last executing test programs:

3.495779297s ago: executing program 4 (id=171):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB='utf8=1,rodir,rodir,uni_xlate=1,shortname=win95,uni_xlate=0,shortname=mixed,codepage=855,iocharset=cp1251,uni_xlate=0,iocharset=cp861,utf8=0,iocharset=macceltic,utf8=0,\x00ni_xlate=1,\x00'], 0x3, 0x350, &(0x7f0000000900)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00002f00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28)

3.235731412s ago: executing program 4 (id=174):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
bind$pptp(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x28a400)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r1], 0x0)

2.612602749s ago: executing program 4 (id=177):
close(0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1)
close(0x3)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @random="d61d56d9b3d3", @multicast1}}}}, 0x0)
sendmmsg$unix(r4, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24008810}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x1}}], 0x2, 0x20000040)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48)
r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00')
getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, &(0x7f0000000140)={'icmp6\x00'}, &(0x7f0000000180)=0x1e)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)={0x80000004})

2.505589825s ago: executing program 0 (id=178):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)

2.463616717s ago: executing program 3 (id=179):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl(0xffffffffffffffff, 0x8936, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0)

1.89816127s ago: executing program 1 (id=182):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40142, 0xbf)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)=ANY=[])

1.862637862s ago: executing program 1 (id=183):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$incfs(0xffffffffffffff9c, 0x0, 0x400000, 0x110)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
setfsgid(0xee00)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f90925090987f70e06d038e7ff7fc6e5539b3243078b089b3b33386d090890e0878f0e1ac6e7049b334c959b4a9a240f5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e809ea02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203821b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18809a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348071f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed2bf1f847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aea019c982cd3b43eaeb1a5fb135c0c7dce61a0b29aa328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a06007c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d8c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687ea84afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb8052ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)

1.738592089s ago: executing program 0 (id=184):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000800)={@flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fda={0x66646185, 0x9, 0x0, 0x36}, @flat=@weak_binder={0x77622a85, 0x1001, 0x3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0})

1.646990184s ago: executing program 4 (id=185):
socket$unix(0x1, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4)

1.616057146s ago: executing program 1 (id=186):
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x555e, &(0x7f0000005f80)="$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")
r0 = open(0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

1.594924977s ago: executing program 0 (id=187):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0/file0', [], 0xa, "a4b1552563ff5a792eb981deb9b5cb6c9a"}, 0xfffffcc7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
lseek(r0, 0x0, 0x4)

1.570802969s ago: executing program 3 (id=188):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
fsopen(&(0x7f0000000180)='configfs\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1830000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000003000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xf8, &(0x7f0000000100)=""/248, 0x0, 0x2c}, 0x94)

1.539765711s ago: executing program 4 (id=189):
socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getrlimit(0xe, &(0x7f0000000240))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000340)=ANY=[], 0x21)
sendfile(r4, r3, 0x0, 0x40001)

1.476098334s ago: executing program 2 (id=190):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000))
close(r0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r0, 0x0, 0x0)
connect$unix(r6, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)

1.127018775s ago: executing program 3 (id=191):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a340977"], 0xa)

1.078270447s ago: executing program 3 (id=192):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800700, &(0x7f0000000200)={[{@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@errors_remount}, {@test_dummy_encryption_v1}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@grpquota}, {@jqfmt_vfsold}, {@oldalloc}]}, 0x3, 0x446, &(0x7f0000000400)="$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")
chdir(&(0x7f0000000400)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

980.553393ms ago: executing program 0 (id=193):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40142, 0xbf)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)=ANY=[])

928.221406ms ago: executing program 3 (id=194):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2800c1e, &(0x7f0000000000)={[{@test_dummy_encryption}, {@usrjquota}]}, 0xff, 0x249, &(0x7f0000000500)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x56002, 0x0, 0xfd, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

851.366691ms ago: executing program 0 (id=195):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'ip6_vti0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x5, 0x7, 0x0, 0x7, 0x20, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45, [0xfffffffb]}})

799.358013ms ago: executing program 3 (id=196):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$incfs(0xffffffffffffff9c, 0x0, 0x400000, 0x110)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
setfsgid(0xee00)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f90925090987f70e06d038e7ff7fc6e5539b3243078b089b3b33386d090890e0878f0e1ac6e7049b334c959b4a9a240f5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e809ea02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203821b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18809a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348071f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed2bf1f847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aea019c982cd3b43eaeb1a5fb135c0c7dce61a0b29aa328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a06007c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d8c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687ea84afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb8052ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)

797.715383ms ago: executing program 1 (id=197):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3cb, 0x1, 0x401}, {0x2, 0x49a, 0x9, 0x4, 0x6, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x8000)

797.534053ms ago: executing program 0 (id=198):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl(0xffffffffffffffff, 0x8936, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0)

401.950886ms ago: executing program 2 (id=199):
socket$unix(0x1, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4)

401.486186ms ago: executing program 4 (id=200):
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000004000/0x3000)=nil)
r0 = socket(0x840000000002, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00'})
connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)

279.139034ms ago: executing program 2 (id=201):
r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r1 = dup(r0)
write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="09c182f48b"], 0x78)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

235.230566ms ago: executing program 1 (id=202):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a340977"], 0xa)

157.162071ms ago: executing program 2 (id=203):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nolazytime}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x200000000000000)

110.901254ms ago: executing program 1 (id=204):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='.\x02\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@discard}, {@noblock_validity}, {@discard}]}, 0x4, 0xbc1, &(0x7f0000001080)="$eJzs3M1rXOUaAPDnnHy2yb2TXi6X27tpLpdLC/c6TSsptgi2UnHjQtCt0JBOSsj0gyRSk2Yx0X9A1LXgRlCL0oVdd6Pg1o3WrcWFUCQ2CiIaOfORxGQmH+2kJyS/H7w57zvvmXmeZ05nznlhTgPYtwazP2nE4Yi4kEQU6o+nEdFd7fVGVGr7LS7Mjf68MDeaxNLSSz8kkUTEg4W50cZrJfVtX33QGxFfPpvE395YH3dqZnZipFwuTdbHx6cvXzs+NTP7xPjlkUulS6UrJ049NXxy+NTQ6eG21frLt2dv//Tv57+r/Prhbzd/fPv9JM5Gf31udR3tMhiDy+/Jap0RMdLuYDnpqNezus6kc5MnpTucFAAALaWrruH+EYXoiJWLt0J89lWuyQEAAABtsdQRsQQAAADscYn1PwAAAOxxjd8BPFiYG220fH+R8HjdPxcRA7X6F+utNtMZleq2N7oi4uCDJFbf1prUnvbIBiPi3jenP8la7NB9yBupzEfEP5sd/6Ra/0D1Lu719acRMdSG+INrxrut/v93t67/bBvi510/APvTnXO1E9n681+6fP0TTc5/nU3OXQ8j7/Nf4/pvcd3130r9HS2u/17cYowbH7x7vdVcVv/Tt5/7uNGy+Nn2kYrahvvzEf/qbFZ/slx/0qL+C1uMUfj9eqnV3Bbr79l2YVu09F7E0Whef0Oy8f9PdHxsvFwaqv1tGmP+i+GPWsXfDcf/YIv6Nzv+17YY45Xz52+1mtu8/vT77uTlaq+7/shrI9PTkyciupMX1j9+sn5DewuNfRqvkdV/7D8bf/6b1Z+FqNTfh2wtMF/fZuPX18R85uaNTzeqP1v75Xn8Lz7k8X9zizH++/lbx1rNrV7/Zi2Lfy+prYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCGNiP5I0uJyP02LxYi+iPh7HEzLV6em/zd29dUrF7O5iIHoSsfGy6WhiCjUxkk2PlHtr4xPrhk/GRGHIuKdwoHquDh6tXwx7+IBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY1hcR/ZGkxYhII2KxkKbFYt5ZAQAAAG03kHcCAAAAwI6z/gcAAIC9z/ofAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHXboyJ27SURUzhyotkx3fa4r18yAnZbmnQCQm468EwBy05l3AkButrnGd7kAe1CyyXxvy5metucCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO519PCdu0lEVM4cqLZMd32uq+kzjjzG7ICdlOadAJCbjo0mO9eMfVnAnrL2Iw7sH83X+MB+kmwy37uyT+XPMz07lhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu09/tSVpMSLSaj9Ni8WIv0TEQHQlY+Pl0lBE/DUivi509WTjnryTBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoO2mZmYnRsrl0qSOTns7ffV/Yrsln93fSXZHGrVOzl9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkYmpmdmKkXC5NTuWdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJC3qZnZiZFyuTS5hc6t7ey8qpN3jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5OePAAAA//++vgq1")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000000)='./bus\x00')
fremovexattr(0xffffffffffffffff, &(0x7f00000073c0)=@known='system.posix_acl_access\x00')
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x200080, &(0x7f0000000140)={[{@utf8}, {@fat=@gid}, {@numtail}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@utf8}, {@shortname_mixed}, {@shortname_win95}, {@shortname_winnt}]}, 0x11, 0x317, &(0x7f00000001c0)="$eJzs3UFrHGUYB/CnsU00mk4OIiiIL3rRy5DEL+AiLYgBJTZSPQhTM9Flp7thZ6lsEfXm1c9RPIk3QfwCuXj35i0Xjz0UVzbTptm4VRDCuO3vB7vz7L77h/dlmeW5LM/R9e9u9vbrfL8YxdJbKZYiYuluxPoP06pxoXm60LxajtO+iTey67+9/MFHH7/b2d6+spPS1c61N7dSSpdf+fmLL79/9ZfRsx/+ePmnlThc/+Toj63fD184fPHoz2ufd+vUrVN/MEpFujEYjIobVZn2unUvT+n9qizqMnX7dTmcWd+vBgcH41T099ZWD4ZlXaeiP069cpxGgzQajlPxWdHtpzzP09pq8G927+zsFJ22d8H5Gg47xfTmXfnbyu6dVjYEALTqkf1/nOn/p+8f1/r/xfLcP6zp/58E0/5/+f79O0v/DwAAAAAAAAAAAAAAi+DuZJJNJpPswfXsY07kUgvb5Jz8h++fx8ipP+49HVF9e2v31m5zbdY7+9GNKsrYiCzuRUxONPXVd7avbKRj67F28+smP70+NZvfjCzW5+c3m3yazV+K1dP5rcji+fn5rbn55Xj9tVP5PLL49dMYRBV7Mc0+zH+1mdLb722fya8cfw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ0OeTsyd35/nj1pv8ifz9Tcii3vz5/NvzJ3PfzFeutju2QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADggXp8u1dUVTl8vIpn7h/v/7IfhWLBipZ/mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAFD4d+t70TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2lSPb/eKqiqH51i0fUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBF8lcAAAD//+PLJqU=")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

71.218616ms ago: executing program 2 (id=205):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40142, 0xbf)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)=ANY=[])

0s ago: executing program 2 (id=206):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000200)={[{@shortname_lower}, {@uni_xlate}, {@shortname_winnt}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_mixed}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@numtail}]}, 0x1, 0x26c, &(0x7f0000000340)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts.
[   26.257895][ T4308] cgroup: Unknown subsys name 'net'
[   26.496710][ T4308] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   26.765258][ T4308] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SSFS
[   27.570266][ T4330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   27.571891][ T4330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   27.573194][ T4330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   27.574848][ T4330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   27.579632][ T4332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   27.581111][ T4332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   27.582239][ T4334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   27.582462][ T4332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   27.583775][ T4334] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   27.584898][ T4332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   27.586148][ T4334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   27.586766][ T4332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   27.587784][ T4334] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   27.588744][ T4332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   27.589828][ T4334] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   27.592559][ T4324] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   27.592657][ T4332] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   27.594732][ T4336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   27.595861][ T4332] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   27.596355][ T4336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   27.597536][ T4332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   27.599381][ T4332] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   27.600755][ T4324] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   27.601158][ T4332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   27.603114][ T4332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   27.608311][ T4328] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   27.609696][ T4328] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   27.634438][ T4328] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   27.635809][ T4328] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   27.639799][ T4328] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   27.744575][ T4320] chnl_net:caif_netlink_parms(): no params data found
[   27.775112][ T4323] chnl_net:caif_netlink_parms(): no params data found
[   27.781577][ T4321] chnl_net:caif_netlink_parms(): no params data found
[   27.802747][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.804087][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.805671][ T4320] device bridge_slave_0 entered promiscuous mode
[   27.819063][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.820358][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.821860][ T4320] device bridge_slave_1 entered promiscuous mode
[   27.827398][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.828469][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.829823][ T4323] device bridge_slave_0 entered promiscuous mode
[   27.832998][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.834670][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.835965][ T4323] device bridge_slave_1 entered promiscuous mode
[   27.839631][ T4322] chnl_net:caif_netlink_parms(): no params data found
[   27.852448][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.867883][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.870469][ T4323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.879846][ T4323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.881548][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.882585][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.884262][ T4321] device bridge_slave_0 entered promiscuous mode
[   27.899459][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.900589][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.902068][ T4321] device bridge_slave_1 entered promiscuous mode
[   27.911264][ T4320] team0: Port device team_slave_0 added
[   27.915387][ T4323] team0: Port device team_slave_0 added
[   27.916445][ T4333] chnl_net:caif_netlink_parms(): no params data found
[   27.918817][ T4323] team0: Port device team_slave_1 added
[   27.923248][ T4320] team0: Port device team_slave_1 added
[   27.935684][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.936830][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.938203][ T4322] device bridge_slave_0 entered promiscuous mode
[   27.942935][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.951672][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.952815][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.954495][ T4322] device bridge_slave_1 entered promiscuous mode
[   27.956114][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.957206][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.961349][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.965117][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.966647][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.967782][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.971547][ T4323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.981243][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.982443][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.984042][ T4333] device bridge_slave_0 entered promiscuous mode
[   27.987734][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.988754][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.992399][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.996744][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.997894][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.001711][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.012482][ T4322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.014137][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.015260][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.016690][ T4333] device bridge_slave_1 entered promiscuous mode
[   28.023254][ T4321] team0: Port device team_slave_0 added
[   28.029802][ T4322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.036398][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.038409][ T4321] team0: Port device team_slave_1 added
[   28.085165][ T4323] device hsr_slave_0 entered promiscuous mode
[   28.124186][ T4323] device hsr_slave_1 entered promiscuous mode
[   28.198786][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.213314][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.214588][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.218332][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.221142][ T4322] team0: Port device team_slave_0 added
[   28.264979][ T4320] device hsr_slave_0 entered promiscuous mode
[   28.304183][ T4320] device hsr_slave_1 entered promiscuous mode
[   28.343908][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   28.345102][ T4320] Cannot create hsr debugfs directory
[   28.351158][ T4333] team0: Port device team_slave_0 added
[   28.353753][ T4333] team0: Port device team_slave_1 added
[   28.355594][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.356603][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.360302][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.362569][ T4322] team0: Port device team_slave_1 added
[   28.378454][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.379594][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.383238][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.390935][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.391967][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.395695][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.397593][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.398697][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.402657][ T4322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.410830][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.411870][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.415644][ T4322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.464956][ T4321] device hsr_slave_0 entered promiscuous mode
[   28.504386][ T4321] device hsr_slave_1 entered promiscuous mode
[   28.553883][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   28.555033][ T4321] Cannot create hsr debugfs directory
[   28.594940][ T4333] device hsr_slave_0 entered promiscuous mode
[   28.634040][ T4333] device hsr_slave_1 entered promiscuous mode
[   28.673874][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   28.675096][ T4333] Cannot create hsr debugfs directory
[   28.755546][ T4322] device hsr_slave_0 entered promiscuous mode
[   28.794208][ T4322] device hsr_slave_1 entered promiscuous mode
[   28.833958][ T4322] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   28.835151][ T4322] Cannot create hsr debugfs directory
[   28.926395][ T4323] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   28.996530][ T4323] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   29.027688][ T4320] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   29.064766][ T4323] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   29.104927][ T4323] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   29.146592][ T4320] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   29.185161][ T4320] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   29.232366][ T4320] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   29.302909][ T4321] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   29.340895][ T4321] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   29.378763][ T4321] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   29.417822][ T4333] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   29.457586][ T4333] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   29.496681][ T4321] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   29.538773][ T4333] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   29.585050][ T4333] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   29.614308][ T4330] Bluetooth: hci0: command 0x0409 tx timeout
[   29.615227][ T4330] Bluetooth: hci1: command 0x0409 tx timeout
[   29.616160][ T4330] Bluetooth: hci2: command 0x0409 tx timeout
[   29.616996][ T4330] Bluetooth: hci3: command 0x0409 tx timeout
[   29.640928][ T4322] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   29.675140][ T4322] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   29.703898][ T4328] Bluetooth: hci4: command 0x0409 tx timeout
[   29.721623][ T4322] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   29.757778][ T4322] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   29.810677][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.824466][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.826056][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   29.828119][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   29.832592][ T4320] 8021q: adding VLAN 0 to HW filter on device team0
[   29.846508][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   29.848684][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   29.850113][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.851174][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.852714][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   29.855220][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   29.864505][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   29.866005][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   29.867480][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   29.868745][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.869807][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.871060][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   29.872633][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   29.875009][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   29.876593][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   29.878034][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   29.879622][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   29.882149][ T4323] 8021q: adding VLAN 0 to HW filter on device team0
[   29.883348][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   29.886138][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   29.887616][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   29.904788][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   29.906395][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   29.907818][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   29.909395][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   29.911000][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.912094][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.917364][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   29.920395][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.921485][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   29.925847][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   29.927438][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   29.928749][ T1571] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.929712][ T1571] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.932766][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   29.939885][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   29.945542][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   29.948435][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   29.953101][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   29.956472][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   29.958141][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   29.962591][ T4322] 8021q: adding VLAN 0 to HW filter on device team0
[   29.966242][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.970695][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   29.972255][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   29.978049][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.983581][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   29.986352][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   29.987810][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.988934][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.990364][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   29.991906][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   29.993355][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   29.995092][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   30.005492][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   30.009797][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   30.011262][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   30.012756][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   30.015494][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.016497][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.017746][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   30.024939][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   30.026672][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   30.028543][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   30.034344][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   30.036205][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   30.037912][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   30.039341][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   30.042942][ T4333] 8021q: adding VLAN 0 to HW filter on device team0
[   30.050158][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   30.051981][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   30.053409][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   30.055559][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   30.056980][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   30.060486][ T4322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.062533][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   30.068777][ T4321] 8021q: adding VLAN 0 to HW filter on device team0
[   30.070790][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   30.072756][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   30.090059][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   30.091744][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   30.093240][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.094343][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.097933][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   30.100023][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   30.101508][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.102538][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.113221][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   30.114958][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   30.116499][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   30.118092][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   30.119500][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.120630][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.121959][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   30.123943][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   30.125293][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   30.126507][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   30.128411][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   30.129830][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   30.131245][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.132306][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.139762][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   30.141695][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   30.143288][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   30.147964][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   30.149450][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   30.150856][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   30.152265][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   30.158669][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.168267][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   30.169999][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   30.171213][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   30.172429][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   30.174665][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   30.177455][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   30.178890][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   30.180410][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   30.181803][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   30.183309][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   30.186444][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   30.187950][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   30.191054][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   30.192451][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   30.194120][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   30.196292][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.197917][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   30.203168][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   30.204665][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   30.206823][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   30.213265][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.223318][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   30.225435][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   30.245000][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   30.246616][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   30.248058][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   30.249801][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   30.251307][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   30.253343][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   30.256759][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   30.258494][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   30.265050][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   30.266751][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   30.270829][ T4323] device veth0_vlan entered promiscuous mode
[   30.274770][ T4322] device veth0_vlan entered promiscuous mode
[   30.276010][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   30.277415][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   30.280869][ T4322] device veth1_vlan entered promiscuous mode
[   30.287585][ T4323] device veth1_vlan entered promiscuous mode
[   30.300154][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   30.301705][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   30.303070][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   30.304889][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   30.306349][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   30.307815][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   30.309221][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   30.310785][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   30.313486][ T4320] device veth0_vlan entered promiscuous mode
[   30.325309][ T4323] device veth0_macvtap entered promiscuous mode
[   30.328238][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   30.329644][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   30.331157][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   30.332681][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   30.335787][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   30.339275][ T4320] device veth1_vlan entered promiscuous mode
[   30.342300][ T4322] device veth0_macvtap entered promiscuous mode
[   30.348567][ T4323] device veth1_macvtap entered promiscuous mode
[   30.350156][ T4322] device veth1_macvtap entered promiscuous mode
[   30.352969][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   30.354973][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   30.356372][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   30.357819][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   30.359107][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   30.360288][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   30.367307][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   30.368712][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   30.369987][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   30.379696][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.385372][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.387422][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.392997][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.395649][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.398067][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.399201][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   30.400685][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   30.402170][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   30.403627][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   30.408165][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   30.409636][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   30.412628][ T4320] device veth0_macvtap entered promiscuous mode
[   30.420234][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.421507][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   30.422885][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   30.425158][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   30.427305][ T4320] device veth1_macvtap entered promiscuous mode
[   30.437866][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   30.439416][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   30.441051][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   30.446514][ T4323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.447858][ T4323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.449088][ T4323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.450326][ T4323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.457625][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.459209][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.461325][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.466204][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   30.467905][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   30.470649][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.472190][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.473577][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.479461][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.481969][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.487297][ T4322] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.488679][ T4322] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.490048][ T4322] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.491390][ T4322] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.495677][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   30.497233][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   30.498736][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   30.500121][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   30.502949][ T4321] device veth0_vlan entered promiscuous mode
[   30.506496][ T4321] device veth1_vlan entered promiscuous mode
[   30.508250][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   30.509717][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   30.511071][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   30.529855][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   30.531401][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   30.532938][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   30.538079][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.539606][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.541143][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.542758][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.546069][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.564810][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   30.566337][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   30.568544][ T4320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.569882][ T4320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.571189][ T4320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.572526][ T4320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.590345][ T4405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   30.591616][ T4405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   30.593112][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   30.601496][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   30.603135][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   30.605356][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   30.606674][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   30.611343][ T4333] device veth0_vlan entered promiscuous mode
[   30.622969][ T4321] device veth0_macvtap entered promiscuous mode
[   30.631145][ T4333] device veth1_vlan entered promiscuous mode
[   30.633803][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   30.635705][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   30.637575][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   30.639102][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   30.643301][ T4321] device veth1_macvtap entered promiscuous mode
[   30.659383][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   30.660507][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   30.662041][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   30.663745][ T4405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   30.664895][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   30.666195][ T4405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   30.667844][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   30.690813][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.692428][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.698070][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.699655][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.701179][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.702749][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.706160][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.708394][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   30.709940][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   30.711459][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   30.712920][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   30.715469][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   30.724363][ T4405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   30.725582][ T4405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   30.727323][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   30.733590][ T4333] device veth0_macvtap entered promiscuous mode
[   30.740203][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.741906][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.743432][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.745777][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.747357][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.748865][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.751072][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.763327][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   30.764801][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   30.765352][ T4333] device veth1_macvtap entered promiscuous mode
[   30.770077][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   30.771594][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   30.773013][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   30.786881][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   30.788640][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   30.792994][ T4321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.795241][ T4321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.796517][ T4321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.797785][ T4321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.830254][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.831984][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.833525][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.837496][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.838856][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.840410][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.841971][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.843490][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.846342][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.848395][ T4405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   30.849659][ T4405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   30.852723][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   30.854553][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   30.856091][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   30.909514][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.911194][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.912727][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.922300][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.928259][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.930482][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.932005][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.933520][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.002145][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.020067][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   31.021749][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   31.032267][ T4405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.033509][ T4405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.044371][ T4333] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.044735][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.045696][ T4333] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.046925][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.048004][ T4333] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.050262][ T4333] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.052406][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   31.058401][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   31.212913][ T4405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.221227][ T4405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.227356][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   31.558402][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.561284][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.610830][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   31.778561][ T4447] capability: warning: `syz.3.4' uses 32-bit capabilities (legacy support in use)
[   32.014393][ T4330] Bluetooth: hci3: command 0x041b tx timeout
[   32.027992][ T4328] Bluetooth: hci2: command 0x041b tx timeout
[   32.028904][ T4328] Bluetooth: hci1: command 0x041b tx timeout
[   32.031641][ T4327] Bluetooth: hci0: command 0x041b tx timeout
[   32.033801][ T4328] Bluetooth: hci4: command 0x041b tx timeout
[   32.132985][ T4454] loop0: detected capacity change from 0 to 256
[   32.177609][ T4431] loop2: detected capacity change from 0 to 131072
[   32.244361][ T4457] Zero length message leads to an empty skb
[   32.249423][ T4457] loop1: detected capacity change from 0 to 512
[   32.251445][ T4457] =======================================================
[   32.251445][ T4457] WARNING: The mand mount option has been deprecated and
[   32.251445][ T4457]          and is ignored by this kernel. Remove the mand
[   32.251445][ T4457]          option from the mount to silence this warning.
[   32.251445][ T4457] =======================================================
[   32.269282][ T4457] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   32.366985][ T4457] EXT4-fs (loop1): orphan cleanup on readonly fs
[   32.388944][ T4457] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.6: bg 0: block 248: padding at end of block bitmap is not set
[   32.396961][ T4457] Quota error (device loop1): write_blk: dquota write failed
[   32.398319][ T4457] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   32.399913][ T4457] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.6: Failed to acquire dquot type 1
[   32.412102][ T4457] EXT4-fs (loop1): 1 truncate cleaned up
[   32.452075][ T4457] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   32.456445][ T4457] EXT4-fs (loop1): unmounting filesystem.
[   32.671820][ T4431] F2FS-fs (loop2): Found nat_bits in checkpoint
[   33.473681][ T4431] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   33.522048][ T4470] overlayfs: failed to set xattr on upper
[   33.522983][ T4470] overlayfs: ...falling back to index=off,metacopy=off.
[   33.530017][ T4472] loop3: detected capacity change from 0 to 256
[   33.606650][ T4472] FAT-fs (loop3): Directory bread(block 64) failed
[   33.607860][ T4472] FAT-fs (loop3): Directory bread(block 65) failed
[   33.608877][ T4472] FAT-fs (loop3): Directory bread(block 66) failed
[   33.609818][ T4472] FAT-fs (loop3): Directory bread(block 67) failed
[   33.610788][ T4472] FAT-fs (loop3): Directory bread(block 68) failed
[   33.611724][ T4472] FAT-fs (loop3): Directory bread(block 69) failed
[   33.612668][ T4472] FAT-fs (loop3): Directory bread(block 70) failed
[   33.613645][ T4472] FAT-fs (loop3): Directory bread(block 71) failed
[   33.656530][ T4472] FAT-fs (loop3): Directory bread(block 72) failed
[   33.657554][ T4472] FAT-fs (loop3): Directory bread(block 73) failed
[   33.852722][ T4478] loop1: detected capacity change from 0 to 32768
[   33.855628][ T4478] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9"
[   33.857736][ T4478] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)...
[   33.862054][ T4479] loop0: detected capacity change from 0 to 16
[   34.082993][ T4478] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: fatal: filesystem consistency error
[   34.082993][ T4478]   inode = 1 19
[   34.082993][ T4478]   function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 115
[   34.086467][ T4478] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: G:  s:SH n:2/13 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:6
[   34.088319][ T4478] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0:  H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xe0/0x2d4
[   34.090302][ T4478] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0:  I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[   34.092245][ T4478] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: about to withdraw this file system
[   34.094087][ T4478] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: Journal recovery skipped for jid 0 until next mount.
[   34.095933][ T4478] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: Glock dequeues delayed: 0
[   34.099773][ T4478] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: File system withdrawn
[   34.101159][ T4478] CPU: 1 PID: 4478 Comm: syz.1.11 Not tainted syzkaller #0
[   34.102173][ T4478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
[   34.103571][ T4478] Call trace:
[   34.104048][ T4478]  dump_backtrace+0x1c0/0x1ec
[   34.104727][ T4478]  show_stack+0x2c/0x3c
[   34.105340][ T4478]  __dump_stack+0x30/0x40
[   34.105980][ T4478]  dump_stack_lvl+0xf4/0x15c
[   34.106650][ T4478]  dump_stack+0x1c/0x5c
[   34.107311][ T4478]  gfs2_withdraw+0xfa4/0x1390
[   34.107985][ T4478]  gfs2_consist_inode_i+0xf0/0x10c
[   34.108770][ T4478]  gfs2_jdesc_check+0x12c/0x264
[   34.109464][ T4478]  init_journal+0xad8/0x1e94
[   34.110142][ T4478]  init_inodes+0xe0/0x2d4
[   34.110803][ T4478]  gfs2_fill_super+0x11c0/0x194c
[   34.111537][ T4478]  get_tree_bdev+0x358/0x544
[   34.112251][ T4478]  gfs2_get_tree+0x54/0x1b4
[   34.112873][ T4478]  vfs_get_tree+0x90/0x274
[   34.113506][ T4478]  do_new_mount+0x228/0x810
[   34.114144][ T4478]  path_mount+0x5bc/0xe80
[   34.114779][ T4478]  __arm64_sys_mount+0x49c/0x59c
[   34.115472][ T4478]  invoke_syscall+0x98/0x2b4
[   34.116138][ T4478]  el0_svc_common+0x138/0x258
[   34.116792][ T4478]  do_el0_svc+0x58/0x130
[   34.117394][ T4478]  el0_svc+0x58/0x128
[   34.117962][ T4478]  el0t_64_sync_handler+0x84/0xf0
[   34.118709][ T4478]  el0t_64_sync+0x18c/0x190
[   34.119561][ T4478] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: my journal (0) is bad: -5
[   34.126604][   T47] Bluetooth: hci3: command 0x040f tx timeout
[   34.144755][ T4479] erofs: (device loop0): mounted with root inode @ nid 36.
[   34.765673][ T4484] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=6 iblocks=0, run fsck to fix.
[   34.778770][   T47] Bluetooth: hci2: command 0x040f tx timeout
[   34.795204][ T4330] Bluetooth: hci0: command 0x040f tx timeout
[   34.799552][ T4328] Bluetooth: hci4: command 0x040f tx timeout
[   34.800993][ T4327] Bluetooth: hci1: command 0x040f tx timeout
[   34.961241][ T4494] loop0: detected capacity change from 0 to 512
[   34.982797][ T4494] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.14: invalid indirect mapped block 256 (level 2)
[   35.276978][ T4494] EXT4-fs (loop0): 2 truncates cleaned up
[   35.280198][ T4494] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   35.372908][ T4322] EXT4-fs (loop0): unmounting filesystem.
[   35.727972][ T4502] loop0: detected capacity change from 0 to 1024
[   36.082328][ T4508] loop1: detected capacity change from 0 to 32768
[   36.117144][ T4508] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   36.174981][ T4336] Bluetooth: hci3: command 0x0419 tx timeout
[   36.218830][ T4320] ocfs2: Unmounting device (7,1) on (node local)
[   36.815014][ T4330] Bluetooth: hci2: command 0x0419 tx timeout
[   36.816193][ T4328] Bluetooth: hci1: command 0x0419 tx timeout
[   36.819482][ T4336] Bluetooth: hci4: command 0x0419 tx timeout
[   36.819666][   T47] Bluetooth: hci0: command 0x0419 tx timeout
[   38.007168][ T4548] loop0: detected capacity change from 0 to 32768
[   38.010030][ T4548] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9"
[   38.012226][ T4548] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)...
[   38.037896][ T4547] loop1: detected capacity change from 0 to 512
[   38.047594][ T4548] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: fatal: filesystem consistency error
[   38.047594][ T4548]   inode = 1 19
[   38.047594][ T4548]   function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 115
[   38.050629][ T4548] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: G:  s:SH n:2/13 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:6
[   38.052450][ T4548] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0:  H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xe0/0x2d4
[   38.054498][ T4548] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0:  I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[   38.056122][ T4548] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: about to withdraw this file system
[   38.057625][ T4548] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: Journal recovery skipped for jid 0 until next mount.
[   38.059216][ T4548] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: Glock dequeues delayed: 0
[   38.061032][ T4548] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: File system withdrawn
[   38.062336][ T4548] CPU: 1 PID: 4548 Comm: syz.0.27 Not tainted syzkaller #0
[   38.063284][ T4548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
[   38.064703][ T4548] Call trace:
[   38.065168][ T4548]  dump_backtrace+0x1c0/0x1ec
[   38.065869][ T4548]  show_stack+0x2c/0x3c
[   38.066474][ T4548]  __dump_stack+0x30/0x40
[   38.067118][ T4548]  dump_stack_lvl+0xf4/0x15c
[   38.067771][ T4548]  dump_stack+0x1c/0x5c
[   38.068375][ T4548]  gfs2_withdraw+0xfa4/0x1390
[   38.069051][ T4548]  gfs2_consist_inode_i+0xf0/0x10c
[   38.069777][ T4548]  gfs2_jdesc_check+0x12c/0x264
[   38.070528][ T4548]  init_journal+0xad8/0x1e94
[   38.071213][ T4548]  init_inodes+0xe0/0x2d4
[   38.071840][ T4548]  gfs2_fill_super+0x11c0/0x194c
[   38.072566][ T4548]  get_tree_bdev+0x358/0x544
[   38.073218][ T4548]  gfs2_get_tree+0x54/0x1b4
[   38.073868][ T4548]  vfs_get_tree+0x90/0x274
[   38.074519][ T4548]  do_new_mount+0x228/0x810
[   38.075165][ T4548]  path_mount+0x5bc/0xe80
[   38.075793][ T4548]  __arm64_sys_mount+0x49c/0x59c
[   38.076519][ T4548]  invoke_syscall+0x98/0x2b4
[   38.077153][ T4548]  el0_svc_common+0x138/0x258
[   38.077806][ T4548]  do_el0_svc+0x58/0x130
[   38.078424][ T4548]  el0_svc+0x58/0x128
[   38.078997][ T4548]  el0t_64_sync_handler+0x84/0xf0
[   38.079735][ T4548]  el0t_64_sync+0x18c/0x190
[   38.080430][ T4548] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: my journal (0) is bad: -5
[   38.107563][ T4547] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.28: invalid indirect mapped block 256 (level 2)
[   38.111113][ T4547] EXT4-fs (loop1): 2 truncates cleaned up
[   38.112158][ T4547] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   38.176220][ T4320] EXT4-fs (loop1): unmounting filesystem.
[   38.859944][ T4571] loop2: detected capacity change from 0 to 1024
[   38.922569][ T4569] loop0: detected capacity change from 0 to 32768
[   38.948998][ T4569] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   38.970740][ T4322] ocfs2: Unmounting device (7,0) on (node local)
[   39.301682][ T4576] loop0: detected capacity change from 0 to 1024
[   39.316982][ T4576] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   39.322041][ T4576] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[   39.325894][ T4576] EXT4-fs error (device loop0): ext4_get_journal_inode:5756: comm syz.0.36: inode #1: comm syz.0.36: iget: illegal inode #
[   39.336356][ T4576] EXT4-fs (loop0): no journal found
[   39.356837][ T4588] loop3: detected capacity change from 0 to 512
[   39.367651][ T4588] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.39: invalid indirect mapped block 256 (level 2)
[   39.370109][ T4588] EXT4-fs (loop3): 2 truncates cleaned up
[   39.371170][ T4588] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   39.475451][ T4585] loop1: detected capacity change from 0 to 40427
[   39.514142][ T4585] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   39.517494][ T4585] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   39.520023][ T4585] F2FS-fs (loop1): invalid crc value
[   39.521718][ T4321] EXT4-fs (loop3): unmounting filesystem.
[   40.035580][ T4596] overlayfs: failed to resolve './file2': -2
[   40.148295][ T4585] F2FS-fs (loop1): Found nat_bits in checkpoint
[   40.168085][ T4585] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   40.169234][ T4585] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   40.597751][ T4585] syz.1.37: attempt to access beyond end of device
[   40.597751][ T4585] loop1: rw=2049, sector=77824, nr_sectors = 2056 limit=40427
[   40.605118][ T4585] syz.1.37: attempt to access beyond end of device
[   40.605118][ T4585] loop1: rw=2049, sector=79880, nr_sectors = 1344 limit=40427
[   40.982791][ T4617] loop0: detected capacity change from 0 to 32768
[   40.987732][ T4448] kworker/u4:7: attempt to access beyond end of device
[   40.987732][ T4448] loop1: rw=1, sector=81224, nr_sectors = 200 limit=40427
[   41.011411][ T4617] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   41.048177][ T4322] ocfs2: Unmounting device (7,0) on (node local)
[   41.551896][ T4636] loop3: detected capacity change from 0 to 512
[   41.557503][ T4636] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.51: invalid indirect mapped block 256 (level 2)
[   41.559955][ T4636] EXT4-fs (loop3): 2 truncates cleaned up
[   41.560938][ T4636] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   41.584820][ T4321] EXT4-fs (loop3): unmounting filesystem.
[   41.611994][ T4640] loop3: detected capacity change from 0 to 1024
[   42.568306][ T4655] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   42.768208][ T4655] EXT4-fs (loop0): orphan cleanup on readonly fs
[   42.774855][ T4655] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.54: bg 0: block 248: padding at end of block bitmap is not set
[   42.778919][ T4655] Quota error (device loop0): write_blk: dquota write failed
[   42.780179][ T4655] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   42.781868][ T4655] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.54: Failed to acquire dquot type 1
[   42.787974][ T4655] EXT4-fs (loop0): 1 truncate cleaned up
[   42.794383][ T4655] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   42.797409][ T4655] EXT4-fs (loop0): unmounting filesystem.
[   43.496413][ T4666] overlayfs: failed to resolve './bus': -2
[   43.603653][ T4663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.605776][ T4663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.821036][ T4665] set_capacity_and_notify: 1 callbacks suppressed
[   43.821046][ T4665] loop4: detected capacity change from 0 to 32768
[   43.931533][ T4665] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   43.967797][ T4333] ocfs2: Unmounting device (7,4) on (node local)
[   45.556193][ T4693] loop1: detected capacity change from 0 to 131072
[   45.578004][ T4702] loop4: detected capacity change from 0 to 32768
[   45.580804][ T4702] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9"
[   45.582963][ T4702] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)...
[   45.589037][ T4702] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: fatal: filesystem consistency error
[   45.589037][ T4702]   inode = 1 19
[   45.589037][ T4702]   function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 115
[   45.592236][ T4702] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: G:  s:SH n:2/13 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:6
[   45.594060][ T4702] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0:  H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xe0/0x2d4
[   45.595946][ T4702] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0:  I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[   45.597651][ T4702] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: about to withdraw this file system
[   45.599270][ T4702] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: Journal recovery skipped for jid 0 until next mount.
[   45.600919][ T4702] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: Glock dequeues delayed: 0
[   45.602386][ T4702] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: File system withdrawn
[   45.603605][ T4702] CPU: 1 PID: 4702 Comm: syz.4.68 Not tainted syzkaller #0
[   45.604632][ T4702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
[   45.605961][ T4702] Call trace:
[   45.606418][ T4702]  dump_backtrace+0x1c0/0x1ec
[   45.607082][ T4702]  show_stack+0x2c/0x3c
[   45.607661][ T4702]  __dump_stack+0x30/0x40
[   45.608282][ T4702]  dump_stack_lvl+0xf4/0x15c
[   45.608947][ T4702]  dump_stack+0x1c/0x5c
[   45.609542][ T4702]  gfs2_withdraw+0xfa4/0x1390
[   45.610234][ T4702]  gfs2_consist_inode_i+0xf0/0x10c
[   45.611001][ T4702]  gfs2_jdesc_check+0x12c/0x264
[   45.611799][ T4702]  init_journal+0xad8/0x1e94
[   45.612517][ T4702]  init_inodes+0xe0/0x2d4
[   45.613180][ T4702]  gfs2_fill_super+0x11c0/0x194c
[   45.613929][ T4702]  get_tree_bdev+0x358/0x544
[   45.614649][ T4702]  gfs2_get_tree+0x54/0x1b4
[   45.615357][ T4702]  vfs_get_tree+0x90/0x274
[   45.616040][ T4702]  do_new_mount+0x228/0x810
[   45.616726][ T4702]  path_mount+0x5bc/0xe80
[   45.617372][ T4702]  __arm64_sys_mount+0x49c/0x59c
[   45.618127][ T4702]  invoke_syscall+0x98/0x2b4
[   45.618796][ T4702]  el0_svc_common+0x138/0x258
[   45.619461][ T4702]  do_el0_svc+0x58/0x130
[   45.620079][ T4702]  el0_svc+0x58/0x128
[   45.620676][ T4702]  el0t_64_sync_handler+0x84/0xf0
[   45.621424][ T4702]  el0t_64_sync+0x18c/0x190
[   45.622194][ T4702] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: my journal (0) is bad: -5
[   45.699987][ T4693] F2FS-fs (loop1): Found nat_bits in checkpoint
[   45.722292][ T4713] overlayfs: failed to resolve './bus': -2
[   45.889293][ T4693] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   46.111664][ T4729] netlink: 48 bytes leftover after parsing attributes in process `syz.3.74'.
[   46.184608][ T4731] loop3: detected capacity change from 0 to 256
[   46.528257][ T4734] F2FS-fs (loop1): sanity_check_inode: corrupted inode i_blocks i_ino=6 iblocks=0, run fsck to fix.
[   47.430183][ T4748] loop3: detected capacity change from 0 to 512
[   47.454502][ T4748] EXT4-fs error (device loop3): ext4_iget_extra_inode:4756: inode #15: comm syz.3.81: corrupted in-inode xattr
[   47.456599][ T4748] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.81: couldn't read orphan inode 15 (err -117)
[   47.458623][ T4748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   47.470127][ T4748] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   47.476686][ T4748] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[   47.479132][ T4748] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.81: Corrupt directory, running e2fsck is recommended
[   47.510937][ T4321] EXT4-fs (loop3): unmounting filesystem.
[   47.660440][ T4756] x_tables: duplicate underflow at hook 1
[   48.058011][ T4759] overlayfs: failed to resolve './bus': -2
[   48.083879][ T4753] loop3: detected capacity change from 0 to 40427
[   48.097305][ T4753] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   48.098835][ T4753] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   48.102379][ T4753] F2FS-fs (loop3): invalid crc value
[   48.134514][ T4753] F2FS-fs (loop3): Found nat_bits in checkpoint
[   48.276122][ T4753] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   48.278978][ T4753] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   49.191503][ T4787] loop3: detected capacity change from 0 to 256
[   49.547679][ T4801] loop3: detected capacity change from 0 to 32768
[   49.551228][ T4801] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9"
[   49.553325][ T4801] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)...
[   49.556913][ T4801] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: fatal: filesystem consistency error
[   49.556913][ T4801]   inode = 1 19
[   49.556913][ T4801]   function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 115
[   49.560409][ T4801] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: G:  s:SH n:2/13 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:6
[   49.562146][ T4801] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0:  H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xe0/0x2d4
[   49.564373][ T4801] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0:  I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[   49.566415][ T4801] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: about to withdraw this file system
[   49.568031][ T4801] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: Journal recovery skipped for jid 0 until next mount.
[   49.569839][ T4801] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: Glock dequeues delayed: 0
[   49.572403][ T4801] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: File system withdrawn
[   49.573956][ T4801] CPU: 1 PID: 4801 Comm: syz.3.96 Not tainted syzkaller #0
[   49.575106][ T4801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
[   49.576644][ T4801] Call trace:
[   49.577143][ T4801]  dump_backtrace+0x1c0/0x1ec
[   49.577852][ T4801]  show_stack+0x2c/0x3c
[   49.578508][ T4801]  __dump_stack+0x30/0x40
[   49.579205][ T4801]  dump_stack_lvl+0xf4/0x15c
[   49.579912][ T4801]  dump_stack+0x1c/0x5c
[   49.580566][ T4801]  gfs2_withdraw+0xfa4/0x1390
[   49.581213][ T4801]  gfs2_consist_inode_i+0xf0/0x10c
[   49.581995][ T4801]  gfs2_jdesc_check+0x12c/0x264
[   49.582697][ T4801]  init_journal+0xad8/0x1e94
[   49.583373][ T4801]  init_inodes+0xe0/0x2d4
[   49.584034][ T4801]  gfs2_fill_super+0x11c0/0x194c
[   49.584756][ T4801]  get_tree_bdev+0x358/0x544
[   49.585464][ T4801]  gfs2_get_tree+0x54/0x1b4
[   49.586137][ T4801]  vfs_get_tree+0x90/0x274
[   49.586814][ T4801]  do_new_mount+0x228/0x810
[   49.587497][ T4801]  path_mount+0x5bc/0xe80
[   49.588098][ T4801]  __arm64_sys_mount+0x49c/0x59c
[   49.588807][ T4801]  invoke_syscall+0x98/0x2b4
[   49.589542][ T4801]  el0_svc_common+0x138/0x258
[   49.590195][ T4801]  do_el0_svc+0x58/0x130
[   49.590810][ T4801]  el0_svc+0x58/0x128
[   49.591405][ T4801]  el0t_64_sync_handler+0x84/0xf0
[   49.592120][ T4801]  el0t_64_sync+0x18c/0x190
[   49.593253][ T4801] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.0: my journal (0) is bad: -5
[   50.146550][ T4815] binder: 4813:4815 ioctl 40046210 0 returned -14
[   50.283039][ T4821] netlink: 36 bytes leftover after parsing attributes in process `syz.2.98'.
[   50.645904][ T4824] loop1: detected capacity change from 0 to 40427
[   50.651582][ T4824] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   50.653212][ T4824] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   50.658393][ T4824] F2FS-fs (loop1): invalid crc value
[   50.673914][ T4824] F2FS-fs (loop1): Found nat_bits in checkpoint
[   50.692120][ T4824] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   50.693297][ T4824] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   50.773074][ T4823] syz.1.102: attempt to access beyond end of device
[   50.773074][ T4823] loop1: rw=2049, sector=77824, nr_sectors = 1264 limit=40427
[   50.778994][ T4831] syz.1.102: attempt to access beyond end of device
[   50.778994][ T4831] loop1: rw=2049, sector=79088, nr_sectors = 8 limit=40427
[   50.810953][ T4824] syz.1.102: attempt to access beyond end of device
[   50.810953][ T4824] loop1: rw=2049, sector=79096, nr_sectors = 2048 limit=40427
[   50.822423][ T4824] syz.1.102: attempt to access beyond end of device
[   50.822423][ T4824] loop1: rw=2049, sector=81144, nr_sectors = 776 limit=40427
[   50.835783][ T4824] syz.1.102: attempt to access beyond end of device
[   50.835783][ T4824] loop1: rw=2049, sector=49152, nr_sectors = 664 limit=40427
[   50.950880][ T4830] loop4: detected capacity change from 0 to 40427
[   50.959701][ T4830] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   50.960841][ T4830] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   50.966230][ T4830] F2FS-fs (loop4): invalid crc value
[   50.978874][ T4834] netlink: 48 bytes leftover after parsing attributes in process `syz.2.104'.
[   50.979021][ T4830] F2FS-fs (loop4): Found nat_bits in checkpoint
[   51.004048][ T4830] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   51.007304][ T4830] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   51.097971][ T4844] loop2: detected capacity change from 0 to 512
[   51.099581][ T4844] EXT4-fs: Ignoring removed nomblk_io_submit option
[   51.102785][ T4844] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[   51.104868][ T4844] System zones: 0-2, 18-18, 34-34
[   51.106138][ T4844] EXT4-fs (loop2): orphan cleanup on readonly fs
[   51.108930][ T4844] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.107: bg 0: block 248: padding at end of block bitmap is not set
[   51.112843][ T4844] Quota error (device loop2): write_blk: dquota write failed
[   51.117186][ T4844] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   51.118745][ T4844] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.107: Failed to acquire dquot type 1
[   51.122290][ T4844] EXT4-fs (loop2): 1 truncate cleaned up
[   51.123513][ T4844] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   51.128478][ T4844] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[   51.146730][ T4323] EXT4-fs (loop2): unmounting filesystem.
[   51.336144][ T4851] No such timeout policy "syz1"
[   51.592309][ T4463] kworker/u4:9: attempt to access beyond end of device
[   51.592309][ T4463] loop1: rw=1, sector=49816, nr_sectors = 680 limit=40427
[   51.612681][ T4320] syz-executor: attempt to access beyond end of device
[   51.612681][ T4320] loop1: rw=2051, sector=77824, nr_sectors = 4096 limit=40427
[   51.617103][ T4320] F2FS-fs (loop1): Issue discard(9728, 9728, 512) failed, ret: -5
[   52.292638][ T4865] loop2: detected capacity change from 0 to 4096
[   52.305275][ T4865] EXT4-fs: Ignoring removed mblk_io_submit option
[   52.360665][ T4865] EXT4-fs (loop2): Test dummy encryption mode enabled
[   52.368577][ T4865] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   52.384706][ T4865] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[   52.432296][ T4323] EXT4-fs (loop2): unmounting filesystem.
[   52.458438][ T4875] netlink: 48 bytes leftover after parsing attributes in process `syz.0.115'.
[   53.299423][ T4890] loop2: detected capacity change from 0 to 40427
[   53.308280][ T4890] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   53.311732][ T4890] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   53.314668][ T4890] F2FS-fs (loop2): invalid crc value
[   53.319213][ T4890] F2FS-fs (loop2): Found nat_bits in checkpoint
[   53.389891][ T4911] process 'syz.1.124' launched '/dev/fd/6' with NULL argv: empty string added
[   53.657454][ T4890] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   53.658599][ T4890] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   53.719230][ T4917] loop1: detected capacity change from 0 to 512
[   53.725365][ T4917] EXT4-fs (loop1): fragment/cluster size (1024) != block size (2048)
[   54.762054][ T4946] loop3: detected capacity change from 0 to 1024
[   54.766146][ T4946] EXT4-fs: Ignoring removed bh option
[   54.805861][ T4946] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   54.899014][ T4958] loop2: detected capacity change from 0 to 2048
[   54.904399][ T4946] loop3: detected capacity change from 1024 to 0
[   54.913033][ T4958] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   54.930647][ T4321] EXT4-fs (loop3): unmounting filesystem.
[   55.152931][   T27] audit: type=1326 audit(55.130:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4957 comm="syz.2.139" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a975928 code=0x0
[   55.565229][ T4979] loop4: detected capacity change from 0 to 16
[   55.575157][ T4979] erofs: (device loop4): mounted with root inode @ nid 36.
[   55.584363][ T4979] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89
[   55.585802][ T4979] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89
[   55.599212][ T4330] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[   55.854861][ T4323] EXT4-fs (loop2): unmounting filesystem.
[   56.933470][ T4974] loop3: detected capacity change from 0 to 40427
[   56.947555][ T4974] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   56.949077][ T4974] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   56.957996][ T4974] F2FS-fs (loop3): invalid crc value
[   56.991170][ T4974] F2FS-fs (loop3): Found nat_bits in checkpoint
[   57.041612][ T4974] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   57.045098][ T4974] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   57.127910][ T4973] syz.3.141: attempt to access beyond end of device
[   57.127910][ T4973] loop3: rw=2049, sector=77824, nr_sectors = 192 limit=40427
[   57.139520][ T5001] syz.3.141: attempt to access beyond end of device
[   57.139520][ T5001] loop3: rw=2049, sector=78016, nr_sectors = 256 limit=40427
[   57.196842][ T5003] loop2: detected capacity change from 0 to 256
[   57.213423][ T5003] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   57.216358][ T5003] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   57.222492][ T5003] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   57.332024][ T5000] loop4: detected capacity change from 0 to 40427
[   57.412891][ T5000] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[   57.415857][ T5000] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   57.451653][ T5000] F2FS-fs (loop4): Found nat_bits in checkpoint
[   57.588765][ T5000] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   57.593152][ T5000] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   57.649537][ T4333] syz-executor: attempt to access beyond end of device
[   57.649537][ T4333] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   57.702613][ T5022] loop1: detected capacity change from 0 to 8192
[   58.648129][ T5039] loop2: detected capacity change from 0 to 40427
[   58.671500][ T5039] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   58.675258][ T5039] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   58.679269][ T5039] F2FS-fs (loop2): invalid crc value
[   58.696888][ T5039] F2FS-fs (loop2): Found nat_bits in checkpoint
[   58.726827][ T5039] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   58.728117][ T5039] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   58.840057][ T5050] loop3: detected capacity change from 0 to 256
[   58.855521][ T5050] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[   58.930406][ T5054] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   58.931891][ T5054] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[   58.933298][ T5054] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[   58.935257][ T5054] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[   58.937419][ T5054] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   58.939073][ T5054] EXT4-fs (loop1): orphan cleanup on readonly fs
[   58.940959][ T5054] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.168: bg 0: block 34: padding at end of block bitmap is not set
[   58.979869][ T5054] Quota error (device loop1): write_blk: dquota write failed
[   58.981110][ T5054] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   58.982684][ T5054] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.168: Failed to acquire dquot type 1
[   59.025103][ T5054] EXT4-fs (loop1): 1 truncate cleaned up
[   59.045535][ T5054] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   59.113770][ T4320] EXT4-fs (loop1): unmounting filesystem.
[   59.140238][ T5065] FAT-fs (loop4): Directory bread(block 64) failed
[   59.146559][ T5065] FAT-fs (loop4): Directory bread(block 65) failed
[   59.148819][ T5065] FAT-fs (loop4): Directory bread(block 66) failed
[   59.153163][ T5065] FAT-fs (loop4): Directory bread(block 67) failed
[   59.157089][ T5065] FAT-fs (loop4): Directory bread(block 68) failed
[   59.159124][ T5065] FAT-fs (loop4): Directory bread(block 69) failed
[   59.160466][ T5065] FAT-fs (loop4): Directory bread(block 70) failed
[   59.161577][ T5065] FAT-fs (loop4): Directory bread(block 71) failed
[   59.174068][ T5065] FAT-fs (loop4): Directory bread(block 72) failed
[   59.175295][ T5065] FAT-fs (loop4): Directory bread(block 73) failed
[   59.398377][ T5078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.399897][ T5078] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.615557][ T5080] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   59.616956][ T5080] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   59.618860][ T5080] F2FS-fs (loop2): invalid crc value
[   59.622201][ T5080] F2FS-fs (loop2): Found nat_bits in checkpoint
[   59.636082][ T5080] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   59.637324][ T5080] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   59.707841][ T5079] syz.2.175: attempt to access beyond end of device
[   59.707841][ T5079] loop2: rw=2049, sector=77824, nr_sectors = 808 limit=40427
[   59.712406][ T5087] syz.2.175: attempt to access beyond end of device
[   59.712406][ T5087] loop2: rw=2049, sector=78632, nr_sectors = 224 limit=40427
[   60.555950][ T5104] input: syz0 as /devices/virtual/input/input2
[   60.668932][ T5106] overlayfs: missing 'lowerdir'
[   60.872960][ T5111] binder: 5110:5111 tried to acquire reference to desc 0, got 1 instead
[   60.883586][ T5111] binder: 5110:5111 got transaction with invalid parent offset or type
[   60.911176][ T5111] binder: 5110:5111 transaction call to 5110:0 failed 5/29201/-22, size 80-24 line 3439
[   60.920404][   T14] binder: undelivered TRANSACTION_ERROR: 29201
[   61.526774][ T5136] set_capacity_and_notify: 3 callbacks suppressed
[   61.526791][ T5136] loop3: detected capacity change from 0 to 512
[   61.535266][ T5136] EXT4-fs: Ignoring removed oldalloc option
[   61.538966][ T5136] EXT4-fs (loop3): Test dummy encryption mode enabled
[   61.551018][ T5120] loop1: detected capacity change from 0 to 40427
[   61.560891][ T5120] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   61.564027][ T5120] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   61.568641][ T5136] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.192: inode #1: comm syz.3.192: iget: illegal inode #
[   61.573285][ T5120] F2FS-fs (loop1): invalid crc value
[   61.576343][ T5136] EXT4-fs (loop3): Remounting filesystem read-only
[   61.577491][ T5136] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.192: error while reading EA inode 1 err=-117
[   61.580555][ T5136] EXT4-fs (loop3): Remounting filesystem read-only
[   61.581920][ T5136] EXT4-fs (loop3): 1 orphan inode deleted
[   61.582958][ T5136] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   61.609675][ T5120] F2FS-fs (loop1): Found nat_bits in checkpoint
[   61.611962][ T5136] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.192: invalid indirect mapped block 234881024 (level 0)
[   61.619557][ T5136] EXT4-fs (loop3): Remounting filesystem read-only
[   61.631615][ T5120] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   61.632863][ T5120] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   61.637001][ T4321] EXT4-fs (loop3): unmounting filesystem.
[   61.682848][ T5144] loop3: detected capacity change from 0 to 128
[   61.687715][ T5146] overlayfs: missing 'lowerdir'
[   61.690788][ T5144] EXT4-fs (loop3): Test dummy encryption mode enabled
[   61.698417][ T5144] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   61.716866][ T5144] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce"
[   61.723773][ T5120] syz.1.186: attempt to access beyond end of device
[   61.723773][ T5120] loop1: rw=2049, sector=77824, nr_sectors = 128 limit=40427
[   61.784498][ T4321] EXT4-fs (loop3): unmounting filesystem.
[   62.421802][ T5176] loop2: detected capacity change from 0 to 1024
[   62.430941][ T5176] EXT4-fs: Ignoring removed nobh option
[   62.433086][ T5176] EXT4-fs: inline encryption not supported
[   62.435517][ T5176] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   62.456622][ T5176] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   62.499031][ T4323] EXT4-fs (loop2): unmounting filesystem.
[   62.532548][ T5182] overlayfs: missing 'lowerdir'
[   62.539787][ T5180] loop1: detected capacity change from 0 to 4096
[   62.547157][ T5180] EXT4-fs: Ignoring removed mblk_io_submit option
[   62.557890][ T5180] EXT4-fs (loop1): Test dummy encryption mode enabled
[   62.578494][ T5180] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   62.590402][ T5180] 
[   62.590889][ T5180] ======================================================
[   62.592095][ T5180] WARNING: possible circular locking dependency detected
[   62.593176][ T5180] syzkaller #0 Not tainted
[   62.593843][ T5180] ------------------------------------------------------
[   62.594920][ T5180] syz.1.204/5180 is trying to acquire lock:
[   62.595838][ T5180] ffff0000f5e685e8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x50/0x1c4
[   62.597198][ T5180] 
[   62.597198][ T5180] but task is already holding lock:
[   62.598256][ T5180] ffff0000e2b6aaa8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x7c4/0x1778
[   62.599753][ T5180] 
[   62.599753][ T5180] which lock already depends on the new lock.
[   62.599753][ T5180] 
[   62.601208][ T5180] 
[   62.601208][ T5180] the existing dependency chain (in reverse order) is:
[   62.602490][ T5180] 
[   62.602490][ T5180] -> #2 (&ei->i_data_sem/2){++++}-{3:3}:
[   62.603639][ T5180]        down_read+0x64/0x300
[   62.604317][ T5180]        ext4_map_blocks+0x278/0x1778
[   62.605092][ T5180]        ext4_getblk+0x178/0x664
[   62.605842][ T5180]        ext4_bread+0x3c/0x1a8
[   62.606559][ T5180]        ext4_quota_read+0x160/0x350
[   62.607357][ T5180]        find_tree_dqentry+0x174/0xc04
[   62.608152][ T5180]        find_tree_dqentry+0x4f8/0xc04
[   62.608986][ T5180]        find_tree_dqentry+0x4f8/0xc04
[   62.609775][ T5180]        find_tree_dqentry+0x4f8/0xc04
[   62.610623][ T5180]        qtree_read_dquot+0x49c/0x774
[   62.611472][ T5180]        v2_read_dquot+0xbc/0x118
[   62.612230][ T5180]        dquot_acquire+0x120/0x4d8
[   62.613012][ T5180]        ext4_acquire_dquot+0x270/0x428
[   62.613873][ T5180]        dqget+0x654/0xcc4
[   62.614561][ T5180]        __dquot_initialize+0x294/0xacc
[   62.615409][ T5180]        dquot_initialize+0x24/0x34
[   62.616168][ T5180]        ext4_process_orphan+0x5c/0x2b4
[   62.617048][ T5180]        ext4_orphan_cleanup+0x920/0x1060
[   62.617927][ T5180]        ext4_fill_super+0x6188/0x660c
[   62.618730][ T5180]        get_tree_bdev+0x358/0x544
[   62.619440][ T5180]        ext4_get_tree+0x28/0x38
[   62.620140][ T5180]        vfs_get_tree+0x90/0x274
[   62.620876][ T5180]        do_new_mount+0x228/0x810
[   62.621615][ T5180]        path_mount+0x5bc/0xe80
[   62.622437][ T5180]        __arm64_sys_mount+0x49c/0x59c
[   62.623292][ T5180]        invoke_syscall+0x98/0x2b4
[   62.624062][ T5180]        el0_svc_common+0x138/0x258
[   62.624828][ T5180]        do_el0_svc+0x58/0x130
[   62.625527][ T5180]        el0_svc+0x58/0x128
[   62.626196][ T5180]        el0t_64_sync_handler+0x84/0xf0
[   62.626997][ T5180]        el0t_64_sync+0x18c/0x190
[   62.627771][ T5180] 
[   62.627771][ T5180] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}:
[   62.629014][ T5180]        down_read+0x64/0x300
[   62.629757][ T5180]        v2_read_dquot+0x4c/0x118
[   62.630511][ T5180]        dquot_acquire+0x120/0x4d8
[   62.631350][ T5180]        ext4_acquire_dquot+0x270/0x428
[   62.632120][ T5180]        dqget+0x654/0xcc4
[   62.632798][ T5180]        __dquot_initialize+0x294/0xacc
[   62.633678][ T5180]        dquot_initialize+0x24/0x34
[   62.634456][ T5180]        ext4_process_orphan+0x5c/0x2b4
[   62.635248][ T5180]        ext4_orphan_cleanup+0x920/0x1060
[   62.636131][ T5180]        ext4_fill_super+0x6188/0x660c
[   62.636893][ T5180]        get_tree_bdev+0x358/0x544
[   62.637640][ T5180]        ext4_get_tree+0x28/0x38
[   62.638351][ T5180]        vfs_get_tree+0x90/0x274
[   62.639089][ T5180]        do_new_mount+0x228/0x810
[   62.639871][ T5180]        path_mount+0x5bc/0xe80
[   62.640543][ T5180]        __arm64_sys_mount+0x49c/0x59c
[   62.641336][ T5180]        invoke_syscall+0x98/0x2b4
[   62.642100][ T5180]        el0_svc_common+0x138/0x258
[   62.642865][ T5180]        do_el0_svc+0x58/0x130
[   62.643609][ T5180]        el0_svc+0x58/0x128
[   62.644270][ T5180]        el0t_64_sync_handler+0x84/0xf0
[   62.645066][ T5180]        el0t_64_sync+0x18c/0x190
[   62.645793][ T5180] 
[   62.645793][ T5180] -> #0 (&dquot->dq_lock){+.+.}-{3:3}:
[   62.646913][ T5180]        __lock_acquire+0x2880/0x6800
[   62.647712][ T5180]        lock_acquire+0x20c/0x63c
[   62.648419][ T5180]        __mutex_lock_common+0x190/0x1f60
[   62.649250][ T5180]        mutex_lock_nested+0x38/0x44
[   62.649987][ T5180]        dquot_commit+0x50/0x1c4
[   62.650734][ T5180]        ext4_write_dquot+0x1b4/0x31c
[   62.651500][ T5180]        ext4_mark_dquot_dirty+0xe8/0x140
[   62.652324][ T5180]        mark_all_dquot_dirty+0x108/0x424
[   62.653126][ T5180]        __dquot_alloc_space+0x560/0xce0
[   62.653932][ T5180]        ext4_mb_new_blocks+0xd48/0x4338
[   62.654746][ T5180]        ext4_ext_map_blocks+0x1394/0x56f4
[   62.655601][ T5180]        ext4_map_blocks+0x860/0x1778
[   62.656406][ T5180]        ext4_getblk+0x178/0x664
[   62.657094][ T5180]        ext4_bread+0x3c/0x1a8
[   62.657746][ T5180]        ext4_append+0x248/0x498
[   62.658435][ T5180]        ext4_init_new_dir+0x264/0x4f0
[   62.659210][ T5180]        ext4_mkdir+0x3c8/0xa1c
[   62.659910][ T5180]        vfs_mkdir+0x314/0x4d4
[   62.660590][ T5180]        do_mkdirat+0x1b8/0x3ec
[   62.661277][ T5180]        __arm64_sys_mkdirat+0x90/0xa8
[   62.662076][ T5180]        invoke_syscall+0x98/0x2b4
[   62.662818][ T5180]        el0_svc_common+0x138/0x258
[   62.663567][ T5180]        do_el0_svc+0x58/0x130
[   62.664258][ T5180]        el0_svc+0x58/0x128
[   62.664930][ T5180]        el0t_64_sync_handler+0x84/0xf0
[   62.665698][ T5180]        el0t_64_sync+0x18c/0x190
[   62.666426][ T5180] 
[   62.666426][ T5180] other info that might help us debug this:
[   62.666426][ T5180] 
[   62.667888][ T5180] Chain exists of:
[   62.667888][ T5180]   &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2
[   62.667888][ T5180] 
[   62.670050][ T5180]  Possible unsafe locking scenario:
[   62.670050][ T5180] 
[   62.671118][ T5180]        CPU0                    CPU1
[   62.671906][ T5180]        ----                    ----
[   62.672679][ T5180]   lock(&ei->i_data_sem/2);
[   62.673353][ T5180]                                lock(&s->s_dquot.dqio_sem);
[   62.674397][ T5180]                                lock(&ei->i_data_sem/2);
[   62.675449][ T5180]   lock(&dquot->dq_lock);
[   62.676088][ T5180] 
[   62.676088][ T5180]  *** DEADLOCK ***
[   62.676088][ T5180] 
[   62.677240][ T5180] 4 locks held by syz.1.204/5180:
[   62.677990][ T5180]  #0: ffff0000df982460 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c
[   62.679359][ T5180]  #1: ffff0000e2938e08 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x1b0/0x3a8
[   62.681006][ T5180]  #2: ffff0000e2b6aaa8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x7c4/0x1778
[   62.682449][ T5180]  #3: ffff80001550c848 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x10/0x4c
[   62.683770][ T5180] 
[   62.683770][ T5180] stack backtrace:
[   62.684594][ T5180] CPU: 0 PID: 5180 Comm: syz.1.204 Not tainted syzkaller #0
[   62.685704][ T5180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
[   62.687208][ T5180] Call trace:
[   62.687692][ T5180]  dump_backtrace+0x1c0/0x1ec
[   62.688358][ T5180]  show_stack+0x2c/0x3c
[   62.688975][ T5180]  __dump_stack+0x30/0x40
[   62.689652][ T5180]  dump_stack_lvl+0xf4/0x15c
[   62.690318][ T5180]  dump_stack+0x1c/0x5c
[   62.690899][ T5180]  print_circular_bug+0x148/0x1b0
[   62.691606][ T5180]  check_noncircular+0x264/0x2f8
[   62.692340][ T5180]  __lock_acquire+0x2880/0x6800
[   62.693021][ T5180]  lock_acquire+0x20c/0x63c
[   62.693675][ T5180]  __mutex_lock_common+0x190/0x1f60
[   62.694408][ T5180]  mutex_lock_nested+0x38/0x44
[   62.695078][ T5180]  dquot_commit+0x50/0x1c4
[   62.695720][ T5180]  ext4_write_dquot+0x1b4/0x31c
[   62.696457][ T5180]  ext4_mark_dquot_dirty+0xe8/0x140
[   62.697222][ T5180]  mark_all_dquot_dirty+0x108/0x424
[   62.697968][ T5180]  __dquot_alloc_space+0x560/0xce0
[   62.698714][ T5180]  ext4_mb_new_blocks+0xd48/0x4338
[   62.699444][ T5180]  ext4_ext_map_blocks+0x1394/0x56f4
[   62.700202][ T5180]  ext4_map_blocks+0x860/0x1778
[   62.700894][ T5180]  ext4_getblk+0x178/0x664
[   62.701533][ T5180]  ext4_bread+0x3c/0x1a8
[   62.702152][ T5180]  ext4_append+0x248/0x498
[   62.702773][ T5180]  ext4_init_new_dir+0x264/0x4f0
[   62.703501][ T5180]  ext4_mkdir+0x3c8/0xa1c
[   62.704138][ T5180]  vfs_mkdir+0x314/0x4d4
[   62.704751][ T5180]  do_mkdirat+0x1b8/0x3ec
[   62.705388][ T5180]  __arm64_sys_mkdirat+0x90/0xa8
[   62.706113][ T5180]  invoke_syscall+0x98/0x2b4
[   62.706769][ T5180]  el0_svc_common+0x138/0x258
[   62.707424][ T5180]  do_el0_svc+0x58/0x130
[   62.708032][ T5180]  el0_svc+0x58/0x128
[   62.708584][ T5180]  el0t_64_sync_handler+0x84/0xf0
[   62.709287][ T5180]  el0t_64_sync+0x18c/0x190
[   62.749501][ T5188] loop2: detected capacity change from 0 to 256
[   62.968921][ T4320] EXT4-fs (loop1): unmounting filesystem.
[   64.494357][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[   64.495480][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[   69.614049][ T1512] cfg80211: failed to load regulatory.db