last executing test programs:

2m45.808827754s ago: executing program 1 (id=282):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8001, 0x2)
ppoll(&(0x7f0000000000)=[{r2, 0x9f712fd3135d63af}], 0x1, 0x0, 0x0, 0xffffffffffffffb7)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000180)={0x10000, 0x0, &(0x7f0000003000/0x1000)=nil})
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$ppp(0xffffff9c, &(0x7f0000000140), 0x101002, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00'})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r4, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x800, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40002}, 0x4000000)
recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xff4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000080)=""/24, 0x18}], 0x4}, 0x8}], 0x4000000000001b6, 0x180, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)

2m44.706184147s ago: executing program 1 (id=286):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x9}]}, 0x8)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
syz_extract_tcp_res(0x0, 0x6, 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2202, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff98)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r2, r1, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)

2m43.812395887s ago: executing program 1 (id=290):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000001080), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000380)=ANY=[], 0x2, 0x5515, &(0x7f0000001300)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x3, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x108e, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x5, 0xa, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffff8, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x6, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x5, 0x101, 0x5, 0xc, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x2, 0xfffff76b, 0x1, 0x4, 0x4275c4e9, 0x8, 0x5, 0x4, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000002, 0xed2, 0x5, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x9, 0x7, 0x1, 0x2, 0xe, 0x2, 0x7, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc2, 0x9, 0x3, 0x5, 0x283, 0xdd6, 0x7, 0x40, 0x7, 0x1, 0x0, 0xff, 0x7f, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x8, 0x2, 0x10001, 0xcbf, 0x10000, 0x101, 0x0, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xd, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x4, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x9, 0x382ae49b, 0xbb, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x0, 0x7, 0x1, 0x0, 0x2, 0xdfeb, 0xb, 0x77, 0x101, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x9, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0)
r5 = timerfd_create(0x0, 0x0)
read(r5, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}]})

2m39.415322948s ago: executing program 1 (id=301):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@fat=@quiet}, {@shortname_winnt}, {@numtail}, {@shortname_mixed}, {@fat=@usefree}, {@rodir}, {@shortname_lower}, {@fat=@nfs_stale_rw}, {@numtail}, {@utf8}, {@utf8}, {@utf8no}, {@utf8}]}, 0x0, 0x29f, &(0x7f0000000840)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

2m39.048009082s ago: executing program 1 (id=305):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x800c010}, 0x0)

2m38.34648354s ago: executing program 1 (id=309):
syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e4, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
epoll_wait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x7)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
socket$key(0xf, 0x3, 0x2)
syz_open_dev$vcsn(0x0, 0x200, 0x420400)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
fstatfs(r1, &(0x7f0000000640)=""/254)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x301}, 0x14}}, 0x0)

2m37.537983149s ago: executing program 32 (id=309):
syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e4, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
epoll_wait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x7)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
socket$key(0xf, 0x3, 0x2)
syz_open_dev$vcsn(0x0, 0x200, 0x420400)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
fstatfs(r1, &(0x7f0000000640)=""/254)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x301}, 0x14}}, 0x0)

2m36.56884888s ago: executing program 3 (id=318):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0xfffffffe, {0x0, 0x0, 0x0, 0x100000000, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89d339e234b30c509b7d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6a3a391f0aaf4c4f43831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x7, 0x6]}})

2m36.354522123s ago: executing program 3 (id=319):
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840)
ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000080)=0x1d)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900010000000000000000001c"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000010000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

2m36.221752715s ago: executing program 3 (id=321):
r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x20, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd}, {0x6, 0x24, 0x1a, 0x3, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x8}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x9, 0x10, 0x5d, 0xfff9, 0x10, 0x80, 0x10, 0xe, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

2m32.685564315s ago: executing program 3 (id=340):
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x1004000, &(0x7f0000000040)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000000440)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00')

2m32.125417191s ago: executing program 3 (id=342):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00'})
ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)

2m30.841557017s ago: executing program 3 (id=347):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000004c0)={[{@nojournal_checksum}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe6}}, {@oldalloc}, {@nobarrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x41, 0x5b3, &(0x7f0000000780)="$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")
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})

2m30.558605419s ago: executing program 33 (id=347):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000004c0)={[{@nojournal_checksum}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe6}}, {@oldalloc}, {@nobarrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x41, 0x5b3, &(0x7f0000000780)="$eJzs3T9sG9UfAPDvne2mf/L7pUggAepQAVKRqjpJ/0BhaldEpUodkFggctyoihNXcQJNFKnpXiE68E9dygYDI4iBAbGwwcoCYkaqaARS04EaObaTNHWCE+q4xJ+PdPF7dxd/3zv7++x7upMD6FmHa3/SiGci4nwSMbBmWzYaGw/X91tanC/cW5wvJFGtXvg9iSQi7i7OF5r7J43HAxGxEBFPR8R3uYij6cpT7mkWKrNz4yOlUnGqUR+cnrg8WJmdO3ZpYmSsOFacPPHyK6dOnzw1fHx4bXPvVdfWclvr6/Vfbrx3/cfXbt34/ItDC4UPRpI4E/2NbWv78SjVj0kuzqxbf7ITwboo6XYD2JZMI89rqfRUDESmkfWtVNcODn070jygg6p9EVWgRyXyH3pU83tA7fy3uezk94/bZ+snILW4S4vzhavRjJ+tz03E3uVzk/1/JA+cmdTONw/uZEPZlRauRcRQNvvw+z9pvP/WzlptzdCjaiQd8+3Z+gv18Oufrow/0WL86W/Onf5LzfFvqTH+LbWIn9lg/DvfZoy/3vz1kw3jX+uLZ7MR9x+Kn6zET1rETyPi7Tbj33zj69Mbbat+GnEkWvV/dUYx2Xx+ePDipVJxqP63ZYxvjhx6deP+R+zfIH59znbv8sfM2v7vabQpbbP/X33/5XMLm8R/8fnNX/9Wx39fRLzfZvwn7n72+kbbbl9L7tS+BbTq/2bxk8jFrTbjv3Tm8M+NollDAAAAAAAAAAB4hNLla9mSNL9STtN8vn4P75OxPy2VK9NHL5ZnJkfr17wdjFzavNJqoF5PavXhxvW4zfrxdfUTmUbAzL7ler5QLo12ue8AAAAAAAAAAAAAAAAAAADwuDiw7v7/PzPL9/+v/7lqYLfa+Ce/gd1O/kPvejD/k661A9h5Pv+hZ1XlP/SuVvlvTIDeINehd8l/6F3yH3qX/IfeJf8BAAAAAAAAAAAAAAAAAAAAAAAAAKAjzp87V1uq9xbnC7X6aHZ2Zrz8zrHRYmU8PzFTyBfKU5fzY+XyWKmYL5Qn/un5knL58lBMzlwZnC5Wpgcrs3NvTZRnJpu/KVrMdbxHAAAAAAAAAAAAAAAAAAAA8N/Tv7wkaT4iV6+naT4f8b+IOJhEcvFSqTgUEf+PiJ8yub5afbjbjQYAAAAAAAAAAAAAAAAAAIBdpjI7Nz5SKhWnOlfINkJ1MET7hexWdo6IhTZ2vtp+M2rPuOU25xoHsMuHbvuFu9W6bjXjhw9X12Qej/fh41/o4qAEAAAAAAAAAAAAAAAAAAA9avWm33b/435nGwQAAAAAAAAAAAAAAAAAAAA9Kf0tiYjacmTghf71W/ckS5nlx4h49+aFj66MTE9PDdfW31lZP/1xY/3xbrQfaFczT9OIqOUxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKoyOzc+UioVp7ZZ6Gtjn273EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA7/g4AAP//5TrUlQ==")
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})

1m35.74394929s ago: executing program 5 (id=539):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4)
recvmmsg(r2, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002100, 0x0)
write$binfmt_misc(r2, &(0x7f0000000300), 0x6)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000008", @ANYRES8=r2, @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000814}, 0x2004c8c5)

1m35.361945524s ago: executing program 5 (id=546):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0x6, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1a3)
sched_setscheduler(0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0x901, 0x70bd2c, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)

1m34.329243946s ago: executing program 5 (id=553):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_clone3(&(0x7f0000000240)={0x200a40080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)
rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00')
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00')
syz_ublk_setup_io_uring(0x6548, &(0x7f00000003c0)={0x0, 0xcf2a, 0x1, 0x2, 0xd2}, 0x0, 0x0, 0x0)
userfaultfd(0x80001)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
pselect6(0x40, &(0x7f0000000240)={0x4, 0x2, 0x1ff, 0x80007d, 0xffffffff, 0x8000000008000, 0x8, 0x1}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0xffffffff, 0x400000009, 0x10000000, 0xb, 0xffff}, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
faccessat(r3, 0x0, 0x9b225701cab8b82)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
socket$inet6(0xa, 0x5, 0x2000)
clock_gettime(0x0, &(0x7f0000000180))
fsopen(&(0x7f0000000000)='udf\x00', 0x1)

1m32.046036812s ago: executing program 5 (id=562):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
creat(&(0x7f0000000200)='./bus\x00', 0x268)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

1m29.703719149s ago: executing program 5 (id=572):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8008, &(0x7f0000000000)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@grpid}, {@data_err_ignore}, {@nodiscard}]}, 0xff, 0x451, &(0x7f0000000940)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000066c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x2, {0x2, 0x0, 0x10001, 0x10000, 0x0, 0x3, {0x80000000000000, 0x0, 0x400000, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000800)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x26b66925}}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000200)=0x1b)

1m29.222024405s ago: executing program 5 (id=581):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
chroot(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x922bac8556bdad8e)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x21, 0x3, 0x430, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@broadcast, [0xff000000, 0x0, 0xff], @ipv4=@private=0xa010100, [0xff000000, 0xffffffff, 0xffffff00, 0xff], 0x4d4, 0x3500, 0x2b, 0x1, 0xa, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xff000000, 0xff], @ipv4=@private=0xa010100, [0x0, 0x0, 0x0, 0xff000000], 0x4d4, 0x0, 0x4, 0x84c8c1ffaf088238, 0x6}, {@ipv6=@private1, [0x0, 0x0, 0x6471b27323fbf78f], @ipv6=@private1, [0xff, 0x0, 0x0, 0xffffff00], 0x4d4, 0x3501, 0x87, 0x1, 0x2, 0x2}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xff000000], @ipv4=@broadcast, [0xff000000, 0xff, 0xff000000, 0xffffffff], 0x4d2, 0x3506, 0x2f, 0x0, 0x0, 0x1e}], 0xf, 0x6}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [0xffffffff], 'batadv0\x00', 'veth1\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490)
ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, 0x0)

1m28.77263331s ago: executing program 34 (id=581):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
chroot(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x922bac8556bdad8e)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x21, 0x3, 0x430, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@broadcast, [0xff000000, 0x0, 0xff], @ipv4=@private=0xa010100, [0xff000000, 0xffffffff, 0xffffff00, 0xff], 0x4d4, 0x3500, 0x2b, 0x1, 0xa, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xff000000, 0xff], @ipv4=@private=0xa010100, [0x0, 0x0, 0x0, 0xff000000], 0x4d4, 0x0, 0x4, 0x84c8c1ffaf088238, 0x6}, {@ipv6=@private1, [0x0, 0x0, 0x6471b27323fbf78f], @ipv6=@private1, [0xff, 0x0, 0x0, 0xffffff00], 0x4d4, 0x3501, 0x87, 0x1, 0x2, 0x2}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xff000000], @ipv4=@broadcast, [0xff000000, 0xff, 0xff000000, 0xffffffff], 0x4d2, 0x3506, 0x2f, 0x0, 0x0, 0x1e}], 0xf, 0x6}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [0xffffffff], 'batadv0\x00', 'veth1\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490)
ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, 0x0)

38.989243202s ago: executing program 6 (id=896):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})

38.664829316s ago: executing program 6 (id=902):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x18, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004881}, 0x200089a0)

37.962309894s ago: executing program 6 (id=905):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)="c897", 0x2}], 0x1, 0x2e, 0x4, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000680)={0x0, 0x0, 0x2, 0x8, 0x3})

37.764356996s ago: executing program 6 (id=909):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=")
creat(&(0x7f0000000200)='./bus\x00', 0x268)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

37.074407964s ago: executing program 6 (id=919):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000003400)=0xc)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x200000, &(0x7f0000000280)={[{@gid={'gid', 0x3d, r1}}]})

36.53667614s ago: executing program 6 (id=937):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1af2, 0x161, 0x14, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0xc0000)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000004c0))

36.261677693s ago: executing program 35 (id=937):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1af2, 0x161, 0x14, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0xc0000)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000004c0))

11.772430155s ago: executing program 7 (id=1083):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_clone3(&(0x7f0000000240)={0x200a40080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)
rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00')
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00')
syz_ublk_setup_io_uring(0x6548, &(0x7f00000003c0)={0x0, 0xcf2a, 0x1, 0x2, 0xd2}, 0x0, 0x0, 0x0)
userfaultfd(0x80001)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
pselect6(0x40, &(0x7f0000000240)={0x4, 0x2, 0x1ff, 0x80007d, 0xffffffff, 0x8000000008000, 0x8, 0x1}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0xffffffff, 0x400000009, 0x10000000, 0xb, 0xffff}, 0x0, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000000)={0x14, 0x7d, 0x9, 0x4, 0x81, 0x81})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
faccessat(r3, 0x0, 0x9b225701cab8b82)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
socket$inet6(0xa, 0x5, 0x2000)
clock_gettime(0x0, &(0x7f0000000180))
fsopen(&(0x7f0000000000)='udf\x00', 0x1)

8.556271652s ago: executing program 4 (id=1090):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x27)
r1 = inotify_init1(0x800)
inotify_add_watch(r1, &(0x7f0000000380)='./file0\x00', 0x10000040)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r2, 0x2000009)
sendfile(r0, r2, 0x0, 0x20000000000006)

8.325450994s ago: executing program 8 (id=1093):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, 0x0)

8.320289654s ago: executing program 7 (id=1094):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x3, 0x9}]}, 0x10)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
syz_extract_tcp_res(0x0, 0x6, 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2202, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff98)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)

7.498086784s ago: executing program 2 (id=1095):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x70bd2c, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x30}}, 0x4000)

7.468898214s ago: executing program 4 (id=1096):
r0 = socket(0x28, 0x5, 0x0)
r1 = socket(0x28, 0x5, 0x0)
fcntl$lock(0xffffffffffffffff, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0x4)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
write$P9_RMKNOD(r2, &(0x7f0000000280)={0x14, 0x13, 0x1, {0x1, 0x2, 0x4}}, 0x14)
sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
r3 = accept4$unix(r1, 0x0, 0x0, 0x800)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
iopl(0x3)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x28)
preadv2(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x20, 0x0, 0x4, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0)

7.456064625s ago: executing program 0 (id=1097):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x8000, &(0x7f0000004b40)=ANY=[@ANYBLOB="00dab9ef0f812cef41d3cf9c8b7ff5124d6df16a47a96a22c0e21bd704ac26b7b9cde8f3f464bfc5993ca7175a983af6232955a984a377cade2dfd19d9d669cc165c39c07a811c740102acfa1ae7df9fcb074ab864eb1a6c917b5676e2b47fa6c79dd882264b081c890b0b4efd9a7639a6435baba8324b21b0f06e6ba64955f2a1084e52acc0f27c5ab037853682085f84dfa17afcfec6336d70bd65293261006c3188424256089124f95dce7e2a71e63197c4bef6f5d4b807239fcfc183d00ae4c92ae0cfc3b83363"], 0x1, 0x486, &(0x7f0000000a80)="$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")
io_uring_setup(0x2d20, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x40)
statfs(&(0x7f0000000a40)='./file1\x00', &(0x7f0000000a80))
listen(0xffffffffffffffff, 0xffffff81)

7.155647298s ago: executing program 8 (id=1098):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
capget(0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x4000)
pipe2$9p(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
r7 = dup(r6)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000e40), 0x4000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_uid}]}})

6.616870804s ago: executing program 2 (id=1099):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x2, 0x151e, &(0x7f0000003180)="$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")
chdir(0x0)
truncate(0x0, 0x100)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x1)
getdents64(r0, &(0x7f0000000400)=""/236, 0xec)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
timer_getoverrun(0x0)
pread64(r1, 0x0, 0x0, 0x3)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000000007, 0x0)

6.594960084s ago: executing program 7 (id=1100):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00'})
ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)

6.171808119s ago: executing program 0 (id=1101):
syz_mount_image$udf(&(0x7f00000019c0), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0xc57, &(0x7f0000001a00)="$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")
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7)
fchown(r0, 0x0, 0x0)

6.0668802s ago: executing program 8 (id=1102):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
gettid()
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYRES64], 0x32600)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x6}, 0x20)
preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000340)=""/174, 0xae}], 0x2, 0x2, 0x1)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)

6.003206441s ago: executing program 2 (id=1103):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0}, &(0x7f00000000c0)=0xc)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x3, &(0x7f0000000080)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
flock(0xffffffffffffffff, 0x2)
r6 = open(0x0, 0x10000, 0x2)
connect$bt_sco(r6, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
unshare(0x22040400)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4)
syz_io_uring_setup(0x1070, &(0x7f00000003c0)={0x0, 0xb211, 0x2, 0x3, 0x2ba, 0x0, r6}, 0x0, 0x0, &(0x7f0000000300))
quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, r1, &(0x7f0000000100))
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_clone3(&(0x7f0000000580)={0x1000000, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000280), {0x36}, &(0x7f00000002c0)=""/51, 0x33, &(0x7f0000000440)=""/129, &(0x7f0000000500)=[r2, r4, r0, r4, r2], 0x5}, 0x58)
syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000380)="0f3a0f6f4e0066b80500000066b9b013bba20f01c13e660f1640f2660fd3821f000f005ff9ba410066b81497000066ef66660f3882a40028baf80c66b86429778966efbafc0c66ed66b92803000066b8ffffffff66baffffffff0f30f30fb8d5", 0x60}], 0x1, 0x5d, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

4.856374224s ago: executing program 8 (id=1104):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_clone3(&(0x7f0000000240)={0x200a40080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)
rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00')
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00')
syz_ublk_setup_io_uring(0x6548, &(0x7f00000003c0)={0x0, 0xcf2a, 0x1, 0x2, 0xd2}, 0x0, 0x0, 0x0)
userfaultfd(0x80001)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
pselect6(0x40, &(0x7f0000000240)={0x4, 0x2, 0x1ff, 0x80007d, 0xffffffff, 0x8000000008000, 0x8, 0x1}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0xffffffff, 0x400000009, 0x10000000, 0xb, 0xffff}, 0x0, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000000)={0x14, 0x7d, 0x9, 0x4, 0x81, 0x81})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
faccessat(r3, 0x0, 0x9b225701cab8b82)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
socket$inet6(0xa, 0x5, 0x2000)
clock_gettime(0x0, &(0x7f0000000180))
fsopen(&(0x7f0000000000)='udf\x00', 0x1)

4.771209685s ago: executing program 7 (id=1105):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0x901, 0x70bd2c, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)

4.706086056s ago: executing program 4 (id=1106):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x3808004, &(0x7f0000000600)=ANY=[], 0x5, 0x14fe, &(0x7f00000020c0)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==")
syz_emit_ethernet(0x146, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000e86dd6000000001103afffe800000000000000000000004000020ff02000000000000000000000000000186009078ff000000feffffff00000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001020000170400000126000400040100000200000018137c5fedeead5d05b87f9a168ce9fa5053c7dba3f0bfbdedf001ccf4f4c7e10fdfa608dbd75df7cd7eeab451ca0a9ee0f0146904f6d1d709ba386b75cb6cb259f3cf09c554b9ca2ceafb4e1735936011a5fb6caedf2de4d3d66ef12adef12a2e51ee8dbcc44a35c94addd3"], 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
quotactl$Q_GETQUOTA(0xffffffff80000701, 0x0, 0xee01, &(0x7f0000000340))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0)

4.202076072s ago: executing program 7 (id=1107):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f0000000800)=ANY=[], 0x1, 0x1506, &(0x7f0000001580)="$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")
creat(&(0x7f0000000240)='./file1\x00', 0xd)

3.250831873s ago: executing program 4 (id=1108):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x8000, &(0x7f0000004b40)=ANY=[@ANYBLOB="00dab9ef0f812cef41d3cf9c8b7ff5124d6df16a47a96a22c0e21bd704ac26b7bfc5993ca7175a983af6232955a984a377cade2dfd19d9d669cc165c39c07b811c740102acfa1ae7df9fcb074ab864eb1a6c917b5676e2b47fa6c79dd882264b691c890b0b4efd9a7639a6435baba8324b21b0f06e6ba64955f2a1084e52acc0f27c5ab037853682085f84dfa17afcfec6336d70bd65293261006c3188424256089124f95dce7e2a71e63197c4bef6f5d4b807239fcfc183d00ae4c92ae0cfc3b8336397cb019a5f11"], 0x1, 0x483, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
fdatasync(r0)
write$P9_RLERRORu(r0, &(0x7f0000000080)={0xd, 0x7, 0x2, {{}, 0x6e9}}, 0xd)

3.206148713s ago: executing program 2 (id=1109):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000280)=0x7ff, 0x4)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$cgroup_pid(r1, &(0x7f0000000240), 0xb375)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4)
read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020)

3.203891393s ago: executing program 0 (id=1110):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x9}]}, 0x8)
openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0)
syz_extract_tcp_res(0x0, 0x6, 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2202, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff98)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)

3.066131515s ago: executing program 4 (id=1111):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303030303030303030303030392c756d61736b3d30303030303030303030303030303030343030302c626172726965722c747970653df268d6512c6e6c733d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030372c00000000"], 0x3, 0x6c0, &(0x7f0000001cc0)="$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")
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
socket(0x400000000010, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10)
write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24)
link(0x0, 0x0)
unlink(&(0x7f0000000140)='./file1\x00')

2.978079386s ago: executing program 0 (id=1112):
fanotify_init(0xf00, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc956, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x6, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x80000001, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x4, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x24, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x7, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x5e1, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x4000003, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x3fffc, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
unshare(0x26020480)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.782083548s ago: executing program 8 (id=1113):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_GET_NAME(0x10, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
clock_adjtime(0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
read(0xffffffffffffffff, 0x0, 0x0)
pipe(0x0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1)

2.53801061s ago: executing program 2 (id=1114):
mkdir(0x0, 0x6526befdc9551232)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
socket(0x400000000010, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000002000000020000080004000100", 0x22)
link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
socket$igmp6(0xa, 0x3, 0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0x3}}}}}}}, 0x0)

2.432535112s ago: executing program 7 (id=1115):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00'})
ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)

2.104486896s ago: executing program 4 (id=1116):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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")
openat(0xffffffffffffff9c, 0x0, 0x101842, 0x11)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @rand_addr, @multicast2}, &(0x7f0000000280)=0xc)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x6, 0x5, 0x9, 0x4, 0x5})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f00000000c0)='a', 0x1, 0x9003)

2.054196527s ago: executing program 0 (id=1117):
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000800, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xf)
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
mount(0x0, 0x0, 0x0, 0x2390024, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)

709.391182ms ago: executing program 8 (id=1118):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x3808004, &(0x7f0000000600)=ANY=[], 0x5, 0x14fe, &(0x7f00000020c0)="$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")
syz_emit_ethernet(0x146, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
quotactl$Q_GETQUOTA(0xffffffff80000701, 0x0, 0xee01, &(0x7f0000000340))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0x7f, 0x500, 0xffffffffffffffff, 0x800}, 0x50)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r3, 0x0)

596.586153ms ago: executing program 0 (id=1119):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@usrjquota}]}, 0x1, 0x44e, &(0x7f0000000900)="$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")
socketpair$unix(0x1, 0x5, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_emit_vhci(0x0, 0x0)

0s ago: executing program 2 (id=1120):
r0 = socket(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x404cc00)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x388, 0x2)
stat(0x0, 0x0)
statx(0xffffffffffffff9c, 0x0, 0x400, 0x1, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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")
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000)
newfstatat(0xffffffffffffff9c, &(0x7f0000005800)='./file0\x00', 0x0, 0x7000)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, &(0x7f00000062c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r2, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r2, 0x0, 0x0, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000005900)='./file0\x00', 0x4000, 0x80, &(0x7f0000005940))

kernel console output (not intermixed with test programs):

 usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.910789][ T4232] usb 2-1: Product: syz
[  110.916109][ T4232] usb 2-1: Manufacturer: syz
[  110.920731][ T4232] usb 2-1: SerialNumber: syz
[  110.938683][ T4232] usb 2-1: config 0 descriptor??
[  111.261050][ T4232] usb 2-1: Found UVC 0.04 device syz (046d:08c3)
[  112.024308][ T4232] usb 2-1: No valid video chain found.
[  112.054761][ T4232] usb 2-1: USB disconnect, device number 2
[  112.507469][ T4897] loop0: detected capacity change from 0 to 764
[  112.657615][ T4902] loop2: detected capacity change from 0 to 8
[  112.692947][ T4900] loop4: detected capacity change from 0 to 1024
[  112.769645][ T4900] hfsplus: invalid file type 0113366 for inode 2
[  112.790129][ T4900] hfsplus: failed to load root directory
[  112.844295][ T4907] loop0: detected capacity change from 0 to 512
[  113.369164][ T4907] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  113.711183][ T4907] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  113.726662][ T4907] EXT4-fs (loop0): 1 truncate cleaned up
[  113.733095][ T4907] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,auto_da_alloc=0x0000000000000008,nombcache,,errors=continue. Quota mode: none.
[  113.875900][ T4916] loop1: detected capacity change from 0 to 512
[  114.096566][ T4916] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  114.113127][ T4916] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.142106][ T4922] loop4: detected capacity change from 0 to 16
[  114.843655][ T4922] erofs: (device loop4): mounted with root inode @ nid 36.
[  118.630990][ T5003] netlink: 56 bytes leftover after parsing attributes in process `syz.0.140'.
[  118.701424][ T5003] netlink: 112 bytes leftover after parsing attributes in process `syz.0.140'.
[  118.722753][ T5006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'.
[  118.803796][ T5006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'.
[  124.167612][   T26] audit: type=1326 audit(1778090193.456:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5095 comm="syz.2.158" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3f09c2dd9 code=0x0
[  124.294511][ T5105] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  124.391231][ T4177] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  126.271076][ T4177] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.456254][ T5154] loop0: detected capacity change from 0 to 16
[  127.611620][ T4177] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  127.735529][ T4177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.749289][ T5154] erofs: (device loop0): mounted with root inode @ nid 36.
[  127.838532][ T4177] usb 2-1: Product: syz
[  127.916164][ T4177] usb 2-1: Manufacturer: syz
[  129.857607][ T4177] usb 2-1: config 0 descriptor??
[  129.905878][ T5165] loop1: detected capacity change from 0 to 256
[  129.921140][ T4177] usb 2-1: can't set config #0, error -71
[  129.932751][ T4177] usb 2-1: USB disconnect, device number 3
[  130.051549][ T5170] loop4: detected capacity change from 0 to 1024
[  130.068789][ T5165] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d)
[  130.196931][ T5165] exFAT-fs (loop1): error, broken FAT chain.
[  130.208391][ T5165] exFAT-fs (loop1): Filesystem has been set read-only
[  130.228712][ T4441] hfsplus: b-tree write err: -5, ino 25
[  130.237766][ T4441] hfsplus: b-tree write err: -5, ino 4
[  130.251707][ T5165] exFAT-fs (loop1): error, failed to bmap (inode : ffff8880757f87e0 iblock : 0, err : -5)
[  130.277935][ T4441] hfsplus: b-tree write err: -5, ino 2
[  130.313106][ T5180] binder: 5176:5180 ioctl c0306201 0 returned -14
[  130.352887][ T4441] hfsplus: b-tree write err: -5, ino 26
[  130.492935][ T5165] exFAT-fs (loop1): error, broken FAT chain.
[  130.594958][ T5165] exFAT-fs (loop1): error, failed to bmap (inode : ffff8880757f87e0 iblock : 0, err : -5)
[  130.855174][ T5165] exFAT-fs (loop1): error, broken FAT chain.
[  130.996537][ T5165] exFAT-fs (loop1): error, failed to bmap (inode : ffff8880757f87e0 iblock : 1, err : -5)
[  131.035545][ T5165] exFAT-fs (loop1): error, broken FAT chain.
[  131.041916][ T5165] exFAT-fs (loop1): error, failed to bmap (inode : ffff8880757f87e0 iblock : 2, err : -5)
[  131.051909][ T5165] exFAT-fs (loop1): error, broken FAT chain.
[  131.057924][ T5165] exFAT-fs (loop1): error, failed to bmap (inode : ffff8880757f87e0 iblock : 3, err : -5)
[  131.068009][ T5165] exFAT-fs (loop1): error, broken FAT chain.
[  131.074847][ T5165] exFAT-fs (loop1): error, failed to bmap (inode : ffff8880757f87e0 iblock : 4, err : -5)
[  131.085662][ T5165] exFAT-fs (loop1): error, broken FAT chain.
[  131.091863][ T5165] exFAT-fs (loop1): error, failed to bmap (inode : ffff8880757f87e0 iblock : 5, err : -5)
[  131.101907][ T5165] exFAT-fs (loop1): error, broken FAT chain.
[  131.107936][ T5165] exFAT-fs (loop1): error, failed to bmap (inode : ffff8880757f87e0 iblock : 6, err : -5)
[  131.118147][ T5165] exFAT-fs (loop1): error, broken FAT chain.
[  131.124249][ T5165] exFAT-fs (loop1): error, failed to bmap (inode : ffff8880757f87e0 iblock : 7, err : -5)
[  131.134359][ T5165] exFAT-fs (loop1): error, broken FAT chain.
[  131.140506][ T5165] exFAT-fs (loop1): error, failed to bmap (inode : ffff8880757f87e0 iblock : 0, err : -5)
[  131.155660][ T5165] exFAT-fs (loop1): error, broken FAT chain.
[  131.161900][ T5165] exFAT-fs (loop1): error, broken FAT chain.
[  131.171134][ T5165] exFAT-fs (loop1): error, broken FAT chain.
[  131.178661][ T5165] exFAT-fs (loop1): error, broken FAT chain.
[  131.290998][ T5165] exFAT-fs (loop1): error, broken FAT chain.
[  131.760738][ T5165] exFAT-fs (loop1): error, broken FAT chain.
[  131.897309][ T5186] loop2: detected capacity change from 0 to 128
[  131.933081][ T5165] exFAT-fs (loop1): error, broken FAT chain.
[  131.940196][   T26] audit: type=1800 audit(1778090201.226:5): pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.168" name="file0" dev="loop1" ino=1048590 res=0 errno=0
[  132.340952][ T5165] syz.1.168 (5165) used greatest stack depth: 20848 bytes left
[  132.635074][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  132.641460][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  132.649320][   T26] audit: type=1800 audit(1778090201.806:6): pid=5223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.176" name="file1" dev="loop2" ino=1048591 res=0 errno=0
[  133.656278][ T5232] loop2: detected capacity change from 0 to 16
[  133.728381][ T5232] erofs: (device loop2): mounted with root inode @ nid 36.
[  136.614234][ T5251] fuse: Bad value for 'fd'
[  137.028368][ T5260] netlink: 7 bytes leftover after parsing attributes in process `syz.3.189'.
[  137.213662][ T5265] binder: 5256:5265 ioctl c0306201 0 returned -14
[  138.262584][ T5278] loop2: detected capacity change from 0 to 16
[  138.301396][ T5278] erofs: (device loop2): mounted with root inode @ nid 36.
[  141.342551][ T5317] fuse: Bad value for 'fd'
[  141.581375][ T5319] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  143.398974][ T5331] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  145.121176][    T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  145.390986][    T7] usb 3-1: Using ep0 maxpacket: 16
[  145.516801][    T7] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.410607][    T7] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.564836][ T5380] loop4: detected capacity change from 0 to 16
[  146.744801][ T5380] erofs: (device loop4): mounted with root inode @ nid 36.
[  146.760935][    T7] usb 3-1: config 0 interface 0 has no altsetting 0
[  146.878927][    T7] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  146.908706][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.929049][    T7] usb 3-1: config 0 descriptor??
[  147.424508][    T7] hid (null): unknown global tag 0xd
[  147.429899][    T7] hid (null): unknown global tag 0xd
[  148.876472][    T7] hid (null): invalid report_count 595948055
[  148.927135][    T7] hid (null): invalid report_size 870783726
[  148.967618][    T7] hid (null): bogus close delimiter
[  149.006695][ T5393] loop1: detected capacity change from 0 to 512
[  149.593660][ T5401] loop2: detected capacity change from 0 to 1024
[  150.522845][    T7] usb 3-1: USB disconnect, device number 2
[  150.562494][ T5401] EXT4-fs (loop2): Can't support bigalloc feature without extents feature
[  150.562494][ T5401] 
[  150.573383][ T5401] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[  150.628749][ T5393] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.209: missing EA_INODE flag
[  150.668673][ T5393] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.209: error while reading EA inode 12 err=-117
[  150.682252][ T5393] EXT4-fs (loop1): 1 orphan inode deleted
[  150.689255][ T5393] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  151.260731][ T5422] loop4: detected capacity change from 0 to 512
[  151.364273][ T5429] loop0: detected capacity change from 0 to 128
[  151.376055][ T5422] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  151.402126][ T5429] FAT-fs (loop0): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value
[  151.451791][ T5422] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.934908][ T4188] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  152.691239][ T5437] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  152.974021][ T5438] loop2: detected capacity change from 0 to 16
[  153.591273][ T5438] erofs: (device loop2): mounted with root inode @ nid 36.
[  153.650848][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  153.843092][ T4796] wlan1: Trigger new scan to find an IBSS to join
[  155.580942][ T4231] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  155.960905][ T4231] usb 4-1: Using ep0 maxpacket: 32
[  156.161115][ T4231] usb 4-1: unable to get BOS descriptor or descriptor too short
[  156.269403][ T5495] loop4: detected capacity change from 0 to 128
[  156.310263][ T5496] loop0: detected capacity change from 0 to 512
[  156.461040][ T4231] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  156.470407][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.005923][ T4231] usb 4-1: Product: syz
[  157.010227][ T4231] usb 4-1: Manufacturer: syz
[  157.014908][ T4231] usb 4-1: SerialNumber: syz
[  157.029863][ T5495] FAT-fs (loop4): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value
[  157.095371][ T5496] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  157.111169][ T5496] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.086178][ T4231] usb 4-1: unit 4 not found!
[  158.102535][ T4231] usb 4-1: unit 0 not found!
[  158.225487][ T4199] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  158.263278][ T4231] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  158.315128][ T4231] usb 4-1: unit 4 not found!
[  158.319851][ T4231] usb 4-1: unit 0 not found!
[  158.382879][ T4231] snd-usb-audio: probe of 4-1:1.1 failed with error -22
[  158.402800][ T4231] usb 4-1: unit 4 not found!
[  158.407539][ T4231] usb 4-1: unit 0 not found!
[  158.500937][    T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  158.557371][ T4231] snd-usb-audio: probe of 4-1:1.2 failed with error -22
[  158.567568][ T4231] usb 4-1: USB disconnect, device number 4
[  158.751026][    T7] usb 2-1: Using ep0 maxpacket: 16
[  158.821431][ T5512] xt_policy: too many policy elements
[  159.181260][    T7] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  159.219679][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  159.305332][    T7] usb 2-1: config 1 has no interface number 0
[  159.557734][    T7] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  159.617066][ T5514] loop0: detected capacity change from 0 to 512
[  159.633766][    T7] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  159.680986][    T7] usb 2-1: config 1 interface 105 has no altsetting 0
[  159.698820][ T5514] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.235: missing EA_INODE flag
[  159.791374][ T5514] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.235: error while reading EA inode 12 err=-117
[  159.834321][ T5514] EXT4-fs (loop0): 1 orphan inode deleted
[  159.840109][ T5514] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  159.947407][    T7] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  159.971639][    T7] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  160.000275][    T7] usb 2-1: Product: syz
[  160.198828][    T7] usb 2-1: Manufacturer: syz
[  160.207707][    T7] usb 2-1: SerialNumber: syz
[  160.239481][    T7] usb 2-1: can't set config #1, error -71
[  160.250714][    T7] usb 2-1: USB disconnect, device number 4
[  160.301886][ T5528] loop4: detected capacity change from 0 to 1024
[  160.370377][ T5528] hfsplus: invalid length 32517 has been corrected to 255
[  160.689477][ T5558] loop2: detected capacity change from 0 to 512
[  160.703733][ T4796] wlan1: Trigger new scan to find an IBSS to join
[  160.848659][ T5558] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  160.964425][ T5558] EXT4-fs (loop2): 1 truncate cleaned up
[  160.970379][ T5558] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  161.032311][ T4441] hfsplus: b-tree write err: -5, ino 25
[  161.038231][ T4441] hfsplus: b-tree write err: -5, ino 4
[  161.091171][ T4441] hfsplus: b-tree write err: -5, ino 2
[  161.241063][ T4228] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  161.501706][ T5568] loop1: detected capacity change from 0 to 128
[  161.559511][ T5568] FAT-fs (loop1): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value
[  161.651407][ T4228] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  161.679029][ T5572] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  161.688384][ T5572] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  161.688526][ T4228] usb 4-1: config 0 has no interface number 0
[  162.327095][ T4228] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  162.339255][ T4228] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  162.353853][ T4228] usb 4-1: config 0 interface 255 has no altsetting 0
[  162.393093][ T4228] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  162.648574][ T5579] xt_policy: too many policy elements
[  163.316933][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.338656][ T4228] usb 4-1: config 0 descriptor??
[  163.369796][    T9] wlan1: Creating new IBSS network, BSSID 5e:b0:60:01:c4:ed
[  163.843740][ T5585] device batadv_slave_1 entered promiscuous mode
[  165.583469][ T5562] device batadv_slave_1 left promiscuous mode
[  165.671013][ T4228] usb 4-1: string descriptor 0 read error: -71
[  165.755617][ T4228] asix: probe of 4-1:0.255 failed with error -22
[  165.907126][ T4228] usb 4-1: USB disconnect, device number 5
[  166.027581][ T5630] loop2: detected capacity change from 0 to 8
[  166.198075][ T5630] SQUASHFS error: Failed to read block 0x2d7: -5
[  166.238859][ T5630] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  166.612940][ T5639] binder: BINDER_SET_CONTEXT_MGR already set
[  166.619368][ T5639] binder: 5634:5639 ioctl 4018620d 200000000040 returned -16
[  166.629270][ T5639] binder: 5634:5639 ioctl c0306201 0 returned -14
[  167.907059][ T5649] loop3: detected capacity change from 0 to 128
[  168.024263][ T5649] FAT-fs (loop3): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value
[  168.060973][ T5651] xt_policy: too many policy elements
[  169.403470][ T5665] loop2: detected capacity change from 0 to 512
[  169.489683][ T5665] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5
[  169.489683][ T5665] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  169.489683][ T5665] 
[  169.608385][ T5665] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,abort,noinit_itable,bsdgroups,nouser_xattr,,errors=continue. Quota mode: writeback.
[  169.717896][ T5665] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.095670][ T5670] loop1: detected capacity change from 0 to 2048
[  170.283344][ T5670] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  170.942435][ T5682] EXT4-fs error (device loop1): ext4_lookup:1858: inode #16: comm syz.1.265: iget: bad i_size value: 8796093031208
[  171.705073][ T5686] xt_hashlimit: max too large, truncated to 1048576
[  171.800302][ T5687] binder: 5683:5687 ioctl c0306201 0 returned -14
[  172.334619][ T5689] Bluetooth: hci0: unsupported parameter 255
[  172.426518][ T5689] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  172.582741][ T5698] loop2: detected capacity change from 0 to 128
[  172.694960][ T5706] loop4: detected capacity change from 0 to 128
[  172.697227][ T5698] FAT-fs (loop2): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value
[  172.779007][ T5706] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  172.944864][ T5706] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  173.559105][ T5717] loop3: detected capacity change from 0 to 512
[  173.761828][ T5717] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,,errors=continue. Quota mode: writeback.
[  173.943713][ T5717] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz.3.280: Directory block failed checksum
[  175.149377][ T5735] binder: 5732:5735 ioctl c0306201 0 returned -14
[  176.023800][ T5744] loop1: detected capacity change from 0 to 512
[  176.456355][ T5751] xt_policy: too many policy elements
[  176.602966][ T5744] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.290: missing EA_INODE flag
[  176.627311][ T5744] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.290: error while reading EA inode 12 err=-117
[  176.673017][ T5744] EXT4-fs (loop1): 1 orphan inode deleted
[  176.692373][ T5744] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  178.311208][ T5402] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  178.600904][ T5402] usb 4-1: Using ep0 maxpacket: 16
[  179.391099][ T5402] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.440886][ T5402] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.450765][ T5402] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  180.275924][ T5402] usb 4-1: config 0 interface 0 has no altsetting 0
[  180.283620][ T5402] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  180.293077][ T5402] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.304558][ T5402] usb 4-1: config 0 descriptor??
[  180.572138][ T5812] loop1: detected capacity change from 0 to 128
[  180.782043][ T4189] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  180.791032][ T4232] Bluetooth: hci3: command 0x0406 tx timeout
[  180.792463][ T4234] Bluetooth: hci1: command 0x0406 tx timeout
[  180.804477][ T5402] hid (null): unknown global tag 0xd
[  180.809811][ T5402] hid (null): unknown global tag 0xd
[  180.814279][ T4189] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  180.831183][ T5402] hid (null): invalid report_count -552242985
[  180.859134][ T5402] hid (null): report_id 1619789852 is invalid
[  180.867923][ T5402] hid (null): report_id 43997 is invalid
[  180.902359][ T5402] Bluetooth: hci2: command 0x0406 tx timeout
[  180.926708][ T5402] Bluetooth: hci0: command 0x0406 tx timeout
[  181.023429][ T4234] usb 4-1: USB disconnect, device number 6
[  182.398873][ T5831] loop2: detected capacity change from 0 to 512
[  182.475253][ T4239] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.561221][ T5831] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.311: missing EA_INODE flag
[  182.627336][ T4239] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.739741][ T5831] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.311: error while reading EA inode 12 err=-117
[  182.775238][ T5831] EXT4-fs (loop2): 1 orphan inode deleted
[  182.788486][ T5831] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  182.983418][ T5846] xt_policy: too many policy elements
[  183.133795][ T4239] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.230421][ T4239] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.881212][ T4228] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  184.111834][ T5851] chnl_net:caif_netlink_parms(): no params data found
[  184.241025][ T4228] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  184.269781][ T4228] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  184.297993][ T4228] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  184.871354][ T5889] loop4: detected capacity change from 0 to 2048
[  184.940751][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.995896][ T5889] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  185.010832][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.054794][ T5851] device bridge_slave_0 entered promiscuous mode
[  185.071331][ T4228] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  185.080684][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.088792][ T4228] usb 4-1: Product: syz
[  185.093037][ T4228] usb 4-1: Manufacturer: syz
[  185.097689][ T4228] usb 4-1: SerialNumber: syz
[  185.171227][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.178346][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.205595][ T5851] device bridge_slave_1 entered promiscuous mode
[  185.220096][ T5897] loop2: detected capacity change from 0 to 128
[  185.318836][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.348906][ T5860] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  185.364736][ T4229] Bluetooth: hci1: command 0x0409 tx timeout
[  185.449212][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.740061][ T5851] team0: Port device team_slave_0 added
[  185.858682][ T5851] team0: Port device team_slave_1 added
[  186.023949][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.035435][ T5860] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  186.041600][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.086165][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.194042][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.220939][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.307465][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.311955][ T4228] cdc_ncm 4-1:1.0: bind() failure
[  186.373155][ T4228] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  186.403756][ T4228] cdc_ncm 4-1:1.1: bind() failure
[  186.450200][ T5930] loop2: detected capacity change from 0 to 512
[  186.485985][ T5928] loop4: detected capacity change from 0 to 512
[  186.537054][ T4177] usb 4-1: USB disconnect, device number 7
[  186.556204][ T5851] device hsr_slave_0 entered promiscuous mode
[  186.608146][ T5930] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.336: missing EA_INODE flag
[  186.646369][ T5851] device hsr_slave_1 entered promiscuous mode
[  186.669815][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  186.679194][ T5851] Cannot create hsr debugfs directory
[  186.694672][ T5930] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.336: error while reading EA inode 12 err=-117
[  186.720302][ T5928] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue. Quota mode: writeback.
[  186.751143][ T5930] EXT4-fs (loop2): 1 orphan inode deleted
[  186.756943][ T5930] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  186.801112][ T5928] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  186.982751][ T4239] device hsr_slave_0 left promiscuous mode
[  187.002234][ T4239] device hsr_slave_1 left promiscuous mode
[  187.037029][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.046434][ T5942] loop4: detected capacity change from 0 to 2048
[  187.078253][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.125597][ T5942] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  187.154865][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.175655][ T5950] loop3: detected capacity change from 0 to 2048
[  187.200947][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.241549][ T4239] device bridge_slave_1 left promiscuous mode
[  187.249557][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.368538][ T4447] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  187.401860][ T4447] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  187.426819][ T4239] device bridge_slave_0 left promiscuous mode
[  187.433061][   T23] Bluetooth: hci1: command 0x041b tx timeout
[  187.439316][ T5950] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  187.461744][ T4447] EXT4-fs (loop4): This should not happen!! Data will be lost
[  187.461744][ T4447] 
[  187.477318][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.486874][ T5950] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.507069][ T4447] EXT4-fs (loop4): Total free blocks count 0
[  187.524578][ T4447] EXT4-fs (loop4): Free/Dirty block details
[  187.559737][ T4447] EXT4-fs (loop4): free_blocks=66060288
[  187.590994][ T4447] EXT4-fs (loop4): dirty_blocks=32
[  187.628821][ T4447] EXT4-fs (loop4): Block reservation details
[  187.640230][ T4239] device veth1_macvtap left promiscuous mode
[  187.648876][ T4239] device veth0_macvtap left promiscuous mode
[  187.654894][ T4447] EXT4-fs (loop4): i_reserved_data_blocks=2
[  187.660017][ T4447] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  187.679487][ T4239] device veth1_vlan left promiscuous mode
[  187.694239][ T4197] UDF-fs: error (device loop3): udf_read_inode: (ino 1440) failed !bh
[  187.704175][ T4447] EXT4-fs (loop4): This should not happen!! Data will be lost
[  187.704175][ T4447] 
[  187.714583][ T4239] device veth0_vlan left promiscuous mode
[  187.721915][ T4197] UDF-fs: error (device loop3): udf_read_inode: (ino 1440) failed !bh
[  188.502729][ T4239] team0 (unregistering): Port device team_slave_1 removed
[  188.518923][ T4239] team0 (unregistering): Port device team_slave_0 removed
[  188.546941][ T4239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  188.578970][ T4239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  188.712181][ T4239] bond0 (unregistering): Released all slaves
[  188.980926][ T4197] syz-executor (4197) used greatest stack depth: 20312 bytes left
[  189.084619][ T5986] loop4: detected capacity change from 0 to 16
[  189.123417][ T5851] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  189.145931][ T5986] erofs: (device loop4): mounted with root inode @ nid 36.
[  189.220177][ T5851] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  189.290019][ T5985] loop2: detected capacity change from 0 to 2048
[  189.300476][ T5851] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  189.347683][ T5851] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  189.420178][ T5985] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  189.510935][   T23] Bluetooth: hci1: command 0x040f tx timeout
[  189.831147][ T5985] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none.
[  190.034235][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.140133][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[  190.171300][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  190.245200][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  190.292122][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  190.353638][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  190.362107][   T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  190.389317][ T6015] loop4: detected capacity change from 0 to 256
[  190.406995][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.414170][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.444234][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  190.464816][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  190.477422][ T6015] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  190.489615][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.496819][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.546490][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  190.565695][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  190.593855][ T4443] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  190.605724][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  190.693899][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  190.728938][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  190.747845][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  190.762789][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  190.773272][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  190.781322][   T13] usb 3-1: unable to get BOS descriptor or descriptor too short
[  190.791873][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  190.803330][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  190.885178][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  190.895902][   T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  190.906859][   T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  190.917926][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  190.945455][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  190.960258][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  191.081264][   T13] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40
[  191.100587][   T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.149764][   T13] usb 3-1: Product: syz
[  191.164277][   T13] usb 3-1: Manufacturer: syz
[  191.169023][   T13] usb 3-1: SerialNumber: syz
[  191.273824][ T6001] chnl_net:caif_netlink_parms(): no params data found
[  191.391243][ T6037] loop4: detected capacity change from 0 to 512
[  191.461400][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.468666][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.477059][ T6001] device bridge_slave_0 entered promiscuous mode
[  191.506456][ T6037] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  191.561099][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.571857][ T6037] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  191.591298][ T4234] Bluetooth: hci1: command 0x0419 tx timeout
[  191.611062][   T13] usb 3-1: unit 0 not found!
[  191.629057][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.643044][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.649163][   T13] usb 3-1: USB disconnect, device number 3
[  191.744198][ T6037] EXT4-fs (loop4): 1 truncate cleaned up
[  191.793331][ T6037] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="nombcache,noload,nombcache,usrjquota="norecovery,init_itable,noquota,,errors=continue. Quota mode: none.
[  191.822039][ T6001] device bridge_slave_1 entered promiscuous mode
[  191.861584][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  191.869339][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  191.892044][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  191.894722][ T6037] EXT4-fs (loop4): re-mounted. Opts: jqfmt=vfsold,grpjquota="nombcache,noload,nombcache,usrjquota="norecovery,init_itable,noquota,. Quota mode: none.
[  191.993035][ T6001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.172894][ T4230] Bluetooth: hci2: command 0x0409 tx timeout
[  192.308776][ T6001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.390216][ T6051] loop2: detected capacity change from 0 to 16
[  192.489560][ T6051] erofs: (device loop2): mounted with root inode @ nid 36.
[  192.524253][ T6001] team0: Port device team_slave_0 added
[  192.649092][ T6001] team0: Port device team_slave_1 added
[  192.967672][ T6001] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.131306][ T6001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.230287][ T6001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.243964][ T6001] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.251183][ T6001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.300807][ T6001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.526744][ T4405] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  194.084413][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  194.101833][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  194.259289][ T5402] Bluetooth: hci2: command 0x041b tx timeout
[  194.318863][   T23] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  194.444417][ T6001] device hsr_slave_0 entered promiscuous mode
[  194.476968][ T6001] device hsr_slave_1 entered promiscuous mode
[  194.512710][ T6001] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  194.520419][ T6001] Cannot create hsr debugfs directory
[  194.613456][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  194.633947][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  194.715252][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  194.731351][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  194.743723][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  194.755225][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  194.774621][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  194.778591][   T23] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  194.799419][ T5851] device veth0_vlan entered promiscuous mode
[  194.844236][ T6089] loop4: detected capacity change from 0 to 256
[  194.846355][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.896739][ T5851] device veth1_vlan entered promiscuous mode
[  194.916337][   T23] usb 1-1: config 0 descriptor??
[  194.953471][ T6089] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d)
[  195.039686][ T5851] device veth0_macvtap entered promiscuous mode
[  195.047290][ T6089] exFAT-fs (loop4): error, broken FAT chain.
[  195.080044][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  195.088844][ T6089] exFAT-fs (loop4): Filesystem has been set read-only
[  195.099824][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  195.132181][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  195.140265][ T6089] exFAT-fs (loop4): error, failed to bmap (inode : ffff8880611b07e0 iblock : 0, err : -5)
[  195.170548][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  195.194429][ T6089] exFAT-fs (loop4): error, broken FAT chain.
[  195.207325][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  195.235501][ T6089] exFAT-fs (loop4): error, failed to bmap (inode : ffff8880611b07e0 iblock : 0, err : -5)
[  195.254307][ T5851] device veth1_macvtap entered promiscuous mode
[  195.282264][ T6089] exFAT-fs (loop4): error, broken FAT chain.
[  195.302098][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  195.329427][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.359641][ T6089] exFAT-fs (loop4): error, failed to bmap (inode : ffff8880611b07e0 iblock : 1, err : -5)
[  195.364685][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.413877][   T23] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  195.432922][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.445200][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.455649][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.471075][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.491183][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.515194][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.537684][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.606805][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  195.608887][ T4230] usb 1-1: USB disconnect, device number 2
[  195.628982][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  195.642432][ T6089] exFAT-fs (loop4): error, broken FAT chain.
[  195.648475][ T6089] exFAT-fs (loop4): error, failed to bmap (inode : ffff8880611b07e0 iblock : 2, err : -5)
[  195.671566][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.700910][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.718680][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.730425][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.771576][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.782527][ T6089] exFAT-fs (loop4): error, broken FAT chain.
[  195.788956][ T6089] exFAT-fs (loop4): error, failed to bmap (inode : ffff8880611b07e0 iblock : 3, err : -5)
[  195.810567][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.820589][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.843565][ T6089] exFAT-fs (loop4): error, broken FAT chain.
[  195.849599][ T6089] exFAT-fs (loop4): error, failed to bmap (inode : ffff8880611b07e0 iblock : 4, err : -5)
[  195.880729][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.903698][ T6089] exFAT-fs (loop4): error, broken FAT chain.
[  195.909811][ T6089] exFAT-fs (loop4): error, failed to bmap (inode : ffff8880611b07e0 iblock : 5, err : -5)
[  195.923037][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.944634][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  195.954112][ T6098] fido_id[6098]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  195.959530][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  195.982475][ T6089] exFAT-fs (loop4): error, broken FAT chain.
[  195.988499][ T6089] exFAT-fs (loop4): error, failed to bmap (inode : ffff8880611b07e0 iblock : 6, err : -5)
[  196.024931][ T6089] exFAT-fs (loop4): error, broken FAT chain.
[  196.039301][ T5851] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.066422][ T6089] exFAT-fs (loop4): error, failed to bmap (inode : ffff8880611b07e0 iblock : 7, err : -5)
[  196.075647][ T5851] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.106676][ T5851] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.122681][ T6089] exFAT-fs (loop4): error, broken FAT chain.
[  196.128799][ T6089] exFAT-fs (loop4): error, failed to bmap (inode : ffff8880611b07e0 iblock : 0, err : -5)
[  196.149229][ T5851] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.187443][ T6089] exFAT-fs (loop4): error, broken FAT chain.
[  196.201625][ T6089] exFAT-fs (loop4): error, broken FAT chain.
[  196.207662][ T6089] exFAT-fs (loop4): error, broken FAT chain.
[  196.236030][ T6089] exFAT-fs (loop4): error, broken FAT chain.
[  196.269038][ T6089] exFAT-fs (loop4): error, broken FAT chain.
[  196.287731][ T6089] exFAT-fs (loop4): error, broken FAT chain.
[  196.309079][ T6001] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  196.321693][ T4229] Bluetooth: hci2: command 0x040f tx timeout
[  196.325562][ T6089] exFAT-fs (loop4): error, broken FAT chain.
[  196.369420][ T6001] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  196.382487][   T26] audit: type=1800 audit(1778090265.676:7): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.367" name="file0" dev="loop4" ino=1048603 res=0 errno=0
[  196.403675][ T6111] loop2: detected capacity change from 0 to 512
[  196.447754][ T6001] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  196.498411][ T6001] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  196.529028][ T6111] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.369: missing EA_INODE flag
[  196.551712][ T4232] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  196.572827][ T6111] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.369: error while reading EA inode 12 err=-117
[  196.639051][ T6111] EXT4-fs (loop2): 1 orphan inode deleted
[  196.678211][ T6111] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  196.707424][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.740836][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.769264][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  196.811247][ T4232] usb 1-1: Using ep0 maxpacket: 8
[  196.888709][ T4405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.902350][ T4405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.930924][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  196.949445][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  196.976880][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  197.006157][ T4232] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  197.036004][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  197.047790][ T6001] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.068846][ T4232] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  197.085918][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  197.094023][ T4232] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  197.104219][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  197.111697][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.137689][ T6001] 8021q: adding VLAN 0 to HW filter on device team0
[  197.155600][ T4232] usb 1-1: config 0 descriptor??
[  197.171455][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  197.198688][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  197.219789][ T4194] Bluetooth: hci5: urb ffff888052027b00 submission failed (90)
[  197.228752][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.228830][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.322294][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  197.331697][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  197.340389][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.347650][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.375959][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  197.415289][ T4262] usb 1-1: USB disconnect, device number 3
[  197.432733][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  197.474127][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  197.697498][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  198.018773][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  198.342928][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  198.417437][ T4230] Bluetooth: hci2: command 0x0419 tx timeout
[  198.457342][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  198.534378][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  198.867621][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  198.967831][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  199.048399][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  199.056993][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  199.072973][ T6138] loop5: detected capacity change from 0 to 512
[  199.285401][ T6001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  199.387005][ T6138] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,. Quota mode: writeback.
[  199.421409][ T6138] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.067961][ T6138] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.374: corrupted xattr block 33
[  200.179239][ T6138] EXT4-fs (loop5): Remounting filesystem read-only
[  200.403327][ T6164] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  200.471971][ T6164] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  200.501825][ T6166] loop5: detected capacity change from 0 to 1024
[  200.514017][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  200.537036][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  200.547452][ T6167] loop2: detected capacity change from 0 to 1024
[  200.572462][ T6001] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.662933][ T6171] netlink: 'syz.0.380': attribute type 3 has an invalid length.
[  200.711877][ T4443] hfsplus: b-tree write err: -5, ino 25
[  200.717882][ T4443] hfsplus: b-tree write err: -5, ino 4
[  200.746106][ T4239] hfsplus: b-tree write err: -5, ino 25
[  200.752328][ T4239] hfsplus: b-tree write err: -5, ino 4
[  200.763951][ T4443] hfsplus: b-tree write err: -5, ino 2
[  200.781274][ T4239] hfsplus: b-tree write err: -5, ino 2
[  201.129866][ T6190] loop5: detected capacity change from 0 to 16
[  201.154020][ T6180] loop2: detected capacity change from 0 to 4096
[  201.226874][ T6190] erofs: (device loop5): mounted with root inode @ nid 36.
[  201.250503][ T6180] EXT4-fs (loop2): Test dummy encryption mode enabled
[  201.430084][ T6180] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback.
[  201.447688][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  201.489499][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  201.521026][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  201.540013][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  201.558424][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  201.594125][ T6180] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.382: corrupted inode contents
[  201.614819][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  201.647312][ T6001] device veth0_vlan entered promiscuous mode
[  201.665308][ T6180] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #15: comm syz.2.382: mark_inode_dirty error
[  201.736449][ T6180] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.382: corrupted inode contents
[  201.751569][ T6180] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.382: mark_inode_dirty error
[  201.763015][ T6001] device veth1_vlan entered promiscuous mode
[  201.779698][ T6180] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.382: corrupted inode contents
[  201.806783][ T6180] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.382: mark_inode_dirty error
[  201.851866][ T6180] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.382: corrupted inode contents
[  201.866338][ T6208] loop4: detected capacity change from 0 to 1024
[  201.894232][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  201.915643][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  201.923977][ T6180] EXT4-fs error (device loop2): ext4_punch_hole:4121: inode #15: comm syz.2.382: mark_inode_dirty error
[  201.961358][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  202.000960][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  202.034515][ T6001] device veth0_macvtap entered promiscuous mode
[  202.080739][ T6001] device veth1_macvtap entered promiscuous mode
[  202.121729][ T6208] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  202.166237][ T6001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.185389][ T6213] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  202.201699][ T6001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.215084][ T6001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.235036][ T6208] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  202.254616][ T6001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.280557][ T6213] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  202.290891][ T6001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.330894][ T6001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.349754][ T6001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.383474][ T6001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.410854][ T6001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.430820][ T6001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.518332][ T4352] hfsplus: b-tree write err: -5, ino 25
[  202.528168][ T4352] hfsplus: b-tree write err: -5, ino 4
[  202.539624][ T6001] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.562573][ T4352] hfsplus: b-tree write err: -5, ino 2
[  202.571748][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  202.591465][ T4352] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  202.611906][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  202.617656][ T4352] hfsplus: b-tree write err: -5, ino 27
[  202.793517][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  203.006250][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  203.182291][ T6001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.318930][ T6001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.469643][ T6001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.480389][ T6001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.490383][ T6001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.501284][ T6001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.511429][ T6001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.522515][ T6001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.532638][ T6001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.547440][ T6001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.585463][ T6001] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.611807][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  203.633046][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  203.700635][ T6001] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.732137][ T6001] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.790938][ T6001] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.800372][ T6001] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.899886][ T6230] loop2: detected capacity change from 0 to 8
[  204.107759][ T4443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.128598][ T4443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.426282][ T6234] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  204.435477][ T6234] overlayfs: missing 'lowerdir'
[  204.444924][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  204.921410][ T4441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.933055][ T4441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.001396][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  205.250938][    T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  205.505886][ T6253] xt_policy: too many policy elements
[  206.411051][    T7] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  206.430391][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.495243][    T7] usb 3-1: config 0 descriptor??
[  206.510454][ T6274] loop5: detected capacity change from 0 to 512
[  206.552528][    T7] cp210x 3-1:0.0: cp210x converter detected
[  206.586243][ T6274] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,errors=continue,acl,,errors=continue. Quota mode: none.
[  206.891064][ T4234] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  206.967045][ T6291] loop6: detected capacity change from 0 to 1024
[  207.115696][ T6291] EXT4-fs (loop6): inline encryption not supported
[  207.148640][ T6291] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c01c, mo2=0003]
[  207.158673][ T6291] System zones: 0-1, 3-36
[  207.192184][ T6291] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,delalloc,usrjquota=,debug,nodioread_nolock,bsddf,grpquota,inlinecrypt,,errors=continue. Quota mode: writeback.
[  207.217717][    T7] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71
[  207.245950][    T7] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  207.307651][    T7] usb 3-1: cp210x converter now attached to ttyUSB0
[  207.340221][    T7] usb 3-1: USB disconnect, device number 4
[  207.411276][    T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  207.447149][    T7] cp210x 3-1:0.0: device disconnected
[  207.492520][ T4234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  207.503484][ T4234] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  207.514524][ T4234] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  207.602178][ T4234] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  207.663490][ T6300] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  207.673323][ T6300] overlayfs: missing 'lowerdir'
[  207.968106][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  208.031077][ T4234] usb 5-1: SerialNumber: syz
[  208.153266][ T4234] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  208.174882][ T4234] cdc_acm 5-1:1.0: This needs exactly 3 endpoints
[  208.227849][ T6306] loop2: detected capacity change from 0 to 16
[  208.234882][ T6302] loop6: detected capacity change from 0 to 1024
[  208.249641][ T4234] cdc_acm: probe of 5-1:1.0 failed with error -22
[  208.322434][ T6306] erofs: (device loop2): mounted with root inode @ nid 36.
[  208.363894][ T6302] EXT4-fs (loop6): Ignoring removed oldalloc option
[  208.371855][ T4234] usb 5-1: USB disconnect, device number 2
[  208.608260][ T6302] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,auto_da_alloc=0x00000000000000e6,oldalloc,nobarrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  208.628268][ T6302] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.753732][ T6320] loop5: detected capacity change from 0 to 764
[  209.598367][ T6329] loop4: detected capacity change from 0 to 512
[  209.666110][ T6329] EXT4-fs (loop4): Invalid want_extra_isize 223
[  210.077565][ T6346] loop4: detected capacity change from 0 to 1024
[  210.084200][ T6343] loop6: detected capacity change from 0 to 512
[  210.092014][ T6347] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  210.161187][ T6346] EXT4-fs (loop4): Ignoring removed orlov option
[  210.188674][ T6343] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  210.252955][ T6343] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  210.310378][ T6346] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,nodioread_nolock,grpjquota=,,errors=continue. Quota mode: none.
[  210.361960][ T6343] System zones: 1-12
[  210.388246][ T6343] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.416: corrupted in-inode xattr
[  210.517293][ T6346] EXT4-fs error (device loop4): __ext4_new_inode:1292: comm syz.4.417: failed to insert inode 15: doubly allocated?
[  210.541033][ T6343] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.416: couldn't read orphan inode 15 (err -117)
[  210.578512][ T6346] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem
[  210.593660][ T6343] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,min_batch_time=0x000000000000d23b,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none.
[  211.009120][ T6363] loop4: detected capacity change from 0 to 512
[  211.068746][ T6363] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.420: missing EA_INODE flag
[  211.121290][ T6363] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.420: error while reading EA inode 12 err=-117
[  211.134666][ T6363] EXT4-fs (loop4): 1 orphan inode deleted
[  211.140444][ T6363] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  211.569555][ T6377] loop6: detected capacity change from 0 to 256
[  211.857487][ T6377] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  212.105115][ T6383] loop6: detected capacity change from 0 to 1024
[  213.108114][ T6383] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  213.131047][ T6383] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.162172][ T6396] loop2: detected capacity change from 0 to 128
[  214.532572][ T6428] loop2: detected capacity change from 0 to 1024
[  214.766226][ T6435] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  215.176115][ T6431] loop5: detected capacity change from 0 to 16
[  215.418311][ T6431] erofs: (device loop5): mounted with root inode @ nid 36.
[  215.630494][ T6442] loop6: detected capacity change from 0 to 1024
[  215.815319][ T6442] hfsplus: failed to load root directory
[  216.092218][ T6443] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  217.107062][ T6454] loop6: detected capacity change from 0 to 1024
[  217.133005][   T26] audit: type=1326 audit(1778090286.426:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3f09c2dd9 code=0x0
[  217.217669][ T6458] loop4: detected capacity change from 0 to 512
[  217.315260][ T6458] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  217.422369][ T6458] EXT4-fs (loop4): 1 truncate cleaned up
[  217.443851][ T6458] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  217.491236][ T4447] hfsplus: b-tree write err: -5, ino 3
[  217.513999][ T6001] hfsplus: node 4:3 still has 1 user(s)!
[  217.650200][ T6458] EXT4-fs error (device loop4): empty_inline_dir:1847: inode #18: comm syz.4.443: error -117 getting inode 18 block
[  217.707955][ T6465] loop6: detected capacity change from 0 to 1024
[  217.786517][ T6465] EXT4-fs (loop6): Ignoring removed nobh option
[  217.834732][ T6465] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block
[  217.834732][ T6465] 
[  217.874996][ T6469] loop4: detected capacity change from 0 to 128
[  219.006146][ T6478] loop6: detected capacity change from 0 to 1024
[  220.161182][   T26] audit: type=1326 audit(1778090289.416:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.5.451" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0eb44cdd9 code=0x0
[  223.921065][ T6544] loop6: detected capacity change from 0 to 1024
[  223.972400][ T6538] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  224.017719][ T6544] EXT4-fs (loop6): Ignoring removed oldalloc option
[  225.530077][  T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  225.574539][ T6544] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,auto_da_alloc=0x00000000000000e6,oldalloc,nobarrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  225.594646][ T6544] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.775625][ T6567] loop4: detected capacity change from 0 to 512
[  226.239716][ T4177] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  226.286875][ T6567] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  226.317364][ T6567] EXT4-fs (loop4): 1 truncate cleaned up
[  226.392619][ T6567] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none.
[  226.519484][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.621834][ T6578] device batadv_slave_0 entered promiscuous mode
[  226.651991][ T4177] usb 1-1: Using ep0 maxpacket: 32
[  227.085589][ T6587] loop2: detected capacity change from 0 to 512
[  227.258310][ T6587] EXT4-fs (loop2): Test dummy encryption mode enabled
[  227.266579][ T4177] usb 1-1: unable to get BOS descriptor or descriptor too short
[  227.751267][ T4177] usb 1-1: unable to read config index 0 descriptor/start: -71
[  227.768745][ T4177] usb 1-1: can't read configurations, error -71
[  227.798542][ T6587] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  227.991619][ T6587] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.472: bad orphan inode 131083
[  228.094203][ T6587] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none.
[  228.320217][ T6602] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  229.191696][ T6587] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  229.311917][ T6617] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  229.334901][ T6631] loop5: detected capacity change from 0 to 1024
[  229.850385][ T6653] loop2: detected capacity change from 0 to 16
[  229.955335][ T6653] erofs: (device loop2): mounted with root inode @ nid 36.
[  230.020886][ T4177] usb 6-1: new low-speed USB device number 2 using dummy_hcd
[  230.219448][ T4230] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  230.470917][ T4230] usb 1-1: Using ep0 maxpacket: 32
[  230.490939][ T4177] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[  230.529139][ T4177] usb 6-1: config 0 has no interface number 0
[  230.535831][ T4177] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  230.547576][ T4177] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  230.562639][ T4177] usb 6-1: config 0 interface 255 has no altsetting 0
[  230.569578][ T4177] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  230.580021][ T4177] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.594789][ T4177] usb 6-1: config 0 descriptor??
[  230.631188][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short
[  230.711090][ T4230] usb 1-1: config 1 has an invalid interface number: 3 but max is 2
[  230.728186][ T4230] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.779940][ T4230] usb 1-1: config 1 has no interface number 2
[  230.801972][ T4230] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  230.963541][ T4230] usb 1-1: config 1 interface 1 has no altsetting 0
[  231.094763][ T6673] device batadv_slave_1 entered promiscuous mode
[  232.011166][ T4230] usb 1-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40
[  232.022973][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.779525][ T4230] usb 1-1: Product: syz
[  232.784040][ T4230] usb 1-1: Manufacturer: syz
[  232.788927][ T4230] usb 1-1: SerialNumber: syz
[  232.832591][ T6673] device batadv_slave_1 left promiscuous mode
[  232.942294][ T4177] usb 6-1: string descriptor 0 read error: -71
[  232.949171][ T4177] asix: probe of 6-1:0.255 failed with error -22
[  232.993478][ T4177] usb 6-1: USB disconnect, device number 2
[  233.051154][ T4230] usb 1-1: selecting invalid altsetting 0
[  233.093680][ T6704] loop4: detected capacity change from 0 to 16
[  233.174545][ T6704] erofs: (device loop4): mounted with root inode @ nid 36.
[  234.479139][ T4230] usb 1-1: 0:2 : does not exist
[  234.511149][ T4230] usb 1-1: USB disconnect, device number 6
[  234.661106][   T23] usb 7-1: new low-speed USB device number 2 using dummy_hcd
[  235.051420][   T23] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  235.115622][   T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.312101][   T23] usb 7-1: config 0 descriptor??
[  235.328904][ T6722] loop5: detected capacity change from 0 to 512
[  235.412014][   T23] asix: probe of 7-1:0.0 failed with error -22
[  235.441616][ T6722] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.504: inode has both inline data and extents flags
[  235.475629][ T6722] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.504: couldn't read orphan inode 15 (err -117)
[  235.491743][ T6722] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  235.505721][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  236.490212][ T4262] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[  236.674975][ T4230] usb 7-1: USB disconnect, device number 2
[  236.699155][ T6752] loop5: detected capacity change from 0 to 256
[  236.839424][ T6754] loop6: detected capacity change from 0 to 2048
[  236.891068][ T4262] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  236.899316][ T4262] usb 3-1: config 0 has no interface number 0
[  236.940817][ T4262] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  236.983387][ T6754] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv1,errors=remount-ro,sb=0x0000000000000001,. Quota mode: none.
[  237.010854][ T4262] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  237.025832][ T6760] loop4: detected capacity change from 0 to 16
[  237.032657][ T4262] usb 3-1: config 0 interface 255 has no altsetting 0
[  237.039567][ T4262] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  237.048961][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.064852][ T4262] usb 3-1: config 0 descriptor??
[  237.070737][ T6760] erofs: (device loop4): mounted with root inode @ nid 36.
[  237.215835][ T6763] loop5: detected capacity change from 0 to 2048
[  237.744573][ T6769] device batadv_slave_1 entered promiscuous mode
[  238.192824][ T6763] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  238.542661][ T6787] loop4: detected capacity change from 0 to 512
[  238.581034][ T6787] EXT4-fs (loop4): Ignoring removed oldalloc option
[  238.616050][ T6787] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  238.707598][ T6787] EXT4-fs (loop4): 1 truncate cleaned up
[  238.724442][ T6787] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,errors=remount-ro,noload,oldalloc,. Quota mode: none.
[  238.911541][ T6787] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none.
[  238.982048][ T6794] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none.
[  238.995279][ T6792] loop5: detected capacity change from 0 to 8192
[  239.166505][ T6769] device batadv_slave_1 left promiscuous mode
[  239.291011][ T4262] usb 3-1: string descriptor 0 read error: -71
[  239.298596][ T4262] asix: probe of 3-1:0.255 failed with error -22
[  240.470972][ T4262] usb 3-1: USB disconnect, device number 5
[  240.639100][ T6814] loop4: detected capacity change from 0 to 128
[  240.758778][ T6814] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  240.867186][ T6814] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  241.116518][ T6826] binder: 6825:6826 ioctl c0306201 0 returned -14
[  244.212964][ T6871] binder: 6870:6871 ioctl c0306201 0 returned -14
[  244.285633][ T6878] loop6: detected capacity change from 0 to 256
[  244.428142][ T6878] FAT-fs (loop6): Directory bread(block 64) failed
[  244.451641][ T6878] FAT-fs (loop6): Directory bread(block 65) failed
[  244.482077][ T6878] FAT-fs (loop6): Directory bread(block 66) failed
[  244.491693][ T6878] FAT-fs (loop6): Directory bread(block 67) failed
[  244.508781][ T6878] FAT-fs (loop6): Directory bread(block 68) failed
[  244.525709][ T6878] FAT-fs (loop6): Directory bread(block 69) failed
[  244.548922][ T6878] FAT-fs (loop6): Directory bread(block 70) failed
[  244.573299][ T6878] FAT-fs (loop6): Directory bread(block 71) failed
[  244.585672][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'.
[  244.597122][ T6878] FAT-fs (loop6): Directory bread(block 72) failed
[  244.608879][ T6892] netlink: 'syz.2.548': attribute type 1 has an invalid length.
[  244.623352][ T6878] FAT-fs (loop6): Directory bread(block 73) failed
[  245.475511][ T4227] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  245.577977][ T6907] fuse: Bad value for 'fd'
[  245.761015][ T4227] usb 1-1: Using ep0 maxpacket: 32
[  247.172112][ T6917] loop6: detected capacity change from 0 to 764
[  247.298950][ T6919] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0
[  247.339526][ T6919] binder: 6918:6919 ioctl 4018620d 200000000040 returned -1
[  247.390963][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.409045][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.419189][ T4227] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  247.429113][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.440044][ T4227] usb 1-1: config 0 descriptor??
[  247.671027][ T4227] usb 1-1: can't set config #0, error -71
[  247.687255][ T4227] usb 1-1: USB disconnect, device number 7
[  247.886596][ T6938] loop5: detected capacity change from 0 to 1024
[  250.093239][ T5851] hfsplus: bad catalog folder thread
[  250.101502][ T5851] hfsplus: bad catalog folder thread
[  250.480926][    T7] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  250.700844][   T26] audit: type=1326 audit(1778090319.936:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.580" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6d25d0dd9 code=0x0
[  250.800998][    T7] usb 7-1: Using ep0 maxpacket: 16
[  250.934340][    T7] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.967834][    T7] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.021225][    T7] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  251.045292][    T7] usb 7-1: config 0 interface 0 has no altsetting 0
[  251.060844][    T7] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  251.080222][    T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.103132][    T7] usb 7-1: config 0 descriptor??
[  251.130364][ T6982] device batadv_slave_1 entered promiscuous mode
[  251.183056][  T154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.218857][ T6993] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  251.259404][ T6982] device batadv_slave_1 left promiscuous mode
[  251.422663][  T154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.489386][ T7001] overlayfs: failed to clone upperpath
[  251.508319][  T154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.627692][  T154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.651927][    T7] hid (null): unknown global tag 0xd
[  251.661499][    T7] hid (null): unknown global tag 0xd
[  251.669667][    T7] hid (null): invalid report_count -552242985
[  251.688340][ T7002] chnl_net:caif_netlink_parms(): no params data found
[  251.696391][    T7] hid (null): report_id 1619789852 is invalid
[  251.708670][    T7] hid (null): report_id 43997 is invalid
[  251.939828][ T4230] usb 7-1: USB disconnect, device number 3
[  252.361156][   T26] audit: type=1326 audit(1778090321.646:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.592" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6d25d0dd9 code=0x0
[  252.774435][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.800949][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.813689][ T7002] device bridge_slave_0 entered promiscuous mode
[  252.829252][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.846834][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.942529][ T7002] device bridge_slave_1 entered promiscuous mode
[  253.026406][ T7002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  253.240620][ T7002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  253.859739][   T21] Bluetooth: hci1: command 0x0409 tx timeout
[  253.917706][ T7035] fuse: Unknown parameter 'group_i00000000000000000000'
[  254.248775][ T7002] team0: Port device team_slave_0 added
[  254.732277][ T7002] team0: Port device team_slave_1 added
[  254.827924][   T26] audit: type=1326 audit(1778090324.116:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.0.604" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6d25d0dd9 code=0x0
[  254.914053][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_0
[  254.970865][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.062826][ T7002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.076137][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.084545][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.112619][ T7002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.208487][ T7002] device hsr_slave_0 entered promiscuous mode
[  255.240612][ T7002] device hsr_slave_1 entered promiscuous mode
[  255.267548][ T7002] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  255.284396][ T7002] Cannot create hsr debugfs directory
[  255.547105][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  255.979864][ T4230] Bluetooth: hci1: command 0x041b tx timeout
[  256.294366][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  256.862075][ T7103] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  257.105276][ T7002] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  257.132402][ T4441] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  257.206233][ T7002] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  257.236038][ T7002] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  257.281702][ T7002] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  257.488438][ T7002] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.503023][ T4230] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  257.554837][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  257.566241][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  257.585526][ T7002] 8021q: adding VLAN 0 to HW filter on device team0
[  257.637292][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  257.664215][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  257.673807][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.680945][ T4441] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.689450][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  257.741933][ T4230] usb 7-1: Using ep0 maxpacket: 16
[  257.751554][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  257.762320][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  257.781463][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.788580][ T4406] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.835137][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  257.861284][ T4230] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  257.880818][ T4230] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  257.914972][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  257.951949][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  257.986829][ T7141] capability: warning: `syz.4.626' uses deprecated v2 capabilities in a way that may be insecure
[  258.004010][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  258.019405][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  258.042361][ T4230] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  258.066469][ T4230] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.091129][ T4230] usb 7-1: Product: syz
[  258.095393][ T4230] usb 7-1: Manufacturer: syz
[  258.100015][ T4230] usb 7-1: SerialNumber: syz
[  258.147728][ T7096] Bluetooth: hci1: command 0x040f tx timeout
[  258.157802][  T154] device hsr_slave_0 left promiscuous mode
[  258.296118][  T154] device hsr_slave_1 left promiscuous mode
[  258.316149][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.345275][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  258.380962][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  258.401768][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  258.431008][  T154] device bridge_slave_1 left promiscuous mode
[  258.474424][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.518039][  T154] device bridge_slave_0 left promiscuous mode
[  258.547675][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.638407][  T154] device veth1_macvtap left promiscuous mode
[  258.667793][  T154] device veth0_macvtap left promiscuous mode
[  258.684972][  T154] device veth1_vlan left promiscuous mode
[  258.698376][  T154] device veth0_vlan left promiscuous mode
[  259.121319][ T4230] usb 7-1: 0:2 : does not exist
[  259.148496][ T4230] usb 7-1: USB disconnect, device number 4
[  259.371943][  T154] team0 (unregistering): Port device team_slave_1 removed
[  259.389747][  T154] team0 (unregistering): Port device team_slave_0 removed
[  259.406356][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  259.425153][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.468243][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.504703][ T7171] loop6: detected capacity change from 0 to 2048
[  259.523849][ T7171] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  259.555233][ T7171] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  259.605211][ T6130] usb 1-1: new low-speed USB device number 8 using dummy_hcd
[  259.648160][  T154] bond0 (unregistering): Released all slaves
[  259.732379][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  259.746453][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  259.786199][ T7002] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  259.805947][ T7002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  259.892038][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  259.913638][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  259.930684][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  259.946834][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  259.968018][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  260.078857][ T4403] attempt to access beyond end of device
[  260.078857][ T4403] loop6: rw=1, want=2049, limit=2048
[  260.111643][ T4403] Buffer I/O error on dev loop6, logical block 2048, lost async page write
[  260.143627][ T7174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.637'.
[  260.152885][ T4403] attempt to access beyond end of device
[  260.152885][ T4403] loop6: rw=1, want=2049, limit=2048
[  260.164258][ T4403] Buffer I/O error on dev loop6, logical block 2048, lost async page write
[  260.173061][ T4403] attempt to access beyond end of device
[  260.173061][ T4403] loop6: rw=1, want=2049, limit=2048
[  260.184180][ T4403] Buffer I/O error on dev loop6, logical block 2048, lost async page write
[  260.193702][ T4403] attempt to access beyond end of device
[  260.193702][ T4403] loop6: rw=1, want=2049, limit=2048
[  260.206636][ T4403] Buffer I/O error on dev loop6, logical block 2048, lost async page write
[  260.215379][ T4403] attempt to access beyond end of device
[  260.215379][ T4403] loop6: rw=1, want=2049, limit=2048
[  260.226199][ T4403] Buffer I/O error on dev loop6, logical block 2048, lost async page write
[  260.234883][ T4403] attempt to access beyond end of device
[  260.234883][ T4403] loop6: rw=1, want=2050, limit=2048
[  260.242245][ T4233] Bluetooth: hci1: command 0x0419 tx timeout
[  260.247013][ T6130] usb 1-1: descriptor type invalid, skip
[  260.260863][ T4403] Buffer I/O error on dev loop6, logical block 2049, lost async page write
[  260.269787][ T4403] attempt to access beyond end of device
[  260.269787][ T4403] loop6: rw=1, want=2050, limit=2048
[  260.290831][ T6130] usb 1-1: No LPM exit latency info found, disabling LPM.
[  260.338131][ T4403] Buffer I/O error on dev loop6, logical block 2049, lost async page write
[  260.360929][ T6130] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30
[  260.372332][ T4403] attempt to access beyond end of device
[  260.372332][ T4403] loop6: rw=1, want=2050, limit=2048
[  260.390848][ T6130] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  260.417516][ T4403] Buffer I/O error on dev loop6, logical block 2049, lost async page write
[  260.431281][ T6130] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  260.451107][ T4403] attempt to access beyond end of device
[  260.451107][ T4403] loop6: rw=1, want=2050, limit=2048
[  260.474051][ T6130] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  260.509780][ T4403] Buffer I/O error on dev loop6, logical block 2049, lost async page write
[  260.529903][ T6130] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  260.541952][ T4403] attempt to access beyond end of device
[  260.541952][ T4403] loop6: rw=1, want=2050, limit=2048
[  260.558612][ T6130] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254
[  260.584753][ T4403] Buffer I/O error on dev loop6, logical block 2049, lost async page write
[  260.626705][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  260.639136][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  260.688388][ T7002] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.541136][ T6130] usb 1-1: string descriptor 0 read error: -22
[  261.548101][ T6130] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  261.557617][ T6130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.642651][ T6130] cdc_ether: probe of 1-1:1.0 failed with error -22
[  262.142190][ T4234] usb 1-1: USB disconnect, device number 8
[  263.544360][ T7220] loop6: detected capacity change from 0 to 1764
[  263.570982][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  263.612621][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  263.738304][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  263.755242][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  263.817027][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  263.849798][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  263.950721][ T7002] device veth0_vlan entered promiscuous mode
[  264.853407][ T7002] device veth1_vlan entered promiscuous mode
[  264.891185][ T7244] overlayfs: failed to clone upperpath
[  264.913973][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  264.944801][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  264.960222][ T7002] device veth0_macvtap entered promiscuous mode
[  264.986034][ T7002] device veth1_macvtap entered promiscuous mode
[  265.011566][ T4234] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  265.058543][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.093490][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.117944][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.259773][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.280900][ T4234] usb 7-1: Using ep0 maxpacket: 32
[  265.304980][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.323768][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.333708][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.344222][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.356575][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_0
[  265.366915][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.377812][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.390245][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.410446][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.430702][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.450320][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.471647][ T4234] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.483374][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.525199][ T4234] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.589483][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.643818][ T4234] usb 7-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40
[  265.737706][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.784259][ T4234] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.860052][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.014823][ T4234] usb 7-1: config 0 descriptor??
[  266.063520][ T4234] hub 7-1:0.0: USB hub found
[  266.073161][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_1
[  266.177637][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  266.188342][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  266.196664][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  266.205506][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  266.223073][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  266.271896][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  266.281330][ T4234] hub 7-1:0.0: config failed, can't read hub descriptor (err -90)
[  266.351417][ T7002] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.437893][ T7267] fuse: Bad value for 'fd'
[  266.911526][ T7002] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.960880][ T7002] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.010513][ T7002] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.246697][ T4233] usb 7-1: USB disconnect, device number 5
[  268.172900][ T7289] overlayfs: failed to clone upperpath
[  268.209138][ T4441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.228207][ T4441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.286581][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  268.527789][ T4403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.551066][ T4403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.745785][ T7302] loop6: detected capacity change from 0 to 4096
[  268.768486][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  268.859450][ T7302] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  269.114546][ T7315] netlink: 60 bytes leftover after parsing attributes in process `syz.0.674'.
[  269.138010][ T7302] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.672: corrupted inode contents
[  269.158084][ T7315] netlink: 60 bytes leftover after parsing attributes in process `syz.0.674'.
[  269.212747][ T7319] netlink: 60 bytes leftover after parsing attributes in process `syz.0.674'.
[  269.224913][ T7302] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #15: comm syz.6.672: mark_inode_dirty error
[  269.251355][ T7322] netlink: 144 bytes leftover after parsing attributes in process `syz.4.676'.
[  269.271749][ T7302] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.672: corrupted inode contents
[  269.284735][ T7323] netlink: 60 bytes leftover after parsing attributes in process `syz.0.674'.
[  269.391944][ T7302] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #15: comm syz.6.672: mark_inode_dirty error
[  269.474461][ T7332] overlayfs: failed to clone upperpath
[  269.548542][ T7302] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.672: corrupted inode contents
[  269.575599][ T7337] netlink: 60 bytes leftover after parsing attributes in process `syz.2.682'.
[  269.584977][ T7302] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #15: comm syz.6.672: mark_inode_dirty error
[  269.659408][ T7302] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.672: corrupted inode contents
[  269.694536][ T7343] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.684'.
[  269.701402][ T7337] netlink: 60 bytes leftover after parsing attributes in process `syz.2.682'.
[  269.723340][ T7302] EXT4-fs error (device loop6): ext4_truncate:4286: inode #15: comm syz.6.672: mark_inode_dirty error
[  269.761093][ T7342] netlink: 60 bytes leftover after parsing attributes in process `syz.2.682'.
[  269.770028][ T7302] EXT4-fs error (device loop6) in ext4_setattr:5645: Corrupt filesystem
[  270.381984][ T7364] netlink: 60 bytes leftover after parsing attributes in process `syz.4.691'.
[  270.452781][ T7370] netlink: 'syz.6.692': attribute type 1 has an invalid length.
[  271.168554][ T7400] device batadv_slave_1 entered promiscuous mode
[  273.280970][ T7422] netlink: 'syz.6.709': attribute type 40 has an invalid length.
[  273.526857][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  273.591497][ T7429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  273.857910][ T7392] device batadv_slave_1 left promiscuous mode
[  273.956057][ T7445] IPv6: Can't replace route, no match found
[  274.827678][ T4233] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  275.080986][ T4233] usb 7-1: Using ep0 maxpacket: 16
[  275.240927][ T4233] usb 7-1: unable to get BOS descriptor or descriptor too short
[  275.321108][ T4233] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  275.491044][ T4233] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  275.500356][ T4233] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.520949][ T4233] usb 7-1: Product: syz
[  275.525391][ T4233] usb 7-1: Manufacturer: syz
[  275.530084][ T4233] usb 7-1: SerialNumber: syz
[  275.843420][ T4233] usb 7-1: Audio class v2/v3 interfaces need an interface association
[  275.892091][ T4233] snd-usb-audio: probe of 7-1:1.0 failed with error -22
[  276.401413][ T4233] usb 7-1: 2:1 : invalid Cluster Descriptor size
[  276.612083][ T7469] udc-core: couldn't find an available UDC or it's busy
[  276.664172][ T7469] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  276.930515][ T7469] udc-core: couldn't find an available UDC or it's busy
[  277.011487][ T7469] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  277.068762][ T7469] udc-core: couldn't find an available UDC or it's busy
[  277.082932][ T7469] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  277.091810][    T7] usb 7-1: USB disconnect, device number 6
[  277.336757][ T7546] fuse: Bad value for 'fd'
[  278.663369][    T7] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  278.930869][    T7] usb 7-1: Using ep0 maxpacket: 16
[  279.061728][    T7] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  279.079184][    T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  279.090213][    T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  279.099956][    T7] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  279.109792][    T7] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  279.969843][ T7581] fuse: Bad value for 'fd'
[  279.991156][    T7] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  280.018860][    T7] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  280.036552][    T7] usb 7-1: Manufacturer: syz
[  280.048266][    T7] usb 7-1: config 0 descriptor??
[  281.031570][ T7590] udc-core: couldn't find an available UDC or it's busy
[  281.050917][ T7590] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  282.330523][ T7608] loop7: detected capacity change from 0 to 1024
[  282.531077][    T7] rc_core: IR keymap rc-hauppauge not found
[  282.537049][    T7] Registered IR keymap rc-empty
[  283.551835][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  283.591186][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  283.642946][    T7] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  283.678434][    T7] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input6
[  283.791683][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  283.824152][ T4239] hfsplus: b-tree write err: -5, ino 3
[  283.924484][ T7002] hfsplus: node 4:3 still has 1 user(s)!
[  284.617110][ T7635] fuse: Bad value for 'fd'
[  284.629877][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  284.770036][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  284.810991][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  284.890864][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  285.430907][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  285.598364][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  285.660079][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  285.701549][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  285.747426][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  285.796533][    T7] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  285.813109][    T7] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  285.830138][    T7] usb 7-1: USB disconnect, device number 7
[  287.326076][ T7680] overlayfs: failed to clone upperpath
[  287.337089][ T7686] netlink: 'syz.0.778': attribute type 10 has an invalid length.
[  287.357626][ T7686] __nla_validate_parse: 16 callbacks suppressed
[  287.357642][ T7686] netlink: 152 bytes leftover after parsing attributes in process `syz.0.778'.
[  287.406227][ T7688] netlink: 'syz.2.779': attribute type 10 has an invalid length.
[  287.423428][ T7690] fuse: Invalid rootmode
[  287.434740][ T7688] netlink: 152 bytes leftover after parsing attributes in process `syz.2.779'.
[  287.636382][    T7] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  288.589544][ T4790] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  288.754443][    T7] usb 7-1: Using ep0 maxpacket: 16
[  289.958279][ T7730] netlink: 60 bytes leftover after parsing attributes in process `syz.4.790'.
[  290.001923][ T7731] overlayfs: failed to clone upperpath
[  290.025070][ T7730] netlink: 60 bytes leftover after parsing attributes in process `syz.4.790'.
[  290.049401][ T7733] fuse: Invalid rootmode
[  290.076619][ T7734] netlink: 60 bytes leftover after parsing attributes in process `syz.4.790'.
[  290.100987][    T7] usb 7-1: device descriptor read/all, error -71
[  290.118444][ T7730] netlink: 60 bytes leftover after parsing attributes in process `syz.4.790'.
[  290.283179][ T7749] loop7: detected capacity change from 0 to 512
[  290.400921][ T7749] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.796: missing EA_INODE flag
[  290.464252][ T7749] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.796: error while reading EA inode 12 err=-117
[  290.485535][ T7749] EXT4-fs (loop7): 1 orphan inode deleted
[  290.497256][ T7749] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  291.680993][ T7790] fuse: Invalid rootmode
[  292.556523][ T7832] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  292.565482][ T7832] overlayfs: missing 'lowerdir'
[  293.970920][ T7845] fuse: Bad value for 'rootmode'
[  294.694234][ T7887] fuse: Bad value for 'rootmode'
[  295.917984][ T7913] overlayfs: failed to clone upperpath
[  296.077577][ T7927] fuse: Bad value for 'rootmode'
[  297.784294][ T7946] binder: 7941:7946 ioctl c0306201 0 returned -14
[  298.050977][ T7957] syz.6.860[7957] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  298.195312][ T7969] fuse: Unknown parameter 'use00000000000000000000'
[  298.550981][ T5402] Bluetooth: hci4: command 0x0406 tx timeout
[  298.809207][ T8009] fuse: Unknown parameter 'use00000000000000000000'
[  300.557344][ T8057] fuse: Unknown parameter 'use00000000000000000000'
[  301.271026][ T8085] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  301.290424][ T8085] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  301.299376][ T8085] overlayfs: missing 'lowerdir'
[  301.910258][ T8096] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000
[  302.024460][ T8106] fuse: Unknown parameter 'user_i00000000000000000000'
[  302.184292][ T8115] loop6: detected capacity change from 0 to 1024
[  302.244406][ T8119] netlink: 104 bytes leftover after parsing attributes in process `syz.7.912'.
[  302.749649][ T6001] hfsplus: bad catalog folder thread
[  302.782977][ T6001] hfsplus: bad catalog folder thread
[  303.029901][ T8155] fuse: Unknown parameter 'user_i00000000000000000000'
[  303.237666][ T4443] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.368752][ T4443] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.447589][ T4443] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.499446][ T4443] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.874408][ T8185] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  306.507706][ T8196] fuse: Unknown parameter 'user_i00000000000000000000'
[  306.879159][ T8197] chnl_net:caif_netlink_parms(): no params data found
[  307.553793][ T8232] overlayfs: failed to clone upperpath
[  307.604291][ T8197] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.617448][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.626132][ T8197] device bridge_slave_0 entered promiscuous mode
[  307.635801][ T8197] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.648214][ T8197] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.685921][ T8197] device bridge_slave_1 entered promiscuous mode
[  307.951927][ T8197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  308.016508][ T8197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.110309][ T8197] team0: Port device team_slave_0 added
[  308.215984][ T8197] team0: Port device team_slave_1 added
[  308.361302][ T8197] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.368300][ T8197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.437854][ T8272] overlayfs: failed to clone upperpath
[  308.500866][ T8197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.620289][ T4443] device hsr_slave_0 left promiscuous mode
[  308.633088][ T4233] Bluetooth: hci2: command 0x0409 tx timeout
[  308.656729][ T4443] device hsr_slave_1 left promiscuous mode
[  308.669742][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_0
[  308.678964][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  308.694876][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_1
[  308.734720][ T4443] device bridge_slave_1 left promiscuous mode
[  308.753890][ T4443] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.791529][ T4443] device bridge_slave_0 left promiscuous mode
[  308.805727][ T4443] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.860368][ T4443] device veth1_macvtap left promiscuous mode
[  308.877059][ T4443] device veth0_macvtap left promiscuous mode
[  308.897321][ T4443] device veth1_vlan left promiscuous mode
[  308.917640][ T4443] device veth0_vlan left promiscuous mode
[  310.299173][ T4443] team0 (unregistering): Port device team_slave_1 removed
[  310.336966][ T4443] team0 (unregistering): Port device team_slave_0 removed
[  310.365418][ T4443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  310.396216][ T4443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  310.415251][ T8316] fuse: Unknown parameter 'user_id00000000000000000000'
[  310.483344][ T8318] overlayfs: failed to clone upperpath
[  310.615741][ T4443] bond0 (unregistering): Released all slaves
[  310.744611][ T4234] Bluetooth: hci2: command 0x041b tx timeout
[  310.833922][ T8197] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.841012][ T8197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.914415][ T8197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.087947][ T8197] device hsr_slave_0 entered promiscuous mode
[  311.104561][ T8324] overlayfs: failed to clone upperpath
[  311.141461][ T8197] device hsr_slave_1 entered promiscuous mode
[  311.159767][ T8197] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  311.178602][ T8197] Cannot create hsr debugfs directory
[  311.945964][ T8197] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  312.012742][ T8197] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  312.057867][ T8197] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  312.103324][ T8197] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  312.253504][ T8353] fuse: Unknown parameter 'user_id00000000000000000000'
[  312.367937][ T8197] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.431937][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  312.465031][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  312.478878][ T8357] overlayfs: failed to clone upperpath
[  312.488600][ T8197] 8021q: adding VLAN 0 to HW filter on device team0
[  312.557766][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  312.588790][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  312.641181][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.648350][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.679840][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  312.722386][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  312.739043][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  312.790953][ T7096] Bluetooth: hci2: command 0x040f tx timeout
[  312.791147][ T4441] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.804141][ T4441] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.851142][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  312.876664][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  312.895966][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  312.920954][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  312.964593][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  312.989184][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  313.019053][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  313.049477][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  313.073501][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  313.129427][ T8197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  313.178832][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  313.189029][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  313.227592][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  314.317324][ T8326] syz.4.970 (8326) used greatest stack depth: 18512 bytes left
[  314.586363][ T8197] 8021q: adding VLAN 0 to HW filter on device batadv0
[  314.623078][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  314.630607][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  314.756121][ T8391] fuse: Bad value for 'fd'
[  314.888470][ T4233] Bluetooth: hci2: command 0x0419 tx timeout
[  315.665200][ T8396] overlayfs: failed to clone upperpath
[  316.258698][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  316.282530][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  316.294535][ T8427] fuse: Bad value for 'fd'
[  316.437243][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  316.473079][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  316.486424][ T8436] netlink: 'syz.0.999': attribute type 3 has an invalid length.
[  316.498142][ T8436] netlink: 944 bytes leftover after parsing attributes in process `syz.0.999'.
[  316.512129][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  316.553073][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  316.572924][ T8197] device veth0_vlan entered promiscuous mode
[  316.654061][ T8197] device veth1_vlan entered promiscuous mode
[  316.713794][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  316.724751][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  316.735339][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  316.745391][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  316.761915][ T8197] device veth0_macvtap entered promiscuous mode
[  316.785869][ T8197] device veth1_macvtap entered promiscuous mode
[  316.818598][ T8197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.831597][ T8197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.847629][ T8197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.862891][ T8197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.888750][ T8197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.903715][ T8197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.917364][ T8197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.932546][ T8197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.947689][ T8197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.966790][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  317.004372][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  317.051483][ T8197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.122637][ T8197] batman_adv: batadv0: Interface activated: batadv_slave_0
[  317.138517][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  317.174594][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  317.190595][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  317.211194][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  317.231291][ T8197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.269295][ T8197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.313270][ T8197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.334929][ T8197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.370526][ T8197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.400602][ T8197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.432716][ T8197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.464446][ T8197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.497108][ T8197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.538396][ T8197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.562828][ T8197] batman_adv: batadv0: Interface activated: batadv_slave_1
[  317.575689][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  317.584545][ T8469] fuse: Bad value for 'fd'
[  317.595023][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  317.621101][ T8197] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  317.640344][ T8197] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  317.667934][ T8197] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  317.687707][ T8197] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  317.689674][ T8473] overlayfs: failed to clone lowerpath
[  317.847518][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.898523][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.919231][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  317.948914][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.981231][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.010106][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  318.208700][ T8491] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  318.605393][ T8512] fuse: Unknown parameter '0x0000000000000004'
[  319.582382][ T8527] device syzkaller1 entered promiscuous mode
[  320.061461][ T8538] binder: 8537:8538 ioctl c00c6211 200000000000 returned -22
[  320.300025][ T8550] fuse: Unknown parameter '0x0000000000000006'
[  320.409841][ T4441] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  321.579803][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'.
[  322.185176][ T8525] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  323.036113][ T8625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1050'.
[  323.426689][ T8642] overlayfs: failed to clone upperpath
[  323.573937][ T8650] fuse: Unknown parameter '0x0000000000000004'
[  323.847419][ T8662] loop7: detected capacity change from 0 to 512
[  324.202117][ T8662] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue. Quota mode: none.
[  324.748103][ T8695] fuse: Unknown parameter '0x0000000000000004'
[  325.240536][   T26] audit: type=1326 audit(1778090394.526:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.8.1073" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb25252dd9 code=0x7ffc0000
[  325.332942][   T26] audit: type=1326 audit(1778090394.556:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.8.1073" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb25252dd9 code=0x7ffc0000
[  326.306732][ T8717] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  326.320969][   T26] audit: type=1326 audit(1778090394.556:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.8.1073" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb25252dd9 code=0x7ffc0000
[  326.447787][   T26] audit: type=1326 audit(1778090394.556:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.8.1073" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbb25252dd9 code=0x7ffc0000
[  326.574247][   T26] audit: type=1326 audit(1778090394.556:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.8.1073" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb25252dd9 code=0x7ffc0000
[  326.598996][   T26] audit: type=1326 audit(1778090394.556:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.8.1073" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb25252dd9 code=0x7ffc0000
[  326.640780][   T26] audit: type=1326 audit(1778090394.556:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.8.1073" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb25252dd9 code=0x7ffc0000
[  326.663140][ T4196] Bluetooth: Wrong link type (-71)
[  327.379047][   T26] audit: type=1326 audit(1778090394.556:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.8.1073" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbb25252dd9 code=0x7ffc0000
[  327.467789][ T8728] binder: BINDER_SET_CONTEXT_MGR already set
[  327.473958][ T8728] binder: 8724:8728 ioctl 4018620d 200000000040 returned -16
[  327.485850][ T8728] binder: 8724:8728 ioctl c0306201 0 returned -14
[  327.759285][   T26] audit: type=1326 audit(1778090394.556:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.8.1073" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb25252dd9 code=0x7ffc0000
[  328.190617][   T26] audit: type=1326 audit(1778090394.556:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.8.1073" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb25252dd9 code=0x7ffc0000
[  328.630219][ T8741] fuse: Unknown parameter '0x0000000000000006'
[  330.105235][ T8761] tipc: Started in network mode
[  330.110171][ T8761] tipc: Node identity , cluster identity 4711
[  330.168116][ T8761] tipc: Failed to set node id, please configure manually
[  330.318704][ T8761] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  331.463714][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1092'.
[  332.409499][ T8791] binder: BINDER_SET_CONTEXT_MGR already set
[  332.415706][ T8791] binder: 8788:8791 ioctl 4018620d 200000000040 returned -16
[  332.425872][ T8791] binder: 8788:8791 ioctl c0306201 0 returned -14
[  333.750182][ T8809] loop8: detected capacity change from 0 to 128
[  335.650178][ T8830] loop7: detected capacity change from 0 to 256
[  336.664430][ T8830] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  336.803695][ T8830] exFAT-fs (loop7): error, invalid access to FAT free cluster (entry 0x00000008)
[  336.889772][ T8830] exFAT-fs (loop7): Filesystem has been set read-only
[  340.022133][ T4196] ==================================================================
[  340.030663][ T4196] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1324/0x3c90
[  340.038613][ T4196] Read of size 1 at addr ffff8880210af404 by task kworker/u5:4/4196
[  340.046618][ T4196] 
[  340.048975][ T4196] CPU: 0 PID: 4196 Comm: kworker/u5:4 Not tainted syzkaller #0
[  340.056527][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  340.066595][ T4196] Workqueue: hci3 hci_rx_work
[  340.071307][ T4196] Call Trace:
[  340.074599][ T4196]  <TASK>
[  340.077549][ T4196]  dump_stack_lvl+0x188/0x250
[  340.082261][ T4196]  ? show_regs_print_info+0x20/0x20
[  340.087487][ T4196]  ? load_image+0x400/0x400
[  340.092022][ T4196]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  340.097512][ T4196]  ? mutex_lock_io_nested+0x60/0x60
[  340.102726][ T4196]  print_address_description+0x60/0x2d0
[  340.108263][ T4196]  ? hci_le_meta_evt+0x1324/0x3c90
[  340.113364][ T4196]  kasan_report+0xdf/0x130
[  340.117779][ T4196]  ? hci_le_meta_evt+0x1324/0x3c90
[  340.122895][ T4196]  hci_le_meta_evt+0x1324/0x3c90
[  340.127869][ T4196]  ? hci_remote_host_features_evt+0x280/0x280
[  340.133967][ T4196]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  340.139623][ T4196]  ? mark_lock+0x94/0x320
[  340.143976][ T4196]  ? mutex_unlock+0x10/0x10
[  340.148505][ T4196]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  340.154505][ T4196]  ? lock_chain_count+0x20/0x20
[  340.159388][ T4196]  ? __rwlock_init+0x140/0x140
[  340.164189][ T4196]  hci_event_packet+0xe48/0x1370
[  340.169136][ T4196]  ? lockdep_hardirqs_on+0x94/0x140
[  340.174379][ T4196]  ? rcu_lock_release+0x20/0x20
[  340.179249][ T4196]  ? hci_send_to_monitor+0x9c/0x4a0
[  340.184810][ T4196]  hci_rx_work+0x255/0xa10
[  340.189253][ T4196]  process_one_work+0x85f/0x1010
[  340.194220][ T4196]  ? worker_detach_from_pool+0x240/0x240
[  340.199882][ T4196]  ? lockdep_hardirqs_off+0x70/0x100
[  340.205194][ T4196]  ? _raw_spin_lock_irq+0xb7/0xf0
[  340.210235][ T4196]  ? _raw_spin_lock_irqsave+0x100/0x100
[  340.215807][ T4196]  ? wq_worker_running+0x97/0x170
[  340.220846][ T4196]  worker_thread+0xaa6/0x1290
[  340.225552][ T4196]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  340.231463][ T4196]  kthread+0x436/0x520
[  340.235538][ T4196]  ? rcu_lock_release+0x20/0x20
[  340.240394][ T4196]  ? kthread_blkcg+0xd0/0xd0
[  340.244989][ T4196]  ret_from_fork+0x1f/0x30
[  340.249429][ T4196]  </TASK>
[  340.252458][ T4196] 
[  340.254786][ T4196] Allocated by task 8867:
[  340.259124][ T4196]  __kasan_kmalloc+0xb5/0xf0
[  340.263729][ T4196]  __alloc_skb+0x22c/0x750
[  340.268164][ T4196]  vhci_write+0xbc/0x450
[  340.272419][ T4196]  vfs_write+0x745/0xd60
[  340.276669][ T4196]  ksys_write+0x152/0x260
[  340.281002][ T4196]  do_syscall_64+0x4c/0xa0
[  340.285423][ T4196]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  340.291318][ T4196] 
[  340.293649][ T4196] Last potentially related work creation:
[  340.299365][ T4196]  kasan_save_stack+0x35/0x60
[  340.304064][ T4196]  kasan_record_aux_stack+0xb8/0x100
[  340.309365][ T4196]  kvfree_call_rcu+0x105/0x7d0
[  340.314132][ T4196]  neigh_remove_one+0x4e8/0x5f0
[  340.318994][ T4196]  ___neigh_create+0x468/0x2250
[  340.323851][ T4196]  ip6_finish_output2+0x9f6/0x1510
[  340.328971][ T4196]  ndisc_send_skb+0xc2a/0x1500
[  340.333752][ T4196]  ndisc_send_ns+0x648/0x850
[  340.338349][ T4196]  addrconf_dad_work+0xa63/0x1540
[  340.343403][ T4196]  process_one_work+0x85f/0x1010
[  340.348357][ T4196]  worker_thread+0xaa6/0x1290
[  340.353039][ T4196]  kthread+0x436/0x520
[  340.357156][ T4196]  ret_from_fork+0x1f/0x30
[  340.361689][ T4196] 
[  340.364031][ T4196] The buggy address belongs to the object at ffff8880210af000
[  340.364031][ T4196]  which belongs to the cache kmalloc-1k of size 1024
[  340.378099][ T4196] The buggy address is located 4 bytes to the right of
[  340.378099][ T4196]  1024-byte region [ffff8880210af000, ffff8880210af400)
[  340.391815][ T4196] The buggy address belongs to the page:
[  340.397459][ T4196] page:ffffea0000842a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x210a8
[  340.407630][ T4196] head:ffffea0000842a00 order:3 compound_mapcount:0 compound_pincount:0
[  340.415988][ T4196] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  340.424006][ T4196] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c41dc0
[  340.432619][ T4196] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  340.441319][ T4196] page dumped because: kasan: bad access detected
[  340.447749][ T4196] page_owner tracks the page as allocated
[  340.453486][ T4196] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4197, ts 60967108123, free_ts 60961763530
[  340.472611][ T4196]  get_page_from_freelist+0x1bbd/0x1ca0
[  340.478191][ T4196]  __alloc_pages+0x1ee/0x480
[  340.482811][ T4196]  new_slab+0xc0/0x4b0
[  340.486908][ T4196]  ___slab_alloc+0x80a/0xdd0
[  340.491509][ T4196]  __kmalloc_node_track_caller+0x1fc/0x3a0
[  340.497329][ T4196]  __alloc_skb+0x22c/0x750
[  340.501762][ T4196]  rtmsg_fib+0xe7/0x4b0
[  340.505936][ T4196]  fib_table_insert+0xd36/0x1bb0
[  340.510880][ T4196]  fib_magic+0x2e1/0x3c0
[  340.515141][ T4196]  fib_add_ifaddr+0x3f7/0x5e0
[  340.519828][ T4196]  fib_netdev_event+0x35c/0x480
[  340.524714][ T4196]  raw_notifier_call_chain+0xcb/0x160
[  340.530102][ T4196]  __dev_notify_flags+0x194/0x300
[  340.535135][ T4196]  dev_change_flags+0xe3/0x1a0
[  340.539912][ T4196]  do_setlink+0xcdb/0x3d60
[  340.544343][ T4196]  rtnl_newlink+0x1658/0x1a50
[  340.549031][ T4196] page last free stack trace:
[  340.553708][ T4196]  free_unref_page_prepare+0x637/0x6c0
[  340.559179][ T4196]  free_unref_page+0x8f/0x2a0
[  340.563869][ T4196]  __unfreeze_partials+0x1a5/0x200
[  340.568994][ T4196]  put_cpu_partial+0x12d/0x190
[  340.573774][ T4196]  qlist_free_all+0x35/0x90
[  340.578289][ T4196]  kasan_quarantine_reduce+0x150/0x160
[  340.583761][ T4196]  __kasan_slab_alloc+0x2f/0xd0
[  340.588624][ T4196]  slab_post_alloc_hook+0x4c/0x380
[  340.593739][ T4196]  kmem_cache_alloc+0x100/0x290
[  340.598602][ T4196]  __d_alloc+0x2a/0x6f0
[  340.602779][ T4196]  d_alloc_parallel+0x7b/0x1330
[  340.607637][ T4196]  __lookup_slow+0x134/0x410
[  340.612236][ T4196]  lookup_slow+0x53/0x70
[  340.616498][ T4196]  walk_component+0x319/0x460
[  340.621218][ T4196]  link_path_walk+0x665/0xd70
[  340.625911][ T4196]  path_openat+0x28d/0x2fa0
[  340.630425][ T4196] 
[  340.632754][ T4196] Memory state around the buggy address:
[  340.638394][ T4196]  ffff8880210af300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  340.646470][ T4196]  ffff8880210af380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  340.654542][ T4196] >ffff8880210af400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  340.662611][ T4196]                    ^
[  340.666685][ T4196]  ffff8880210af480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  340.674752][ T4196]  ffff8880210af500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  340.682827][ T4196] ==================================================================
[  340.690899][ T4196] Disabling lock debugging due to kernel taint
[  340.702130][ T4196] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  340.709357][ T4196] CPU: 0 PID: 4196 Comm: kworker/u5:4 Tainted: G    B             syzkaller #0
[  340.718316][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  340.728387][ T4196] Workqueue: hci3 hci_rx_work
[  340.733109][ T4196] Call Trace:
[  340.736442][ T4196]  <TASK>
[  340.739402][ T4196]  dump_stack_lvl+0x188/0x250
[  340.744114][ T4196]  ? show_regs_print_info+0x20/0x20
[  340.749343][ T4196]  ? load_image+0x400/0x400
[  340.753884][ T4196]  panic+0x2e5/0x810
[  340.757828][ T4196]  ? bpf_jit_dump+0xd0/0xd0
[  340.762363][ T4196]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  340.768373][ T4196]  ? _raw_spin_unlock+0x40/0x40
[  340.773263][ T4196]  ? hci_le_meta_evt+0x1324/0x3c90
[  340.778402][ T4196]  check_panic_on_warn+0x80/0xa0
[  340.783373][ T4196]  ? hci_le_meta_evt+0x1324/0x3c90
[  340.788619][ T4196]  end_report+0x6d/0xf0
[  340.792809][ T4196]  kasan_report+0x102/0x130
[  340.797350][ T4196]  ? hci_le_meta_evt+0x1324/0x3c90
[  340.802484][ T4196]  hci_le_meta_evt+0x1324/0x3c90
[  340.807456][ T4196]  ? hci_remote_host_features_evt+0x280/0x280
[  340.813557][ T4196]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  340.819223][ T4196]  ? mark_lock+0x94/0x320
[  340.823577][ T4196]  ? mutex_unlock+0x10/0x10
[  340.828116][ T4196]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  340.834140][ T4196]  ? lock_chain_count+0x20/0x20
[  340.839031][ T4196]  ? __rwlock_init+0x140/0x140
[  340.843834][ T4196]  hci_event_packet+0xe48/0x1370
[  340.848805][ T4196]  ? lockdep_hardirqs_on+0x94/0x140
[  340.854028][ T4196]  ? rcu_lock_release+0x20/0x20
[  340.858902][ T4196]  ? hci_send_to_monitor+0x9c/0x4a0
[  340.864129][ T4196]  hci_rx_work+0x255/0xa10
[  340.868587][ T4196]  process_one_work+0x85f/0x1010
[  340.873556][ T4196]  ? worker_detach_from_pool+0x240/0x240
[  340.879224][ T4196]  ? lockdep_hardirqs_off+0x70/0x100
[  340.884536][ T4196]  ? _raw_spin_lock_irq+0xb7/0xf0
[  340.889590][ T4196]  ? _raw_spin_lock_irqsave+0x100/0x100
[  340.895156][ T4196]  ? wq_worker_running+0x97/0x170
[  340.900187][ T4196]  worker_thread+0xaa6/0x1290
[  340.904874][ T4196]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  340.910783][ T4196]  kthread+0x436/0x520
[  340.914877][ T4196]  ? rcu_lock_release+0x20/0x20
[  340.919741][ T4196]  ? kthread_blkcg+0xd0/0xd0
[  340.924324][ T4196]  ret_from_fork+0x1f/0x30
[  340.928742][ T4196]  </TASK>
[  340.932093][ T4196] Kernel Offset: disabled
[  340.936438][ T4196] Rebooting in 86400 seconds..