last executing test programs:

6m13.505924106s ago: executing program 4 (id=84):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000003c0)=[<r4=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, <r5=>0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r5, r6, 0x6d, 0x2001, 0x2, 0x200, {0x200004, 0x5, 0x6, 0xe, 0x8000, 0x0, 0x6, 0x22, 0x9, 0x800, 0x7, 0x60b, 0x72, 0x700, "6f4f1b1330d057b30bd15586b7445443c515a97436419c2cd5ae7297dceeaabe"}})
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd)
getdents64(r7, &(0x7f0000000580)=""/166, 0xfe)
r8 = socket$kcm(0xa, 0x1, 0x106)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$kcm(r8, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001)
sendmsg$sock(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)}, 0x400c0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

6m12.723487734s ago: executing program 4 (id=87):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc0}}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x6, 0x10002)
bind$inet6(r2, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x1a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
lstat(&(0x7f0000000080)='./file0\x00', 0x0)
chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x13, {0x11, "8f997fa6ce8400a0286048c10b6b"}}]}, 0x30}}, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0xd)

6m9.395742328s ago: executing program 4 (id=91):
syz_open_dev$vim2m(0x0, 0x7, 0x2)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000dc0)={0xffffffff, 0x1, 0x1})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000380)='./file1\x00', 0xa)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r7=>r6}, './file1\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7, {0x223}}, './file1\x00'})

6m8.136583984s ago: executing program 4 (id=94):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x0, 0x2, 0x7fffffff, 0x84e1, 0xdd6c, 0x2006, 0x8, 0x8001, 0x80ffa, 0xffffffff, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x81, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]})

6m7.817187281s ago: executing program 4 (id=98):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40810)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x13)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$alg(r3, 0x0, 0x0, 0x40800)
sendfile(r2, r3, 0x0, 0x1)
recvmsg(r3, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000500)='./file0/../file0\x00', 0x2)

6m7.412462353s ago: executing program 4 (id=99):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0), 0x1, 0x560, &(0x7f00000003c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x4)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00')
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

5m51.692303301s ago: executing program 32 (id=99):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0), 0x1, 0x560, &(0x7f00000003c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x4)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00')
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

2m16.908354176s ago: executing program 5 (id=1119):
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092e1300833280102d52a00000001090222"], 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x8, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x3, 0x9}]}}}}}}}}, 0x0)

2m14.595654399s ago: executing program 5 (id=1128):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000)
read$char_usb(r2, &(0x7f0000001080)=""/169, 0xa9)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)

2m11.420999332s ago: executing program 5 (id=1140):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8)
r4 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r4, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0)

2m10.046099476s ago: executing program 5 (id=1148):
unshare(0x28000600)
unshare(0x2a020400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x8020000)

2m9.762257381s ago: executing program 5 (id=1150):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3200009, 0x0, 0x1, 0x0, 0x0)
mount$binder(0x0, 0x0, 0x0, 0x842080, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000040)='./file0\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

2m8.361634589s ago: executing program 5 (id=1155):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
setreuid(0xffffffffffffffff, 0xee01)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000)

1m52.993283426s ago: executing program 33 (id=1155):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
setreuid(0xffffffffffffffff, 0xee01)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000)

1m40.328089137s ago: executing program 2 (id=1294):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000003ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
sendto$packet(r0, 0x0, 0x0, 0x4044810, &(0x7f0000000280)={0x11, 0x88a8, r1, 0x1, 0x6, 0x6, @multicast}, 0x14)

1m40.260970264s ago: executing program 2 (id=1295):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x4080)
io_setup(0x3, &(0x7f0000000080)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0, 0x0, 0x3}])
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80001)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]})
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = fsopen(&(0x7f0000000340)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14<L\x19K\xbf\xf7\x9c\xe7 \x12+4.\xa9\xa7\xdc[\xd2\xec\xbe\x1a\xa1\x04\xd3\x9e\x92\x8a\xf7\xdb\xe7f\xdeo\xc1\xa5\xb6T\r)\x1c\xbe\x12\xd1\xef\xc2S\xcci\xc8\x0e\x00]\xe6|\xccK\xc7\r\xfa \x02\xe8\x1b\xc1\x93\xce\x02%\x86\xcb\x94K\v\xe7x\xe3\x06[/\xf9\xa8\x82\x9b\xeeF\x88\xc0f\x82\xb7T\r\x04\xbb\x10\x1d3\xa6', 0x0)

1m39.319455801s ago: executing program 2 (id=1300):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d"], 0x188}}], 0x1, 0x810)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd4", 0x80}, {0x0}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a30312713", 0x1a}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d5", 0x1f}], 0x5, 0x4d9e, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m37.394666288s ago: executing program 2 (id=1305):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x8, &(0x7f0000000040), 0x21, 0x505, &(0x7f0000000bc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000ac0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000300)='./bus\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000001980)=""/4111, 0x100f}], 0x1, 0x0, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)

1m35.113092266s ago: executing program 2 (id=1312):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cc, 0x301)
r0 = io_uring_setup(0x5780, &(0x7f0000000540)={0x0, 0x7dc6, 0x1, 0x50bfe, 0x81000150})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x800000, {0x0, 0x0, 0x0, r3}, [@IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

1m32.91793062s ago: executing program 2 (id=1323):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000002000000fe8000000000000000000000030000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000010000000000000000000043d10000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000001a00000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000000)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4)
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc)

1m32.335978088s ago: executing program 34 (id=1323):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000002000000fe8000000000000000000000030000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000010000000000000000000043d10000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000001a00000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000000)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4)
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc)

1m0.105485902s ago: executing program 0 (id=1501):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50, 0x0, 0x2000000000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f000000e0c0)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x90, 0x0, 0x0, {0x3, 0x0, 0x200001, 0x8, 0xb, 0x10002, {0x0, 0x4, 0x22, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x4000, 0x20000008, 0x0, 0xffffffffffffffff, 0x7, 0x10000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
close_range(r0, 0xffffffffffffffff, 0x0)

59.921720627s ago: executing program 0 (id=1502):
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x3)
socket$vsock_stream(0x28, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0)

59.788293131s ago: executing program 0 (id=1503):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000200025a729bd7000fddbdf250a0000cdff000001020001000800060000000000080018004e234e230c0014"], 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)

56.746764201s ago: executing program 0 (id=1513):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005"], 0x50}}, 0x4080)
io_setup(0x3, &(0x7f0000000080)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0, 0x0, 0x3}])
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80001)
r5 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]})
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = fsopen(&(0x7f0000000340)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14<L\x19K\xbf\xf7\x9c\xe7 \x12+4.\xa9\xa7\xdc[\xd2\xec\xbe\x1a\xa1\x04\xd3\x9e\x92\x8a\xf7\xdb\xe7f\xdeo\xc1\xa5\xb6T\r)\x1c\xbe\x12\xd1\xef\xc2S\xcci\xc8\x0e\x00]\xe6|\xccK\xc7\r\xfa \x02\xe8\x1b\xc1\x93\xce\x02%\x86\xcb\x94K\v\xe7x\xe3\x06[/\xf9\xa8\x82\x9b\xeeF\x88\xc0f\x82\xb7T\r\x04\xbb\x10\x1d3\xa6', 0x0)

55.437191157s ago: executing program 0 (id=1516):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r5], 0x20}}, 0x8080)

53.621587385s ago: executing program 0 (id=1522):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

42.383851049s ago: executing program 1 (id=1550):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440))
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000740)={0x2, 0x4001, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
sendto$inet(r1, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0)

41.407257259s ago: executing program 1 (id=1555):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0xdffd, 0x6ea00000, @remote, 0x4}, 0x1a)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)

36.856444326s ago: executing program 35 (id=1522):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

36.241176207s ago: executing program 1 (id=1564):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x19040)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@host, 0x2})
ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xffff, 0x1800}], 0x1f4, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

34.382787657s ago: executing program 1 (id=1570):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
capset(&(0x7f0000000980)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x9, 0x8000004, 0x7, 0x4})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@grpjquota}]}, 0x1, 0x3f7, &(0x7f0000000ac0)="$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")
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

33.485530773s ago: executing program 1 (id=1575):
open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x20)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)

31.297657899s ago: executing program 1 (id=1581):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0x4}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x0, 0x4, 0x40, 0xfffffc01, 0x0, 0x1, 0x25})
close(r0)

30.132256835s ago: executing program 36 (id=1581):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0x4}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x0, 0x4, 0x40, 0xfffffc01, 0x0, 0x1, 0x25})
close(r0)

16.052543337s ago: executing program 3 (id=1622):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

12.956108015s ago: executing program 3 (id=1627):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1}, 0x0)
close(r0)
sendmsg$tipc(r1, 0x0, 0x0)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241cf6ffffff070905810300020000000904010000020d00000904010102020d0000090582022000000000090503020002"], 0x0)
syz_usb_disconnect(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0)
close(0x3)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0xc, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})

9.052471328s ago: executing program 3 (id=1635):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

8.922472622s ago: executing program 8 (id=1637):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x80000000, 0xffff8000, 0x7fffffff, 0x8, 0x2816e2a0}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000180)=@xdp={0x2c, 0xa888, r6, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4)

7.8823388s ago: executing program 7 (id=1638):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891016000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
pwritev(r0, &(0x7f0000000540)=[{&(0x7f00000001c0)="6af1c46a", 0x4}, {0x0}], 0x2, 0x7f80000, 0xffff)
r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0xfa080, 0xc0)
fcntl$setownex(r1, 0xf, &(0x7f00000003c0))
io_uring_setup(0x53f1, &(0x7f00000001c0)={0x0, 0x8c52, 0x8, 0x2, 0x13b, 0x0, r0})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x8}}, 0x20)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]})
syz_open_dev$loop(0x0, 0x6, 0x20200)
close_range(r3, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4)

7.515306929s ago: executing program 9 (id=1583):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x10000001, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x84e56105723e644b}, @TCA_TBF_BURST={0x8, 0x6, 0x20000000}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x2, 0xa, 0x4}, {0x9c, 0x0, 0x7, 0x1, 0x6, 0x5}, 0x6, 0x71d, 0xa74}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)

7.46512321s ago: executing program 3 (id=1640):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

7.386641804s ago: executing program 8 (id=1641):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
fallocate(r3, 0x0, 0xfea000, 0x2000402)

6.074343479s ago: executing program 9 (id=1643):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0x21, 0x11, 0x10, 0x4, 0xe80, 0x7, 0x40}})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = io_uring_setup(0x3454, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)

6.042718503s ago: executing program 8 (id=1644):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1c5, &(0x7f0000000300)="$eJzs28uO0lAcx/FfWwrjeL9tXJm40I2Djm7cyQP4Au4IVEIsasQNxMT4KG59Ct7EF4BEd66s6aGQFoscYKBcvp9kZv7pmd85p6SHni4qAEfrhvntyJFvqiiKvtyX9PqVpFLBkwOwUZH+RACOlfez6BkAKMao5pl9wMCRfvz63BgmP77l/mFUc8fFiaRUvmyb/+qYv/dK0jCVryRdLty/fBvnHyqbv7Tk+Kcz+dMFOWeaH5//owfZ/GVJVyRdlXRN0nVJ8Sd9U9KtnPGbM+PftZw/sI746jtbN79GB/HqedMOgyd5jd7ivJ/kn+p7XnPqK2SQmy8n+XPrGefnn62YryT5s8b7sGmOuJl2d8V+ARtuwevfk35Hs+v/pX2+NF3/AJbV7fXf1sMw+NiNb7ammB6ZV/imqCQ9/O+f47tj6oish6AotDjJafIzV8umi/J2zjS+fe3CB25ZTFbtNscCcKiqnzofqt1e/3G7U28FreDd+fMXk8du81xenft0DmDPZTfnAAAAAAAAAAAAAABgH92WdGeVoO0LfgAAAAB2xsW+M+RL+rep6HMEAAAAAAAAAAAAAAAAAAAADsXfAAAA//+EMD9k")
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000b00)={[{@user_xattr}, {@nodioread_nolock}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})
chdir(&(0x7f00000001c0)='./file0\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x22043, 0x69)

6.041398793s ago: executing program 3 (id=1645):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}], 0x20)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendto$packet(r2, &(0x7f0000000580)='o', 0x1, 0x4, &(0x7f0000000180)={0x11, 0x8100, r4, 0x1, 0xe9, 0x6, @local}, 0x14)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./bus\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$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")
stat(&(0x7f0000000180)='./file1/file0\x00', 0x0)
llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x1b)
getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000000c0), &(0x7f0000000240)=0x4)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x3210052, &(0x7f0000000200)=ANY=[@ANYBLOB="6f726465723d72656c617865642c626172726965722c6e6f7265636f766572792c6f7290b2af967374726963742c6f726465723d7374726963742c63703d3078666666666666666666666666666666662c6f726465723d7374726963742c6572726f72733d636faa9a36f36e8d1e6e74696e75652c6e6f626172726965722c6e6f626172726965722c636f6e746578743d73797374656d5f752c646566636f6e746578743d726f6f", @ANYRESDEC=0xee00, @ANYBLOB=',mask=^MAY_EXEC,smackfsfloor=],,'], 0x1, 0xec5, &(0x7f0000007d00)="$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")

5.930032322s ago: executing program 7 (id=1646):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x32)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000240)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_NOTIFY_POLL(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x2, 0x14080001, 0x423, 0xee, 0x3, 0x1, 0x0, 0x0, 0x20, 0x6}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache'])
utime(&(0x7f0000000200)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0)

5.025411606s ago: executing program 6 (id=1647):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

5.020310485s ago: executing program 7 (id=1648):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x800)
r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd2(0x2, 0x1)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x5, 0x80a0000, 0x0, r4, 0x8})
syz_io_uring_setup(0x462b, &(0x7f0000000340)={0x0, 0x5ac0, 0x4000, 0x2, 0x14}, &(0x7f00000003c0), &(0x7f0000000400))
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000280)={0x2, 0x5000, 0x4, r4, 0x8})
dup2(r4, r3)

4.592483512s ago: executing program 7 (id=1649):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a00)={'wlan0\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14)

4.527402479s ago: executing program 6 (id=1650):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x4)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"})

4.42588898s ago: executing program 6 (id=1651):
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00)
r0 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0x6de6, 0x800, 0xfffffffe, 0xbfe00000}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", <r4=>0xffffffffffffffff})
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2202, 0x0)
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"6739669f274d13b691eb645b00e4f5b53e0ca34dd02ac6cdc67c5e3126628168", r4, <r6=>0xffffffffffffffff})
r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400", <r8=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100", <r9=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r9, <r10=>0xffffffffffffffff})
close(0x3)
ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r10})
io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300)

3.978093853s ago: executing program 8 (id=1652):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x30000004})
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e)

3.976882082s ago: executing program 3 (id=1653):
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)

3.865551001s ago: executing program 6 (id=1654):
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)

3.55158689s ago: executing program 7 (id=1655):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x6d2442)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
pipe(0x0)
readv(0xffffffffffffffff, &(0x7f00000002c0), 0x0)
unshare(0x20000400)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gretap0\x00', 0x0})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'rr\x00', 0x1, 0xa7e, 0x70}, 0x2c)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44)

2.52341231s ago: executing program 8 (id=1656):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffffd)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/73, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000)
write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0)

2.445714055s ago: executing program 7 (id=1657):
syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x810400, &(0x7f0000000040)=ANY=[], 0x0, 0x21e, &(0x7f00000002c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mkdir(&(0x7f0000000280)='./file0/file1\x00', 0xb)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
setns(r1, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)

1.553494162s ago: executing program 6 (id=1658):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000000040)=[{0x0}], 0x1, 0x4000, 0x0)

1.473288396s ago: executing program 8 (id=1659):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005"], 0x50}}, 0x4080)
io_setup(0x3, &(0x7f0000000080)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0, 0x0, 0x3}])
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80001)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = fsopen(&(0x7f0000000340)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14<L\x19K\xbf\xf7\x9c\xe7 \x12+4.\xa9\xa7\xdc[\xd2\xec\xbe\x1a\xa1\x04\xd3\x9e\x92\x8a\xf7\xdb\xe7f\xdeo\xc1\xa5\xb6T\r)\x1c\xbe\x12\xd1\xef\xc2S\xcci\xc8\x0e\x00]\xe6|\xccK\xc7\r\xfa \x02\xe8\x1b\xc1\x93\xce\x02%\x86\xcb\x94K\v\xe7x\xe3\x06[/\xf9\xa8\x82\x9b\xeeF\x88\xc0f\x82\xb7T\r\x04\xbb\x10\x1d3\xa6', 0x0)

420.134982ms ago: executing program 6 (id=1660):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x29a5, 0x5}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0xd0a, 0xbe63, 0xabe, 0x1}}]}, @TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
close(r3)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0xa888}], 0x2}, 0x4005)

0s ago: executing program 9 (id=1661):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x10)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0d0)
setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={0x0, 0xa}, 0x8)
pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="c0", 0x1, 0x80c60)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

rrors=continue. Quota mode: none.
[  282.503772][ T7123] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  282.575541][ T7127] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  282.599235][ T7127] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  282.984438][ T7141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.792'.
[  283.332779][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  283.344357][ T7139] usbtmc 3-1:16.0: Unable to send data, error -71
[  284.455547][ T1108] usb 3-1: USB disconnect, device number 10
[  284.655517][ T7170] loop2: detected capacity change from 0 to 128
[  285.059323][ T7170] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  285.305685][ T7170] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.667306][ T7177] loop5: detected capacity change from 0 to 128
[  285.966494][ T7177] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  286.471729][ T7177] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  286.617122][ T7176] netlink: 20 bytes leftover after parsing attributes in process `syz.5.804'.
[  286.838015][ T7193] overlayfs: failed to clone upperpath
[  288.391308][ T7223] kAFS: unable to lookup cell ''
[  289.470256][ T7236] loop2: detected capacity change from 0 to 8
[  289.730274][ T7246] loop3: detected capacity change from 0 to 128
[  289.883366][ T7246] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  289.894266][ T7246] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  289.909894][ T7246] netlink: 20 bytes leftover after parsing attributes in process `syz.3.824'.
[  290.160774][ T7254] device syzkaller0 entered promiscuous mode
[  290.812160][ T7257] loop3: detected capacity change from 0 to 164
[  291.455916][ T7275] kAFS: unable to lookup cell ''
[  292.392386][ T7283] loop5: detected capacity change from 0 to 128
[  292.484801][ T7283] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  292.517487][ T7290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.838'.
[  292.632419][ T7283] hpfs: filesystem error: improperly stopped
[  292.694005][ T7283] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  292.759137][ T7283] hpfs: You really don't want any checks? You are crazy...
[  292.962993][ T7283] hpfs: hpfs_map_sector(): read error
[  292.968557][ T7283] hpfs: code page support is disabled
[  292.995407][ T7283] hpfs: hpfs_map_4sectors(): unaligned read
[  293.001565][ T7283] hpfs: hpfs_map_4sectors(): unaligned read
[  293.064619][ T7283] hpfs: filesystem error: unable to find root dir
[  294.058185][ T7261] loop3: detected capacity change from 0 to 32768
[  294.491204][ T7321] kAFS: unable to lookup cell ''
[  294.918061][ T7341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.851'.
[  300.499144][ T7385] loop1: detected capacity change from 0 to 164
[  300.533568][ T7383] overlayfs: failed to clone lowerpath
[  300.815279][ T7398] loop2: detected capacity change from 0 to 1024
[  301.251176][ T7407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.867'.
[  303.139510][ T7426] loop5: detected capacity change from 0 to 128
[  303.376209][ T7426] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  303.741362][ T7426] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.428500][ T7489] loop3: detected capacity change from 0 to 128
[  309.554576][ T7489] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  309.592767][   T13] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  309.664119][ T7489] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.898931][ T7474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.887'.
[  310.070964][   T13] usb 6-1: Using ep0 maxpacket: 32
[  310.193606][   T13] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  310.212689][   T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.269375][   T13] usb 6-1: config 0 descriptor??
[  310.405188][   T13] as10x_usb: device has been detected
[  310.411242][   T13] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  310.543686][   T13] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  310.709907][   T13] as10x_usb: error during firmware upload part1
[  310.793143][   T13] Registered device nBox DVB-T Dongle
[  310.796980][   T13] usb 6-1: USB disconnect, device number 3
[  311.067865][ T7505] loop3: detected capacity change from 0 to 4096
[  311.508864][   T13] Unregistered device nBox DVB-T Dongle
[  311.510302][   T13] as10x_usb: device has been disconnected
[  311.584106][ T7508] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  311.649943][ T7510] loop2: detected capacity change from 0 to 256
[  311.729704][ T7505] syz.3.896 (7505) used greatest stack depth: 19504 bytes left
[  311.816504][ T7510] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  312.433484][ T7513] loop1: detected capacity change from 0 to 131072
[  312.564566][ T7516] kAFS: unable to lookup cell ''
[  312.586562][ T7513] F2FS-fs (loop1): invalid crc value
[  312.671450][ T7513] F2FS-fs (loop1): Found nat_bits in checkpoint
[  312.711830][ T7513] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  312.769189][ T7513] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  316.717205][ T7568] netlink: 'syz.2.914': attribute type 1 has an invalid length.
[  316.758967][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'.
[  316.809843][ T7568] nbd: illegal input index 65544
[  317.503827][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  317.518856][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  318.196930][ T7585] kAFS: unable to lookup cell ''
[  319.002351][ T7595] loop3: detected capacity change from 0 to 128
[  319.099785][ T7600] loop2: detected capacity change from 0 to 128
[  319.228822][ T7600] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  319.243407][ T7600] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  319.329383][ T7595] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  319.404983][ T7595] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  319.544191][ T7595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.918'.
[  321.822015][ T7641] kAFS: unable to lookup cell ''
[  323.080083][ T7662] loop1: detected capacity change from 0 to 256
[  323.161351][ T7662] FAT-fs (loop1): Directory bread(block 64) failed
[  323.179194][ T7662] FAT-fs (loop1): Directory bread(block 65) failed
[  323.202006][ T7662] FAT-fs (loop1): Directory bread(block 66) failed
[  323.256040][ T7662] FAT-fs (loop1): Directory bread(block 67) failed
[  323.280404][ T7662] FAT-fs (loop1): Directory bread(block 68) failed
[  323.315323][ T7662] FAT-fs (loop1): Directory bread(block 69) failed
[  323.329454][ T7662] FAT-fs (loop1): Directory bread(block 70) failed
[  323.339030][ T7662] FAT-fs (loop1): Directory bread(block 71) failed
[  323.356568][ T7662] FAT-fs (loop1): Directory bread(block 72) failed
[  323.389030][ T7662] FAT-fs (loop1): Directory bread(block 73) failed
[  324.433484][ T7685] loop1: detected capacity change from 0 to 128
[  324.449485][ T7683] kAFS: unable to lookup cell ''
[  324.522847][ T7685] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  324.542778][ T7685] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.625134][ T7707] loop2: detected capacity change from 0 to 128
[  326.703097][ T7704] loop3: detected capacity change from 0 to 131072
[  327.250688][ T7707] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  327.262751][ T7707] ext4 filesystem being mounted at /195/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  327.299957][ T7707] netlink: 20 bytes leftover after parsing attributes in process `syz.2.955'.
[  327.373239][ T7704] F2FS-fs (loop3): invalid crc value
[  327.596405][ T7704] F2FS-fs (loop3): Found nat_bits in checkpoint
[  327.662600][ T7704] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  327.946359][ T7704] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  328.456118][ T7733] loop5: detected capacity change from 0 to 128
[  328.547093][ T7733] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  328.581143][ T7733] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  329.543953][ T7757] loop1: detected capacity change from 0 to 4096
[  329.728502][ T7762] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  329.743029][   T26] audit: type=1800 audit(1772684383.398:53): pid=7757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.968" name="file1" dev="loop1" ino=15 res=0 errno=0
[  329.832156][ T7759] loop3: detected capacity change from 0 to 8192
[  329.879460][ T7767] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[  329.930736][ T7764] overlayfs: failed to get inode (-116)
[  329.949616][ T7759] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  329.953570][ T7764] overlayfs: failed to get inode (-116)
[  329.960428][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.972'.
[  330.023839][ T7759] REISERFS (device loop3): using ordered data mode
[  330.082635][ T7759] reiserfs: using flush barriers
[  330.120034][ T7767] Remounting filesystem read-only
[  330.152826][ T7759] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  330.188775][ T7759] REISERFS (device loop3): checking transaction log (loop3)
[  330.346829][ T7759] REISERFS (device loop3): Using r5 hash to sort names
[  330.573764][ T7759] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  330.912645][ T7759] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  330.959010][   T26] audit: type=1800 audit(1772684384.608:54): pid=7759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.969" name="file1" dev="loop3" ino=4 res=0 errno=0
[  330.971941][ T7759] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  330.999660][ T7777] loop5: detected capacity change from 0 to 512
[  331.071700][ T7780] kAFS: unable to lookup cell ''
[  331.269960][ T4185] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  331.308293][ T7777] EXT4-fs (loop5): Ignoring removed orlov option
[  331.375577][ T7759] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  331.454257][ T7777] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  331.521515][ T7777] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  331.682761][   T13] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  333.019006][   T13] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  333.048471][   T13] usb 2-1: config 0 has no interface number 0
[  333.078945][   T13] usb 2-1: config 0 interface 41 has no altsetting 0
[  333.291392][   T13] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  333.310200][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.328818][   T13] usb 2-1: Product: syz
[  333.349071][   T13] usb 2-1: Manufacturer: syz
[  333.354127][   T13] usb 2-1: SerialNumber: syz
[  333.371401][   T13] usb 2-1: config 0 descriptor??
[  333.467948][ T7831] kAFS: unable to lookup cell ''
[  333.941043][ T7846] loop3: detected capacity change from 0 to 128
[  334.015958][ T7846] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  334.042874][ T7846] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.055075][ T7850] loop5: detected capacity change from 0 to 128
[  334.234069][ T7850] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  334.332732][   T13] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  334.332913][ T7850] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.957193][   T13] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  335.192651][   T13] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  335.203768][   T13] CoreChips: probe of 2-1:0.41 failed with error -71
[  335.214556][   T13] usb 2-1: USB disconnect, device number 4
[  336.052414][ T7869] kAFS: unable to lookup cell ''
[  336.268326][ T7871] overlayfs: failed to clone upperpath
[  337.247238][ T5343] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  337.274588][ T7858] loop3: detected capacity change from 0 to 32768
[  337.491772][ T7895] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  337.522608][ T5343] usb 3-1: Using ep0 maxpacket: 32
[  337.643935][ T5343] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  337.652583][ T5343] usb 3-1: config 0 has no interface number 0
[  337.682723][ T5343] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  337.709434][ T5343] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  337.800773][ T7903] overlayfs: failed to get inode (-116)
[  337.834021][ T7903] overlayfs: failed to get inode (-116)
[  337.911005][ T5343] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  337.938887][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.957837][ T5343] usb 3-1: Product: syz
[  337.962228][ T5343] usb 3-1: Manufacturer: syz
[  337.978191][ T5343] usb 3-1: SerialNumber: syz
[  337.999418][ T5343] usb 3-1: config 0 descriptor??
[  338.159378][ T7909] kAFS: unable to lookup cell ''
[  338.165735][ T7911] device syzkaller1 entered promiscuous mode
[  338.272707][ T5351] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  338.340499][ T7916] loop3: detected capacity change from 0 to 128
[  338.401797][ T7907] loop5: detected capacity change from 0 to 40427
[  338.428201][ T7916] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  338.452865][ T7916] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  338.496714][ T7907] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff
[  338.514031][ T5343] radio-si470x 3-1:0.35: DeviceID=0xc804 ChipID=0x81c4
[  338.523589][ T7907] F2FS-fs (loop5): invalid crc value
[  338.552781][ T5351] usb 2-1: Using ep0 maxpacket: 32
[  338.648797][ T7907] F2FS-fs (loop5): Found nat_bits in checkpoint
[  338.683018][ T5351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.783102][ T5343] radio-si470x 3-1:0.35: software version 200, hardware version 4
[  338.864554][ T5351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.013118][ T5343] radio-si470x 3-1:0.35: si470x_set_report: usb_control_msg returned -71
[  339.086477][ T5343] radio-si470x 3-1:0.35: submitting int urb failed (-90)
[  339.086522][ T5351] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  339.133058][ T5343] radio-si470x 3-1:0.35: si470x_set_report: usb_control_msg returned -71
[  339.200737][ T7907] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  339.280107][ T5343] radio-si470x: probe of 3-1:0.35 failed with error -22
[  339.391376][ T5351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.446290][ T7907] F2FS-fs (loop5): Unexpected flush for atomic writes: ino=10, npages=1
[  339.479470][ T7907] attempt to access beyond end of device
[  339.479470][ T7907] loop5: rw=2049, want=45104, limit=40427
[  339.538780][ T5343] radio-raremono 3-1:0.35: this is not Thanko's Raremono.
[  339.542806][ T7907] attempt to access beyond end of device
[  339.542806][ T7907] loop5: rw=2049, want=77952, limit=40427
[  339.554543][ T5351] usb 2-1: config 0 descriptor??
[  339.626423][ T5343] usb 3-1: USB disconnect, device number 11
[  339.633874][ T7907] attempt to access beyond end of device
[  339.633874][ T7907] loop5: rw=2049, want=45104, limit=40427
[  339.700128][ T7929] loop2: detected capacity change from 0 to 1024
[  339.758719][ T4805] attempt to access beyond end of device
[  339.758719][ T4805] loop5: rw=2049, want=45112, limit=40427
[  339.978570][ T4290] hfsplus: b-tree write err: -5, ino 25
[  339.987455][ T4290] hfsplus: b-tree write err: -5, ino 4
[  339.999420][ T4290] hfsplus: b-tree write err: -5, ino 2
[  340.042358][ T4290] hfsplus: b-tree write err: -5, ino 26
[  340.051598][ T5351] koneplus 0003:1E7D:2D51.0002: item fetching failed at offset 3/5
[  340.064685][ T5351] koneplus 0003:1E7D:2D51.0002: parse failed
[  340.080113][ T5351] koneplus: probe of 0003:1E7D:2D51.0002 failed with error -22
[  340.184996][ T7936] loop2: detected capacity change from 0 to 128
[  340.256683][ T5351] usb 2-1: USB disconnect, device number 5
[  340.305747][ T7936] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  340.325540][ T7936] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  340.560507][ T7948] kAFS: unable to lookup cell ''
[  340.616844][ T7951] loop5: detected capacity change from 0 to 512
[  340.846184][ T7951] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  341.273290][ T5352] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  341.277623][ T7951] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  341.288045][ T7958] overlayfs: upper fs does not support file handles, falling back to index=off.
[  341.303512][ T7951] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  341.563068][ T5352] usb 4-1: Using ep0 maxpacket: 16
[  341.722872][ T5351] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  341.873569][ T5352] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  341.938048][ T5352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.082642][ T5351] usb 3-1: Using ep0 maxpacket: 16
[  342.208971][ T5352] usb 4-1: Product: syz
[  342.253560][ T5351] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  342.309667][ T5352] usb 4-1: Manufacturer: syz
[  342.325559][ T5351] usb 3-1: config 1 has no interface number 0
[  342.342696][ T5352] usb 4-1: SerialNumber: syz
[  342.347713][ T5351] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  342.366956][ T5352] usb 4-1: config 0 descriptor??
[  342.377294][ T5351] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  342.392045][ T5351] usb 3-1: config 1 interface 105 has no altsetting 0
[  342.431833][ T5352] gspca_main: spca508-2.14.0 probing 041e:4018
[  342.572876][ T5351] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  342.592351][ T5351] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  342.611278][ T5351] usb 3-1: Product: syz
[  342.615753][ T5351] usb 3-1: Manufacturer: syz
[  342.620476][ T5351] usb 3-1: SerialNumber: syz
[  342.652826][ T5352] gspca_spca508: reg_read err -32
[  342.683238][ T7961] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  342.691484][ T7961] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  342.708679][ T5352] gspca_spca508: reg_read err -32
[  342.760035][ T5352] gspca_spca508: reg_read err -32
[  342.812911][ T5352] gspca_spca508: reg_read err -32
[  342.852744][ T5352] gspca_spca508: reg_read err -32
[  342.875992][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  342.915154][ T7985] overlayfs: failed to clone upperpath
[  343.023581][ T7991] loop1: detected capacity change from 0 to 128
[  343.122681][ T5352] gspca_spca508: reg write: error -71
[  343.147254][ T5352] spca508: probe of 4-1:0.0 failed with error -71
[  343.172763][ T5352] usb 4-1: USB disconnect, device number 5
[  343.193036][ T7961] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  343.200434][ T7961] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  343.489424][ T7988] kAFS: unable to lookup cell ''
[  343.513943][ T7991] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  343.525167][ T7991] ext4 filesystem being mounted at /177/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  343.542123][ T7991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1039'.
[  343.992793][ T5351] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  344.107594][ T5351] aqc111 3-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f8:29:70:c6:36:f5
[  344.350392][ T4230] usb 3-1: USB disconnect, device number 12
[  344.373104][ T4230] aqc111 3-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  344.575852][ T4230] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  344.602659][ T4230] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  344.649272][ T4230] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  345.695657][ T8060] kAFS: unable to lookup cell ''
[  345.938595][ T8071] overlayfs: failed to clone upperpath
[  346.237046][ T8076] loop5: detected capacity change from 0 to 128
[  346.372754][ T8076] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  346.394692][ T8076] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  346.496689][ T8046] loop2: detected capacity change from 0 to 32768
[  347.324090][ T8046] JBD2: Ignoring recovery information on journal
[  347.599912][ T8046] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  347.615859][ T8104] loop5: detected capacity change from 0 to 512
[  347.784539][ T8104] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  347.917117][ T8104] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  347.941191][ T8064] loop3: detected capacity change from 0 to 40427
[  347.984791][ T8046] (syz.2.1060,8046,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options
[  348.041696][ T8104] EXT4-fs (loop5): re-mounted. Opts: . Quota mode: writeback.
[  348.116646][ T8064] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff
[  348.181934][ T8123] loop1: detected capacity change from 0 to 512
[  348.196412][ T8064] F2FS-fs (loop3): invalid crc value
[  348.343112][ T8123] EXT4-fs (loop1): Ignoring removed bh option
[  348.395650][ T8064] F2FS-fs (loop3): Found nat_bits in checkpoint
[  348.427361][ T4198] ocfs2: Unmounting device (7,2) on (node local)
[  348.456712][ T8123] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  348.542861][ T8123] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  348.920323][ T8134] loop2: detected capacity change from 0 to 1024
[  349.046232][ T8134] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  349.123262][ T8134] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  349.245904][ T8134] EXT4-fs (loop2): shut down requested (2)
[  349.387701][ T8128] loop5: detected capacity change from 0 to 32768
[  349.520642][ T8128] XFS (loop5): Mounting V5 Filesystem
[  350.301801][ T8128] XFS (loop5): Ending clean mount
[  350.748994][ T8173] loop3: detected capacity change from 0 to 128
[  350.893291][ T8173] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  350.908405][   T26] audit: type=1800 audit(1772684404.568:55): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1081" name="file1" dev="loop5" ino=9286 res=0 errno=0
[  350.962271][ T8173] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  351.113429][   T26] audit: type=1800 audit(1772684404.758:56): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1081" name="file1" dev="loop5" ino=9286 res=0 errno=0
[  351.841585][ T4805] XFS (loop5): Unmounting Filesystem
[  352.007071][ T8185] loop2: detected capacity change from 0 to 128
[  352.422163][ T8185] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  352.572243][ T8185] ext4 filesystem being mounted at /212/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  352.928326][ T8159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1085'.
[  353.221597][ T8197] kAFS: unable to lookup cell ''
[  354.132784][ T8204] loop5: detected capacity change from 0 to 128
[  354.241964][ T8204] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  354.312066][ T8204] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  355.367565][ T8220] loop2: detected capacity change from 0 to 128
[  355.523089][ T8220] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  355.614168][ T8220] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  355.661576][ T8225] kAFS: unable to lookup cell ''
[  356.625258][ T8237] loop1: detected capacity change from 0 to 128
[  356.745061][ T8237] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  356.768682][ T8237] System zones: 1-3, 19-19, 35-36
[  356.777185][ T8237] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback.
[  356.850063][ T8237] ext4 filesystem being mounted at /194/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  357.033826][ T8254] loop2: detected capacity change from 0 to 128
[  357.090707][ T8254] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  357.104001][ T8254] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  357.872660][ T5352] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  358.174735][ T5352] usb 6-1: Using ep0 maxpacket: 8
[  358.268889][ T8280] loop2: detected capacity change from 0 to 128
[  358.292812][ T5352] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  358.314519][ T5352] usb 6-1: config 0 has no interfaces?
[  358.325844][ T5352] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  358.338990][ T5352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.344768][ T8280] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  358.380255][ T5352] usb 6-1: config 0 descriptor??
[  358.542846][ T8280] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  358.837887][ T4226] usb 6-1: USB disconnect, device number 4
[  359.207555][ T8285] loop1: detected capacity change from 0 to 4096
[  359.273650][ T8285] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  359.343646][ T8285] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing.
[  359.411210][ T8285] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  359.424698][ T8285] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  359.518712][ T8285] ntfs: volume version 3.1.
[  359.541096][ T8285] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  359.572398][ T8285] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  359.638720][ T8285] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  359.738197][ T8285] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  359.777828][ T8285] ntfs: (device loop1): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5.
[  359.778130][ T5351] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  359.849806][ T8302] loop3: detected capacity change from 0 to 128
[  359.920221][ T8302] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  359.936782][ T8302] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  360.112818][ T5351] usb 6-1: Using ep0 maxpacket: 8
[  360.244023][ T5351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  360.389235][ T5351] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  360.603122][ T5351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.884975][ T5351] usb 6-1: config 0 descriptor??
[  361.136866][ T5351] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  361.242083][ T8317] loop1: detected capacity change from 0 to 128
[  361.471950][ T8317] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  361.492977][ T8317] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  361.542377][ T8323] loop3: detected capacity change from 0 to 128
[  361.815527][ T5340] usb 6-1: USB disconnect, device number 5
[  362.211515][ T8323] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  362.313577][ T8323] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  363.411857][ T8345] loop2: detected capacity change from 0 to 128
[  363.510626][ T8345] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  363.562945][ T8345] ext4 filesystem being mounted at /222/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  364.229435][ T8367] kAFS: unable to lookup cell ''
[  365.057992][ T8371] loop5: detected capacity change from 0 to 1024
[  365.147943][ T8371] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  365.261841][ T8377] loop3: detected capacity change from 0 to 128
[  365.313323][ T8371] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none.
[  365.472870][ T8377] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  365.480888][ T8377] System zones: 1-3, 19-19, 35-36
[  365.554332][ T8377] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback.
[  365.578086][ T8377] ext4 filesystem being mounted at /195/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  365.598703][ T8381] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  365.662800][ T8381] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  365.890321][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  366.000659][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  366.011399][ T8395] loop2: detected capacity change from 0 to 1024
[  366.108514][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  366.162951][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  366.204114][ T8395] EXT4-fs (loop2): Ignoring removed bh option
[  366.218480][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  366.277969][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  366.300001][ T8395] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  366.402856][ T8395] EXT4-fs (loop2): shut down requested (1)
[  366.456981][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  366.566133][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  366.721246][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  366.791436][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  366.869768][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  366.930621][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  367.035495][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  367.092922][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  367.219379][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  367.258662][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  367.335809][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  367.382112][ T8431] kAFS: unable to lookup cell ''
[  367.407682][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  367.474935][ T8418] loop2: detected capacity change from 0 to 32768
[  367.546589][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  367.570348][ T8438] loop3: detected capacity change from 0 to 128
[  367.578438][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  367.589131][ T8439] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1173'.
[  367.624594][ T8439] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.633525][ T8439] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.680662][ T8439] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1173'.
[  367.682421][ T8438] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  367.743806][ T8418] XFS (loop2): Mounting V5 Filesystem
[  367.759058][ T8438] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  368.000732][ T8418] XFS (loop2): Ending clean mount
[  369.145003][ T8477] kAFS: unable to lookup cell ''
[  369.334189][ T4198] XFS (loop2): Unmounting Filesystem
[  369.741287][ T8497] loop1: detected capacity change from 0 to 128
[  369.883649][ T8497] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  369.962834][ T8497] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  370.179920][ T8504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1194'.
[  371.261036][ T4805] EXT4-fs error: 21 callbacks suppressed
[  371.261058][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  371.368242][ T8510] loop2: detected capacity change from 0 to 512
[  371.446134][ T4805] EXT4-fs: 21 callbacks suppressed
[  371.446154][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  371.470694][ T8513] xt_hashlimit: size too large, truncated to 1048576
[  371.481834][ T8513] xt_hashlimit: max too large, truncated to 1048576
[  371.547828][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  371.590886][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  371.630549][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  371.652417][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  371.716003][ T8510] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated!
[  371.755214][ T8510] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota
[  371.758193][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  371.785948][ T8510] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.1186: Failed to acquire dquot type 0
[  371.797643][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  371.850850][ T8510] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1186: bg 0: block 64: padding at end of block bitmap is not set
[  371.890163][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  371.921095][ T8510] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem
[  371.939816][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  371.960880][ T8510] EXT4-fs (loop2): 1 truncate cleaned up
[  371.977722][ T8510] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  371.997740][ T8510] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  371.998606][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  372.028339][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  372.089704][ T8510] syzkaller0: tun_chr_ioctl cmd 1074025677
[  372.099417][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  372.106838][ T8510] syzkaller0: linktype set to 776
[  372.123172][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  372.141880][ T8519] syzkaller0: tun_chr_ioctl cmd 1074812118
[  372.169608][ T8510] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.1186: iget: bad i_size value: 360287970189639690
[  372.197301][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  372.204329][ T8518] loop1: detected capacity change from 0 to 32768
[  372.241786][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  372.285591][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  372.312913][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  372.317764][ T8518] XFS (loop1): Mounting V5 Filesystem
[  372.367696][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  372.393056][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  372.595981][ T8518] XFS (loop1): Ending clean mount
[  372.855755][ T8542] kAFS: unable to lookup cell ''
[  373.862405][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'.
[  374.321035][ T4185] XFS (loop1): Unmounting Filesystem
[  374.966522][ T8570] loop2: detected capacity change from 0 to 8192
[  375.561435][ T8582] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  375.600667][ T8582] FAT-fs (loop2): Filesystem has been set read-only
[  376.009041][ T8588] loop3: detected capacity change from 0 to 32768
[  376.140093][ T8588] XFS (loop3): Mounting V5 Filesystem
[  376.185475][ T8599] kAFS: unable to lookup cell ''
[  376.302018][ T4805] EXT4-fs error: 33 callbacks suppressed
[  376.302040][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  376.352851][ T8604] loop1: detected capacity change from 0 to 128
[  376.388576][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  376.463765][ T8604] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  376.473187][ T8588] XFS (loop3): Ending clean mount
[  376.483763][ T8604] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  376.496788][ T8610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1224'.
[  376.519089][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  376.586145][ T4805] EXT4-fs: 35 callbacks suppressed
[  376.586164][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  376.685173][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  376.748879][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  376.812004][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  376.845311][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  376.988983][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  377.068586][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  377.164558][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  377.222857][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  377.248826][ T4190] XFS (loop3): Unmounting Filesystem
[  377.396995][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  377.458200][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  377.585557][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  377.640623][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  377.812913][ T4805] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  377.893140][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  377.963614][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  378.081187][ T4805] EXT4-fs (loop5): Remounting filesystem read-only
[  378.706562][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  378.728414][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  379.291459][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1230'.
[  380.335769][ T8653] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  380.461885][ T4805] bridge0: port 3(syz_tun) entered disabled state
[  380.491621][ T4805] device syz_tun left promiscuous mode
[  380.510507][ T4805] bridge0: port 3(syz_tun) entered disabled state
[  381.251260][ T8660] 8021q: adding VLAN 0 to HW filter on device bond1
[  381.316080][ T5351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.327086][ T8660] bond0: (slave bond1): Enslaving as an active interface with an up link
[  381.362969][ T8664] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1242'.
[  381.473825][ T8666] loop2: detected capacity change from 0 to 128
[  382.608579][ T8664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  382.642263][ T8666] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  382.653279][ T8666] ext4 filesystem being mounted at /237/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  382.736342][ T8674] VFS: Lookup of 'binder0' in fuse fuse would have caused loop
[  382.769573][ T8664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  382.781965][ T8677] xt_hashlimit: size too large, truncated to 1048576
[  382.815693][ T8664] bond0 (unregistering): (slave bond1): Releasing backup interface
[  382.832032][ T8677] xt_hashlimit: max too large, truncated to 1048576
[  382.873584][ T8664] bond0 (unregistering): Released all slaves
[  382.923137][ T8665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1243'.
[  383.063737][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1246'.
[  383.416827][ T8673] chnl_net:caif_netlink_parms(): no params data found
[  383.713968][ T8673] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.722043][ T8673] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.733325][ T8673] device bridge_slave_0 entered promiscuous mode
[  383.744078][ T8673] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.751250][ T8673] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.760757][ T8673] device bridge_slave_1 entered promiscuous mode
[  383.858641][ T8673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.896311][ T8712] netlink: 'syz.3.1253': attribute type 8 has an invalid length.
[  383.909124][ T8673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  384.101720][ T8673] team0: Port device team_slave_0 added
[  384.142803][ T8673] team0: Port device team_slave_1 added
[  384.254477][ T8673] batman_adv: batadv0: Adding interface: batadv_slave_0
[  384.291029][ T8673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  384.397313][ T8673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  384.451355][ T8673] batman_adv: batadv0: Adding interface: batadv_slave_1
[  384.489421][ T8673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  384.640865][ T8673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  384.706136][ T8727] xt_hashlimit: size too large, truncated to 1048576
[  384.753390][ T8727] xt_hashlimit: max too large, truncated to 1048576
[  384.758695][ T8729] loop3: detected capacity change from 0 to 128
[  384.782804][   T13] Bluetooth: hci1: command 0x0409 tx timeout
[  384.857582][ T8673] device hsr_slave_0 entered promiscuous mode
[  384.896462][ T8673] device hsr_slave_1 entered promiscuous mode
[  384.908973][ T8729] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  384.938493][ T8673] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  384.948525][ T8729] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  385.026905][ T8673] Cannot create hsr debugfs directory
[  386.342250][ T4923] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.402250][ T8756] kAFS: unable to lookup cell ''
[  386.993590][ T4923] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.002798][ T4230] Bluetooth: hci1: command 0x041b tx timeout
[  387.316916][ T4923] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.403593][ T8761] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  387.464865][ T4923] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.664727][ T4288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.724863][ T8673] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  387.758313][ T8673] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  387.832062][ T8673] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  387.855830][ T8673] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  388.174857][ T8673] 8021q: adding VLAN 0 to HW filter on device bond0
[  388.222058][ T8673] 8021q: adding VLAN 0 to HW filter on device team0
[  388.283159][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  388.314149][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  388.443229][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  388.462285][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  388.481725][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.489292][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  388.634109][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  388.647216][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  388.752778][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.760121][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  389.101414][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  389.246808][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  389.273350][   T13] Bluetooth: hci1: command 0x040f tx timeout
[  389.363288][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  389.425016][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  389.539088][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  389.584066][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  389.689419][ T8810] kAFS: unable to lookup cell ''
[  390.462763][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  390.471850][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  391.046834][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  391.078210][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  391.154279][ T8673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  391.203662][ T8673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  391.263762][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  391.277679][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  391.343873][   T13] Bluetooth: hci1: command 0x0419 tx timeout
[  391.493438][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1281'.
[  391.512941][ T8831] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  391.665638][ T8831] batman_adv: batadv0: Removing interface: batadv_slave_1
[  391.922685][   T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  392.084123][ T8673] 8021q: adding VLAN 0 to HW filter on device batadv0
[  392.091679][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  392.132581][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  392.202925][   T13] usb 2-1: Using ep0 maxpacket: 16
[  392.229357][ T4923] device hsr_slave_0 left promiscuous mode
[  392.246571][ T4923] device hsr_slave_1 left promiscuous mode
[  392.246698][   T13] usb 2-1: too many configurations: 123, using maximum allowed: 8
[  392.263375][ T4923] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  392.274602][ T4923] batman_adv: batadv0: Removing interface: batadv_slave_0
[  392.294035][ T4923] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  392.312291][ T4923] batman_adv: batadv0: Removing interface: batadv_slave_1
[  392.333559][ T4923] device bridge_slave_1 left promiscuous mode
[  392.340604][ T4923] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.343007][   T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  392.381988][ T4923] device bridge_slave_0 left promiscuous mode
[  392.415567][ T4923] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.442755][   T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  392.454592][ T4923] device veth1_macvtap left promiscuous mode
[  392.462003][ T4923] device veth0_macvtap left promiscuous mode
[  392.472748][ T4923] device veth1_vlan left promiscuous mode
[  392.480228][ T4923] device veth0_vlan left promiscuous mode
[  392.532814][   T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  392.618803][ T8867] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  392.632998][   T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  392.723100][   T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  392.822820][   T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  392.932969][   T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  393.052825][   T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  393.120086][ T4923] team0 (unregistering): Port device team_slave_1 removed
[  393.152834][   T13] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  393.163920][ T4923] team0 (unregistering): Port device team_slave_0 removed
[  393.171010][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  393.195958][ T4923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  393.199135][   T13] usb 2-1: SerialNumber: syz
[  393.232026][   T13] usb 2-1: config 0 descriptor??
[  393.244007][ T4923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  393.539418][   T13] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8
[  393.747389][ T4923] bond0 (unregistering): Released all slaves
[  393.787271][ T8840] loop1: detected capacity change from 0 to 4096
[  393.858593][ T8877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1292'.
[  394.194753][ T8885] kAFS: unable to lookup cell ''
[  394.560890][ T8897] loop3: detected capacity change from 0 to 128
[  394.653611][ T8840] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9
[  395.545530][ T8897] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  395.579360][ T8897] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  395.583840][ T3546] bcm5974 2-1:0.0: could not read from device
[  395.644806][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  395.689448][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  395.694940][   T13] usb 2-1: USB disconnect, device number 6
[  395.829948][ T4178] bcm5974 2-1:0.0: could not read from device
[  395.909252][ T8673] device veth0_vlan entered promiscuous mode
[  395.917294][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  395.950139][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  396.062953][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  396.190823][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  396.510465][ T8673] device veth1_vlan entered promiscuous mode
[  396.544948][ T8673] device veth0_macvtap entered promiscuous mode
[  396.554277][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  396.597051][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  396.643346][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  396.693629][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  396.740287][ T8929] loop2: detected capacity change from 0 to 512
[  396.750117][ T8673] device veth1_macvtap entered promiscuous mode
[  396.773658][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  396.793174][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  396.847974][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  396.892647][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.928717][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  396.966431][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.998028][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.051620][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.102544][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.117157][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.141009][ T8673] batman_adv: batadv0: Interface activated: batadv_slave_0
[  397.789205][ T8929] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  397.878777][ T8929] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  397.934283][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  397.973618][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  398.024619][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  398.088017][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.135911][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  398.151188][ T8915] loop1: detected capacity change from 0 to 32768
[  398.188303][   T26] audit: type=1800 audit(1772684451.838:57): pid=8953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1305" name="file1" dev="loop2" ino=20 res=0 errno=0
[  398.189253][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.237488][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  398.248478][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.291244][ T8915] XFS (loop1): Mounting V5 Filesystem
[  398.322041][ T8673] batman_adv: batadv0: Interface activated: batadv_slave_1
[  398.386174][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  398.405486][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  398.423673][ T8915] XFS (loop1): Ending clean mount
[  398.448530][ T8915] XFS (loop1): Quotacheck needed: Please wait.
[  398.448585][ T8673] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.473327][ T8673] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.483754][ T8673] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.496476][ T8673] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.510615][ T8964] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1310'.
[  398.593527][ T8915] XFS (loop1): Quotacheck: Done.
[  398.754277][ T4288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.782615][ T4288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.927055][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  398.968182][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  398.985176][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.087471][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.478924][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  399.679830][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  399.733624][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  399.755682][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  399.814610][ T4185] XFS (loop1): Unmounting Filesystem
[  399.825184][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  399.873419][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  399.958498][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  399.983594][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  400.039121][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  400.073051][ T4198] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  401.022686][ T5343] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  401.484539][ T5343] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  401.505966][ T5343] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  401.517222][ T5343] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  401.526834][ T5343] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  402.470618][ T5343] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  402.693917][ T9023] kAFS: unable to lookup cell ''
[  402.732834][ T5343] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  402.762131][ T5343] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  402.801314][ T5343] usb 4-1: Product: syz
[  402.812594][ T5343] usb 4-1: Manufacturer: syz
[  402.873799][ T5343] cdc_wdm 4-1:1.0: skipping garbage
[  402.879218][ T5343] cdc_wdm 4-1:1.0: skipping garbage
[  402.925564][ T5343] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  402.954340][ T5343] cdc_wdm 4-1:1.0: Unknown control protocol
[  403.240514][ T9008] loop1: detected capacity change from 0 to 32768
[  403.268971][ T9043] udc-core: couldn't find an available UDC or it's busy
[  403.299913][ T9043] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  403.426121][ T9008] XFS (loop1): Mounting V5 Filesystem
[  403.572627][    C1] cdc_wdm 4-1:1.0: Unexpected error -71
[  403.580912][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  403.588491][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  403.604068][ T5351] usb 4-1: USB disconnect, device number 6
[  403.671210][ T9008] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  403.743609][ T9032] chnl_net:caif_netlink_parms(): no params data found
[  403.857593][ T9064] kAFS: unable to lookup cell ''
[  403.955165][ T9008] XFS (loop1): Starting recovery (logdev: internal)
[  403.981158][ T9032] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.990282][ T9032] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.000550][ T9032] device bridge_slave_0 entered promiscuous mode
[  404.020194][ T9008] XFS (loop1): Ending recovery (logdev: internal)
[  404.032348][ T9032] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.049607][ T9032] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.062072][ T9032] device bridge_slave_1 entered promiscuous mode
[  404.085017][ T4185] XFS (loop1): Unmounting Filesystem
[  404.110518][ T4923] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.260163][ T9032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  404.277015][ T9077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1335'.
[  404.322840][ T9077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1335'.
[  404.377945][ T9032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  404.431915][ T4923] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.658796][ T4923] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.737025][ T9032] team0: Port device team_slave_0 added
[  404.795174][ T9032] team0: Port device team_slave_1 added
[  404.919820][ T4923] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.981300][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.004594][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.110886][   T13] Bluetooth: hci4: command 0x0409 tx timeout
[  405.124776][ T9032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.159056][ T9108] netlink: 'syz.0.1341': attribute type 25 has an invalid length.
[  405.188154][ T9108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1341'.
[  405.245728][ T9075] loop6: detected capacity change from 0 to 40427
[  405.248291][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.268001][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.311691][ T9032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  405.359022][ T9113] kAFS: unable to lookup cell ''
[  405.372228][ T9112] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1341'.
[  405.392934][ T9075] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1ffff
[  405.408163][ T9112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1341'.
[  405.429679][ T9075] F2FS-fs (loop6): invalid crc value
[  405.479023][ T9075] F2FS-fs (loop6): Found nat_bits in checkpoint
[  405.639004][ T9032] device hsr_slave_0 entered promiscuous mode
[  405.665152][ T9125] loop1: detected capacity change from 0 to 256
[  405.678553][ T9032] device hsr_slave_1 entered promiscuous mode
[  405.688606][ T9075] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  405.779296][ T9032] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  405.817866][ T9032] Cannot create hsr debugfs directory
[  405.837251][ T9075] attempt to access beyond end of device
[  405.837251][ T9075] loop6: rw=2049, want=45112, limit=40427
[  406.577809][ T9131] loop1: detected capacity change from 0 to 764
[  406.750892][ T9136] overlayfs: failed to clone upperpath
[  406.924078][ T8673] attempt to access beyond end of device
[  406.924078][ T8673] loop6: rw=2049, want=45136, limit=40427
[  407.154471][ T9144] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  407.182902][ T1108] Bluetooth: hci4: command 0x041b tx timeout
[  407.237013][ T9032] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  407.261722][ T9032] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  407.308902][ T9032] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  407.422425][ T9032] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  407.733432][ T1108] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  407.794211][ T9032] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.821178][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  407.840920][ T9172] kAFS: unable to lookup cell ''
[  407.858910][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  407.877674][ T9032] 8021q: adding VLAN 0 to HW filter on device team0
[  407.920641][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  407.933766][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  407.947820][ T9179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1357'.
[  407.957834][ T9179] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  407.988405][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.995996][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state
[  408.004958][ T1108] usb 2-1: Using ep0 maxpacket: 8
[  408.052059][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  408.096970][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  408.146510][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  408.170295][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.177926][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state
[  408.192689][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short
[  408.212081][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  408.231921][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  408.258845][ T9191] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1361'.
[  408.283152][ T1108] usb 2-1: config 248 has an invalid interface number: 51 but max is 0
[  408.294198][ T1108] usb 2-1: config 248 has no interface number 0
[  408.443850][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  408.471514][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  408.534729][ T9032] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  408.577850][ T9032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  408.652844][ T9195] loop3: detected capacity change from 0 to 40427
[  408.672954][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  408.690154][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  408.741492][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  408.742774][ T1108] usb 2-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=39.f0
[  408.776677][ T9195] F2FS-fs (loop3): invalid crc value
[  408.788643][ T9195] F2FS-fs (loop3): Found nat_bits in checkpoint
[  408.794591][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  408.829266][ T9195] F2FS-fs (loop3): Start checkpoint disabled!
[  408.835696][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  408.845108][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.857547][ T1108] usb 2-1: Product: syz
[  408.862116][ T1108] usb 2-1: Manufacturer: syz
[  408.867662][ T9195] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  408.876124][ T1108] usb 2-1: SerialNumber: syz
[  408.888284][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  408.897191][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  408.906021][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  409.083144][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  409.122897][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  409.145244][ T9032] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.263809][ T4227] Bluetooth: hci4: command 0x040f tx timeout
[  409.310971][ T4923] device hsr_slave_0 left promiscuous mode
[  409.321696][ T4923] device hsr_slave_1 left promiscuous mode
[  409.337346][ T4923] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  409.351062][ T9195] attempt to access beyond end of device
[  409.351062][ T9195] loop3: rw=2049, want=79488, limit=40427
[  409.355981][ T4923] batman_adv: batadv0: Removing interface: batadv_slave_0
[  409.400666][ T4923] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  409.412145][ T4923] batman_adv: batadv0: Removing interface: batadv_slave_1
[  409.434280][ T4923] device bridge_slave_1 left promiscuous mode
[  409.454861][ T9229] kAFS: unable to lookup cell ''
[  409.461057][ T4923] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.474705][ T9194] attempt to access beyond end of device
[  409.474705][ T9194] loop3: rw=524288, want=78080, limit=40427
[  409.492411][ T4923] device bridge_slave_0 left promiscuous mode
[  409.497052][ T9194] attempt to access beyond end of device
[  409.497052][ T9194] loop3: rw=0, want=77832, limit=40427
[  409.500648][ T4923] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.519595][ T9194] attempt to access beyond end of device
[  409.519595][ T9194] loop3: rw=0, want=77832, limit=40427
[  409.549387][ T9194] attempt to access beyond end of device
[  409.549387][ T9194] loop3: rw=0, want=77832, limit=40427
[  409.576359][ T4923] device veth1_macvtap left promiscuous mode
[  409.586843][ T9194] attempt to access beyond end of device
[  409.586843][ T9194] loop3: rw=0, want=77832, limit=40427
[  409.588299][ T4923] device veth0_macvtap left promiscuous mode
[  409.621496][ T9194] attempt to access beyond end of device
[  409.621496][ T9194] loop3: rw=0, want=77832, limit=40427
[  409.635571][ T4923] device veth1_vlan left promiscuous mode
[  409.641873][ T4923] device veth0_vlan left promiscuous mode
[  409.647593][ T9194] attempt to access beyond end of device
[  409.647593][ T9194] loop3: rw=0, want=77832, limit=40427
[  410.462030][ T4923] team0 (unregistering): Port device team_slave_1 removed
[  410.844993][ T1108] usbhid 2-1:248.51: couldn't find an input interrupt endpoint
[  410.929623][ T4923] team0 (unregistering): Port device team_slave_0 removed
[  411.216140][ T1108] usb 2-1: USB disconnect, device number 7
[  411.289714][ T4923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  411.318999][ T9248] loop3: detected capacity change from 0 to 164
[  411.336021][ T4923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  411.345850][ T5843] Bluetooth: hci4: command 0x0419 tx timeout
[  411.478420][ T4923] bond0 (unregistering): Released all slaves
[  411.525536][ T9248] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  411.568390][ T9248] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32
[  411.635601][ T9263] mmap: syz.3.1375 (9263) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  411.891743][ T9272] kAFS: unable to lookup cell ''
[  412.762307][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  412.782225][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  412.919929][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  412.934346][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  412.946161][ T9032] device veth0_vlan entered promiscuous mode
[  413.048558][ T9294] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  413.089189][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  413.108006][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  413.116576][ T9294] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  413.159022][ T9032] device veth1_vlan entered promiscuous mode
[  413.326571][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  413.346620][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  413.366902][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  413.399953][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  413.441980][ T9032] device veth0_macvtap entered promiscuous mode
[  413.530997][ T9032] device veth1_macvtap entered promiscuous mode
[  413.556684][ T9315] loop6: detected capacity change from 0 to 128
[  413.634124][ T9032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  413.656279][ T9032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.677408][ T9032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  413.680927][ T9317] loop3: detected capacity change from 0 to 1764
[  413.698932][ T9032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.719872][ T9032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  413.747721][ T9032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.766114][ T9032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  413.783928][ T9032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.802334][ T9032] batman_adv: batadv0: Interface activated: batadv_slave_0
[  413.835894][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  413.857487][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  413.868284][ T9315] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  413.891993][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  413.906380][ T9315] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  413.937500][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  413.967324][ T9317] loop3: detected capacity change from 0 to 128
[  413.968738][ T9032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  414.005337][ T9032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.015585][ T9032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  414.040006][ T9032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.090054][ T9032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  414.141694][ T9032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.174273][ T9032] batman_adv: batadv0: Interface activated: batadv_slave_1
[  414.184060][ T9317] hpfs: bad mount options.
[  414.185375][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  414.202930][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  414.216657][ T9032] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.103314][ T9032] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.112156][ T9032] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.121617][ T9032] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  415.243325][ T9338] kAFS: unable to lookup cell ''
[  415.559526][ T9348] loop1: detected capacity change from 0 to 1024
[  415.577206][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.597440][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.635010][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  415.657522][ T9348] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  415.693101][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.701049][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.750953][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  415.763115][   T13] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  415.783803][ T9348] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none.
[  415.934410][   T26] audit: type=1800 audit(1772684469.588:58): pid=9348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1397" name="file1" dev="loop1" ino=15 res=0 errno=0
[  416.152806][   T13] usb 7-1: config 0 has no interfaces?
[  416.312920][   T13] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  416.342430][   T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.352730][   T13] usb 7-1: Product: syz
[  416.357313][   T13] usb 7-1: Manufacturer: syz
[  416.373705][   T13] usb 7-1: SerialNumber: syz
[  416.381217][   T13] usb 7-1: config 0 descriptor??
[  416.438701][ T9317] loop3: detected capacity change from 0 to 32768
[  416.591574][ T9317] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  416.631666][ T9317] BTRFS info (device loop3): using free space tree
[  416.652661][ T9317] BTRFS info (device loop3): has skinny extents
[  416.787169][ T9317] BTRFS error (device loop3): open_ctree failed: -12
[  416.804892][ T4523] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4523)
[  417.421807][ T5348] usb 7-1: USB disconnect, device number 2
[  418.582748][ T1108] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  418.942994][ T1108] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[  418.983224][ T1108] usb 7-1: config 0 has no interface number 0
[  418.989704][ T1108] usb 7-1: config 0 interface 41 has no altsetting 0
[  419.040315][ T9440] device bridge0 entered promiscuous mode
[  419.064458][ T9440] device vlan2 entered promiscuous mode
[  419.182706][ T1108] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  419.212744][ T1108] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.221149][ T1108] usb 7-1: Product: syz
[  419.252656][ T1108] usb 7-1: Manufacturer: syz
[  419.283093][ T1108] usb 7-1: SerialNumber: syz
[  419.324200][ T1108] usb 7-1: config 0 descriptor??
[  419.408390][ T9448] kAFS: unable to lookup cell ''
[  419.999373][    C1] vcan0: j1939_tp_rxtimer: 0xffff888062648400: rx timeout, send abort
[  420.011109][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805fc64c00: rx timeout, send abort
[  420.019841][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fc64c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  420.282989][ T1108] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  420.509915][    C1] vcan0: j1939_tp_rxtimer: 0xffff888062648400: abort rx timeout. Force session deactivation
[  420.555567][ T9458] kAFS: unable to lookup cell ''
[  420.941565][ T9479] loop7: detected capacity change from 0 to 256
[  421.624262][ T9497] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  421.642737][ T9497] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  421.692724][ T1108] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  421.732391][ T1108] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  421.750844][ T1108] CoreChips: probe of 7-1:0.41 failed with error -71
[  421.781528][ T1108] usb 7-1: USB disconnect, device number 3
[  422.556372][ T9526] kAFS: unable to lookup cell ''
[  422.845581][ T9534] kAFS: unable to lookup cell ''
[  424.012057][ T9554] loop1: detected capacity change from 0 to 128
[  424.277647][ T9554] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  424.323257][ T9554] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  424.416712][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1444'.
[  424.470213][ T9569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  424.766036][ T9522] loop3: detected capacity change from 0 to 32768
[  425.689636][ T9586] kAFS: unable to lookup cell ''
[  426.236234][ T9600] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1025 (2050 ns) > initial count (14 ns). Using initial count to start timer.
[  427.183942][ T5352] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  427.542884][ T5352] usb 2-1: Using ep0 maxpacket: 8
[  427.863010][ T5352] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  427.873221][ T4273] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  427.941090][ T5352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.974029][ T5352] usb 2-1: Product: syz
[  427.990217][ T5352] usb 2-1: Manufacturer: syz
[  428.014653][ T9649] kAFS: unable to lookup cell ''
[  428.022970][ T5352] usb 2-1: SerialNumber: syz
[  428.065196][ T5352] usb 2-1: config 0 descriptor??
[  428.152618][ T4273] usb 8-1: Using ep0 maxpacket: 32
[  428.265315][ T9659] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  428.276065][ T9651] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  428.296258][ T9651] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  428.298530][ T4273] usb 8-1: config index 0 descriptor too short (expected 35577, got 27)
[  428.332811][ T5352] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  428.367790][ T4273] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  428.412545][ T4273] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92
[  428.421551][ T4273] usb 8-1: config 1 has no interface number 0
[  428.471304][ T4273] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  428.518423][ T4273] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  428.582729][ T4273] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  428.602608][ T4273] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.676665][ T4273] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found
[  428.859013][ T9673] device syzkaller0 entered promiscuous mode
[  428.893813][ T4273] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached
[  429.332947][ T5352] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  429.362884][ T5352] usb 2-1: USB disconnect, device number 8
[  429.561348][ T9697] kAFS: unable to lookup cell ''
[  429.906708][ T5337] snd_usb_pod 8-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  429.952451][ T9711] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000
[  429.956592][ T9683] loop6: detected capacity change from 0 to 32768
[  429.994943][ T9683] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.1470 (9683)
[  430.056397][ T9683] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  430.112451][ T9683] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  430.160766][ T9683] BTRFS info (device loop6): use zstd compression, level 3
[  430.217927][ T9683] BTRFS info (device loop6): use no compression
[  430.227402][ T9723] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  430.308714][ T9683] BTRFS info (device loop6): using free space tree
[  430.466040][ T9683] BTRFS info (device loop6): has skinny extents
[  431.064298][ T5337] usb 8-1: USB disconnect, device number 2
[  431.091875][ T5337] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected
[  431.222088][ T9752] overlayfs: failed to clone upperpath
[  431.244726][ T9683] BTRFS info (device loop6): enabling ssd optimizations
[  431.255848][ T9755] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  431.341190][ T9757] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  431.383485][ T9757] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[  431.992726][ T9781] netlink: 'syz.0.1489': attribute type 4 has an invalid length.
[  432.025649][ T9784] 0x00000000000a-0x00000002000a : ""
[  432.031811][ T9784] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1fff6
[  432.067942][ T9783] netlink: 'syz.0.1489': attribute type 4 has an invalid length.
[  432.200727][ T9784] ftl_cs: FTL header corrupt!
[  433.612611][ T9815] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  433.712636][ T9819] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  434.023188][ T9815] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  434.043362][ T9815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.086146][ T9815] usb 7-1: config 0 descriptor??
[  434.123292][ T9819] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  434.137577][ T9819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  434.152135][ T9815] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  434.176219][ T9819] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  434.208904][ T9819] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  434.393191][ T9819] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  434.418652][ T9819] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  434.453271][ T9819] usb 4-1: Product: syz
[  434.457647][ T9819] usb 4-1: Manufacturer: syz
[  434.563652][ T9819] cdc_wdm 4-1:1.0: skipping garbage
[  434.592550][ T9819] cdc_wdm 4-1:1.0: skipping garbage
[  434.623189][ T9819] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  434.643364][ T9819] cdc_wdm 4-1:1.0: Unknown control protocol
[  434.855752][ T9830] udc-core: couldn't find an available UDC or it's busy
[  434.920101][ T9830] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  434.972779][ T9830] netlink: 'syz.3.1496': attribute type 1 has an invalid length.
[  435.004191][ T9830] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1496'.
[  435.257777][ T9819] usb 4-1: USB disconnect, device number 7
[  435.264394][ T9875] binder: 9874:9875 ioctl c0306201 0 returned -14
[  435.762723][ T4230] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  435.882152][ T9890] binder: 9889:9890 ioctl c0306201 200000000480 returned -14
[  436.067902][ T9896] loop7: detected capacity change from 0 to 1024
[  436.082874][ T9815] gspca_stv06xx: I2C: Read error writing address: -71
[  436.099576][ T9815] usb 7-1: USB disconnect, device number 4
[  436.182900][ T4230] usb 2-1: config 0 has no interfaces?
[  436.192346][ T9896] Quota error (device loop7): v2_read_file_info: Number of blocks too big for quota file size (6144 > 256).
[  436.251257][ T9896] EXT4-fs warning (device loop7): ext4_enable_quotas:6486: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  436.273654][ T9896] EXT4-fs (loop7): mount failed
[  436.398741][ T4230] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  436.991545][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.088508][ T4230] usb 2-1: Product: syz
[  437.108292][ T4230] usb 2-1: Manufacturer: syz
[  437.120847][ T4230] usb 2-1: SerialNumber: syz
[  437.159907][ T4230] usb 2-1: config 0 descriptor??
[  437.560350][ T9918] kAFS: unable to lookup cell ''
[  439.110270][ T9927] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  439.584266][ T4273] usb 2-1: USB disconnect, device number 9
[  439.695239][ T9927] batman_adv: batadv0: Removing interface: batadv_slave_0
[  440.146739][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  440.153567][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  440.362125][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1521'.
[  441.227399][ T9967] 0x00000000000a-0x00000002000a : ""
[  441.267540][ T9967] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1fff6
[  441.392770][ T9967] ftl_cs: FTL header corrupt!
[  442.412999][ T5352] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  442.652572][ T5352] usb 7-1: Using ep0 maxpacket: 8
[  442.772810][ T5352] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  442.883041][ T5352] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  442.899679][ T5352] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  442.929729][ T5352] usb 7-1: SerialNumber: syz
[  442.993911][ T5352] usb 7-1: bad CDC descriptors
[  443.208233][ T9973] udc-core: couldn't find an available UDC or it's busy
[  443.244337][ T9973] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  443.283545][ T9819] usb 7-1: USB disconnect, device number 5
[  443.365264][T10011] loop1: detected capacity change from 0 to 128
[  443.431980][T10011] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  443.567752][T10011] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  443.914761][ T9819] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  444.853539][T10029] loop6: detected capacity change from 0 to 256
[  445.369134][T10029] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  446.060374][ T9956] ODEBUG: Out of memory. ODEBUG disabled
[  449.871146][T10055] loop6: detected capacity change from 0 to 4096
[  450.094658][T10055] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  450.112607][T10055] ntfs3: loop6: Failed to load $Extend.
[  450.694494][ T4380] ntfs3: loop6: ntfs3_write_inode r=9 failed, -22.
[  450.709002][ T8673] ntfs3: loop6: ntfs_sync_fs r=9 failed, -22.
[  450.745107][ T8673] ntfs3: loop6: ntfs_evict_inode r=9 failed, -22.
[  451.252281][T10087] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  452.355102][T10116] loop3: detected capacity change from 0 to 64
[  452.816743][T10119] loop6: detected capacity change from 0 to 256
[  452.963849][T10119] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  452.975650][T10119] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  452.992725][ T9816] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  453.087190][T10119] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  453.563368][ T9816] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  453.629374][ T9816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.767113][ T9816] usb 2-1: Product: syz
[  453.841151][ T9816] usb 2-1: Manufacturer: syz
[  453.922257][ T9816] usb 2-1: SerialNumber: syz
[  453.969925][ T9816] usb 2-1: config 0 descriptor??
[  454.251491][ T9956] Set syz1 is full, maxelem 65536 reached
[  454.282799][ T9816] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  457.462170][T10147] device syzkaller0 entered promiscuous mode
[  457.516544][T10147] tipc: Started in network mode
[  457.561973][T10147] tipc: Node identity 46d1314328a2, cluster identity 4711
[  457.586213][T10147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  457.742929][T10146] tipc: Resetting bearer <eth:syzkaller0>
[  457.845789][ T9816] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  457.889669][ T9816] usb 2-1: USB disconnect, device number 10
[  457.891142][T10146] tipc: Disabling bearer <eth:syzkaller0>
[  459.787764][T10187] loop1: detected capacity change from 0 to 512
[  459.902585][ T9815] Bluetooth: hci5: command 0x0409 tx timeout
[  460.053809][T10156] chnl_net:caif_netlink_parms(): no params data found
[  460.109809][T10187] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nodiscard,grpjquota=,,errors=continue. Quota mode: none.
[  460.189808][ T1400] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.262389][T10187] overlayfs: upper fs does not support file handles, falling back to index=off.
[  460.442591][T10187] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  460.480352][ T1400] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.593191][T10208] loop3: detected capacity change from 0 to 256
[  460.618446][ T1400] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.631650][T10208] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  460.643634][T10208] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  460.659701][T10208] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  460.732692][ T1400] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.850319][T10156] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.868030][T10156] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.918268][T10156] device bridge_slave_0 entered promiscuous mode
[  460.972699][T10156] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.979987][T10156] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.007348][T10156] device bridge_slave_1 entered promiscuous mode
[  461.119639][T10156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  461.189420][T10156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  462.396347][ T9816] Bluetooth: hci5: command 0x041b tx timeout
[  462.991326][T10235] affs: No valid root block on device nullb0
[  463.202437][T10156] team0: Port device team_slave_0 added
[  463.211718][T10156] team0: Port device team_slave_1 added
[  463.345907][T10249] gfs2: not a GFS2 filesystem
[  464.042226][T10156] batman_adv: batadv0: Adding interface: batadv_slave_0
[  464.112780][T10156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  464.309707][T10156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  464.415238][T10156] batman_adv: batadv0: Adding interface: batadv_slave_1
[  464.422238][T10156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  464.676433][T10156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.373813][ T9819] Bluetooth: hci5: command 0x040f tx timeout
[  465.683874][T10156] device hsr_slave_0 entered promiscuous mode
[  465.697340][T10156] device hsr_slave_1 entered promiscuous mode
[  465.718746][T10156] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  465.737162][T10156] Cannot create hsr debugfs directory
[  466.559568][ T4273] Bluetooth: hci0: command 0x0409 tx timeout
[  466.635226][T10156] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  467.566523][ T9816] Bluetooth: hci5: command 0x0419 tx timeout
[  467.716143][T10156] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  467.786930][T10269] chnl_net:caif_netlink_parms(): no params data found
[  467.838901][T10156] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  467.898355][T10156] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  468.351835][ T1400] device hsr_slave_0 left promiscuous mode
[  468.376800][ T1400] device hsr_slave_1 left promiscuous mode
[  468.396858][ T1400] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.421921][ T1400] device bridge_slave_0 left promiscuous mode
[  468.438204][ T1400] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.468751][ T1400] device veth1_macvtap left promiscuous mode
[  468.482854][ T1400] device veth0_macvtap left promiscuous mode
[  468.496019][ T1400] device veth1_vlan left promiscuous mode
[  468.508799][ T1400] device veth0_vlan left promiscuous mode
[  468.623637][ T9819] Bluetooth: hci0: command 0x041b tx timeout
[  469.144983][ T1400] team0 (unregistering): Port device team_slave_1 removed
[  469.169355][ T1400] team0 (unregistering): Port device team_slave_0 removed
[  469.187481][ T1400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  469.214730][ T1400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  469.377926][T10349] xt_CT: No such helper "snmp"
[  469.389105][ T1400] bond0 (unregistering): Released all slaves
[  469.450656][T10269] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.470288][T10269] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.480852][T10269] device bridge_slave_0 entered promiscuous mode
[  469.559824][T10269] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.570859][T10269] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.607282][T10269] device bridge_slave_1 entered promiscuous mode
[  469.695779][T10156] 8021q: adding VLAN 0 to HW filter on device bond0
[  469.738318][T10269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  469.765261][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  469.774308][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  469.788921][T10269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  469.833274][T10156] 8021q: adding VLAN 0 to HW filter on device team0
[  469.877886][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  469.926071][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  470.010832][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.018120][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  470.063017][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  470.114644][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  470.162781][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  470.180884][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.188231][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  470.238473][T10269] team0: Port device team_slave_0 added
[  470.275278][T10269] team0: Port device team_slave_1 added
[  470.287609][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  470.305227][T10367] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1600'.
[  470.364246][T10371] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1600'.
[  470.429266][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  470.458600][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  470.489486][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  470.521904][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  470.557778][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  470.600649][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  470.688454][T10269] batman_adv: batadv0: Adding interface: batadv_slave_0
[  470.699169][T10269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  470.726900][ T9816] Bluetooth: hci0: command 0x040f tx timeout
[  470.746670][T10269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  470.769235][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  470.786939][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  470.858004][T10156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  470.952927][T10156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  471.048455][T10269] batman_adv: batadv0: Adding interface: batadv_slave_1
[  471.059684][T10269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  471.086410][T10269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  471.098554][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  471.134770][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  471.802152][T10269] device hsr_slave_0 entered promiscuous mode
[  471.927062][T10269] device hsr_slave_1 entered promiscuous mode
[  471.992331][T10269] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  472.006688][T10269] Cannot create hsr debugfs directory
[  472.280670][T10421] loop3: detected capacity change from 0 to 256
[  472.371816][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  472.422829][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  472.441009][T10156] 8021q: adding VLAN 0 to HW filter on device batadv0
[  472.449307][T10421] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  472.786273][ T1108] Bluetooth: hci0: command 0x0419 tx timeout
[  474.729513][T10269] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  474.802009][T10269] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  474.823262][   T26] audit: type=1804 audit(1772684528.468:59): pid=10421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1609" name="/newroot/292/file0/file1" dev="loop3" ino=1048678 res=1 errno=0
[  474.860376][T10269] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  474.934122][T10269] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  474.949439][   T26] audit: type=1804 audit(1772684528.528:60): pid=10421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1609" name="/newroot/292/file0/file1" dev="loop3" ino=1048678 res=1 errno=0
[  475.280623][T10269] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.311260][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  475.342338][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  475.429488][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  475.444645][T10458] pit: kvm: requested 137447 ns i8254 timer period limited to 200000 ns
[  475.464989][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  475.476279][T10458] pit: kvm: requested 135771 ns i8254 timer period limited to 200000 ns
[  475.503410][T10458] pit: kvm: requested 89676 ns i8254 timer period limited to 200000 ns
[  475.519332][T10269] 8021q: adding VLAN 0 to HW filter on device team0
[  475.552766][ T5352] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  475.554480][T10458] pit: kvm: requested 96381 ns i8254 timer period limited to 200000 ns
[  475.571605][T10156] device veth0_vlan entered promiscuous mode
[  475.607155][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  475.625056][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  475.633109][T10458] pit: kvm: requested 64533 ns i8254 timer period limited to 200000 ns
[  475.633368][T10458] pit: kvm: requested 191085 ns i8254 timer period limited to 200000 ns
[  475.680789][T10156] device veth1_vlan entered promiscuous mode
[  475.705346][T10458] pit: kvm: requested 195276 ns i8254 timer period limited to 200000 ns
[  475.721163][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  475.739285][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  475.772366][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  475.781453][T10458] pit: kvm: requested 165942 ns i8254 timer period limited to 200000 ns
[  475.811127][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  475.830490][T10458] pit: kvm: requested 66209 ns i8254 timer period limited to 200000 ns
[  475.840090][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  475.848604][T10458] pit: kvm: requested 89676 ns i8254 timer period limited to 200000 ns
[  475.869152][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.876513][ T4288] bridge0: port 1(bridge_slave_0) entered forwarding state
[  475.905891][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  475.935677][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  475.971552][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.978871][ T4288] bridge0: port 2(bridge_slave_1) entered forwarding state
[  475.986899][ T5352] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  476.067137][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  476.093803][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  476.123608][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  476.161537][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  476.192848][ T5352] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  476.209707][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  476.218406][ T5352] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  476.234011][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  476.250521][ T5352] usb 8-1: Product: syz
[  476.256025][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  476.265195][ T5352] usb 8-1: Manufacturer: syz
[  476.270269][ T5352] usb 8-1: SerialNumber: syz
[  476.287723][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  476.329465][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  476.346337][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  476.397574][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  476.414494][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  476.433870][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  476.475879][T10156] device veth0_macvtap entered promiscuous mode
[  476.546360][T10156] device veth1_macvtap entered promiscuous mode
[  476.566542][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  476.576586][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  476.599307][T10269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  476.625282][T10492] device syzkaller0 entered promiscuous mode
[  476.690239][T10156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  476.726274][T10156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.787942][T10156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  476.852529][T10156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.901825][T10156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  476.912391][T10156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.923026][T10156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  476.934267][T10156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.954082][T10156] batman_adv: batadv0: Interface activated: batadv_slave_0
[  476.992347][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  477.129571][ T5337] usb 8-1: USB disconnect, device number 3
[  477.458570][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  477.905228][T10497] [U] 
[  477.936298][T10156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  477.992493][T10156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.075697][T10510] loop3: detected capacity change from 0 to 128
[  478.084758][T10156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  478.122685][T10156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.149130][T10156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  478.149603][T10513] loop7: detected capacity change from 0 to 256
[  478.172580][T10156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.212527][T10156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  478.252505][T10156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.277393][T10156] batman_adv: batadv0: Interface activated: batadv_slave_1
[  478.303720][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  478.318888][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  478.352068][T10513] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  478.368226][T10156] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  478.368664][T10510] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  478.398064][T10510] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  478.419472][T10156] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  478.428761][T10156] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  478.438248][T10156] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  479.359647][   T26] audit: type=1800 audit(1772684533.008:61): pid=10520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1624" name="/" dev="fuse" ino=0 res=0 errno=0
[  479.379291][    C0] vkms_vblank_simulate: vblank timer overrun
[  479.870562][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  479.887362][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  479.948042][T10269] 8021q: adding VLAN 0 to HW filter on device batadv0
[  480.323577][ T4288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.331645][ T4288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.411771][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  480.553326][ T4288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.562157][ T4288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.656815][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  481.437434][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  481.508099][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  481.743283][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  481.820399][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  482.014381][T10269] device veth0_vlan entered promiscuous mode
[  482.130826][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  482.138533][ T9819] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  482.200454][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  482.438707][T10269] device veth1_vlan entered promiscuous mode
[  482.489203][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  482.532872][ T9819] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  482.603929][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  482.613958][ T9819] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[  482.664724][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  482.685129][T10269] device veth0_macvtap entered promiscuous mode
[  482.772061][T10563] kAFS: unable to lookup cell ''
[  482.781733][T10269] device veth1_macvtap entered promiscuous mode
[  482.833422][ T9819] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  482.875824][ T9819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.018416][ T9819] usb 4-1: Product: syz
[  483.080784][ T9819] usb 4-1: Manufacturer: syz
[  483.129646][ T9819] usb 4-1: SerialNumber: syz
[  483.220387][T10269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  483.383936][T10269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  483.444807][T10269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  483.522690][T10269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  483.592757][ T9819] cdc_ncm 4-1:1.0: bind() failure
[  483.601200][ T9819] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  483.602593][T10269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  483.618742][T10269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  483.627806][ T9819] cdc_ncm 4-1:1.1: bind() failure
[  483.641851][T10269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  483.654338][T10269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  483.665388][T10269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  483.677611][T10269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  483.691164][T10269] batman_adv: batadv0: Interface activated: batadv_slave_0
[  483.695858][ T9819] usb 4-1: USB disconnect, device number 8
[  483.702192][T10269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  483.717075][T10269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  483.727886][T10269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  483.748114][T10269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  483.759989][T10269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  483.774324][T10269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  483.795495][T10269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  483.807632][T10269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  483.817820][T10269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  483.828964][T10269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  483.853084][T10269] batman_adv: batadv0: Interface activated: batadv_slave_1
[  483.875020][T10269] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  483.906510][T10269] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  484.039504][T10269] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  484.049536][T10269] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  484.073632][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  484.082350][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  484.092985][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  484.102135][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  484.113151][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  484.275792][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  485.134081][ T4288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  485.607973][ T4288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.039024][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.051998][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  486.060095][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.086603][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  486.100353][T10592] netlink: 'syz.3.1635': attribute type 1 has an invalid length.
[  486.153587][T10592] 8021q: adding VLAN 0 to HW filter on device bond1
[  486.203159][T10595] device macvlan3 entered promiscuous mode
[  486.243822][T10595] device bond1 entered promiscuous mode
[  486.251612][   T26] audit: type=1326 audit(1772684539.898:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.7.1638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2ed11a799 code=0x0
[  486.318841][T10595] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  486.388315][T10595] device bond1 left promiscuous mode
[  486.460819][T10600] bond1: (slave ip6gretap1): making interface the new active one
[  486.478306][T10600] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  486.509290][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  486.700066][T10617] device syzkaller0 entered promiscuous mode
[  486.729455][T10619] device syzkaller0 entered promiscuous mode
[  486.781173][T10619] tipc: Started in network mode
[  486.793961][T10619] tipc: Node identity 5e1ae85491e5, cluster identity 4711
[  486.810658][T10619] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  486.823498][T10618] tipc: Resetting bearer <eth:syzkaller0>
[  486.896844][T10618] tipc: Disabling bearer <eth:syzkaller0>
[  488.142733][T10639] kAFS: unable to lookup cell ''
[  488.824125][T10646] loop8: detected capacity change from 0 to 64
[  488.882604][T10640] loop3: detected capacity change from 0 to 1024
[  489.376438][T10655] overlayfs: upper fs needs to support d_type.
[  489.528302][T10655] overlayfs: upper fs does not support tmpfile.
[  490.097415][ T4290] hfsplus: b-tree write err: -5, ino 25
[  490.115398][ T4290] hfsplus: b-tree write err: -5, ino 4
[  490.196385][ T4290] hfsplus: b-tree write err: -5, ino 2
[  491.685101][T10705] loop7: detected capacity change from 0 to 16
[  491.781168][T10705] erofs: (device loop7): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version
[  493.819330][T10720] kAFS: unable to lookup cell ''
[  494.095237][T10721] ==================================================================
[  494.104413][T10721] BUG: KASAN: slab-out-of-bounds in ieee80211_monitor_select_queue+0x23a/0x240
[  494.113727][T10721] Read of size 2 at addr ffff88805fa129fb by task syz.6.1660/10721
[  494.121823][T10721] 
[  494.124172][T10721] CPU: 0 PID: 10721 Comm: syz.6.1660 Not tainted syzkaller #0
[  494.131834][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  494.141999][T10721] Call Trace:
[  494.145371][T10721]  <TASK>
[  494.148304][T10721]  dump_stack_lvl+0x188/0x250
[  494.153093][T10721]  ? show_regs_print_info+0x20/0x20
[  494.158519][T10721]  ? load_image+0x400/0x400
[  494.163029][T10721]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  494.168505][T10721]  ? ieee80211_tx+0x460/0x460
[  494.173393][T10721]  print_address_description+0x60/0x2d0
[  494.179314][T10721]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  494.186216][T10721]  kasan_report+0xdf/0x130
[  494.190806][T10721]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  494.197057][T10721]  ieee80211_monitor_select_queue+0x23a/0x240
[  494.204294][T10721]  ? ieee80211_recalc_smps_work+0x20/0x20
[  494.210114][T10721]  netdev_core_pick_tx+0x118/0x2e0
[  494.215432][T10721]  __dev_queue_xmit+0x756/0x2f80
[  494.220637][T10721]  ? __might_fault+0xb7/0x110
[  494.225690][T10721]  ? dev_queue_xmit+0x20/0x20
[  494.230575][T10721]  ? virtio_net_hdr_to_skb+0xa6b/0x11f0
[  494.236430][T10721]  ? packet_cached_dev_get+0x270/0x270
[  494.242195][T10721]  ? skb_copy_datagram_from_iter+0x5e3/0x6a0
[  494.248216][T10721]  packet_sendmsg+0x3dba/0x5060
[  494.253104][T10721]  ? __might_sleep+0xf0/0xf0
[  494.257940][T10721]  ? aa_sk_perm+0x7dc/0x910
[  494.262563][T10721]  ? packet_getsockopt+0x9a0/0x9a0
[  494.268191][T10721]  ? aa_sock_msg_perm+0x94/0x150
[  494.274042][T10721]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  494.279634][T10721]  ? security_socket_sendmsg+0x7c/0xa0
[  494.285205][T10721]  ? packet_getsockopt+0x9a0/0x9a0
[  494.290428][T10721]  ____sys_sendmsg+0x5b7/0x8f0
[  494.295396][T10721]  ? __sys_sendmsg_sock+0x30/0x30
[  494.300691][T10721]  ? import_iovec+0x6f/0xa0
[  494.305321][T10721]  ___sys_sendmsg+0x236/0x2e0
[  494.310112][T10721]  ? __sys_sendmsg+0x2a0/0x2a0
[  494.315096][T10721]  __se_sys_sendmsg+0x1af/0x290
[  494.319966][T10721]  ? __x64_sys_sendmsg+0x80/0x80
[  494.324938][T10721]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  494.331110][T10721]  ? lockdep_hardirqs_on+0x94/0x140
[  494.336493][T10721]  do_syscall_64+0x4c/0xa0
[  494.341209][T10721]  ? clear_bhb_loop+0x30/0x80
[  494.346171][T10721]  ? clear_bhb_loop+0x30/0x80
[  494.350859][T10721]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  494.356843][T10721] RIP: 0033:0x7f2af3c3f799
[  494.361303][T10721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  494.381177][T10721] RSP: 002b:00007f2af1e99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  494.389703][T10721] RAX: ffffffffffffffda RBX: 00007f2af3eb8fa0 RCX: 00007f2af3c3f799
[  494.398223][T10721] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000005
[  494.406729][T10721] RBP: 00007f2af3cd5bd9 R08: 0000000000000000 R09: 0000000000000000
[  494.414761][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  494.422921][T10721] R13: 00007f2af3eb9038 R14: 00007f2af3eb8fa0 R15: 00007fff0410c1e8
[  494.431352][T10721]  </TASK>
[  494.434379][T10721] 
[  494.436822][T10721] Allocated by task 8673:
[  494.441323][T10721]  __kasan_kmalloc+0xb5/0xf0
[  494.446018][T10721]  fib6_info_alloc+0x2e/0xe0
[  494.450873][T10721]  ip6_route_info_create+0x44f/0x1210
[  494.456487][T10721]  ip6_route_add+0x24/0x130
[  494.461010][T10721]  addrconf_add_dev+0x295/0x3c0
[  494.466045][T10721]  addrconf_init_auto_addrs+0x6a0/0xb00
[  494.471855][T10721]  addrconf_notify+0xa6b/0xf00
[  494.476792][T10721]  raw_notifier_call_chain+0xcb/0x160
[  494.482293][T10721]  __dev_notify_flags+0x194/0x300
[  494.487416][T10721]  dev_change_flags+0xe3/0x1a0
[  494.492444][T10721]  do_setlink+0xcdb/0x3d60
[  494.496964][T10721]  rtnl_newlink+0x1658/0x1a50
[  494.502025][T10721]  rtnetlink_rcv_msg+0x844/0xf30
[  494.507322][T10721]  netlink_rcv_skb+0x1f5/0x440
[  494.512266][T10721]  netlink_unicast+0x774/0x920
[  494.517302][T10721]  netlink_sendmsg+0x8ba/0xbe0
[  494.522673][T10721]  __sys_sendto+0x46d/0x620
[  494.527353][T10721]  __x64_sys_sendto+0xda/0xf0
[  494.532112][T10721]  do_syscall_64+0x4c/0xa0
[  494.536656][T10721]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  494.543122][T10721] 
[  494.545476][T10721] The buggy address belongs to the object at ffff88805fa12800
[  494.545476][T10721]  which belongs to the cache kmalloc-512 of size 512
[  494.560241][T10721] The buggy address is located 507 bytes inside of
[  494.560241][T10721]  512-byte region [ffff88805fa12800, ffff88805fa12a00)
[  494.574802][T10721] The buggy address belongs to the page:
[  494.580796][T10721] page:ffffea00017e8400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fa10
[  494.591257][T10721] head:ffffea00017e8400 order:2 compound_mapcount:0 compound_pincount:0
[  494.600224][T10721] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  494.608243][T10721] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41c80
[  494.616863][T10721] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  494.625545][T10721] page dumped because: kasan: bad access detected
[  494.632061][T10721] page_owner tracks the page as allocated
[  494.637789][T10721] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4185, ts 62392954571, free_ts 18651115031
[  494.657857][T10721]  get_page_from_freelist+0x1bbd/0x1ca0
[  494.663725][T10721]  __alloc_pages+0x1ee/0x480
[  494.668594][T10721]  new_slab+0xc0/0x4b0
[  494.672862][T10721]  ___slab_alloc+0x80a/0xdd0
[  494.677460][T10721]  __kmalloc_node_track_caller+0x1fc/0x3a0
[  494.683366][T10721]  __alloc_skb+0x22c/0x750
[  494.688174][T10721]  netlink_ack+0x372/0xb50
[  494.692677][T10721]  netlink_rcv_skb+0x27a/0x440
[  494.697439][T10721]  netlink_unicast+0x774/0x920
[  494.702494][T10721]  netlink_sendmsg+0x8ba/0xbe0
[  494.707291][T10721]  __sys_sendto+0x46d/0x620
[  494.712381][T10721]  __x64_sys_sendto+0xda/0xf0
[  494.717538][T10721]  do_syscall_64+0x4c/0xa0
[  494.721992][T10721]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  494.728016][T10721] page last free stack trace:
[  494.732785][T10721]  free_unref_page_prepare+0x637/0x6c0
[  494.738262][T10721]  free_unref_page+0x8f/0x2a0
[  494.743130][T10721]  free_contig_range+0x96/0xf0
[  494.747906][T10721]  destroy_args+0xf0/0xa00
[  494.752326][T10721]  debug_vm_pgtable+0x321/0x380
[  494.757309][T10721]  do_one_initcall+0x272/0x730
[  494.762089][T10721]  do_initcall_level+0x137/0x1f0
[  494.767111][T10721]  do_initcalls+0x4b/0x90
[  494.771809][T10721]  kernel_init_freeable+0x3e9/0x570
[  494.777049][T10721]  kernel_init+0x19/0x1b0
[  494.781480][T10721]  ret_from_fork+0x1f/0x30
[  494.786166][T10721] 
[  494.788497][T10721] Memory state around the buggy address:
[  494.794439][T10721]  ffff88805fa12880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  494.802946][T10721]  ffff88805fa12900: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  494.811580][T10721] >ffff88805fa12980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  494.819729][T10721]                                                                 ^
[  494.828002][T10721]  ffff88805fa12a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  494.836201][T10721]  ffff88805fa12a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  494.844264][T10721] ==================================================================
[  494.852419][T10721] Disabling lock debugging due to kernel taint
[  494.858833][T10721] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  494.866040][T10721] CPU: 0 PID: 10721 Comm: syz.6.1660 Tainted: G    B             syzkaller #0
[  494.875065][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  494.885318][T10721] Call Trace:
[  494.888615][T10721]  <TASK>
[  494.891568][T10721]  dump_stack_lvl+0x188/0x250
[  494.896363][T10721]  ? show_regs_print_info+0x20/0x20
[  494.901675][T10721]  ? load_image+0x400/0x400
[  494.906302][T10721]  panic+0x2e5/0x810
[  494.910238][T10721]  ? bpf_jit_dump+0xd0/0xd0
[  494.914936][T10721]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  494.920935][T10721]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  494.926967][T10721]  ? _raw_spin_unlock+0x40/0x40
[  494.931839][T10721]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  494.938107][T10721]  check_panic_on_warn+0x80/0xa0
[  494.943298][T10721]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  494.949654][T10721]  end_report+0x6d/0xf0
[  494.953855][T10721]  kasan_report+0x102/0x130
[  494.958696][T10721]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  494.964962][T10721]  ieee80211_monitor_select_queue+0x23a/0x240
[  494.971159][T10721]  ? ieee80211_recalc_smps_work+0x20/0x20
[  494.976916][T10721]  netdev_core_pick_tx+0x118/0x2e0
[  494.982239][T10721]  __dev_queue_xmit+0x756/0x2f80
[  494.987246][T10721]  ? __might_fault+0xb7/0x110
[  494.992212][T10721]  ? dev_queue_xmit+0x20/0x20
[  494.997092][T10721]  ? virtio_net_hdr_to_skb+0xa6b/0x11f0
[  495.002765][T10721]  ? packet_cached_dev_get+0x270/0x270
[  495.008366][T10721]  ? skb_copy_datagram_from_iter+0x5e3/0x6a0
[  495.014596][T10721]  packet_sendmsg+0x3dba/0x5060
[  495.019643][T10721]  ? __might_sleep+0xf0/0xf0
[  495.024355][T10721]  ? aa_sk_perm+0x7dc/0x910
[  495.028985][T10721]  ? packet_getsockopt+0x9a0/0x9a0
[  495.034109][T10721]  ? aa_sock_msg_perm+0x94/0x150
[  495.039056][T10721]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  495.044625][T10721]  ? security_socket_sendmsg+0x7c/0xa0
[  495.050104][T10721]  ? packet_getsockopt+0x9a0/0x9a0
[  495.055231][T10721]  ____sys_sendmsg+0x5b7/0x8f0
[  495.060021][T10721]  ? __sys_sendmsg_sock+0x30/0x30
[  495.065252][T10721]  ? import_iovec+0x6f/0xa0
[  495.070005][T10721]  ___sys_sendmsg+0x236/0x2e0
[  495.074790][T10721]  ? __sys_sendmsg+0x2a0/0x2a0
[  495.079739][T10721]  __se_sys_sendmsg+0x1af/0x290
[  495.085101][T10721]  ? __x64_sys_sendmsg+0x80/0x80
[  495.090151][T10721]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  495.096397][T10721]  ? lockdep_hardirqs_on+0x94/0x140
[  495.101600][T10721]  do_syscall_64+0x4c/0xa0
[  495.106013][T10721]  ? clear_bhb_loop+0x30/0x80
[  495.110692][T10721]  ? clear_bhb_loop+0x30/0x80
[  495.115466][T10721]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  495.121462][T10721] RIP: 0033:0x7f2af3c3f799
[  495.125879][T10721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  495.145484][T10721] RSP: 002b:00007f2af1e99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  495.154053][T10721] RAX: ffffffffffffffda RBX: 00007f2af3eb8fa0 RCX: 00007f2af3c3f799
[  495.162546][T10721] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000005
[  495.170727][T10721] RBP: 00007f2af3cd5bd9 R08: 0000000000000000 R09: 0000000000000000
[  495.179065][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  495.187997][T10721] R13: 00007f2af3eb9038 R14: 00007f2af3eb8fa0 R15: 00007fff0410c1e8
[  495.196190][T10721]  </TASK>
[  495.199296][T10721] Kernel Offset: disabled
[  495.205184][T10721] Rebooting in 86400 seconds..