last executing test programs:

6m26.44333707s ago: executing program 32 (id=7):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x16, 0x6b4e12c8a09f3155, 0x0, 0x0, {0x1e}, [@nested={0x4, 0x3fff}]}, 0x18}}, 0x0)

6m26.316652726s ago: executing program 4 (id=5):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {0x8000, 0x0, 0x0, 0xfffc}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0xffffffff, 0xfffffe, 0x4, 0x5, 0x0, 0x0, 0x1, 0x3, 0x4, 0x0, 0x8, 0xfffffffc, 0xd1b, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0xd6, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x1, 0x1000, 0xe], [0x8, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x4, 0x0, 0x0, 0xfffffffd, 0xb, 0x0, 0x4, 0x9000000, 0x0, 0x0, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000000, 0x3, 0x0, 0x0, 0x0, 0x5fa, 0x7, 0x0, 0x80, 0x100, 0xfffffffd, 0x0, 0x0, 0x7, 0x1, 0x2000, 0x80000003], [0x8000000, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x10000000, 0x100000, 0x0, 0x0, 0x400, 0x40, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x6a1a, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0xfffffffe, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x5, 0x0, 0x0, 0x0, 0xfffffffc], [0x2, 0x80000000, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x683, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x367, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4058, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0xffffffff]}, 0x45c)

6m26.121774416s ago: executing program 4 (id=10):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
unshare(0x64000600)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000180)=0x6})

6m10.732828792s ago: executing program 33 (id=10):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
unshare(0x64000600)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000180)=0x6})

4m41.910164357s ago: executing program 3 (id=289):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0xb, 0x0, 0xfffffffe}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)

4m41.733188476s ago: executing program 3 (id=291):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70ad27, 0x80, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x8, 0x7, 0x6362, 0x5, 0xf7fffffd, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x9, 0x8, 0x802, 0x7fffffffffffffff, 0x8826}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000814)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

4m38.066964828s ago: executing program 3 (id=297):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
syz_emit_ethernet(0x15, &(0x7f0000000040)={@broadcast, @multicast, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@llc={0x4, {@llc={0x8e, 0xc, "a4"}}}}}, 0x0)

4m36.86629571s ago: executing program 3 (id=303):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f0000000080), 0x5005)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x2000000000000308, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1cbb}, 0x94)
capset(0x0, &(0x7f0000000180)={0xced, 0x7, 0x4, 0x30, 0x200, 0x5})
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

4m25.870433896s ago: executing program 5 (id=316):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
syz_emit_ethernet(0x15, &(0x7f0000000040)={@broadcast, @multicast, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@llc={0x4, {@llc={0x8e, 0xc, "a4"}}}}}, 0x0)

4m24.26937348s ago: executing program 5 (id=320):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70ad27, 0x80, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x8, 0x7, 0x6362, 0x5, 0xf7fffffd, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x9, 0x8, 0x802, 0x7fffffffffffffff, 0x8826}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000814)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

4m22.825316974s ago: executing program 5 (id=322):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000006140)=[{{&(0x7f0000002600)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000003100)=""/4080, 0xff0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002d80)=""/136, 0x88}], 0x1}}], 0x2, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

4m21.843368466s ago: executing program 5 (id=327):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x152, &(0x7f0000000640)="$eJzs27/K02AUB+DTP2q1S2dxCLg4FfUKFKkoBhSlg04KrUsrhXaJTr0Ub8c78CYE6dTtFRupWtvBIc33tc+z5MCPwDlDcngDeXvrw2Q0W7yfvVhFp9GI9oPIYt2IXjSjFaVlAACnZJ1SfE8ppWvLuP45Ukp1dwQAVM3+B4DzY/8DwPn5Z/836+4IAKjaq9dvnj3M88HLLOtEfFsWw2JYXsv88dN8cDfb6P2+a1UUw9Y2v1fm2d/5lbjxK7+/N78ad26X+c/s0fN8J+/GqPrxAQAA4Cz0s6295/t+/1BeVn98H9g5v7fjZvtoYwAA/2Hx8dPk3XQ6nisUl6j4+iXiArRxwkXdbyagaptn/Ul3PF/U3QkAAAAAAAAAAAAAAHDIMX4nqntGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2PUjAAD//xPhUKQ=")
close(0x3)
truncate(&(0x7f0000000080)='./file1\x00', 0xa47b)
mount$binder(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000500)={[{@stats}, {@stats}, {@stats}, {@stats}, {@stats}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc2(0x0, r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000)
capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x881, 0xfffffff9})
mremap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x24}}, 0x4004000)
pipe2$9p(&(0x7f00000001c0), 0x0)

4m21.755099s ago: executing program 3 (id=328):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r6, 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0x2, 0x3}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
r7 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4)

4m20.579861262s ago: executing program 5 (id=330):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
syz_emit_ethernet(0x15, &(0x7f0000000040)={@broadcast, @multicast, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@llc={0x4, {@llc={0x8e, 0xc, "a4"}}}}}, 0x0)

4m20.492976747s ago: executing program 3 (id=331):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000010000"], 0x50)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
waitid(0x1, r0, 0x0, 0x8, &(0x7f00000000c0))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3a, 0x0, &(0x7f0000000200)="0ebc406132894962fe4f10229cd970fa80895a0ab6cabf63e0c52104572f16d388de2d4fe7c4809b5dcab54b5717be26fb12d870a9fe153b9444"})

4m16.707829615s ago: executing program 5 (id=336):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000010000"], 0x50)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
waitid(0x1, r0, 0x0, 0x8, &(0x7f00000000c0))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3a, 0x0, &(0x7f0000000200)="0ebc406132894962fe4f10229cd970fa80895a0ab6cabf63e0c52104572f16d388de2d4fe7c4809b5dcab54b5717be26fb12d870a9fe153b9444"})

4m3.742070963s ago: executing program 34 (id=331):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000010000"], 0x50)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
waitid(0x1, r0, 0x0, 0x8, &(0x7f00000000c0))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3a, 0x0, &(0x7f0000000200)="0ebc406132894962fe4f10229cd970fa80895a0ab6cabf63e0c52104572f16d388de2d4fe7c4809b5dcab54b5717be26fb12d870a9fe153b9444"})

4m0.033587987s ago: executing program 35 (id=336):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000010000"], 0x50)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
waitid(0x1, r0, 0x0, 0x8, &(0x7f00000000c0))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3a, 0x0, &(0x7f0000000200)="0ebc406132894962fe4f10229cd970fa80895a0ab6cabf63e0c52104572f16d388de2d4fe7c4809b5dcab54b5717be26fb12d870a9fe153b9444"})

2m55.448253055s ago: executing program 2 (id=513):
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x20, 0x37, 0x16, 0x2, 0x6, 0xfda, 0x3, 0xa4, 0xffffffffffffffff}})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x50280)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
pwritev2(r1, &(0x7f0000000300)=[{&(0x7f00000003c0)="1bbc54a603ff246bd56edbce6558", 0xe}, {&(0x7f0000000040)="010130a7cd08f1cac7c721e886dd", 0x4a}], 0x2, 0xa74a, 0x80000000, 0x10)

2m54.845794106s ago: executing program 2 (id=517):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70ad27, 0x80, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x8, 0x7, 0x6362, 0x5, 0xf7fffffd, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x9, 0x8, 0x802, 0x7fffffffffffffff, 0x8826}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000814)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2m53.758999313s ago: executing program 2 (id=522):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x7)

2m53.43477552s ago: executing program 2 (id=523):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$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")
r1 = creat(&(0x7f0000000e40)='./file1\x00', 0x18)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, r0, 0xec776000)
ioctl$KDFONTOP_COPY(r2, 0x4b72, 0x0)
syz_clone(0x60100100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="f075a44d20fa6b66322c12f649aba91e"}})
fallocate(r1, 0x0, 0xbf5, 0x2000405)
socket$netlink(0x10, 0x3, 0x0)

2m52.08217191s ago: executing program 2 (id=530):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r1 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f0000000080), 0x5005)
connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x2000000000000308, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1cbb}, 0x94)
capset(0x0, &(0x7f0000000180)={0xced, 0x7, 0x4, 0x30, 0x200, 0x5})
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

2m49.356902333s ago: executing program 2 (id=535):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001d00020ee10007000000000008"], 0x14}, 0x1, 0x0, 0x0, 0x22000044}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x4000009, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x0, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x5, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x9, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xf, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffbfff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m48.913533636s ago: executing program 36 (id=535):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001d00020ee10007000000000008"], 0x14}, 0x1, 0x0, 0x0, 0x22000044}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x4000009, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x0, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x5, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x9, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xf, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffbfff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1m35.632724569s ago: executing program 1 (id=734):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}})
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5)

1m35.381033042s ago: executing program 1 (id=735):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mincore(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'gre0\x00', 0x0})
r0 = socket$can_raw(0x1d, 0x3, 0x1)
socket(0x1, 0x803, 0x0)
bind$can_raw(r0, &(0x7f0000000040), 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000380)={r2, 0x1, 0x6, @remote}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860)

1m34.217092653s ago: executing program 1 (id=739):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@minixdf}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@jqfmt_vfsv0}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3ef8, 0x9})
mprotect(&(0x7f0000153000/0x4000)=nil, 0x4000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x13d8c84, 0x0, 0x1, 0x0, &(0x7f0000000140))
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190)
getdents(r0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1008412, &(0x7f00000007c0)={[{@delalloc}, {@data_err_abort}, {@stripe={'stripe', 0x3d, 0x81}}, {@nogrpid}, {@auto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b2}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@noacl}, {@dioread_nolock}]}, 0x1, 0x561, &(0x7f0000000240)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

1m30.704908017s ago: executing program 1 (id=750):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000180)={0x3, 0x4a, 0x2})

1m30.339641296s ago: executing program 1 (id=753):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000)
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$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")
creat(&(0x7f0000000e40)='./file1\x00', 0x18)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xa04080, &(0x7f0000000380)=ANY=[], 0x1, 0x5541, &(0x7f000000ea00)="$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")
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, r0, 0xec776000)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)={0x0, 0x10000002000003, 0x0, 0x0, 0x300})
ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000940)={0x3, 0x1, 0x1f, 0x0, 0x1, &(0x7f0000000540)})
r2 = syz_clone(0x60100100, &(0x7f0000000440), 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000480))
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="f075a44d20fa6b66322c12f649aba91e"}})

1m26.221818851s ago: executing program 1 (id=761):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f0000000540), 0x1, 0x7a1, &(0x7f0000000f80)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48)
r0 = socket$inet6(0xa, 0x1, 0x0)
dup2(r0, r0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
lseek(0xffffffffffffffff, 0x10000, 0x4)
add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x48, 0xfffffffffffffffe)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r5, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1100"], 0x50)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'erspan0\x00'})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0)
lseek(r7, 0x1, 0x4)

1m9.396322141s ago: executing program 37 (id=761):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f0000000540), 0x1, 0x7a1, &(0x7f0000000f80)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48)
r0 = socket$inet6(0xa, 0x1, 0x0)
dup2(r0, r0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
lseek(0xffffffffffffffff, 0x10000, 0x4)
add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x48, 0xfffffffffffffffe)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r5, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1100"], 0x50)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'erspan0\x00'})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0)
lseek(r7, 0x1, 0x4)

51.508727976s ago: executing program 9 (id=845):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000002c0)=""/73)

51.412712031s ago: executing program 9 (id=847):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000040), 0x1003)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r4 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0)

50.250798052s ago: executing program 9 (id=850):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x576, &(0x7f0000005ac0)="$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")
r0 = open(&(0x7f0000000340)='./file1\x00', 0x14b27e, 0x6)
fallocate(r0, 0x0, 0x0, 0x1001f3)
r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6000}], 0x1, 0x5000, 0x0, 0x3)

49.656790593s ago: executing program 9 (id=853):
pwritev2(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000000)="ff74957538bae17c8c2ad5ea3d0ab11bb4a8ab574452b62058fd3c0942ac", 0x1e}], 0x1, 0x10, 0x2, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

49.158419349s ago: executing program 9 (id=855):
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getrusage(0x0, &(0x7f00000006c0))
socket(0x10, 0x3, 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0)
ftruncate(r2, 0x2007ffb)
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
sendfile(r3, r2, 0x0, 0x7ffff000)

48.156273762s ago: executing program 9 (id=859):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0x3}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x40)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0, 0xfffffdea}, 0x1, 0x0, 0x0, 0x801}, 0x4)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, r5)
tkill(r5, 0x7)
wait4(r5, 0x0, 0x2, 0x0)
tkill(r5, 0x37)
ioprio_get$pid(0x1, r5)
syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000004c0)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$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")

30.553105752s ago: executing program 38 (id=859):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0x3}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x40)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0, 0xfffffdea}, 0x1, 0x0, 0x0, 0x801}, 0x4)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, r5)
tkill(r5, 0x7)
wait4(r5, 0x0, 0x2, 0x0)
tkill(r5, 0x37)
ioprio_get$pid(0x1, r5)
syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000004c0)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$eJzs3U1rG9caAOB3ZClfzr12IIR77+ISyKIpIXJs9yOFQtJlaUMD7T4VtmKC5ShYcojdQJNFs+mmhEIpDZT+gO67DP0D/RWBNhBKMO2iFFxGHjmKJfkrcqVGzwOTnKMZzTlHZ96jMzOSFcDQOpn+k4v4b0R8kUSMtazLR7by5Pp2q09vz6RLEmtrH/6axIVN+0qy/0ezzH8i4sfPIs7k2sutLa/MlyqV8mKWn6gv3JioLa+cvbZQmivPla9PTU+ff3166q033+hZW1+9/PvXHzx89/znp1a/+v7xsftJXIyj2bq0XT0o4k5r5mTpzyxViIubNpzsQWGDJOl3BdiTkSzOC5GOAWMxkkU98PL7NCLWgCGViH8YUs15QPPcvkfnwf8YT95ZPwFqb39+/dpIHGqcGx1ZTZ47M0rPd8d7UH5axg+/PLifLrH1dYjD2+QBduXO3Yg4l8+3j39JNv7t3bnGxeOtbS5j2N5/oJ8epvOf5E5EW/znNuY/0WH+M9ohdvfi2T7WpzPt8Z973INiukrnf293nP9uDF3jI1nuX405XyG5eq1SPhcR/46I01E4mOa3up9zfvXRWrd1rfO/dEnLb84Fs3o8zh98/jmzpXrpRdrc6sndiP91nP8mG/2fdOj/9PW4vMMyTpQf/L/buu3bv7/Wvot4pWP/P7ujlWx9f3KicTxMNI+Kdr/dO/FTt/L73f60/49s3f7xpPV+ba3rrrreOPr20B/lbuv2evwfSD5qpA9kj90q1euLkxEHkvfzo5sfn3r23Ga+uX3a/tOnOsf/Vsd/Olp93PWleN694/e6bjoI/T+7q/7ffeLRe5980638nfX/a43U6eyRnYx/O63gi7x2AAAAAAAAMGhyEXE0klxxI53LFYvrn+84HkdylWqtfuZqden6bDS+KzsehVzzTvdYy+chJrPPwzbzU5vy0xFxLCK+HDncyBdnqpXZfjceAAAAAAAAAAAAAAAAAAAABsRol+//p34e6XftgH3X+GGDg/2uBdAP2/7kfy9+6QkYSNvGP/DS2n38uzIALwvv/zC8xD8ML/EPw2un8V8Y2+eKAH877/8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAA9NTlS5fSZW316e2ZND97c3lpvnrz7Gy5Nl9cWJopzlQXbxTnqtW5Srk4U13Ybn+VavXG5FQs3Zqol2v1idryypWF6tL1+pVrC6W58pVywR8bBgAAAAAAAAAAAAAAAAAAgDa15ZX5UqVSXpTomrgQA1GN/Wzguj09PT8orZDoaaLPAxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtPgrAAD//20CM10=")

12.677920127s ago: executing program 8 (id=919):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xfffe}}, 0x14)

12.024613031s ago: executing program 8 (id=920):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r2], 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000240)={0x4, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000280)={0x6, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000100"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x20)
r6 = socket(0x10, 0x3, 0x0)
connect$netlink(r6, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000805}, 0x0)
chdir(&(0x7f0000000500)='./file0\x00')
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000180)={0x3, 0x4a, 0x2})
write$bt_hci(r2, 0x0, 0x0)

11.571923315s ago: executing program 0 (id=923):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x4000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f0000002180)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0xa9b0fe, &(0x7f0000000140)=ANY=[], 0x1, 0x0, &(0x7f0000000000))
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

11.465545511s ago: executing program 7 (id=925):
syz_open_dev$evdev(0x0, 0x2, 0x862b01)
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xc, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00062b0000002b30f7"], 0x0, 0x0, 0x0, 0x0}, 0x0)

11.194047595s ago: executing program 0 (id=926):
r0 = socket(0x11, 0x3, 0xff)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYRES64=r1, @ANYRES8=r3, @ANYRES16=r1, @ANYRES64=r1, @ANYBLOB="2c6469736361726459ad809e1eb82c00fb278330ab3b4884d36adf6908d11f5783dc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14fc, &(0x7f00000062c0)="$eJzs3AuUjlXbOPB97b1vxjTpaZLDsK993TxpsE2S5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDR5pUmSkJCw/0vv+356v97v6/3W2/+z1jfXb629Zl9zP9f1XPdcs+a572eteb7rOapei/q1mxGR+LfAX7+kCCFihBDDhBDXCSECIUSl+Erxl48XUJDy7z0J+3M9nH61O2BXE88/b+P55208/7yN55+38fzzNp5/3sbzz9t4/ozlZdvnFLueV95d/P5/Xsav//+H5Jaf/NXG8jf2+h+k8PzzNp5/3sbzz9t4/nkbzz9v4/n/31frvznG88/beP6M5WVX+/1nXld3Xe3fP8YYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjecM5f4UWQvx9f7X7YowxxhhjjDHG2J/H57/aHTDGGGOMMcYYY+z/PxBSKKFFIPKJ/CJGFBCx4hoRJ64VBcV1IiKuF/HiBlFI3CgKiyKiqCgmEkRxUUIYgcIKEqEoKUqJqLhJlBY3i0RRRpQV5YQT5UWSuEVUELeKiuI2UUncLiqLO0QVUVVUE9XFnaKGuEvUFLVEbXG3qCPqinqivrhHNBD3iobiPtFI3C8aiwdEE/GgaCoeEs3Ew6K5eES0EI+KluIx0Uq0Fm1EW9Hut/l98/+L+S+JvuJl0U/0FyligBgoXhGDxGAxRAwVw8SrYrh4TYwQr4tUMVKMEm+I0eJNMUa8JcaKcWK8eFtMEBPFJDFZTBFTRZp4R0wT74rp4j0xQ8wUs8RskS7miLnifTFPzBcLxAdiofhQLBKLxRKxVGSIj0SmWCayxMdiufhEZIsVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLT8UOsVPsErvFHrFX7BOfif3ic3FAfCFyxJf/w/yz/ym/FwgQIEGCBg35IB/EQAzEQizEQRwUhIIQgQjEQzwUgkJQGApDUSgKCZAAJaAEICAQEJSEkhCFKJSG0pAIiVAWyoIDB0mQBBXgVqgIFaESVILKUBmqQFWoCtWhOtSAGlATakJtqA11oA7Ug3pwD9wD90JDaAiNoBE0hsbQBJpAU2gKzaAZNIfm0AJaQEtoCa2gFbSBNtAO2kF7aA8doAN0gk7QGTpDF+gCyZAMXaErdINu0B26Qw/oAT2hJ/SC3tAbXoKX4GV4GfpDHTkABsJAGASDYAgMhaHwKgyH1+A1eB1SYSSMgjfgDXgTxsAZGAvjYDyMhxpyIkyCyUByKqRBGkyDaTAdpsMMmAkzYTakwxyYC3NhHsyH+fABLIQP4UNYDIthKWRABmTCMsiCLFgOZyEbVsBKWAWrYQ2shnWwHtbBRtgEG2ELbIFtsA0+hU9hJ+yE3bAb9sJe+Aw+g8/hc0iFHMiBg3AQDsEhOAyHIRdy4QgcgaNwFI7BMTgOx+EEnIRTcBJOw2k4A2fhHJyD83AeLsALCd8031tmQ6qQl2mpZT6ZT8bIGBkrY2WcjJMFZUEZkREZL+NlIVlIFpaFZVFZVCbIBFlClpAoUZIMZUlZUkZlVJaWpWWiTJRlZVnppJNJMklWkBVkRVlRVpK3y8ryDllFVpUdXXVZXdaQnVxNWUvWlrVlHVlX1pP1ZX3ZQDaQDWVD2Ug2ko1lY9lEPiibygEwBB6WlyfTQo6ElnIUtJKtZRvZVr4Jj8v2cgx0kB1lJ/mkHAdjoYts75LlM7KrnATd5HNyMjwve8ip0FO+KHvJ3rKPfEn2lR1cP9lfzoABcqCcDYPkYDlEDpXzoK68PLF68nWZKkfKUfINuRTelGPkW3KsHCfHy7flBDlRTpKT5RQ5VabJd+Q0+a6cLt+TM+RMOUvOlulyjpwr35fz5Hy5QH4gF8oP5SK5WC6RS2WG/EhmymUyS34sl8tPZLZcIVfKVXK1XCPXynVyvdwgN8pNcrPcIrfKbXK7/FTukDvlLrlb7pF75T75mdwvP5cH5BcyR34pD8q/yEPyK3lYfi1z5TfyiPxWHpXfyWPye3lc/iBPyJPylPxRnpY/yTPyrDwnf5bn5S/ygrwoL0kvhQIllVJaBSqfyq9iVAEVq65RcepaVVBdpyLqehWvblCF1I2qsCqiiqpiKkEVVyWUUaisIhWqkqqUiqqbVGl1s0pUZVRZVU45VV4lqVtUBXWrqqhuU5XU7aqyukNVUVVVNVVd3alqqLtUTVVL1VZ3qzqqrqqn6qt7VAN1r2qo7lON1P2qsXpANVEPqqbqIdVMPayaq0dUC/WoaqkeU61Ua9VGtVXt1OOqvXpCdVAdVSf1pOqsnlJd1NMqWT2juqpnVTf1nOqunlc91Auqp3pR9VK9VR91UV1SXvVT/VWKGqAGqlfUIDVYDVFD1TD1qhquXlMj1OsqVY1Uo9QbarR6U41Rb6mxapwar95WE9RENUlNVlPUVJWm3lHT1LtqunpPzVAz1Sw1W6WrOWrI3yot+Bfy3/0n+SN+ffZtarv6VO1QO9UutVvtUXvVPrVP7Vf71QF1QOWoHHVQHVSH1CF1WB1WuSpXHVFH1FF1VB1Tx9RxdVydUCfVz+pHdVr9pM6os+qs+lmdV+fVhb/9DIQGLbXSWgc6n86vY3QBHauv0XH6Wl1QX6cj+nodr2/QhfSNurAuoovqYjpBF9cltNGorSYd6pK6lI7qm3RpfbNO1GV0WV1OO11eJ+lb/u38P+qvnW6n2+v2uoPuoDvpTrqz7qy76C46WSfrrrqr7qa76e66u+6he+ieuqfupXvpPrqP7qv76n66n07RKXqgfkUP0oP1ED1UD9Ov6uF6uB6hR+hUnapH6VF6tB6tx+gxeqweq8fr8XqCnqAn6Ul6ip6i03Sanqan6el6up6hZ+hZepZO1+l6rp6r5+l5eoFeoBfqhXqRXqSX6CU6Q2foTJ2ps3SWXq6X62y9Qq/Qq/QqvUav0ev0Or1Bb9Cb9Ca9RW/R2Xq73q536B16l96l9+g9ep/ep/fr/fqAPqBzdI4+qA/qQ/qQPqwP61ydq4/oI/qoPqqP6WP6uD6uT+gT+pQ+pU/r0/qMPqPP6XP6vD6vL+gL+pK+dPmyL5CBDHSgg3xBviAmiAlig9ggLogLCgYFg0gQCeKD+KBQcGNQOCgSFA2KBQlB8aBEYAIMbEBBGJQMSgXR4KagdHBzkBiUCcoG5QIXlA+SgluCCsGtQcXgtqBScHtQObgjqBJUDaoF1YM7gxrBXUHNoFZQO7g7qBPUDeoF9YN7ggbBvUHD4L6gUXB/0Dh4IGgSPBg0DR4KmgUPB82DR4IWwaNBy+CxoFXQOmgTtA3a/an1vT9T5AnXz/Q3KWaAGWheMYPMYDPEDDXDzKtmuHnNjDCvm1Qz0owyb5jR5k0zxrxlxppxZrx520wwE80kM9lMMVNNmnnHTDPvmunmPTPDzDSzzGyTbuaYueZ9M8/MNwvMB2ah+dAsMovNErPUZJiPTKZZZrLMx2a5+cRkmxVmpVllVps1Zq1ZZ9abDWaj2WQ2my1mq9lmtptPzQ6z0+wyu80es9fsM5+Z/eZzc8B8YXLMl+ag+Ys5ZL4yh83XJtd8Y46Yb81R8505Zr43x80P5oQ5aU6ZH81p85M5Y86ac+Znc978Yi6Yi+aS8Zcv7i+/vKNGjfkwH8ZgDMZiLMZhHBbEghjBCMZjPBbCQlgYC2NRLIoJmIAlsAReRkhYEktiFKNYGktjIiZiWSyLDh0mYRJWwApYEStiJayElbEyVsEqWA2r4Z14J96Fd2EtrIV3491YF+tifayPDbABNsSG2AgbYWNsjE2wCTbFptgMm2FzbI4tsAW2xJbYClthG2yD7bAdtsf22AE7YCfshJ2xM3bBLpiMydgVu2I37IbdsTv2wB7YE3tiL+yFfbAP9sW+2A/7YQqm4EAciINwEA7BITgMh+FwHI4jcASmYiqOwlE4GkfjGByDY3Ecjse3cQJOxEk4GafgVEzDNJyG03A6TscZOANn4SxMx3Sci3NxHs7DBbgAF+JCXISLcAkuwQzMwEzMxCzMwuW4HLMxG1fiSlyNq3EtrsX1uB434kbcjJtxK27F7bgdd+AO3IW7cA/uwX24D/fjfjyABzAHc/AgHsRDeAgP42HMxVw8gkfwKB7FY3gMj+NxPIEn8BSewtN4Gs/gGTyH5/A8/oIX8CJeQo8xVopYe42Ns9fagvY6G2ML2N/GRW0xm2CL2xLW2MK2yD/EaK1NtGVsWVvOOlveJtlbfhdXsVVtNVvd3mlr2Ltszd/FDey9tqG9zzay99v69p5/iBvbB2wT+6htah+zzWxr29y2tS3so7alfcy2sq1tG9vWdrZP2S72aZtsn7Fd7bO/izPtMrvebrAb7Sa7335uz9mf7VH7nT1vf7H9bH87zL5qh9vX7Aj7uk21I38Xj7dv2wl2op1kJ9spdurv4ll2tk23c+xc+76dZ+f/Ls6wH9mFNssusovtErv01/hyT1n2Y7vcfmKz7Qq70q6yq+0au9au+49eV9ktdqvdZvfZz+wOu9PusrvtHrv31/jyeRywX9gc+6U9Yr+1h+xX9rA9ZnPtN7/Gl8/vmP3eHrc/2BP2pD1lf7Sn7U/2jD376/lfPvcf7UV7yXorCEiSIk0B5aP8FEMFKJauoTi6lgrSdRSh6ymebqBCdCMVpiJUlIpRAhWnEmQIyRJRSCWpFEXpJipNN1MilaGyVI4clackuoUq0K1UkW6jSnQ7VaY7qApVpWpUne6kGnQX1aRaVJvupjpUl+pRfbqHGtC91JDuo0Z0PzWmB6gJPUhN6SFqRg9Tc3qEWtCj1JIeo1bUmtpQW2pHj1N7eoI6UEfqRE9SZ3qKutDTlEzPUFd6lrrRc9Sdnqce9AL1pBepF/WmPvQS9aWXqR/1pxQaQAPpFRpEg2kIDaVh9CoNp9doBL1OqTSSRtEbNJrepDH0Fo2lcTSe3qYJNJEm0WSaQlMpjd6hafQuTaf3aAbNpFk0m9JpDs2l92kezacF9AEtpA9pES2mJbSUMugjyqRllEUf03L6hLJpBa2kVbSa1tBaWkfraQNtpE20mbbQVtpG2+lT2kE7aRftpj20l/bRZ7SfPqcD9AXl0Jd0kP5Ch+grOkxfUy59Q0foWzpK39Ex+p6O0w90gk7SKfqRTtNPdIbO0jn6mc7TL3SBLtIl8iRCCGWoQh0GYb4wfxgTFghjw2vCuPDasGB4XRgJrw/jwxvCQuGNYeGwSFg0LBYmhMXDEqEJMbQhhWFYMiwVRsObwtLhzWFiWCYsG5YLXVg+TApvCSuEt4YVw9vCSuHtYeXwjrBKWDV89P7q4Z1hjfCusGZYK6wd3h3WCeuG9cL64T1hg/DesGF4X9govD+sGD4QNgkfDJuGD4XNwofD5uEjYYvw0bBl+FjYKmwdtgnbhu3Cx8P24RNhh7Bj2Cl8MuwcPhV2CZ8Ok8Nnwq7hs394PCUcEA4MXwlfCb2/Ty2JLo1mRD+KZkaXRbOiH0eXRz+JZkdXRFdGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W9r59fOHDSKadd4PK5/C7GFXCx7hoX5651Bd11LuKud/HuBlfI3egKuyKuqCvmElxxV8IZh846cqEr6Uq5qLvJlXY3u0RXxpV15Zxz5V2Sa+vauXauvXvCdXAdXSf3pHvSPeWeck+7p90zrqt71nVzz7nu7nnXw73gXnAvul6ut+vjXnJ93cuun+vvUlyKG+gGukFukBvihrhhbpgb7oa7EW6ES3WpbpQb5Ua70W6MG+PGurFuvBvvJrgJbpKb5Ka4KS7Npblpbpqb7qa7GW6Gm+VmuXSX7ua6uW6em+cWuAVuYeJCt8gtckvcEpfhMlymy3RZLsstd8tdtst2K91Kt9qtdmvdWrferXcb3Ua32W12W91Wt91tdzvcDrfL7XJ73B63z+1z+91+d8AdcDkuxx10B90hd8gddl+7XPeNO+K+dUfdd+6Y+94ddz+4E+6kO+V+dKfdT+6MO+vOuZ/defeLu+AuukvOu7TIO5FpkXcj0yPvRWZEZkZmRWZH0iNzInMj70fmReZHFkQ+iCyMfBhZFFkcWRJZGsmIfBTJjCyLZEU+jiyPfBLJjqyIrIysiqyOrIl4X3xH6Ev6Uj7qb/Kl/c0+0ZfxZX0573x5n+Rv8RX8rb6iv81X8rf7yv4OX8VX9dX8Y76Vb+3b+La+nX/ct/dP+A6+o+/kn/Sd/VO+i3/aJ/tnfFf/rO/mn/Pd/fO+h3/B9/Qv+l6+t+/jX/J9/cu+n+/vU/wAP9C/4gf5wX6IH+qH+Vf9cP+aH+Ff96l+pB/l3/Cj/Zt+jH/Lj/Xj/Hj/tp/gJ/pJfrKf4qf6NP+On+bf9dP9e36Gn+ln+dk+3c/xc/37fp6f7xf4D/xC/6Ff5Bf7JX6pz/Af+Uy/zGf5j/1y/4nP9iv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/ef+h1+p9/ld/s9fq/f5z/z+/3n/oD/wuf4L/1B/xd/yH/lD/uvfa7/xh/x3/qj/jt/zH/vj/sf/Al/0p/yP/rT/id/xp/15/zP/rz/xV/wF/0l/p81xhhjjLF/ifqD4wP+yffk39ZlA4UQ1+4slvufa24u/Nf9YJnQOSKEeKZ/z4f/vurUSdn698dmKxGUWiyEiFzJzyeuxCtEJ/GUSBYdRYV/2t9g2fs8/b5+Sspv6kdvFyL2Nzkx4kp8pf6t/0X9x58cn1k5PBf/39RfLERiqSs5BcSV+Er9iv9F/SLt/6D/Al+lCdHhNzlx4kp8pX6SeEI8K5L/4ZGMMcYYY4wxxthfDZbVuv/R/fPl+/MEfSUnv7gS/9H9OWOMMcYYY4wxxq6+53v3efrx5OSO3XnDG97w5j82V/svE2OMMcYYY+zPduWi/2p3whhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5V3/Gx8ndrXPkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLva/l8AAAD//zG6PD0=")
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

10.91036059s ago: executing program 6 (id=927):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000000000000000400000000001b23072a7054b2a300001000020000000000200000000000"], 0x24, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0)
rmdir(&(0x7f0000000380)='./file0/../file0\x00')

10.601187956s ago: executing program 0 (id=928):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x42142, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x6)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x45ea5000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
syz_emit_ethernet(0x15, &(0x7f0000000040)={@broadcast, @multicast, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@llc={0x4, {@llc={0x8e, 0xc, "a4"}}}}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x1)
write$binfmt_register(r4, &(0x7f0000000880)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113)

8.381788062s ago: executing program 8 (id=929):
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@loopback}}}, &(0x7f0000000240)=0xe8)
setuid(r0)
r1 = syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000740)={0x0})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)
getdents(r1, &(0x7f0000001ec0)=""/4096, 0x1000)

8.22061079s ago: executing program 6 (id=930):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80080000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4000000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

7.191764034s ago: executing program 7 (id=931):
mkdirat(0xffffffffffffff9c, 0x0, 0xc8)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1)

7.166090536s ago: executing program 8 (id=932):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x40)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
setpgid(0x0, 0x0)
tkill(0x0, 0x7)
ioprio_get$pid(0x1, 0x0)

7.043274012s ago: executing program 7 (id=933):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0x2, 0x3}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
r8 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$kcm(r8, 0x0, 0x4)

5.493859203s ago: executing program 7 (id=934):
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100027a2571407b1f0c55bd460102030109022b00010406100109044a06020806620809058904000205070209"], 0x0)

5.486504743s ago: executing program 6 (id=935):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f0000000240), 0x1, 0x56a, &(0x7f0000000780)="$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")

5.466794665s ago: executing program 4 (id=883):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000000c0)={0x2, 0x3, 0x7ff, 0x401, 0xfffffffb, 0x3})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x40, 0x10, 0x68, {0x68, 0x9, "6fdd741458581e43df3e7bc2f2f8e3e5b8ec77bddc2f937aafd5120013c959098bfcb15829f6ce9c373fa43a4a5010fe9ef8cf8c1ed861dabf7d7ba7e297af3f8a6ddf092ace8fb60c597d45e28a1289d7db84d6172d05547d07af979a7d61363d2574976d7c"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

5.143578641s ago: executing program 8 (id=936):
mknod$loop(0x0, 0x6000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0xfe00, 0xffffffffffffffff)

4.97043589s ago: executing program 6 (id=937):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000280)='./file1\x00', 0x1000010, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x554b, &(0x7f000000c300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xf8)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)
mkdir(&(0x7f0000000000)='./bus\x00', 0x64)

4.289589786s ago: executing program 0 (id=938):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r2], 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000240)={0x4, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000280)={0x6, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000100"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x20)
r6 = socket(0x10, 0x3, 0x0)
connect$netlink(r6, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000805}, 0x0)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000180)={0x3, 0x4a, 0x2})
write$bt_hci(r2, 0x0, 0x0)

3.301874738s ago: executing program 7 (id=939):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000000000000000400000000001b23072a7054b2a300001000020000000000200000000000"], 0x24, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0)
rmdir(&(0x7f0000000380)='./file0/../file0\x00')

3.045381131s ago: executing program 4 (id=940):
syz_open_dev$evdev(0x0, 0x2, 0x862b01)
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xc, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00062b0000002b30f7"], 0x0, 0x0, 0x0, 0x0}, 0x0)

2.953909796s ago: executing program 6 (id=941):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)

1.550219639s ago: executing program 0 (id=942):
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@loopback}}}, &(0x7f0000000240)=0xe8)
setuid(r0)
r1 = syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000740)={0x0})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)
getdents(r1, &(0x7f0000001ec0)=""/4096, 0x1000)

740.900912ms ago: executing program 7 (id=943):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0x2, 0x3}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
r8 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4)

219.751338ms ago: executing program 0 (id=944):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80080000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4000000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

94.023965ms ago: executing program 4 (id=945):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@barrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c)
pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x6fecb1)

14.11333ms ago: executing program 6 (id=946):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x40)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
setpgid(0x0, 0x0)
tkill(0x0, 0x7)
ioprio_get$pid(0x1, 0x0)

0s ago: executing program 8 (id=947):
mkdir(&(0x7f0000000180)='./file0\x00', 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0)
statx(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r5)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r5)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xa0}, 0x800)

kernel console output (not intermixed with test programs):

 config
[  307.505815][ T7457] binfmt_misc: register: failed to install interpreter file ./file2
[  307.526498][ T7241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.541682][ T7241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.554739][ T7241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.568202][ T7241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.746202][ T7241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.757252][ T7241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.774550][ T7241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.789219][ T7241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.804092][ T7241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.820594][ T7241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.841124][ T7241] batman_adv: batadv0: Interface activated: batadv_slave_1
[  307.867125][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  307.883997][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  307.910811][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  307.930762][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  307.952483][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  307.985154][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  308.037562][ T7241] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.066500][ T7241] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.086359][ T7241] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.119816][ T7241] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.188317][ T4276] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  308.197353][ T4276] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  308.240955][ T4276] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  308.299858][ T4276] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  308.366393][ T4276] usb 2-1: config 1 interface 1 has no altsetting 0
[  308.576109][ T4417] tipc: Left network mode
[  308.669017][ T4276] usb 2-1: string descriptor 0 read error: -22
[  308.676112][ T4276] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  308.695765][ T4276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.851093][ T4889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.858991][ T4889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.863138][ T7477] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  308.882525][ T4233] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  308.890777][ T7477] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  308.915136][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  308.950631][ T4889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.979186][ T4889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.013332][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  309.075269][ T4276] usb 2-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4
[  309.084913][ T4276] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  309.155482][ T7485] loop1: detected capacity change from 0 to 256
[  309.192585][ T4276] usb 2-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4
[  309.213529][ T4276] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  309.245897][ T4276] usb 2-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4
[  309.266869][ T4276] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  309.275227][ T4233] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  309.308307][ T4276] usb 2-1: USB disconnect, device number 12
[  309.320319][ T7488] device syzkaller0 entered promiscuous mode
[  309.326631][ T4233] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  309.418741][ T7485] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  309.438391][ T7485] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  309.462972][ T7485] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d)
[  310.709861][ T4233] usb 7-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40
[  310.718967][ T4233] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.738130][ T4233] usb 7-1: Product: syz
[  310.742636][ T4233] usb 7-1: Manufacturer: syz
[  310.747266][ T4233] usb 7-1: SerialNumber: syz
[  310.953847][ T7502] loop8: detected capacity change from 0 to 512
[  311.073267][ T7502] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  311.240710][ T7502] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #18: comm syz.8.584: iget: bad extra_isize 58 (inode size 256)
[  311.335979][ T7502] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.584: error while reading EA inode 18 err=-117
[  311.403232][ T7502] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  311.469091][ T7502] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #11: comm syz.8.584: iget: bad extra_isize 58 (inode size 256)
[  311.550915][ T7502] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.584: error while reading EA inode 11 err=-117
[  311.650884][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  311.676913][ T7502] EXT4-fs (loop8): 1 orphan inode deleted
[  311.696643][ T7502] EXT4-fs (loop8): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,prjquota,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000003a,min_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback.
[  311.757093][ T4233] usb 7-1: Can't get UAC3 power state for id 10
[  311.842708][ T4233] usb 7-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4
[  311.856295][ T4417] device hsr_slave_0 left promiscuous mode
[  311.876761][ T4233] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2)
[  311.885108][ T4417] device hsr_slave_1 left promiscuous mode
[  311.898073][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  311.905560][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0
[  311.975481][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  312.016369][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1
[  312.033147][ T4233] snd-usb-audio: probe of 7-1:1.0 failed with error -71
[  312.052282][ T4233] usb 7-1: USB disconnect, device number 6
[  312.066352][ T4417] device bridge_slave_1 left promiscuous mode
[  312.077609][ T4281] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  312.088556][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.154821][ T4417] device bridge_slave_0 left promiscuous mode
[  312.169003][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.262564][ T4417] device veth1_macvtap left promiscuous mode
[  312.331573][ T4417] device veth0_macvtap left promiscuous mode
[  312.370453][ T4417] device veth1_vlan left promiscuous mode
[  312.402851][ T4417] device veth0_vlan left promiscuous mode
[  312.515782][ T4233] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  312.725991][ T4281] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.737876][ T4281] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  312.759320][ T4281] usb 10-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00
[  312.769018][ T4281] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.785878][ T4281] usb 10-1: config 0 descriptor??
[  312.803549][ T7519] loop7: detected capacity change from 0 to 40427
[  312.825912][ T7519] F2FS-fs (loop7): Failed to get valid F2FS checkpoint
[  312.922228][ T4233] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  312.944163][ T4233] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  312.954075][ T1108] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  313.015478][ T4417] team0 (unregistering): Port device team_slave_1 removed
[  313.048479][ T4417] team0 (unregistering): Port device team_slave_0 removed
[  313.060879][ T4233] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  313.069968][ T4233] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  313.099585][ T4233] usb 7-1: SerialNumber: syz
[  313.119471][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  313.134706][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  313.239623][ T7541] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  313.477918][ T4281] usbhid 10-1:0.0: can't add hid device: -71
[  313.508287][ T4281] usbhid: probe of 10-1:0.0 failed with error -71
[  313.936018][ T4281] usb 10-1: USB disconnect, device number 2
[  314.272160][ T4417] bond0 (unregistering): Released all slaves
[  314.962909][ T1108] usb 2-1: Using ep0 maxpacket: 8
[  314.986843][ T7525] netlink: 36 bytes leftover after parsing attributes in process `syz.8.588'.
[  315.115062][ T4233] usb 7-1: 0:2 : does not exist
[  315.151553][ T4233] usb 7-1: USB disconnect, device number 7
[  315.174701][ T7553] loop7: detected capacity change from 0 to 128
[  315.177227][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short
[  315.203132][ T7554] device batadv_slave_0 entered promiscuous mode
[  315.224651][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.9.594'.
[  315.246455][ T7554] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.294274][ T1108] usb 2-1: config 1 interface 0 has no altsetting 0
[  315.373323][ T7554] device bridge_slave_1 left promiscuous mode
[  315.388706][ T7554] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.465428][ T1108] usb 2-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.40
[  315.483554][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.523791][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  315.539936][ T1324] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  315.562012][ T1108] usb 2-1: Product: syz
[  315.566250][ T1108] usb 2-1: Manufacturer: syz
[  315.580654][ T1108] usb 2-1: SerialNumber: syz
[  315.671768][ T7550] device batadv_slave_0 left promiscuous mode
[  316.017075][ T7572] capability: warning: `syz.9.597' uses 32-bit capabilities (legacy support in use)
[  316.051964][ T1108] usbhid 2-1:1.0: can't add hid device: -71
[  316.084378][ T1108] usbhid: probe of 2-1:1.0 failed with error -71
[  316.154431][ T1324] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.234491][ T1324] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.534780][ T1324] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  316.667197][ T1324] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  316.897119][ T1324] usb 9-1: Manufacturer: syz
[  316.922843][ T1324] usb 9-1: config 0 descriptor??
[  317.079757][ T1108] usb 2-1: USB disconnect, device number 13
[  317.944396][ T1324] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71
[  317.975107][ T1324] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71
[  318.023571][ T1324] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71
[  318.072431][ T1324] uclogic 0003:256C:006D.0006: failed probing parameters: -71
[  318.134178][ T1324] uclogic: probe of 0003:256C:006D.0006 failed with error -71
[  318.190139][ T1324] usb 9-1: USB disconnect, device number 4
[  318.606801][ T1108] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  318.849167][ T7591] loop7: detected capacity change from 0 to 40427
[  318.992958][ T7591] F2FS-fs (loop7): Failed to get valid F2FS checkpoint
[  319.002394][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.066357][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  319.216713][ T7617] loop8: detected capacity change from 0 to 4096
[  319.255791][ T7588] loop9: detected capacity change from 0 to 40427
[  319.275320][ T1108] usb 2-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00
[  319.293048][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.307008][ T1108] usb 2-1: config 0 descriptor??
[  319.319992][ T7617] EXT4-fs (loop8): inline encryption not supported
[  319.336454][ T7588] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64)
[  319.395590][ T7617] EXT4-fs (loop8): Test dummy encryption mode enabled
[  319.418500][ T7588] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  319.451155][ T7617] EXT4-fs (loop8): Ignoring removed bh option
[  319.457313][ T7617] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled
[  319.487309][ T7588] F2FS-fs (loop9): build fault injection attr: rate: 0, type: 0x6
[  319.564922][ T7588] F2FS-fs (loop9): invalid crc value
[  319.633645][ T7617] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  319.641871][ T7617] System zones: 0-5
[  319.645332][ T7588] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  319.672176][ T7630] loop7: detected capacity change from 0 to 512
[  319.791276][ T7617] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,sysvgroups,inlinecrypt,test_dummy_encryption,grpjquota=,bh,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[  319.973437][ T7588] F2FS-fs (loop9): Start checkpoint disabled!
[  319.990871][ T1108] usbhid 2-1:0.0: can't add hid device: -71
[  320.002426][ T7630] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2757: inode #11: comm syz.7.611: corrupted xattr block 95
[  320.028352][ T1108] usbhid: probe of 2-1:0.0 failed with error -71
[  320.051569][ T7588] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  320.126170][ T7630] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.611: bg 0: block 7: invalid block bitmap
[  320.143020][ T1108] usb 2-1: USB disconnect, device number 14
[  320.152887][ T7588] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  320.185964][ T7617] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  320.290946][ T7631] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 264: padding at end of block bitmap is not set
[  320.354380][ T7630] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  320.381252][ T7630] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2923: inode #11: comm syz.7.611: corrupted xattr block 95
[  320.527782][ T7630] EXT4-fs warning (device loop7): ext4_evict_inode:304: xattr delete (err -117)
[  320.594482][ T7630] EXT4-fs (loop7): 1 orphan inode deleted
[  320.623298][ T7630] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  322.510448][ T7665] loop7: detected capacity change from 0 to 512
[  322.673727][ T7665] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.617: missing EA_INODE flag
[  322.758138][ T7665] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.617: error while reading EA inode 12 err=-117
[  322.916851][ T7665] EXT4-fs (loop7): 1 orphan inode deleted
[  323.009468][ T7665] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  323.411338][ T7688] binfmt_misc: register: failed to install interpreter file ./file2
[  323.425678][ T7692] device batadv_slave_0 entered promiscuous mode
[  323.497727][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'.
[  323.653654][ T7689] device batadv_slave_0 left promiscuous mode
[  323.954239][ T7710] loop1: detected capacity change from 0 to 512
[  324.124722][ T7711] xt_TPROXY: Can be used only with -p tcp or -p udp
[  324.386791][ T7710] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  324.804883][ T7710] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e11c, mo2=0002]
[  324.861144][ T7710] System zones: 1-12
[  324.866164][ T7710] EXT4-fs (loop1): orphan cleanup on readonly fs
[  324.877501][ T7710] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.624: bg 0: block 361: padding at end of block bitmap is not set
[  324.900257][ T7710] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  324.911264][ T7710] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.624: invalid indirect mapped block 12 (level 1)
[  324.944016][ T7710] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.624: invalid indirect mapped block 2 (level 2)
[  324.968965][ T7710] EXT4-fs (loop1): 1 truncate cleaned up
[  324.974717][ T7710] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,grpid,resuid=0x0000000000000000,inode_readahead_blks=0x0000000000001000,errors=continue. Quota mode: none.
[  325.089446][ T7710] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #2: block 5: comm syz.1.624: lblock 0 mapped to illegal pblock 5 (length 1)
[  325.206478][ T7710] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.624: error -117 reading directory block
[  325.256277][ T7671] loop6: detected capacity change from 0 to 40427
[  325.337426][ T7671] F2FS-fs (loop6): Failed to get valid F2FS checkpoint
[  325.571829][ T1108] usb 8-1: new low-speed USB device number 2 using dummy_hcd
[  325.692247][ T7735] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  325.704646][ T7735] device syzkaller0 entered promiscuous mode
[  325.954796][ T7748] loop9: detected capacity change from 0 to 256
[  325.996368][ T1108] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  326.024727][ T7742] device syzkaller0 entered promiscuous mode
[  326.037189][ T7748] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  326.037211][ T1108] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  326.086118][ T1108] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  326.121251][ T1108] usb 8-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  326.151109][ T1108] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.187819][ T1108] usb 8-1: config 0 descriptor??
[  326.247675][ T7722] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  326.483953][ T7756] loop9: detected capacity change from 0 to 512
[  326.513130][ T7722] loop7: detected capacity change from 0 to 256
[  327.000505][ T7756] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #12: comm syz.9.633: missing EA_INODE flag
[  327.327064][ T7756] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.633: error while reading EA inode 12 err=-117
[  327.453217][ T7756] EXT4-fs (loop9): 1 orphan inode deleted
[  327.480181][ T7756] EXT4-fs (loop9): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  327.889623][   T23] Bluetooth: hci1: command 0x1003 tx timeout
[  327.914348][ T4200] Bluetooth: hci1: sending frame failed (-49)
[  327.991315][ T7772] binfmt_misc: register: failed to install interpreter file ./file2
[  328.559928][ T1108] usbhid 8-1:0.0: can't add hid device: -71
[  328.581434][ T1108] usbhid: probe of 8-1:0.0 failed with error -71
[  328.609971][ T1108] usb 8-1: USB disconnect, device number 2
[  328.738948][ T7758] loop1: detected capacity change from 0 to 40427
[  328.804234][ T7758] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  328.810931][ T7778] loop7: detected capacity change from 0 to 512
[  328.837458][ T7758] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  328.855473][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.9.635'.
[  328.927151][ T7758] F2FS-fs (loop1): Found nat_bits in checkpoint
[  328.971684][ T7778] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  329.016968][ T7778] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  329.088480][ T7758] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  329.150986][ T7758] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  329.941409][ T7804] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  330.073181][ T7804] exFAT-fs (loop8): unable to read boot sector
[  330.079910][ T7804] exFAT-fs (loop8): failed to read boot sector
[  330.155219][ T6410] Bluetooth: hci1: command 0x1001 tx timeout
[  330.155268][ T7808] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  330.184879][ T4200] Bluetooth: hci1: sending frame failed (-49)
[  330.233123][ T7804] exFAT-fs (loop8): failed to recognize exfat type
[  330.241712][ T7808] device syzkaller0 entered promiscuous mode
[  331.486283][ T7829] loop8: detected capacity change from 0 to 512
[  332.041537][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  332.048155][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  332.076854][ T7831] loop7: detected capacity change from 0 to 512
[  332.092880][ T7800] loop9: detected capacity change from 0 to 40427
[  332.380222][ T7800] F2FS-fs (loop9): Failed to get valid F2FS checkpoint
[  332.404269][ T4262] Bluetooth: hci1: command 0x1009 tx timeout
[  332.537131][ T7829] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,noload,,errors=continue. Quota mode: writeback.
[  332.550930][ T7829] ext4 filesystem being mounted at /56/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.999400][ T7831] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.645: missing EA_INODE flag
[  333.206255][ T7831] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.645: error while reading EA inode 12 err=-117
[  333.614340][ T7831] EXT4-fs (loop7): 1 orphan inode deleted
[  333.623791][ T7831] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  336.633285][ T7889] input: syz0 as /devices/virtual/input/input21
[  336.833789][ T7885] device syzkaller0 entered promiscuous mode
[  336.855206][ T7891] xt_TPROXY: Can be used only with -p tcp or -p udp
[  336.920848][ T7890] loop9: detected capacity change from 0 to 40427
[  336.978377][ T7890] F2FS-fs (loop9): Invalid segment/section count (24 != 24 * 3)
[  336.986109][ T7890] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  336.994955][ T7890] F2FS-fs (loop9): Unrecognized mount option "context=unconf" or missing value
[  337.067640][ T7897] loop8: detected capacity change from 0 to 512
[  337.175465][ T7897] EXT4-fs (loop8): mounted filesystem without journal. Opts: nouid32,bsddf,grpjquota=,sysvgroups,grpjquota=,,errors=continue. Quota mode: writeback.
[  337.234836][ T7897] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.352851][ T7897] EXT4-fs error (device loop8): ext4_ext_remove_space:2929: inode #15: comm syz.8.655: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  337.431021][ T7897] EXT4-fs error (device loop8): ext4_evict_inode:295: comm syz.8.655: couldn't truncate inode 15 (err -117)
[  337.593375][ T7913] loop9: detected capacity change from 0 to 4096
[  337.612131][ T7912] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  337.621687][ T7912] device syzkaller0 entered promiscuous mode
[  337.686264][ T7913] EXT4-fs (loop9): inline encryption not supported
[  337.703044][ T7913] EXT4-fs (loop9): Test dummy encryption mode enabled
[  337.938517][ T7913] EXT4-fs (loop9): Ignoring removed bh option
[  337.946912][ T7913] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled
[  337.972674][ T7913] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  337.991553][ T7913] System zones: 0-5
[  338.051198][ T7913] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,sysvgroups,inlinecrypt,test_dummy_encryption,grpjquota=,bh,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[  338.095431][ T7905] loop6: detected capacity change from 0 to 40427
[  338.182543][ T7905] F2FS-fs (loop6): Failed to get valid F2FS checkpoint
[  338.194329][ T7913] EXT4-fs (loop9): shut down requested (2)
[  338.411976][ T7930] netlink: 20 bytes leftover after parsing attributes in process `syz.7.662'.
[  338.549067][ T7932] loop1: detected capacity change from 0 to 256
[  339.483237][ T7940] loop7: detected capacity change from 0 to 2048
[  339.712140][ T7940] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  339.749599][ T7948] loop6: detected capacity change from 0 to 1024
[  339.962056][ T7948] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  339.994293][ T7948] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000000004,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,init_itable=0xffffff. Quota mode: none.
[  341.110827][ T7966] xt_TPROXY: Can be used only with -p tcp or -p udp
[  342.504776][ T7991] loop8: detected capacity change from 0 to 512
[  342.610068][ T7991] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  342.711735][ T7991] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  343.137824][ T7984] loop1: detected capacity change from 0 to 40427
[  343.172293][ T8005] loop8: detected capacity change from 0 to 1024
[  343.188764][ T7984] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
[  343.296301][ T8005] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  343.550010][ T8005] EXT4-fs (loop8): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  343.582813][ T8005] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  344.430285][ T8005] EXT4-fs error (device loop8) in ext4_setattr:5645: error 28
[  345.752931][ T8033] tipc: Started in network mode
[  345.806596][ T8033] tipc: Node identity 72b37b3261e5, cluster identity 4711
[  345.861711][ T8033] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.892942][ T8033] device syzkaller0 entered promiscuous mode
[  345.942109][ T8032] tipc: Resetting bearer <eth:syzkaller0>
[  346.071354][ T8032] tipc: Disabling bearer <eth:syzkaller0>
[  346.257338][ T8048] xt_TPROXY: Can be used only with -p tcp or -p udp
[  346.457988][ T6410] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  346.947015][ T6410] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  346.963135][ T6410] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  346.992723][ T8071] loop9: detected capacity change from 0 to 128
[  347.019687][ T8071] FAT-fs (loop9): Directory bread(block 524322) failed
[  347.037651][ T8071] FAT-fs (loop9): Directory bread(block 524323) failed
[  347.091633][ T8071] FAT-fs (loop9): Directory bread(block 524324) failed
[  347.099076][ T6410] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  347.114683][ T6410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  347.140389][ T8071] FAT-fs (loop9): Directory bread(block 524325) failed
[  347.157336][ T6410] usb 2-1: SerialNumber: syz
[  347.174324][ T8071] FAT-fs (loop9): Directory bread(block 524326) failed
[  347.202884][ T8071] FAT-fs (loop9): Directory bread(block 524327) failed
[  347.210066][ T8071] FAT-fs (loop9): Directory bread(block 524328) failed
[  347.235073][ T8071] FAT-fs (loop9): Directory bread(block 524329) failed
[  347.503011][ T8062] loop6: detected capacity change from 0 to 40427
[  347.572245][ T8062] F2FS-fs (loop6): Failed to get valid F2FS checkpoint
[  347.601067][ T6410] usb 2-1: 0:2 : does not exist
[  347.694595][ T6410] usb 2-1: USB disconnect, device number 15
[  347.976714][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  348.076139][ T8101] binfmt_misc: register: failed to install interpreter file ./file2
[  350.092947][ T8116] loop8: detected capacity change from 0 to 512
[  350.121009][ T8116] EXT4-fs (loop8): Test dummy encryption mode enabled
[  350.141375][ T8116] EXT4-fs (loop8): Ignoring removed oldalloc option
[  350.174742][ T8116] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback.
[  350.200799][ T1108] Bluetooth: hci2: command 0x0406 tx timeout
[  350.497265][ T8116] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  350.626013][ T8123] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  351.070420][ T8106] tipc: Started in network mode
[  351.084087][ T8106] tipc: Node identity 7ac0f23ca4da, cluster identity 4711
[  351.124700][ T8106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  351.136505][ T8112] device syzkaller0 entered promiscuous mode
[  351.233420][ T8112] tipc: Resetting bearer <eth:syzkaller0>
[  351.296627][ T8112] tipc: Disabling bearer <eth:syzkaller0>
[  351.639135][ T8150] loop9: detected capacity change from 0 to 4096
[  351.678204][ T8152] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  351.718113][ T8150] EXT4-fs (loop9): Test dummy encryption mode enabled
[  351.748309][ T8150] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback.
[  351.924315][ T8150] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #15: comm syz.9.706: corrupted inode contents
[  351.958024][ T4230] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  351.987964][ T8161] loop7: detected capacity change from 0 to 512
[  352.010635][ T8150] EXT4-fs error (device loop9): ext4_dirty_inode:6077: inode #15: comm syz.9.706: mark_inode_dirty error
[  352.074940][ T8142] loop6: detected capacity change from 0 to 40427
[  352.086378][ T8161] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.708: missing EA_INODE flag
[  352.098714][ T8150] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #15: comm syz.9.706: corrupted inode contents
[  352.118660][ T8161] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.708: error while reading EA inode 12 err=-117
[  352.139288][ T8161] EXT4-fs (loop7): 1 orphan inode deleted
[  352.150626][ T8161] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  352.205373][ T8142] F2FS-fs (loop6): Failed to get valid F2FS checkpoint
[  352.231748][ T8150] EXT4-fs error (device loop9): __ext4_ext_dirty:183: inode #15: comm syz.9.706: mark_inode_dirty error
[  352.397819][ T8150] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #15: comm syz.9.706: corrupted inode contents
[  352.503114][ T8168] binfmt_misc: register: failed to install interpreter file ./file2
[  352.523745][ T8167] loop8: detected capacity change from 0 to 128
[  353.030167][ T8150] EXT4-fs error (device loop9): __ext4_ext_dirty:183: inode #15: comm syz.9.706: mark_inode_dirty error
[  353.128966][ T8150] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #15: comm syz.9.706: corrupted inode contents
[  353.200985][ T8150] EXT4-fs error (device loop9): ext4_truncate:4286: inode #15: comm syz.9.706: mark_inode_dirty error
[  353.223039][ T8150] EXT4-fs error (device loop9): ext4_evict_inode:295: comm syz.9.706: couldn't truncate inode 15 (err -117)
[  353.254093][ T8167] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  353.283085][ T4230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  353.329413][ T4230] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  353.470514][ T4230] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  353.523002][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  353.718530][ T4230] usb 2-1: SerialNumber: syz
[  353.759518][ T8188] loop9: detected capacity change from 0 to 2048
[  354.612319][ T8188] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  354.728744][ T4230] usb 2-1: 0:2 : does not exist
[  354.973418][ T4230] usb 2-1: USB disconnect, device number 16
[  355.567731][ T8198] loop6: detected capacity change from 0 to 512
[  356.428598][ T8198] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  356.499634][ T8198] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  356.619685][ T1108] Bluetooth: hci6: command 0x0406 tx timeout
[  356.679790][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  358.426580][ T8228] device batadv_slave_0 entered promiscuous mode
[  358.574481][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.722'.
[  358.589347][ T8238] loop9: detected capacity change from 0 to 128
[  358.678430][ T8238] EXT4-fs (loop9): Test dummy encryption mode enabled
[  358.695777][ T8238] EXT4-fs (loop9): Test dummy encryption mode enabled
[  358.751165][ T8238] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none.
[  358.766535][ T8238] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  358.791632][ T8227] device batadv_slave_0 left promiscuous mode
[  358.905677][ T1108] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  359.160422][ T1108] usb 9-1: Using ep0 maxpacket: 32
[  359.227642][ T8255] loop1: detected capacity change from 0 to 512
[  359.390174][ T8255] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,,errors=continue. Quota mode: writeback.
[  359.452698][ T8255] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option
[  359.460333][ T1108] usb 9-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40
[  360.343055][ T8226] loop7: detected capacity change from 0 to 40427
[  360.417248][ T8226] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  360.458923][ T8226] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  360.527372][ T8226] F2FS-fs (loop7): invalid crc_offset: 33558524
[  360.698659][ T8255] EXT4-fs (loop1): re-mounted. Opts: noquota,noblock_validity,nogrpid,data=journal,. Quota mode: writeback.
[  360.721458][ T8255] ext4 filesystem being remounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  360.887964][ T1108] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.896282][ T1108] usb 9-1: Product: syz
[  360.900508][ T1108] usb 9-1: Manufacturer: syz
[  360.905501][ T1108] usb 9-1: SerialNumber: syz
[  360.925801][ T8226] F2FS-fs (loop7): Found nat_bits in checkpoint
[  363.082303][ T1108] usb 9-1: MIDIStreaming interface descriptor not found
[  363.154110][ T8291] loop8: detected capacity change from 0 to 2048
[  363.264645][ T8291] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  364.097285][   T13] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  364.171465][ T1108] usb 9-1: USB disconnect, device number 5
[  365.144121][ T8313] device batadv_slave_0 entered promiscuous mode
[  365.401255][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.735'.
[  365.775026][   T13] usb 7-1: device not accepting address 8, error -71
[  365.934397][ T8326] loop6: detected capacity change from 0 to 256
[  365.950696][ T8312] device batadv_slave_0 left promiscuous mode
[  366.049337][ T8328] loop7: detected capacity change from 0 to 512
[  366.077350][ T8326] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  366.138453][ T8328] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  366.145646][ T8328] EXT4-fs (loop7): Ignoring removed oldalloc option
[  366.185669][   T26] audit: type=1800 audit(1777347918.457:6): pid=8326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.737" name="file1" dev="loop6" ino=1048648 res=0 errno=0
[  366.241477][ T8328] EXT4-fs (loop7): Journaled quota options ignored when QUOTA feature is enabled
[  366.344016][ T8328] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.738: inode has both inline data and extents flags
[  366.360760][ T8328] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.738: couldn't read orphan inode 15 (err -117)
[  366.373064][ T8328] EXT4-fs (loop7): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,grpid,oldalloc,init_itable=0x0000000000000000,grpjquota=./file0,dioread_lock,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  366.423746][ T8335] loop1: detected capacity change from 0 to 1024
[  366.519554][ T8335] EXT4-fs (loop1): Ignoring removed bh option
[  366.552792][ T8343] tipc: Started in network mode
[  366.632444][ T8335] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,minixdf,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,jqfmt=vfsv0,. Quota mode: none.
[  366.719071][ T8343] tipc: Node identity 82a42132bab3, cluster identity 4711
[  366.804465][ T8343] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.826012][ T8346] device syzkaller0 entered promiscuous mode
[  366.884432][ T8343] tipc: Resetting bearer <eth:syzkaller0>
[  367.012980][ T8342] tipc: Resetting bearer <eth:syzkaller0>
[  367.108662][ T8342] tipc: Disabling bearer <eth:syzkaller0>
[  367.340380][ T8368] loop7: detected capacity change from 0 to 2048
[  367.486765][ T8368] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  368.558021][ T8383] device batadv_slave_0 entered promiscuous mode
[  368.627407][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.6.749'.
[  368.733411][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.946686][ T8383] device bridge_slave_1 left promiscuous mode
[  368.980909][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.382269][ T8382] device batadv_slave_0 left promiscuous mode
[  369.989445][ T8399] loop7: detected capacity change from 0 to 256
[  370.059746][ T8401] loop1: detected capacity change from 0 to 1024
[  370.093158][ T8399] FAT-fs (loop7): Unrecognized mount option "iocharset#c޺y�k�:�zp860" or missing value
[  370.258508][ T8401] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  370.395953][ T8401] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000000004,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,init_itable=0xffffff. Quota mode: none.
[  371.483648][ T8412] xt_TPROXY: Can be used only with -p tcp or -p udp
[  371.604113][ T8397] loop6: detected capacity change from 0 to 40427
[  371.690792][ T8397] F2FS-fs (loop6): build fault injection attr: rate: 19, type: 0x1ffff
[  372.166583][ T8420] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  372.399934][ T8426] loop9: detected capacity change from 0 to 512
[  372.492066][ T8426] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  372.507304][ T4234] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  372.571001][ T8426] EXT4-fs error (device loop9): ext4_orphan_get:1406: inode #15: comm syz.9.759: casefold flag without casefold feature
[  372.634673][ T8426] EXT4-fs error (device loop9): ext4_orphan_get:1411: comm syz.9.759: couldn't read orphan inode 15 (err -117)
[  372.653386][ T8426] EXT4-fs (loop9): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none.
[  372.836694][ T8417] loop6: detected capacity change from 0 to 40427
[  372.905062][ T4234] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  372.945363][ T8417] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  373.020433][ T8417] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  373.116132][ T8430] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  373.328227][ T8417] F2FS-fs (loop6): invalid crc value
[  373.928460][ T4234] usb 8-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  373.941994][ T4234] usb 8-1: config 0 interface 0 has no altsetting 0
[  373.948669][ T4234] usb 8-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[  373.958430][ T4234] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.004560][ T8417] F2FS-fs (loop6): Found nat_bits in checkpoint
[  374.066268][ T8435] loop8: detected capacity change from 0 to 2048
[  374.173094][ T8435] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  374.255743][ T8435] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  374.278050][ T8417] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  374.332315][ T8417] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  374.367910][ T8435] fs-verity: sha512 using implementation "sha512-avx2"
[  374.375684][ T8435] Quota error (device loop8): find_tree_dqentry: Getting block too big (196612 >= 6)
[  374.406640][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  374.491033][ T8435] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  374.532047][ T8435] EXT4-fs error (device loop8): ext4_acquire_dquot:6236: comm syz.8.760: Failed to acquire dquot type 0
[  374.609406][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  374.734828][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  374.757981][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  374.803589][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  374.826447][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  374.871785][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  374.897226][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  374.939820][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  374.963333][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  374.968047][ T4234] usb 8-1: config 0 descriptor??
[  375.001248][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  375.039834][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  375.224815][ T8442] device batadv_slave_0 entered promiscuous mode
[  375.285019][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  375.364090][ T8447] loop6: detected capacity change from 0 to 1024
[  375.442597][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.8.763'.
[  375.451754][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  375.466207][ T8447] EXT4-fs (loop6): Ignoring removed oldalloc option
[  375.473714][ T8422] udc-core: couldn't find an available UDC or it's busy
[  375.487517][ T8422] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  375.510183][ T8447] EXT4-fs (loop6): Ignoring removed bh option
[  375.516433][ T8447] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  375.560290][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  375.579827][ T4234] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0
[  375.588874][ T8447] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block
[  375.588874][ T8447] 
[  375.621456][ T4234] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x2
[  375.648899][ T4234] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x2
[  375.668515][ T4234] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0
[  375.681538][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  375.697597][ T4234] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0
[  375.705327][ T4234] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0
[  375.712421][ T4234] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x3
[  375.741452][ T4234] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0
[  375.744169][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  375.752475][ T4234] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0
[  375.785241][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  375.794594][ T4234] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0
[  375.809222][ T4234] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0
[  375.827237][ T4234] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0
[  375.845444][ T4234] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x3
[  375.854139][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  375.862766][ T4234] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0
[  375.881851][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  375.907095][ T8441] device batadv_slave_0 left promiscuous mode
[  375.915574][ T4234] cypress 0003:04B4:BCA1.0007: hidraw0: USB HID v0.07 Device [HID 04b4:bca1] on usb-dummy_hcd.7-1/input0
[  375.952384][ T4234] usb 8-1: USB disconnect, device number 3
[  376.077317][ T8460] Bluetooth: hci1: Frame reassembly failed (-84)
[  376.149733][  T144] Bluetooth: hci1: Frame reassembly failed (-84)
[  376.197415][ T8463] fido_id[8463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  376.417737][ T8466] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  376.447005][ T8466] device syzkaller0 entered promiscuous mode
[  376.502578][ T8465] tipc: Resetting bearer <eth:syzkaller0>
[  376.567991][ T8465] tipc: Disabling bearer <eth:syzkaller0>
[  376.809015][ T8471] xt_TPROXY: Can be used only with -p tcp or -p udp
[  377.688285][ T8484] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  379.231928][   T13] Bluetooth: hci1: command 0x1003 tx timeout
[  379.238103][ T4203] Bluetooth: hci1: sending frame failed (-49)
[  379.805376][ T8492] Unsupported ieee802154 address type: 0
[  379.813025][ T4189] EXT4-fs error: 29 callbacks suppressed
[  379.813040][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  379.973080][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  380.031021][ T4189] EXT4-fs: 30 callbacks suppressed
[  380.031036][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  380.047946][ T8496] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  380.192290][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  380.215678][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  380.265436][ T8502] loop9: detected capacity change from 0 to 2048
[  380.326572][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  380.355269][ T8502] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  380.623583][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  380.656699][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  380.717088][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  381.402202][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  381.453308][ T8518] device batadv_slave_0 entered promiscuous mode
[  381.532455][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  381.596423][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.776'.
[  381.795722][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  381.905388][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  381.921615][ T8516] device batadv_slave_0 left promiscuous mode
[  382.128723][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  382.258668][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  382.447453][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  382.454535][ T4234] Bluetooth: hci1: command 0x1001 tx timeout
[  382.471316][ T4203] Bluetooth: hci1: sending frame failed (-49)
[  382.624348][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  382.966362][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  383.022156][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  383.054337][ T4233] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  383.195965][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  383.382322][ T8544] xt_TPROXY: Can be used only with -p tcp or -p udp
[  383.449935][ T4233] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  383.485093][ T4233] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  383.500897][ T4233] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  383.520078][ T4233] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  383.529931][ T4233] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.676270][ T4233] usb 8-1: config 0 descriptor??
[  383.906894][ T8562] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  385.167252][ T4189] EXT4-fs error: 10 callbacks suppressed
[  385.167271][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  385.447083][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  385.545791][ T4189] EXT4-fs: 10 callbacks suppressed
[  385.545808][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  385.643492][ T4234] Bluetooth: hci1: command 0x1009 tx timeout
[  385.686342][ T4233] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  385.715046][ T4233] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  385.738421][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  385.933209][ T4233] usb 8-1: USB disconnect, device number 4
[  385.941255][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  386.111434][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  386.237497][ T8577] fido_id[8577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  386.264383][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  387.185889][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  387.221616][ T8589] loop8: detected capacity change from 0 to 256
[  387.287141][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  387.430744][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  387.437877][ T8589] FAT-fs (loop8): Directory bread(block 64) failed
[  387.454274][ T8592] loop7: detected capacity change from 0 to 4096
[  387.500331][ T8597] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  387.501518][ T8589] FAT-fs (loop8): Directory bread(block 65) failed
[  387.562331][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  387.569123][ T8597] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  387.574862][ T8589] FAT-fs (loop8): Directory bread(block 66) failed
[  387.627818][ T8589] FAT-fs (loop8): Directory bread(block 67) failed
[  387.649532][ T8589] FAT-fs (loop8): Directory bread(block 68) failed
[  387.656138][ T8589] FAT-fs (loop8): Directory bread(block 69) failed
[  387.673685][ T8592] EXT4-fs (loop7): inline encryption not supported
[  387.691766][ T8592] EXT4-fs (loop7): Test dummy encryption mode enabled
[  387.723724][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  387.744833][ T8589] FAT-fs (loop8): Directory bread(block 70) failed
[  387.757186][ T8592] EXT4-fs (loop7): Ignoring removed bh option
[  387.767017][ T8589] FAT-fs (loop8): Directory bread(block 71) failed
[  387.785508][ T8592] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[  387.818795][ T8589] FAT-fs (loop8): Directory bread(block 72) failed
[  387.835542][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  387.885773][ T8592] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  387.894034][ T8592] System zones: 0-5
[  387.912379][ T8589] FAT-fs (loop8): Directory bread(block 73) failed
[  387.922586][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  388.045669][ T8592] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,sysvgroups,inlinecrypt,test_dummy_encryption,grpjquota=,bh,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[  388.075874][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  388.222914][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  388.299143][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  388.312684][ T8610] loop9: detected capacity change from 0 to 4096
[  388.470712][ T8610] EXT4-fs (loop9): inline encryption not supported
[  388.502437][ T8610] EXT4-fs (loop9): Test dummy encryption mode enabled
[  388.581704][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  388.610132][ T8610] EXT4-fs (loop9): Ignoring removed bh option
[  388.669301][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  388.683605][ T8610] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled
[  388.761837][ T8610] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  388.800791][ T8624] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  388.997016][ T8610] System zones: 0-5
[  389.095598][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  389.221761][ T8610] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,bh,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[  390.994897][ T4189] EXT4-fs error: 1 callbacks suppressed
[  390.994913][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  391.022185][ T8633] loop6: detected capacity change from 0 to 256
[  391.050546][ T4189] EXT4-fs (loop1): Remounting filesystem read-only
[  391.084438][ T8633] exfat: Deprecated parameter 'utf8'
[  391.089872][ T8633] exfat: Deprecated parameter 'utf8'
[  391.225858][ T8633] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  391.610210][ T8647] loop6: detected capacity change from 0 to 512
[  391.721560][ T8620] xt_TPROXY: Can be used only with -p tcp or -p udp
[  391.752103][ T8652] loop7: detected capacity change from 0 to 512
[  391.874593][ T8647] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,errors=continue,noblock_validity,. Quota mode: none.
[  391.895416][ T8652] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.801: missing EA_INODE flag
[  391.991204][ T8652] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.801: error while reading EA inode 12 err=-117
[  392.052287][ T8652] EXT4-fs (loop7): 1 orphan inode deleted
[  392.058092][ T8652] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  392.593787][ T8670] binfmt_misc: register: failed to install interpreter file ./file2
[  393.137992][ T8666] loop6: detected capacity change from 0 to 512
[  393.248550][ T8666] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  393.303414][ T8666] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  393.341455][ T8677] netlink: 496 bytes leftover after parsing attributes in process `syz.7.804'.
[  393.565654][ T8651] chnl_net:caif_netlink_parms(): no params data found
[  393.606509][ T8685] loop7: detected capacity change from 0 to 512
[  393.874376][ T8685] EXT4-fs (loop7): Ignoring removed orlov option
[  393.964964][ T1325] Bluetooth: hci1: command 0x0409 tx timeout
[  394.068164][ T8685] EXT4-fs (loop7): Test dummy encryption mode enabled
[  394.117989][ T8685] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  394.683060][ T8685] EXT4-fs (loop7): 1 truncate cleaned up
[  394.748541][ T8685] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  394.790456][ T8651] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.797689][ T8651] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.806110][ T8651] device bridge_slave_0 entered promiscuous mode
[  394.814768][ T8651] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.822515][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.831376][ T8651] device bridge_slave_1 entered promiscuous mode
[  394.892595][ T8651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.960665][ T8651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  395.127377][ T8651] team0: Port device team_slave_0 added
[  395.456949][ T8651] team0: Port device team_slave_1 added
[  395.545334][ T6618] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.638468][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  395.689837][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.761888][ T8651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  395.775601][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  395.782637][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.809033][ T8651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  396.014806][ T6618] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.061994][ T8710] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  396.092735][ T8710] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  396.155598][ T8725] loop7: detected capacity change from 0 to 256
[  396.170031][ T8726] netlink: 496 bytes leftover after parsing attributes in process `syz.8.814'.
[  396.179429][ T4281] Bluetooth: hci1: command 0x041b tx timeout
[  396.213384][ T6618] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.288469][ T8651] device hsr_slave_0 entered promiscuous mode
[  396.324952][ T8651] device hsr_slave_1 entered promiscuous mode
[  396.353064][ T8651] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  396.385466][ T8651] Cannot create hsr debugfs directory
[  397.204467][ T8740] loop8: detected capacity change from 0 to 2048
[  397.211348][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  397.231900][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  397.503074][ T6618] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.607443][ T8740] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  398.448451][ T1325] Bluetooth: hci1: command 0x040f tx timeout
[  398.807939][ T8767] loop6: detected capacity change from 0 to 128
[  399.725642][ T8767] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  399.853436][ T8767] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  400.051985][ T8767] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  400.061010][ T8767] FAT-fs (loop6): Filesystem has been set read-only
[  401.352630][ T8772] xt_TPROXY: Can be used only with -p tcp or -p udp
[  401.405854][ T1324] Bluetooth: hci1: command 0x0419 tx timeout
[  401.771514][ T6618] tipc: Left network mode
[  401.999986][ T8781] loop9: detected capacity change from 0 to 4096
[  402.101170][ T8790] netlink: 16 bytes leftover after parsing attributes in process `syz.8.825'.
[  402.129043][ T8781] EXT4-fs (loop9): inline encryption not supported
[  402.150747][ T8781] EXT4-fs (loop9): Test dummy encryption mode enabled
[  402.158298][ T8790] netlink: 16 bytes leftover after parsing attributes in process `syz.8.825'.
[  402.181529][ T8781] EXT4-fs (loop9): Ignoring removed nobh option
[  402.189598][ T8792] netlink: 496 bytes leftover after parsing attributes in process `syz.6.826'.
[  402.237040][ T8781] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003]
[  402.284685][ T8781] System zones: 0-5
[  402.502502][ T8781] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,nobh,errors=continue,nodelalloc,barrier,,errors=continue. Quota mode: writeback.
[  403.689926][ T8812] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #2: comm syz.9.822: No space for directory leaf checksum. Please run e2fsck -D.
[  403.709185][ T8812] EXT4-fs error (device loop9): __ext4_find_entry:1696: inode #2: comm syz.9.822: checksumming directory block 0
[  404.359719][ T8831] xt_TPROXY: Can be used only with -p tcp or -p udp
[  404.651003][ T8798] EXT4-fs error (device loop9): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum
[  405.473760][ T4281] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  405.621193][ T8859] loop9: detected capacity change from 0 to 512
[  405.654212][ T8865] loop8: detected capacity change from 0 to 512
[  405.672279][ T8864] loop7: detected capacity change from 0 to 128
[  405.685301][ T8859] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  405.712123][ T8865] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  405.734272][ T8859] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.835: invalid indirect mapped block 9 (level 0)
[  405.751750][ T8865] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  405.773159][ T8859] EXT4-fs (loop9): 1 truncate cleaned up
[  405.793139][ T8864] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  405.795561][ T8865] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[  405.824606][ T8859] EXT4-fs (loop9): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  405.840673][ T8864] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  405.869294][ T8865] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  405.882996][ T8865] System zones: 0-2, 18-18, 34-35
[  405.889150][ T8865] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  405.970258][ T4281] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  406.045202][ T4281] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  406.082205][ T4281] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  406.114460][ T4281] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  406.290569][ T4281] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.313433][ T4281] usb 7-1: config 0 descriptor??
[  407.111148][ T4281] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  407.173585][ T4281] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  407.228430][ T8888] loop8: detected capacity change from 0 to 256
[  407.239021][ T8889] loop9: detected capacity change from 0 to 1024
[  407.285370][ T8888] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  407.322418][ T8888] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  407.349537][ T8888] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d)
[  407.448270][ T8891] xt_TPROXY: Can be used only with -p tcp or -p udp
[  407.690401][ T1108] usb 7-1: USB disconnect, device number 10
[  407.827713][ T8897] fido_id[8897]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  408.022450][ T8906] input: syz0 as /devices/virtual/input/input23
[  408.833787][ T6618] device hsr_slave_0 left promiscuous mode
[  408.849050][ T6618] device hsr_slave_1 left promiscuous mode
[  408.927536][ T6618] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  408.937410][ T8914] 9pnet: Insufficient options for proto=fd
[  408.957076][ T6618] batman_adv: batadv0: Removing interface: batadv_slave_0
[  408.979429][ T6618] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  409.149738][ T6618] batman_adv: batadv0: Removing interface: batadv_slave_1
[  409.206036][ T6618] device bridge_slave_0 left promiscuous mode
[  409.212391][ T6618] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.041301][ T8925] loop7: detected capacity change from 0 to 128
[  410.073244][ T6618] device veth1_macvtap left promiscuous mode
[  410.104771][ T6618] device veth0_macvtap left promiscuous mode
[  410.110908][ T6618] device veth1_vlan left promiscuous mode
[  410.130990][ T8927] loop9: detected capacity change from 0 to 1024
[  410.168533][ T6618] device veth0_vlan left promiscuous mode
[  410.256875][ T8927] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option
[  410.380138][ T8927] EXT4-fs (loop9): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  410.524629][   T26] audit: type=1800 audit(1777347959.950:7): pid=8940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.850" name="file1" dev="loop9" ino=15 res=0 errno=0
[  410.747884][ T8942] xt_TPROXY: Can be used only with -p tcp or -p udp
[  411.109739][ T6618] team0 (unregistering): Port device team_slave_1 removed
[  411.137144][ T6618] team0 (unregistering): Port device team_slave_0 removed
[  411.176136][ T6618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  411.243037][ T6618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  411.354654][ T6618] bond0 (unregistering): Released all slaves
[  411.546237][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.7.851'.
[  412.080125][ T8957] loop8: detected capacity change from 0 to 4096
[  412.210931][ T8957] EXT4-fs (loop8): inline encryption not supported
[  412.236797][ T8957] EXT4-fs (loop8): Test dummy encryption mode enabled
[  412.346922][ T8957] EXT4-fs (loop8): Ignoring removed bh option
[  412.407709][ T8957] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled
[  412.420937][ T8957] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  412.429140][ T8957] System zones: 0-5
[  412.441783][ T8957] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,sysvgroups,inlinecrypt,test_dummy_encryption,grpjquota=,bh,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[  412.471719][ T8957] EXT4-fs (loop8): shut down requested (2)
[  412.938430][ T8651] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  413.022091][ T8651] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  413.076657][ T8651] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  413.127763][ T8651] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  413.395975][ T8978] loop6: detected capacity change from 0 to 256
[  413.439325][ T8978] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  413.456140][ T8978] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  413.488503][ T8978] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d)
[  413.736012][ T8651] 8021q: adding VLAN 0 to HW filter on device bond0
[  413.902478][ T8651] 8021q: adding VLAN 0 to HW filter on device team0
[  415.070282][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  415.092221][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  415.143235][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  415.164284][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  415.201341][ T8986] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  415.255387][ T8986] loop9: detected capacity change from 0 to 1024
[  415.316974][ T4460] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.324132][ T4460] bridge0: port 1(bridge_slave_0) entered forwarding state
[  415.394424][ T8986] EXT4-fs (loop9): Mount option "dioread_nolock" incompatible with ext3
[  415.508249][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  415.610928][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  415.630459][ T8991] xt_TPROXY: Can be used only with -p tcp or -p udp
[  415.690077][ T4460] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.697272][ T4460] bridge0: port 2(bridge_slave_1) entered forwarding state
[  415.873124][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  415.901499][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  415.957145][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  415.986613][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  416.024475][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  416.052850][ T1108] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  416.061691][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  416.129145][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  416.147024][ T8651] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  416.189294][ T8651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  416.236252][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  416.244286][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  416.281329][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  416.310277][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  416.351246][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  416.394536][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  416.469087][ T1108] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  416.481270][ T1108] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  416.525025][ T1108] usb 8-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00
[  416.555081][ T1108] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.609557][ T1108] usb 8-1: config 0 descriptor??
[  417.157059][ T9019] loop6: detected capacity change from 0 to 16
[  417.386822][ T1469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  417.455501][ T1469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  417.778588][ T8651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  418.731063][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  418.789651][ T9019] erofs: Unknown parameter './cgroup.net/syz1'
[  418.808067][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  418.874076][ T1108] usbhid 8-1:0.0: can't add hid device: -71
[  419.835934][ T1108] usbhid: probe of 8-1:0.0 failed with error -71
[  419.858836][ T1108] usb 8-1: USB disconnect, device number 5
[  420.366244][ T9019] loop6: detected capacity change from 0 to 40427
[  420.391155][ T9026] netlink: 36 bytes leftover after parsing attributes in process `syz.8.867'.
[  420.417074][ T9024] device syzkaller0 entered promiscuous mode
[  420.446649][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  420.457683][ T9019] F2FS-fs (loop6): Invalid segment/section count (24 != 24 * 3)
[  420.465420][ T9019] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  420.476219][ T9019] F2FS-fs (loop6): Unrecognized mount option "context=unconf" or missing value
[  420.486551][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  420.506793][ T8651] device veth0_vlan entered promiscuous mode
[  420.747119][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  420.777783][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  420.807612][ T8651] device veth1_vlan entered promiscuous mode
[  420.987866][ T8651] device veth0_macvtap entered promiscuous mode
[  421.038769][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  421.104568][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  421.134588][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  421.193899][ T9039] loop6: detected capacity change from 0 to 512
[  421.279914][ T9041] loop7: detected capacity change from 0 to 512
[  421.310206][ T9039] EXT4-fs (loop6): 1 truncate cleaned up
[  421.346169][ T9039] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,resgid=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none.
[  421.436473][ T9041] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  421.502929][ T9041] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  421.843408][ T8651] device veth1_macvtap entered promiscuous mode
[  423.595641][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  423.732195][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.782034][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  423.836417][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.869881][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  423.902460][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.933351][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  423.966320][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.030699][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  424.094970][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  424.142302][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.232585][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  424.247632][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.259148][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  424.276627][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.302456][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  424.350627][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.384478][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  424.404277][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  424.431771][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  424.440892][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  424.497090][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  424.753273][ T8651] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.135946][ T8651] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.217175][ T8651] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.354733][ T9071] loop8: detected capacity change from 0 to 256
[  425.372922][ T8651] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.451752][ T9071] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  425.550956][ T9071] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  425.611465][ T9071] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d)
[  425.921085][ T9067] xt_TPROXY: Can be used only with -p tcp or -p udp
[  426.009642][ T9077] loop7: detected capacity change from 0 to 4096
[  426.130577][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.145861][ T9077] EXT4-fs (loop7): inline encryption not supported
[  426.160086][ T9077] EXT4-fs (loop7): Test dummy encryption mode enabled
[  426.180670][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.197318][ T9077] EXT4-fs (loop7): Ignoring removed bh option
[  426.203480][ T9077] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[  426.216388][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  426.274052][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.288612][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.300958][ T9077] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  426.365103][ T6410] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  426.378248][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  426.400779][ T9077] System zones: 0-5
[  426.435499][ T9077] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,bh,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[  426.847229][ T6410] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  426.878253][ T6410] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  426.947831][ T6410] usb 7-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00
[  426.988900][ T6410] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.008545][ T9102] netlink: 36 bytes leftover after parsing attributes in process `syz.0.878'.
[  427.032214][ T6410] usb 7-1: config 0 descriptor??
[  427.037353][ T4281] Bluetooth: hci0: command 0x0406 tx timeout
[  427.345417][ T9111] device syzkaller0 entered promiscuous mode
[  427.531666][ T9116] loop8: detected capacity change from 0 to 512
[  427.557858][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.597836][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.627498][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.655634][ T9116] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  427.658546][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.700674][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.707618][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.715040][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.722247][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.729294][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.736731][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.744057][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.750979][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.775438][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.775653][ T9116] ext4 filesystem being mounted at /104/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  427.787253][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.799997][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.806902][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.814317][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.821475][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.828530][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.835801][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.848173][ T9122] loop0: detected capacity change from 0 to 512
[  427.875480][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  427.894064][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  428.019664][ T9122] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  428.075705][ T9122] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  428.086418][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  428.094805][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  429.485802][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  429.687346][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  429.786643][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  429.865053][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  429.902854][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  430.334544][ T9135] xt_TPROXY: Can be used only with -p tcp or -p udp
[  430.342260][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  430.349273][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  430.372133][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  430.379164][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  430.404211][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  430.411288][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  430.425576][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  430.432512][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  430.457619][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  430.464569][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  430.471539][ T6410] wacom 0003:056A:0333.000A: unknown main item tag 0x0
[  430.481265][ T6410] wacom 0003:056A:0333.000A: hidraw0: USB HID v0.04 Device [HID 056a:0333] on usb-dummy_hcd.6-1/input0
[  430.511278][ T6410] usb 7-1: USB disconnect, device number 11
[  430.900212][ T9136] chnl_net:caif_netlink_parms(): no params data found
[  431.014691][ T9149] fido_id[9149]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  431.137744][ T9153] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  431.383649][ T9136] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.419737][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.452726][ T9136] device bridge_slave_0 entered promiscuous mode
[  431.464447][ T9165] loop0: detected capacity change from 0 to 4096
[  431.499201][ T9136] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.520509][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.545773][ T9136] device bridge_slave_1 entered promiscuous mode
[  431.586893][ T9166] device syzkaller0 entered promiscuous mode
[  431.780370][ T9136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  431.919219][ T9136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  432.163908][ T9176] device syzkaller0 entered promiscuous mode
[  432.170450][ T4279] Bluetooth: hci3: command 0x0409 tx timeout
[  432.195580][ T9136] team0: Port device team_slave_0 added
[  432.237145][ T9136] team0: Port device team_slave_1 added
[  432.337471][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_0
[  432.359766][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  432.452242][ T9136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  432.563166][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.578790][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  432.634846][ T9187] loop4: detected capacity change from 0 to 7
[  432.687794][ T4175] Dev loop4: unable to read RDB block 7
[  432.696335][ T4175]  loop4: unable to read partition table
[  432.704880][ T4175] loop4: partition table beyond EOD, truncated
[  432.715362][ T9187] Dev loop4: unable to read RDB block 7
[  432.720045][ T9136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  432.736889][ T9187]  loop4: unable to read partition table
[  432.756636][ T9187] loop4: partition table beyond EOD, truncated
[  432.798767][ T9187] loop_reread_partitions: partition scan of loop4 (���������S�j��	���%��`��ր����5) failed (rc=-5)
[  432.944347][ T9136] device hsr_slave_0 entered promiscuous mode
[  432.965241][ T3562] Dev loop4: unable to read RDB block 7
[  432.986695][ T9136] device hsr_slave_1 entered promiscuous mode
[  432.995392][ T3562]  loop4: unable to read partition table
[  433.016781][ T3562] loop4: partition table beyond EOD, truncated
[  433.023488][ T9136] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  433.042788][ T9136] Cannot create hsr debugfs directory
[  433.543159][ T9206] loop6: detected capacity change from 0 to 2048
[  433.702369][ T9211] loop0: detected capacity change from 0 to 512
[  433.727251][ T9206] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  433.748984][ T1108] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  433.994191][ T9211] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  434.016318][ T9211] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  435.258766][ T4234] Bluetooth: hci3: command 0x041b tx timeout
[  435.837839][ T1108] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  435.891748][ T1108] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  435.926831][ T1108] usb 9-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00
[  435.957879][ T1108] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.027412][ T1108] usb 9-1: config 0 descriptor??
[  436.401936][ T9224] xt_TPROXY: Can be used only with -p tcp or -p udp
[  436.606582][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  436.647500][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  436.681276][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  436.730176][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  436.751766][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  436.758700][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  436.839116][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  436.900193][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  436.918048][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  436.936021][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  436.942969][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  436.968490][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  436.986393][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.007997][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.035015][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.061637][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.092697][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.113672][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.141964][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.161403][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.168354][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.207481][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.232630][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.248919][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.266876][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.273820][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.318648][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.336466][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.371651][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.378601][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.429088][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.464054][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.475457][ T9136] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  437.501870][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.528413][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.564159][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.596310][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.603255][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.697288][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  437.734877][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  439.530099][ T1108] wacom 0003:056A:0333.000B: unknown main item tag 0x0
[  439.544742][ T4234] Bluetooth: hci3: command 0x040f tx timeout
[  439.560065][ T1108] wacom 0003:056A:0333.000B: hidraw0: USB HID v0.04 Device [HID 056a:0333] on usb-dummy_hcd.8-1/input0
[  439.579471][ T1108] usb 9-1: USB disconnect, device number 6
[  439.595280][ T9136] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  439.614736][ T9260] input: syz0 as /devices/virtual/input/input32
[  439.623565][ T9136] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  439.758421][ T9261] fido_id[9261]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  439.844760][ T9136] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  440.346074][ T9268] loop7: detected capacity change from 0 to 128
[  440.481559][ T6410] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  442.532322][ T6410] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  442.605847][   T13] Bluetooth: hci3: command 0x0419 tx timeout
[  442.652767][ T6410] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  442.699265][ T9136] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.755311][ T9275] device syzkaller0 entered promiscuous mode
[  442.777544][ T6410] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  442.798318][ T6410] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  442.807152][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  442.822206][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  442.840488][ T6410] usb 9-1: SerialNumber: syz
[  442.855830][ T9136] 8021q: adding VLAN 0 to HW filter on device team0
[  442.887931][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  442.905645][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  442.919892][ T4417] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.927036][ T4417] bridge0: port 1(bridge_slave_0) entered forwarding state
[  442.990046][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  442.999057][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  443.011137][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  443.034099][ T4417] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.041301][ T4417] bridge0: port 2(bridge_slave_1) entered forwarding state
[  443.077690][ T4566] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.139154][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  443.156436][ T9284] loop7: detected capacity change from 0 to 512
[  443.180234][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  443.190814][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  443.207200][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  443.216232][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  443.235658][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  443.263172][ T9284] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  443.280533][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  443.295449][ T9284] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  443.485733][ T6410] usb 9-1: 0:2 : does not exist
[  443.499519][ T6410] usb 9-1: USB disconnect, device number 7
[  443.513521][ T4566] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.789091][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  443.926831][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  444.244043][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  444.316019][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  444.368360][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  444.410789][ T9136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  444.445780][ T4566] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.544827][ T4566] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.564894][ T9281] loop6: detected capacity change from 0 to 40427
[  444.628935][ T9281] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64)
[  444.659644][ T9281] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  444.677213][ T9281] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x6
[  444.723739][ T4279] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  444.739752][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.8.912'.
[  444.749039][ T9281] F2FS-fs (loop6): invalid crc value
[  444.768949][ T9281] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  444.806712][ T9300] bridge0: port 2(vlan2) entered blocking state
[  444.820422][   T13] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  444.852228][ T9300] bridge0: port 2(vlan2) entered disabled state
[  444.967683][ T9281] F2FS-fs (loop6): Start checkpoint disabled!
[  444.982176][ T9281] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  445.000507][ T9281] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  445.077141][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  445.084881][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  445.092662][   T13] usb 8-1: Using ep0 maxpacket: 8
[  445.120557][ T4279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  445.164759][ T9136] 8021q: adding VLAN 0 to HW filter on device batadv0
[  445.182535][ T4279] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  445.196468][ T9308] loop8: detected capacity change from 0 to 512
[  445.219220][ T4279] usb 1-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00
[  445.236723][ T4279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.290193][   T13] usb 8-1: unable to get BOS descriptor or descriptor too short
[  445.307793][ T9308] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.913: missing EA_INODE flag
[  445.327949][ T4279] usb 1-1: config 0 descriptor??
[  445.377855][ T9308] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.913: error while reading EA inode 12 err=-117
[  445.479996][ T9308] EXT4-fs (loop8): 1 orphan inode deleted
[  445.509815][ T9308] EXT4-fs (loop8): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  445.610858][   T13] usb 8-1: New USB device found, idVendor=0582, idProduct=002f, bcdDevice= 0.40
[  445.631696][   T13] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.653256][   T13] usb 8-1: Product: syz
[  445.674717][   T13] usb 8-1: Manufacturer: syz
[  445.692440][   T13] usb 8-1: SerialNumber: syz
[  445.881387][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  445.895177][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  445.902967][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  445.910454][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  445.917947][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  445.925558][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  445.933332][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  445.940259][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  445.947879][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  445.970767][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  445.982817][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  445.992747][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.012646][ T9319] binfmt_misc: register: failed to install interpreter file ./file2
[  446.026667][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.043051][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.052919][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.066382][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.076333][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.089177][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.105326][   T13] usb 8-1: invalid MIDI in EP 0
[  446.142756][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.159410][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.168094][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.176449][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.190661][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.302352][ T9321] xt_NFQUEUE: number of total queues is 0
[  446.690944][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.698097][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.705731][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.712819][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.719737][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.726828][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.734253][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.743279][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.750213][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.757675][   T13] snd-usb-audio: probe of 8-1:1.0 failed with error -22
[  446.764862][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.771883][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.778967][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.785953][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.792899][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.799995][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.811859][   T13] usb 8-1: USB disconnect, device number 6
[  446.832515][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.841778][ T4279] wacom 0003:056A:0333.000C: unknown main item tag 0x0
[  446.896828][ T4279] wacom 0003:056A:0333.000C: hidraw0: USB HID v0.04 Device [HID 056a:0333] on usb-dummy_hcd.0-1/input0
[  446.940856][ T9324] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  446.970544][ T4279] usb 1-1: USB disconnect, device number 2
[  447.000832][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  447.024080][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  447.032803][ T9324] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  447.129121][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  447.204161][ T9329] fido_id[9329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  448.149885][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  448.159019][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  448.170098][ T9136] device veth0_vlan entered promiscuous mode
[  448.587467][ T9350] loop7: detected capacity change from 0 to 16
[  448.610575][ T9350] erofs: (device loop7): mounted with root inode @ nid 36.
[  448.639193][   T13] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  448.781749][ T9352] loop0: detected capacity change from 0 to 256
[  448.792473][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  448.800725][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  448.814422][ T9136] device veth1_vlan entered promiscuous mode
[  448.868401][ T9352] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  448.961363][ T9354] loop6: detected capacity change from 0 to 512
[  448.995456][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  449.006164][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  449.017001][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  449.030952][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  449.042549][ T9136] device veth0_macvtap entered promiscuous mode
[  449.051971][   T13] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  449.084852][   T13] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  449.099748][ T9136] device veth1_macvtap entered promiscuous mode
[  449.171626][ T9136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.182647][   T13] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  449.193325][   T13] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  449.203050][   T13] usb 9-1: SerialNumber: syz
[  449.215181][ T9354] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback.
[  449.232551][ T9136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.249865][ T9354] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  449.254534][ T9136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.275821][ T4229] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  449.318351][ T9362] loop0: detected capacity change from 0 to 256
[  449.334565][ T9136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.385656][ T9136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.407309][ T9136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.424536][ T9136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.437952][ T9136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.455986][ T9136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.466964][ T9136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.486013][ T9136] batman_adv: batadv0: Interface activated: batadv_slave_0
[  449.524752][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  449.550201][ T9362] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  449.572385][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  449.589987][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  449.604331][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  449.660730][ T4229] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  449.693703][ T4229] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  449.740832][ T4229] usb 8-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00
[  449.792295][ T4229] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.828809][ T4229] usb 8-1: config 0 descriptor??
[  449.845336][ T9136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.863468][ T9136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.884845][ T9136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.895333][ T9136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.905488][ T9136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.923189][ T9136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.957468][ T9136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.071612][ T9136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.210707][ T9136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.325249][ T9136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.470145][ T9136] batman_adv: batadv0: Interface activated: batadv_slave_1
[  450.666334][ T9136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.691709][ T9136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.718362][ T9136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.743588][ T9136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.305725][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  451.319828][   T13] usb 9-1: 0:2 : does not exist
[  451.328779][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  451.351008][   T13] usb 9-1: USB disconnect, device number 8
[  451.375853][ T4229] wacom 0003:056A:0333.000D: ignoring exceeding usage max
[  451.504431][ T9398] loop0: detected capacity change from 0 to 512
[  452.021953][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  452.029016][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  452.037989][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  452.045122][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  452.052028][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  452.077179][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  452.085022][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  452.101549][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  452.111307][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  452.124085][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  452.133595][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  452.146716][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  452.167756][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  452.209595][ T9398] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.928: missing EA_INODE flag
[  452.233542][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  452.261636][ T9398] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.928: error while reading EA inode 12 err=-117
[  452.445359][ T9398] EXT4-fs (loop0): 1 orphan inode deleted
[  452.529026][ T9398] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  453.073267][ T4317] udevd[4317]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  453.089160][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.096172][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.104325][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.111256][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.154885][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.186962][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.219997][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.241334][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.248305][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.307520][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.334748][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.361116][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.409924][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.452875][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.493523][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.553264][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.603473][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.626612][ T9427] binfmt_misc: register: failed to install interpreter file ./file2
[  453.658256][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.707835][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.757433][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.800298][ T4229] wacom 0003:056A:0333.000D: unknown main item tag 0x0
[  453.846886][ T4229] wacom 0003:056A:0333.000D: hidraw0: USB HID v0.04 Device [HID 056a:0333] on usb-dummy_hcd.7-1/input0
[  453.923389][ T4229] usb 8-1: USB disconnect, device number 7
[  454.221970][ T4683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  454.244119][ T4683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.264562][ T9444] fido_id[9444]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  454.367997][ T4683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  454.397877][ T4683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.507160][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  454.526420][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  454.923548][ T9455] loop6: detected capacity change from 0 to 512
[  454.996142][ T4566] device hsr_slave_0 left promiscuous mode
[  455.058098][ T9455] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  455.097094][ T4566] device hsr_slave_1 left promiscuous mode
[  455.111376][ T4566] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  455.131122][ T9455] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  455.141097][ T9455] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  455.164742][ T9455] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  455.173485][ T4566] batman_adv: batadv0: Removing interface: batadv_slave_0
[  455.217506][ T9455] EXT4-fs (loop6): failed to initialize system zone (-117)
[  455.224894][ T9455] EXT4-fs (loop6): mount failed
[  455.229518][   T13] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  455.254933][ T4566] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  455.281537][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  455.306520][ T4566] batman_adv: batadv0: Removing interface: batadv_slave_1
[  455.328849][ T4566] device bridge_slave_0 left promiscuous mode
[  455.350350][ T4566] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.428244][ T4566] device veth1_macvtap left promiscuous mode
[  455.460012][ T4566] device veth0_macvtap left promiscuous mode
[  455.500677][ T4566] device veth1_vlan left promiscuous mode
[  455.509657][ T4566] device veth0_vlan left promiscuous mode
[  455.543347][ T1108] usb 5-1: Using ep0 maxpacket: 16
[  455.613088][   T13] usb 8-1: config 4 has an invalid interface number: 74 but max is 0
[  455.632203][   T13] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  455.686177][   T13] usb 8-1: config 4 has no interface number 0
[  455.692946][ T1108] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  455.718416][ T1108] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  455.728403][   T13] usb 8-1: config 4 interface 74 altsetting 6 endpoint 0x89 has invalid maxpacket 512, setting to 64
[  455.758441][ T1108] usb 5-1: config 0 interface 0 has no altsetting 0
[  455.766249][   T13] usb 8-1: config 4 interface 74 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  455.790431][ T1108] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  455.813884][   T13] usb 8-1: config 4 interface 74 has no altsetting 0
[  455.820759][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.847153][ T1108] usb 5-1: config 0 descriptor??
[  456.008231][   T13] usb 8-1: New USB device found, idVendor=1f7b, idProduct=550c, bcdDevice=46.bd
[  456.017345][   T13] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.059920][   T13] usb 8-1: Product: syz
[  456.070774][   T13] usb 8-1: Manufacturer: syz
[  456.081507][   T13] usb 8-1: SerialNumber: syz
[  456.340599][ T4566] team0 (unregistering): Port device team_slave_1 removed
[  456.373209][ T1108] hid (null): invalid report_count 31853
[  456.426325][ T4566] team0 (unregistering): Port device team_slave_0 removed
[  456.451361][   T13] usb 8-1: USB disconnect, device number 8
[  456.459974][ T9470] loop6: detected capacity change from 0 to 40427
[  456.493296][ T4566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  456.534431][ T4566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  456.556360][ T9470] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  456.585085][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  456.606427][ T9470] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  456.635329][ T4234] usb 5-1: USB disconnect, device number 2
[  456.690180][ T9470] F2FS-fs (loop6): Found nat_bits in checkpoint
[  456.817265][ T9470] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  456.824593][ T9470] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  456.868156][ T4566] bond0 (unregistering): Released all slaves
[  456.897661][   T26] audit: type=1800 audit(1777348003.343:8): pid=9470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.937" name="file1" dev="loop6" ino=10 res=0 errno=0
[  456.960928][ T9470] attempt to access beyond end of device
[  456.960928][ T9470] loop6: rw=2049, want=78624, limit=40427
[  457.034071][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  457.060836][ T1108] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  457.183692][ T1108] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  457.227122][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  457.235188][ T1108] usb 1-1: SerialNumber: syz
[  457.675203][ T1325] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  458.263135][ T1325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  458.310264][ T1325] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  458.388535][ T1325] usb 5-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00
[  458.437268][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.495608][ T1325] usb 5-1: config 0 descriptor??
[  459.104537][ T1325] wacom 0003:056A:0333.000F: ignoring exceeding usage max
[  459.146115][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  459.174460][ T1108] usb 1-1: 0:2 : does not exist
[  459.203277][ T1108] usb 1-1: USB disconnect, device number 3
[  459.449331][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  459.456582][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  459.463919][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  459.471206][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  459.478527][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  459.485678][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  459.493005][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  459.501205][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  459.508515][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  459.515705][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  459.522941][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  459.530218][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  459.537503][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  459.544633][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  459.666998][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  459.887039][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  459.897916][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  459.948289][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  460.001334][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  460.045060][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  460.106482][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  460.189167][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  460.196125][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  460.253283][ T9528] tipc: Started in network mode
[  460.258223][ T9528] tipc: Node identity 1e9a4e0ac104, cluster identity 4711
[  460.271589][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  460.303516][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  460.329236][ T9528] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  460.333702][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  460.367969][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  460.378081][ T9531] loop4: detected capacity change from 0 to 1024
[  460.393659][ T9533] tipc: Resetting bearer <eth:syzkaller0>
[  460.520329][ T9531] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  460.641523][ T9531] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  461.354457][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  462.361414][ T9531] 
[  462.363804][ T9531] ======================================================
[  462.370839][ T9531] WARNING: possible circular locking dependency detected
[  462.377892][ T9531] syzkaller #0 Not tainted
[  462.382385][ T9531] ------------------------------------------------------
[  462.389604][ T9531] syz.4.945/9531 is trying to acquire lock:
[  462.395528][ T9531] ffff8880635e5a80 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0
[  462.405353][ T9531] 
[  462.405353][ T9531] but task is already holding lock:
[  462.412752][ T9531] ffff888054a48c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0
[  462.422898][ T9531] 
[  462.422898][ T9531] which lock already depends on the new lock.
[  462.422898][ T9531] 
[  462.433327][ T9531] 
[  462.433327][ T9531] the existing dependency chain (in reverse order) is:
[  462.442461][ T9531] 
[  462.442461][ T9531] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}:
[  462.450929][ T9531]        percpu_down_read+0x46/0x1b0
[  462.456249][ T9531]        ext4_writepages+0x20f/0x2df0
[  462.461670][ T9531]        do_writepages+0x476/0x6e0
[  462.466808][ T9531]        __writeback_single_inode+0x153/0xda0
[  462.472911][ T9531]        writeback_single_inode+0x3cb/0x8e0
[  462.478839][ T9531]        write_inode_now+0x23b/0x2c0
[  462.484157][ T9531]        iput+0x5ab/0x8a0
[  462.488536][ T9531]        ext4_xattr_set_entry+0x34f4/0x3ea0
[  462.494468][ T9531]        ext4_xattr_block_set+0x979/0x2d20
[  462.500305][ T9531]        ext4_expand_extra_isize_ea+0xf3f/0x19b0
[  462.506662][ T9531]        __ext4_expand_extra_isize+0x301/0x3e0
[  462.512848][ T9531]        __ext4_mark_inode_dirty+0x469/0x700
[  462.518853][ T9531]        ext4_evict_inode+0xa8d/0x1090
[  462.524393][ T9531]        evict+0x4c9/0x8d0
[  462.528841][ T9531]        ext4_orphan_cleanup+0xad2/0x1320
[  462.534585][ T9531]        ext4_fill_super+0x8d6e/0x94f0
[  462.540083][ T9531]        mount_bdev+0x287/0x3c0
[  462.544958][ T9531]        legacy_get_tree+0xe6/0x180
[  462.550301][ T9531]        vfs_get_tree+0x88/0x270
[  462.555268][ T9531]        do_new_mount+0x24a/0xa40
[  462.560318][ T9531]        __se_sys_mount+0x2e3/0x3d0
[  462.565548][ T9531]        do_syscall_64+0x4c/0xa0
[  462.570528][ T9531]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  462.577018][ T9531] 
[  462.577018][ T9531] -> #0 (&ei->xattr_sem){++++}-{3:3}:
[  462.584618][ T9531]        __lock_acquire+0x2c42/0x7d10
[  462.590038][ T9531]        lock_acquire+0x19e/0x400
[  462.595135][ T9531]        down_write+0x38/0x60
[  462.599876][ T9531]        ext4_destroy_inline_data+0x24/0xe0
[  462.605807][ T9531]        ext4_writepages+0x670/0x2df0
[  462.611219][ T9531]        do_writepages+0x476/0x6e0
[  462.616375][ T9531]        filemap_fdatawrite_wbc+0x1eb/0x240
[  462.622312][ T9531]        file_write_and_wait_range+0x14d/0x220
[  462.628504][ T9531]        ext4_sync_file+0x1ff/0xae0
[  462.633772][ T9531]        ext4_buffered_write_iter+0x338/0x3b0
[  462.639879][ T9531]        ext4_file_write_iter+0x74d/0x1700
[  462.645756][ T9531]        do_iter_readv_writev+0x47e/0x5f0
[  462.651519][ T9531]        do_iter_write+0x205/0x7b0
[  462.656669][ T9531]        do_pwritev+0x240/0x3a0
[  462.661563][ T9531]        do_syscall_64+0x4c/0xa0
[  462.666539][ T9531]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  462.673037][ T9531] 
[  462.673037][ T9531] other info that might help us debug this:
[  462.673037][ T9531] 
[  462.683324][ T9531]  Possible unsafe locking scenario:
[  462.683324][ T9531] 
[  462.690801][ T9531]        CPU0                    CPU1
[  462.696192][ T9531]        ----                    ----
[  462.701619][ T9531]   lock(&sbi->s_writepages_rwsem);
[  462.706849][ T9531]                                lock(&ei->xattr_sem);
[  462.713743][ T9531]                                lock(&sbi->s_writepages_rwsem);
[  462.721495][ T9531]   lock(&ei->xattr_sem);
[  462.725866][ T9531] 
[  462.725866][ T9531]  *** DEADLOCK ***
[  462.725866][ T9531] 
[  462.734038][ T9531] 2 locks held by syz.4.945/9531:
[  462.739201][ T9531]  #0: ffff888061f00460 (sb_writers#5){++++}-{0:0}, at: do_pwritev+0x229/0x3a0
[  462.748235][ T9531]  #1: ffff888054a48c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0
[  462.758820][ T9531] 
[  462.758820][ T9531] stack backtrace:
[  462.764895][ T9531] CPU: 1 PID: 9531 Comm: syz.4.945 Not tainted syzkaller #0
[  462.772252][ T9531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  462.782354][ T9531] Call Trace:
[  462.785666][ T9531]  <TASK>
[  462.788637][ T9531]  dump_stack_lvl+0x188/0x250
[  462.793350][ T9531]  ? load_image+0x400/0x400
[  462.797889][ T9531]  ? show_regs_print_info+0x20/0x20
[  462.803128][ T9531]  ? print_circular_bug+0x12b/0x1a0
[  462.808371][ T9531]  check_noncircular+0x296/0x330
[  462.813355][ T9531]  ? add_chain_block+0x940/0x940
[  462.818323][ T9531]  ? lockdep_lock+0xf1/0x1f0
[  462.822957][ T9531]  ? mark_lock+0x94/0x320
[  462.827316][ T9531]  ? _find_first_zero_bit+0xce/0xf0
[  462.832558][ T9531]  __lock_acquire+0x2c42/0x7d10
[  462.837466][ T9531]  ? verify_lock_unused+0x140/0x140
[  462.842740][ T9531]  ? mark_lock+0x94/0x320
[  462.847107][ T9531]  ? verify_lock_unused+0x140/0x140
[  462.852352][ T9531]  ? __lock_acquire+0x12e8/0x7d10
[  462.857424][ T9531]  lock_acquire+0x19e/0x400
[  462.861964][ T9531]  ? ext4_destroy_inline_data+0x24/0xe0
[  462.867552][ T9531]  ? read_lock_is_recursive+0x10/0x10
[  462.868112][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  462.872961][ T9531]  ? rcu_read_lock_any_held+0xb0/0x130
[  462.872988][ T9531]  ? ext4_journal_check_start+0x180/0x250
[  462.879631][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  462.884717][ T9531]  down_write+0x38/0x60
[  462.900854][ T9531]  ? ext4_destroy_inline_data+0x24/0xe0
[  462.906439][ T9531]  ext4_destroy_inline_data+0x24/0xe0
[  462.911854][ T9531]  ext4_writepages+0x670/0x2df0
[  462.916758][ T9531]  ? verify_lock_unused+0x140/0x140
[  462.922194][ T9531]  ? mark_lock+0x94/0x320
[  462.926566][ T9531]  ? __might_sleep+0xf0/0xf0
[  462.931235][ T9531]  ? ext4_readpage+0x2e0/0x2e0
[  462.936065][ T9531]  ? __lock_acquire+0x7d10/0x7d10
[  462.941138][ T9531]  ? do_raw_spin_lock+0x128/0x2f0
[  462.946212][ T9531]  ? do_raw_spin_unlock+0x11d/0x230
[  462.951448][ T9531]  ? ext4_readpage+0x2e0/0x2e0
[  462.956289][ T9531]  do_writepages+0x476/0x6e0
[  462.960932][ T9531]  ? filemap_fdatawrite_wbc+0x1e0/0x240
[  462.966518][ T9531]  ? __writepage+0x130/0x130
[  462.971155][ T9531]  ? __lock_acquire+0x7d10/0x7d10
[  462.976223][ T9531]  ? __rwlock_init+0x140/0x140
[  462.981020][ T9531]  ? generic_write_end+0x24d/0x3d0
[  462.986174][ T9531]  ? do_raw_spin_unlock+0x11d/0x230
[  462.991420][ T9531]  filemap_fdatawrite_wbc+0x1eb/0x240
[  462.996833][ T9531]  file_write_and_wait_range+0x14d/0x220
[  463.002513][ T9531]  ? __filemap_set_wb_err+0x1b0/0x1b0
[  463.007931][ T9531]  ext4_sync_file+0x1ff/0xae0
[  463.012652][ T9531]  ext4_buffered_write_iter+0x338/0x3b0
[  463.018245][ T9531]  ext4_file_write_iter+0x74d/0x1700
[  463.023572][ T9531]  ? __lock_acquire+0x7d10/0x7d10
[  463.028643][ T9531]  ? ext4_file_read_iter+0x700/0x700
[  463.033963][ T9531]  ? aa_file_perm+0x38b/0xe80
[  463.038681][ T9531]  do_iter_readv_writev+0x47e/0x5f0
[  463.043920][ T9531]  ? aa_path_link+0x880/0x880
[  463.048637][ T9531]  ? generic_file_rw_checks+0x280/0x280
[  463.054221][ T9531]  ? common_file_perm+0x171/0x1c0
[  463.059288][ T9531]  ? fsnotify_perm+0x5d/0x560
[  463.063999][ T9531]  ? security_file_permission+0x75/0xa0
[  463.069585][ T9531]  do_iter_write+0x205/0x7b0
[  463.074214][ T9531]  do_pwritev+0x240/0x3a0
[  463.078582][ T9531]  ? do_preadv+0x390/0x390
[  463.083034][ T9531]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  463.089071][ T9531]  ? lock_chain_count+0x20/0x20
[  463.093971][ T9531]  ? vtime_user_exit+0x2c8/0x3e0
[  463.098946][ T9531]  ? lockdep_hardirqs_on+0x94/0x140
[  463.104184][ T9531]  ? __x64_sys_pwritev2+0xba/0x100
[  463.109378][ T9531]  do_syscall_64+0x4c/0xa0
[  463.113836][ T9531]  ? clear_bhb_loop+0x30/0x80
[  463.118554][ T9531]  ? clear_bhb_loop+0x30/0x80
[  463.123274][ T9531]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  463.129221][ T9531] RIP: 0033:0x7feb35fa8dd9
[  463.133679][ T9531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  463.153323][ T9531] RSP: 002b:00007feb34202028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  463.161775][ T9531] RAX: ffffffffffffffda RBX: 00007feb36221fa0 RCX: 00007feb35fa8dd9
[  463.169784][ T9531] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005
[  463.177790][ T9531] RBP: 00007feb3603ed69 R08: 0000000000000000 R09: 0000000000000000
[  463.185797][ T9531] R10: 0000000000005412 R11: 0000000000000246 R12: 0000000000000000
[  463.193802][ T9531] R13: 00007feb36222038 R14: 00007feb36221fa0 R15: 00007fffd7e27288
[  463.201816][ T9531]  </TASK>
[  463.277170][ T9551] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  463.336998][ T9551] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 22 with error 28
[  463.383369][ T9551] EXT4-fs (loop4): This should not happen!! Data will be lost
[  463.383369][ T9551] 
[  463.406092][ T9551] EXT4-fs (loop4): Total free blocks count 0
[  463.421443][ T9551] EXT4-fs (loop4): Free/Dirty block details
[  463.438703][ T9551] EXT4-fs (loop4): free_blocks=20480
[  463.466381][ T9551] EXT4-fs (loop4): dirty_blocks=32
[  463.481558][ T9551] EXT4-fs (loop4): Block reservation details
[  463.501054][ T9551] EXT4-fs (loop4): i_reserved_data_blocks=2
[  463.946464][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  463.953453][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  463.960381][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  463.967285][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  463.974647][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  463.981593][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  463.989496][ T1325] wacom 0003:056A:0333.000F: unknown main item tag 0x0
[  464.012301][ T1325] wacom 0003:056A:0333.000F: hidraw0: USB HID v0.04 Device [HID 056a:0333] on usb-dummy_hcd.4-1/input0
[  464.031310][ T1325] usb 5-1: USB disconnect, device number 3
[  464.033410][ T9525] tipc: Disabling bearer <eth:syzkaller0>
[  464.058783][ T1108] tipc: Node number set to 3751693834
[  464.083397][ T9570] device syzkaller0 entered promiscuous mode
[  464.097567][ T9571] fido_id[9571]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory