462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1557.247365][T24462] team0: Port device team_slave_0 added
[ 1557.286677][T24462] team0: Port device team_slave_1 added
[ 1557.418255][T24462] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1557.466788][T24462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1557.578184][T24462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1557.643997][T24462] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1557.650979][T24462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1557.762177][T24462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1558.113848][T24462] hsr_slave_0: entered promiscuous mode
[ 1558.206795][T24462] hsr_slave_1: entered promiscuous mode
[ 1558.242299][T24462] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1558.273488][T24462] Cannot create hsr debugfs directory
[ 1558.742601][ T5098] Bluetooth: hci3: command tx timeout
[ 1560.121190][T24462] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1560.213606][T24462] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1560.268551][T24462] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1560.358571][T24462] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1560.777248][T24462] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1560.832977][ T5098] Bluetooth: hci3: command tx timeout
[ 1560.860456][T24462] 8021q: adding VLAN 0 to HW filter on device team0
[ 1560.988117][T12160] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1560.995286][T12160] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1561.080493][T12160] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1561.087693][T12160] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1561.324282][T24462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1562.353240][T24462] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1562.607467][T24462] veth0_vlan: entered promiscuous mode
[ 1562.614379][T24618] loop3: detected capacity change from 0 to 512
[ 1562.686598][T24618] EXT4-fs: test_dummy_encryption requires encrypt feature
[ 1562.709516][T24462] veth1_vlan: entered promiscuous mode
[ 1562.907478][ T5098] Bluetooth: hci3: command tx timeout
[ 1563.593454][T24462] veth0_macvtap: entered promiscuous mode
[ 1563.662345][T24462] veth1_macvtap: entered promiscuous mode
[ 1563.775058][T24462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1563.836730][T24462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1563.991412][T24462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1564.043862][T24462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1564.103167][T24462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1564.148371][T24462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1564.182782][T24462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1564.215677][T24462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1564.249142][T24462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1564.292581][T24462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1564.330651][T24462] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1564.370194][T24462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1564.448863][T24462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1564.502371][T24462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1564.728880][T24462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1565.758267][T24462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1566.198961][T24462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1566.365505][T24462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1566.430642][T24462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1566.494031][T24462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1566.592549][T24462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1566.665809][T24462] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1566.703015][T24462] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1566.735413][T24462] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1566.852609][T24462] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1566.881472][T24462] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1566.981224][T24666] FAULT_INJECTION: forcing a failure.
[ 1566.981224][T24666] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 1567.035838][T24666] CPU: 0 PID: 24666 Comm: syz.3.5098 Not tainted syzkaller #0
[ 1567.043346][T24666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1567.053435][T24666] Call Trace:
[ 1567.056725][T24666]  <TASK>
[ 1567.059665][T24666]  dump_stack_lvl+0x18c/0x250
[ 1567.064354][T24666]  ? show_regs_print_info+0x20/0x20
[ 1567.069557][T24666]  ? load_image+0x420/0x420
[ 1567.074064][T24666]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1567.079090][T24666]  ? iopt_map_pages+0xe60/0xe60
[ 1567.083952][T24666]  should_fail_ex+0x394/0x4c0
[ 1567.088631][T24666]  _copy_to_user+0x2f/0xa0
[ 1567.093047][T24666]  iommufd_ucmd_respond+0x90/0xd0
[ 1567.098077][T24666]  iommufd_ioas_map+0x400/0x4a0
[ 1567.102928][T24666]  ? __might_fault+0xaa/0x120
[ 1567.107633][T24666]  ? iommufd_ioas_allow_iovas+0x4c0/0x4c0
[ 1567.113354][T24666]  ? __might_fault+0xaa/0x120
[ 1567.118039][T24666]  ? __might_fault+0xc6/0x120
[ 1567.122715][T24666]  ? __might_fault+0xaa/0x120
[ 1567.127401][T24666]  iommufd_fops_ioctl+0x48b/0x540
[ 1567.132439][T24666]  ? iommufd_ctx_put+0x40/0x40
[ 1567.137213][T24666]  ? __fget_files+0x28/0x460
[ 1567.141845][T24666]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1567.146827][T24666]  ? security_file_ioctl+0x80/0xa0
[ 1567.151968][T24666]  ? iommufd_ctx_put+0x40/0x40
[ 1567.156758][T24666]  __se_sys_ioctl+0xfd/0x170
[ 1567.161364][T24666]  do_syscall_64+0x55/0xb0
[ 1567.165791][T24666]  ? clear_bhb_loop+0x40/0x90
[ 1567.170472][T24666]  ? clear_bhb_loop+0x40/0x90
[ 1567.175169][T24666]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1567.181066][T24666] RIP: 0033:0x7f6d7499fb19
[ 1567.185481][T24666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1567.205095][T24666] RSP: 002b:00007f6d7595d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1567.213635][T24666] RAX: ffffffffffffffda RBX: 00007f6d74c25fa0 RCX: 00007f6d7499fb19
[ 1567.221627][T24666] RDX: 0000200000000380 RSI: 0000000000003b85 RDI: 0000000000000003
[ 1567.229616][T24666] RBP: 00007f6d74a37b70 R08: 0000000000000000 R09: 0000000000000000
[ 1567.237585][T24666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1567.245552][T24666] R13: 00007f6d74c26038 R14: 00007f6d74c25fa0 R15: 00007ffdb26989b8
[ 1567.253537][T24666]  </TASK>
[ 1567.553268][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1567.593456][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1567.700799][T13243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1567.727571][T13243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1568.207132][T24676] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1568.917779][T24702] loop2: detected capacity change from 0 to 512
[ 1568.967015][T24702] EXT4-fs: test_dummy_encryption requires encrypt feature
[ 1570.287776][T24714] 9pnet_virtio: no channels available for device syz
[ 1570.384836][T24714] CacheFiles: Failed to register: -95
[ 1570.457002][T24714] 9pnet_virtio: no channels available for device syz
[ 1572.011477][T13243] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1572.370204][T13243] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1572.652124][T13243] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1572.966137][T24764] FAULT_INJECTION: forcing a failure.
[ 1572.966137][T24764] name failslab, interval 1, probability 0, space 0, times 0
[ 1572.992046][T13243] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1573.043885][T24764] CPU: 0 PID: 24764 Comm: syz.3.5122 Not tainted syzkaller #0
[ 1573.051406][T24764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1573.061476][T24764] Call Trace:
[ 1573.064773][T24764]  <TASK>
[ 1573.067705][T24764]  dump_stack_lvl+0x18c/0x250
[ 1573.072414][T24764]  ? show_regs_print_info+0x20/0x20
[ 1573.077622][T24764]  ? load_image+0x420/0x420
[ 1573.082130][T24764]  ? __might_sleep+0xe0/0xe0
[ 1573.086756][T24764]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1573.091788][T24764]  ? mark_lock+0x94/0x320
[ 1573.096123][T24764]  should_fail_ex+0x394/0x4c0
[ 1573.100824][T24764]  should_failslab+0x9/0x20
[ 1573.105327][T24764]  slab_pre_alloc_hook+0x59/0x300
[ 1573.110356][T24764]  ? snd_seq_port_connect+0x6b/0x420
[ 1573.115675][T24764]  __kmem_cache_alloc_node+0x53/0x260
[ 1573.121064][T24764]  ? snd_seq_port_connect+0x6b/0x420
[ 1573.126363][T24764]  kmalloc_trace+0x2a/0xe0
[ 1573.130802][T24764]  snd_seq_port_connect+0x6b/0x420
[ 1573.135936][T24764]  ? do_raw_read_unlock+0x3d/0x80
[ 1573.140976][T24764]  ? _raw_read_unlock+0x28/0x40
[ 1573.145839][T24764]  snd_seq_ioctl_subscribe_port+0x318/0x6e0
[ 1573.151746][T24764]  ? snd_seq_oss_midi_open+0x19a/0x800
[ 1573.157245][T24764]  ? snd_seq_ioctl_set_port_info+0x1a0/0x1a0
[ 1573.163247][T24764]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1573.169155][T24764]  ? _raw_spin_unlock+0x40/0x40
[ 1573.174020][T24764]  snd_seq_oss_midi_open+0x4f7/0x800
[ 1573.179314][T24764]  ? snd_seq_oss_midi_open_all+0xc0/0xc0
[ 1573.184971][T24764]  snd_seq_oss_midi_open_all+0x59/0xc0
[ 1573.190443][T24764]  snd_seq_oss_open+0x9b3/0xf10
[ 1573.195305][T24764]  ? snd_seq_oss_delete_client+0x50/0x50
[ 1573.200976][T24764]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1573.207135][T24764]  ? trace_contention_end+0x39/0xe0
[ 1573.212357][T24764]  ? soundcore_open+0x274/0x4c0
[ 1573.217222][T24764]  ? odev_open+0x5c/0xa0
[ 1573.221471][T24764]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1573.226510][T24764]  ? snd_seq_oss_process_event+0x29b0/0x29b0
[ 1573.232497][T24764]  ? async_call_lookup_ports+0x20/0x20
[ 1573.237964][T24764]  ? do_raw_spin_unlock+0x121/0x230
[ 1573.243204][T24764]  ? soundcore_open+0x310/0x4c0
[ 1573.248066][T24764]  odev_open+0x67/0xa0
[ 1573.252145][T24764]  chrdev_open+0x58c/0x600
[ 1573.256592][T24764]  ? cd_forget+0x160/0x160
[ 1573.261013][T24764]  ? fsnotify_perm+0x3ed/0x5e0
[ 1573.265782][T24764]  do_dentry_open+0x880/0x14b0
[ 1573.270552][T24764]  ? cd_forget+0x160/0x160
[ 1573.274973][T24764]  path_openat+0x284f/0x3270
[ 1573.279597][T24764]  ? do_sys_openat2+0xda/0x1d0
[ 1573.284379][T24764]  ? __x64_sys_openat+0x139/0x160
[ 1573.289425][T24764]  ? verify_lock_unused+0x140/0x140
[ 1573.294636][T24764]  ? do_filp_open+0x430/0x430
[ 1573.299336][T24764]  do_filp_open+0x1f2/0x430
[ 1573.303858][T24764]  ? vfs_tmpfile+0x620/0x620
[ 1573.308508][T24764]  ? _raw_spin_unlock+0x28/0x40
[ 1573.313372][T24764]  ? alloc_fd+0x590/0x640
[ 1573.317732][T24764]  do_sys_openat2+0x134/0x1d0
[ 1573.322439][T24764]  ? do_sys_open+0xe0/0xe0
[ 1573.326880][T24764]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1573.332875][T24764]  ? lock_chain_count+0x20/0x20
[ 1573.337735][T24764]  __x64_sys_openat+0x139/0x160
[ 1573.342596][T24764]  do_syscall_64+0x55/0xb0
[ 1573.347037][T24764]  ? clear_bhb_loop+0x40/0x90
[ 1573.351728][T24764]  ? clear_bhb_loop+0x40/0x90
[ 1573.356431][T24764]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1573.362337][T24764] RIP: 0033:0x7f6d7499fb19
[ 1573.366753][T24764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1573.386362][T24764] RSP: 002b:00007f6d7595d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1573.394787][T24764] RAX: ffffffffffffffda RBX: 00007f6d74c25fa0 RCX: 00007f6d7499fb19
[ 1573.402767][T24764] RDX: 0000000000080200 RSI: 0000200000000500 RDI: ffffffffffffff9c
[ 1573.410740][T24764] RBP: 00007f6d74a37b70 R08: 0000000000000000 R09: 0000000000000000
[ 1573.418722][T24764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1573.426707][T24764] R13: 00007f6d74c26038 R14: 00007f6d74c25fa0 R15: 00007ffdb26989b8
[ 1573.434699][T24764]  </TASK>
[ 1573.687014][T24768] loop6: detected capacity change from 0 to 512
[ 1573.764063][T24768] EXT4-fs: test_dummy_encryption requires encrypt feature
[ 1574.025164][T18958] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1574.262269][T18958] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1574.288997][T18958] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00
[ 1574.298820][T18958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1574.342607][T18958] usb 3-1: Product: syz
[ 1574.356749][T18958] usb 3-1: Manufacturer: syz
[ 1574.409117][T18958] usb 3-1: selecting invalid altsetting 1
[ 1574.444043][T18958] dvb_ttusb_budget: ttusb_init_controller: error
[ 1574.513197][T18958] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1574.750408][T18958] DVB: Unable to find symbol cx22700_attach()
[ 1574.884753][T24791] FAULT_INJECTION: forcing a failure.
[ 1574.884753][T24791] name fail_futex, interval 1, probability 0, space 0, times 1
[ 1574.928868][T18958] DVB: Unable to find symbol tda10046_attach()
[ 1574.952242][T24791] CPU: 0 PID: 24791 Comm: syz.3.5125 Not tainted syzkaller #0
[ 1574.959730][T24791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1574.969801][T24791] Call Trace:
[ 1574.973080][T24791]  <TASK>
[ 1574.976011][T24791]  dump_stack_lvl+0x18c/0x250
[ 1574.980706][T24791]  ? show_regs_print_info+0x20/0x20
[ 1574.985912][T24791]  ? load_image+0x420/0x420
[ 1574.990417][T24791]  ? __lock_acquire+0x1431/0x7eb0
[ 1574.995450][T24791]  should_fail_ex+0x394/0x4c0
[ 1575.000144][T24791]  get_futex_key+0x134/0xf40
[ 1575.004739][T24791]  ? futex_setup_timer+0xc0/0xc0
[ 1575.009699][T24791]  futex_wake+0x127/0x4f0
[ 1575.014036][T24791]  ? futex_wake_mark+0x150/0x150
[ 1575.018989][T24791]  do_futex+0x35d/0x3e0
[ 1575.023160][T24791]  ? __might_fault+0xaa/0x120
[ 1575.027849][T24791]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1575.033753][T24791]  ? __might_fault+0xc6/0x120
[ 1575.038436][T24791]  mm_release+0x184/0x3a0
[ 1575.042772][T24791]  ? exit_mm_release+0x30/0x30
[ 1575.047546][T24791]  ? lockdep_hardirqs_on+0x98/0x150
[ 1575.052753][T24791]  exit_mm+0xa4/0x340
[ 1575.056743][T24791]  ? sysctl_delayacct+0x220/0x220
[ 1575.061768][T24791]  ? do_exit+0x2530/0x2530
[ 1575.066208][T24791]  do_exit+0x909/0x2530
[ 1575.070418][T24791]  ? put_task_struct+0xc0/0xc0
[ 1575.075191][T24791]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1575.081178][T24791]  ? get_signal+0x100e/0x1390
[ 1575.085855][T24791]  ? lock_chain_count+0x20/0x20
[ 1575.090706][T24791]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1575.095733][T24791]  do_group_exit+0x22d/0x2f0
[ 1575.100320][T24791]  ? lockdep_hardirqs_on+0x98/0x150
[ 1575.105529][T24791]  get_signal+0x12a6/0x1390
[ 1575.110040][T24791]  arch_do_signal_or_restart+0xc2/0x7b0
[ 1575.115589][T24791]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1575.121483][T24791]  ? get_sigframe_size+0x20/0x20
[ 1575.126442][T24791]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1575.131914][T24791]  exit_to_user_mode_loop+0x70/0x110
[ 1575.137258][T24791]  exit_to_user_mode_prepare+0xee/0x180
[ 1575.142828][T24791]  syscall_exit_to_user_mode+0x1a/0x50
[ 1575.148297][T24791]  do_syscall_64+0x61/0xb0
[ 1575.152724][T24791]  ? clear_bhb_loop+0x40/0x90
[ 1575.157409][T24791]  ? clear_bhb_loop+0x40/0x90
[ 1575.162101][T24791]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1575.168005][T24791] RIP: 0033:0x7f6d7499fb19
[ 1575.172422][T24791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1575.192037][T24791] RSP: 002b:00007f6d7595d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1575.200476][T24791] RAX: fffffffffffffe00 RBX: 00007f6d74c25fa8 RCX: 00007f6d7499fb19
[ 1575.208450][T24791] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6d74c25fa8
[ 1575.216423][T24791] RBP: 00007f6d74c25fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1575.224400][T24791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1575.232376][T24791] R13: 00007f6d74c26038 R14: 00007ffdb26988d0 R15: 00007ffdb26989b8
[ 1575.240368][T24791]  </TASK>
[ 1575.245237][T18958] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1575.288931][T24792] dvb_ttusb_budget: failed urb submission (0: err = -2)!
[ 1575.302744][T24744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1575.313175][T24792] dvb_ttusb_budget: failed urb submission (0: err = -2)!
[ 1576.687390][T24807] XFS (nullb0): Invalid superblock magic number
[ 1576.723764][ T5876] usb 3-1: USB disconnect, device number 9
[ 1577.155502][T24820] loop3: detected capacity change from 0 to 2048
[ 1577.232964][T24779] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1577.302804][ T5876] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1577.605824][T24825] loop3: detected capacity change from 0 to 1024
[ 1577.613373][T24825] EXT4-fs: inline encryption not supported
[ 1577.642383][T24825] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1577.663613][T24825] EXT4-fs error (device loop3): ext4_free_blocks:6699: comm syz.3.5131: Freeing blocks not in datazone - block = 0, count = 4096
[ 1577.677390][T24825] EXT4-fs (loop3): Remounting filesystem read-only
[ 1577.684042][T24825] EXT4-fs (loop3): 1 orphan inode deleted
[ 1577.690795][T24825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1577.813277][ T5876] usb 3-1: Using ep0 maxpacket: 32
[ 1577.854248][ T5876] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1577.955829][ T5876] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1578.009103][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1578.062269][ T5876] usb 3-1: Product: syz
[ 1578.116877][ T5876] usb 3-1: Manufacturer: syz
[ 1578.121506][ T5876] usb 3-1: SerialNumber: syz
[ 1578.179768][ T5876] usb 3-1: config 0 descriptor??
[ 1578.229722][T24818] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1578.263262][ T5876] hub 3-1:0.0: bad descriptor, ignoring hub
[ 1578.269216][ T5876] hub: probe of 3-1:0.0 failed with error -5
[ 1578.300403][T24026] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1578.330219][T12076] EXT4-fs (loop3): Quota write (off=2048, len=1024) cancelled because transaction is not started
[ 1578.398505][T12076] __quota_error: 53 callbacks suppressed
[ 1578.398517][T12076] Quota error (device loop3): write_blk: dquota write failed
[ 1578.474737][ T5876] usb 3-1: USB disconnect, device number 10
[ 1578.514528][T12076] Quota error (device loop3): remove_free_dqentry: Can't write block (2) with free entries
[ 1578.588664][T12076] EXT4-fs (loop3): Quota write (off=2048, len=1024) cancelled because transaction is not started
[ 1578.701602][T12076] Quota error (device loop3): write_blk: dquota write failed
[ 1578.748356][T12076] Quota error (device loop3): free_dqentry: Can't move quota data block (2) to free list
[ 1578.812129][T12076] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[ 1578.901595][T12076] Quota error (device loop3): v2_write_file_info: Can't write info structure
[ 1579.125367][T13243] hsr_slave_0: left promiscuous mode
[ 1579.243835][T13243] hsr_slave_1: left promiscuous mode
[ 1579.318051][T13243] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1579.351323][T13243] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1579.504506][T13243] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1579.526673][T13243] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1579.597663][T24842] kvm_intel: kvm [24841]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x7265636e6575
[ 1579.646390][T13243] bridge_slave_1: left allmulticast mode
[ 1579.669262][T13243] bridge_slave_1: left promiscuous mode
[ 1579.697267][T13243] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1579.721265][T13243] bridge_slave_0: left allmulticast mode
[ 1579.730933][T13243] bridge_slave_0: left promiscuous mode
[ 1579.761112][T13243] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1579.959178][T13243] veth1_macvtap: left promiscuous mode
[ 1579.981397][T13243] veth0_macvtap: left promiscuous mode
[ 1580.009168][T13243] veth1_vlan: left promiscuous mode
[ 1580.032724][T13243] veth0_vlan: left promiscuous mode
[ 1581.149284][T24865] overlayfs: invalid redirect (./file2)
[ 1582.089972][T13243] team0 (unregistering): Port device team_slave_1 removed
[ 1582.250940][T13243] team0 (unregistering): Port device team_slave_0 removed
[ 1582.388875][T13243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1582.524170][T13243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1582.848096][T24878] ==================================================================
[ 1582.856207][T24878] BUG: KASAN: null-ptr-deref in free_conf+0x90/0x4b0
[ 1582.862909][T24878] Read of size 8 at addr 0000000000000028 by task syz.3.5150/24878
[ 1582.870806][T24878] 
[ 1582.873138][T24878] CPU: 0 PID: 24878 Comm: syz.3.5150 Not tainted syzkaller #0
[ 1582.880607][T24878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1582.890691][T24878] Call Trace:
[ 1582.893974][T24878]  <TASK>
[ 1582.896931][T24878]  dump_stack_lvl+0x18c/0x250
[ 1582.901627][T24878]  ? show_regs_print_info+0x20/0x20
[ 1582.906841][T24878]  ? free_conf+0x90/0x4b0
[ 1582.911178][T24878]  kasan_report+0x117/0x150
[ 1582.915714][T24878]  ? free_conf+0x90/0x4b0
[ 1582.920052][T24878]  kasan_check_range+0x241/0x290
[ 1582.924997][T24878]  free_conf+0x90/0x4b0
[ 1582.929171][T24878]  ? __raw_spin_lock_init+0x45/0x100
[ 1582.934488][T24878]  setup_conf+0x16ca/0x2a50
[ 1582.939017][T24878]  ? lockdep_hardirqs_on+0x98/0x150
[ 1582.944223][T24878]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1582.950391][T24878]  ? __add_stripe_bio+0x770/0x770
[ 1582.955438][T24878]  ? raid5_run+0x618/0x2a30
[ 1582.959980][T24878]  raid5_run+0x8af/0x2a30
[ 1582.964331][T24878]  ? lockdep_hardirqs_on+0x98/0x150
[ 1582.969552][T24878]  md_run+0x10c5/0x2230
[ 1582.973873][T24878]  do_md_run+0x34/0x570
[ 1582.978176][T24878]  md_ioctl+0x20fa/0x24e0
[ 1582.982543][T24878]  ? blkdev_common_ioctl+0x10ee/0x2580
[ 1582.988017][T24878]  ? md_release+0x1e0/0x1e0
[ 1582.992533][T24878]  ? tomoyo_path_number_perm+0x56b/0x5e0
[ 1582.998177][T24878]  ? blkdev_bszset+0x1f0/0x1f0
[ 1583.002951][T24878]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1583.008438][T24878]  ? md_release+0x1e0/0x1e0
[ 1583.012971][T24878]  blkdev_ioctl+0x5b2/0x730
[ 1583.017488][T24878]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[ 1583.022957][T24878]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1583.027903][T24878]  ? security_file_ioctl+0x80/0xa0
[ 1583.033025][T24878]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[ 1583.038504][T24878]  __se_sys_ioctl+0xfd/0x170
[ 1583.043111][T24878]  do_syscall_64+0x55/0xb0
[ 1583.047561][T24878]  ? clear_bhb_loop+0x40/0x90
[ 1583.052269][T24878]  ? clear_bhb_loop+0x40/0x90
[ 1583.056986][T24878]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1583.062907][T24878] RIP: 0033:0x7f6d7499fb19
[ 1583.067344][T24878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1583.086972][T24878] RSP: 002b:00007f6d7595d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1583.095391][T24878] RAX: ffffffffffffffda RBX: 00007f6d74c25fa0 RCX: 00007f6d7499fb19
[ 1583.103382][T24878] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000004
[ 1583.111359][T24878] RBP: 00007f6d74a37b70 R08: 0000000000000000 R09: 0000000000000000
[ 1583.119327][T24878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1583.127297][T24878] R13: 00007f6d74c26038 R14: 00007f6d74c25fa0 R15: 00007ffdb26989b8
[ 1583.135279][T24878]  </TASK>
[ 1583.138304][T24878] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1583.850674][T24878] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1583.857997][T24878] CPU: 0 PID: 24878 Comm: syz.3.5150 Not tainted syzkaller #0
[ 1583.865445][T24878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1583.875488][T24878] Call Trace:
[ 1583.878780][T24878]  <TASK>
[ 1583.881717][T24878]  dump_stack_lvl+0x18c/0x250
[ 1583.886400][T24878]  ? show_regs_print_info+0x20/0x20
[ 1583.891608][T24878]  ? load_image+0x420/0x420
[ 1583.896123][T24878]  panic+0x2ca/0x720
[ 1583.900011][T24878]  ? bpf_jit_dump+0xd0/0xd0
[ 1583.904508][T24878]  ? _raw_spin_unlock_irqrestore+0x111/0x120
[ 1583.910493][T24878]  ? _raw_spin_unlock+0x40/0x40
[ 1583.915359][T24878]  ? free_conf+0x90/0x4b0
[ 1583.919702][T24878]  check_panic_on_warn+0x84/0xa0
[ 1583.924658][T24878]  ? free_conf+0x90/0x4b0
[ 1583.928986][T24878]  end_report+0x6f/0x130
[ 1583.933233][T24878]  kasan_report+0x128/0x150
[ 1583.937746][T24878]  ? free_conf+0x90/0x4b0
[ 1583.942089][T24878]  kasan_check_range+0x241/0x290
[ 1583.947037][T24878]  free_conf+0x90/0x4b0
[ 1583.951197][T24878]  ? __raw_spin_lock_init+0x45/0x100
[ 1583.956486][T24878]  setup_conf+0x16ca/0x2a50
[ 1583.961009][T24878]  ? lockdep_hardirqs_on+0x98/0x150
[ 1583.966211][T24878]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1583.972389][T24878]  ? __add_stripe_bio+0x770/0x770
[ 1583.977418][T24878]  ? raid5_run+0x618/0x2a30
[ 1583.981935][T24878]  raid5_run+0x8af/0x2a30
[ 1583.986290][T24878]  ? lockdep_hardirqs_on+0x98/0x150
[ 1583.991495][T24878]  md_run+0x10c5/0x2230
[ 1583.995683][T24878]  do_md_run+0x34/0x570
[ 1583.999848][T24878]  md_ioctl+0x20fa/0x24e0
[ 1584.004185][T24878]  ? blkdev_common_ioctl+0x10ee/0x2580
[ 1584.009646][T24878]  ? md_release+0x1e0/0x1e0
[ 1584.014169][T24878]  ? tomoyo_path_number_perm+0x56b/0x5e0
[ 1584.019818][T24878]  ? blkdev_bszset+0x1f0/0x1f0
[ 1584.024581][T24878]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1584.030060][T24878]  ? md_release+0x1e0/0x1e0
[ 1584.034568][T24878]  blkdev_ioctl+0x5b2/0x730
[ 1584.039073][T24878]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[ 1584.044538][T24878]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1584.049493][T24878]  ? security_file_ioctl+0x80/0xa0
[ 1584.054609][T24878]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[ 1584.060079][T24878]  __se_sys_ioctl+0xfd/0x170
[ 1584.064673][T24878]  do_syscall_64+0x55/0xb0
[ 1584.069087][T24878]  ? clear_bhb_loop+0x40/0x90
[ 1584.073768][T24878]  ? clear_bhb_loop+0x40/0x90
[ 1584.078464][T24878]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1584.084366][T24878] RIP: 0033:0x7f6d7499fb19
[ 1584.088781][T24878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1584.108383][T24878] RSP: 002b:00007f6d7595d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1584.116792][T24878] RAX: ffffffffffffffda RBX: 00007f6d74c25fa0 RCX: 00007f6d7499fb19
[ 1584.124759][T24878] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000004
[ 1584.132728][T24878] RBP: 00007f6d74a37b70 R08: 0000000000000000 R09: 0000000000000000
[ 1584.140696][T24878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1584.148667][T24878] R13: 00007f6d74c26038 R14: 00007f6d74c25fa0 R15: 00007ffdb26989b8
[ 1584.156645][T24878]  </TASK>
[ 1584.159722][T24878] Kernel Offset: disabled
[ 1584.164055][T24878] Rebooting in 86400 seconds..