last executing test programs:

3m45.361335144s ago: executing program 32 (id=31):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
setreuid(0x0, 0xee00)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000)
read$FUSE(r2, &(0x7f000000a4c0)={0x2020}, 0xa5)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x37)

3m40.429946806s ago: executing program 33 (id=52):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa8242)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/4078, 0xfee}], 0x1)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa8201, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

3m13.654444958s ago: executing program 34 (id=197):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
setuid(0xee00)
r2 = syz_clone(0x8411, 0x0, 0x0, 0x0, 0x0, 0x0)
get_robust_list(r2, 0x0, 0x0)

2m42.869308465s ago: executing program 35 (id=372):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)

2m31.241231742s ago: executing program 8 (id=373):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m30.937109491s ago: executing program 8 (id=439):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
r0 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20)

2m29.473381896s ago: executing program 8 (id=443):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000480)={"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"})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x1, 0x106e, 0xc, 0x8000000000000, 0x80000004000080, 0x0, 0xfffffffffffffff9, 0x4, 0x4, 0x6, 0x7ffd], 0x41000, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m28.989074521s ago: executing program 8 (id=448):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x50000, 0x2000, 0x8, 0xf8, 0x7f, 0x46, 0xff, 0xd, 0x6, 0x3, 0x44, 0x1}, {0xeeef0000, 0xcdf36000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x5, 0x2e, 0x4b}, {0x106000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xfb, 0x4, 0x90, 0x1, 0xff}, {0x4, 0x4000, 0x3, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0xc000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x10, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x5, 0xf000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000240)={"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"})

2m28.622553373s ago: executing program 36 (id=448):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x50000, 0x2000, 0x8, 0xf8, 0x7f, 0x46, 0xff, 0xd, 0x6, 0x3, 0x44, 0x1}, {0xeeef0000, 0xcdf36000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x5, 0x2e, 0x4b}, {0x106000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xfb, 0x4, 0x90, 0x1, 0xff}, {0x4, 0x4000, 0x3, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0xc000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x10, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x5, 0xf000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000240)={"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"})

2m20.183252302s ago: executing program 7 (id=492):
capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd})
listen(0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000040)={r3})

2m20.071115555s ago: executing program 7 (id=493):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})

2m19.770663414s ago: executing program 7 (id=496):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x207)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

2m19.475590723s ago: executing program 7 (id=498):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x20000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)

2m19.27098528s ago: executing program 7 (id=502):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)={0xa0000013})
ppoll(&(0x7f0000000140)=[{r0, 0x40}, {r1, 0xa180}, {r2, 0x110}], 0x3, 0x0, 0x0, 0x0)
close_range(r0, r1, 0x0)

2m18.60941364s ago: executing program 7 (id=506):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil)
mprotect(&(0x7f0000227000/0x1000)=nil, 0x1000, 0xf)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)

2m18.207922593s ago: executing program 37 (id=506):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil)
mprotect(&(0x7f0000227000/0x1000)=nil, 0x1000, 0xf)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)

1m49.803259745s ago: executing program 4 (id=682):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0x1, 0x0, {0x4006, 0x5, 0x0, 0x6, 0x3, 0x0, 0x0, 0xfffffbff, 0x10, 0x6000, 0x2, r2, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x2d, 0x0, 0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x180)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000280)={0x28, 0x4, 0x0, {0x3, 0x3}}, 0x28)

1m49.627477961s ago: executing program 4 (id=683):
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
statx(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={<r1=>0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000000180)=0xc)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB="00646d61c6d62d303030303030303030303030303135322c696f433161720300000069736f380000000000", @ANYRES16=r3, @ANYRES64=r0, @ANYRES32=r1, @ANYRESHEX=r1], 0x81, 0x14f5, &(0x7f0000001580)="$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")
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r4, 0x0, 0x0)

1m49.191472054s ago: executing program 4 (id=684):
r0 = socket$l2tp(0x2, 0x2, 0x73)
getpeername$l2tp(r0, 0x0, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x68, r2, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8917}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @broadcast, @from_mac=@device_b, {0x0, 0x4}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x3, 0x0, 0x3}}, 0x1, @void}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8}, 0x40004)

1m48.929168262s ago: executing program 4 (id=686):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)

1m48.735976179s ago: executing program 4 (id=687):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x102000, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m48.082734779s ago: executing program 4 (id=691):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2)

1m47.793158968s ago: executing program 38 (id=691):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2)

46.956081777s ago: executing program 0 (id=1172):
fsopen(0x0, 0x0)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

46.777403423s ago: executing program 0 (id=1174):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xca, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x50, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

46.677539076s ago: executing program 0 (id=1176):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)

45.662247857s ago: executing program 0 (id=1179):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)="fa87c7e72022c7b864b07519029431b0f73faf3562d4199e9f31c1dd1202787cdc0dad572930535fe281583dce41f94472697f744b2aec18a02dafedcfe93533ddc8f52bf553629fad5e0e873ea442348753ce7f0b8a", 0x56}, {&(0x7f0000000340)="0a2b131fed7c3b0ace259fcc73c7401df65ac597b979f6cc76064e5a3b452de24ce402ad11a56e85c9fe9f3c2e305933c9adbcc8576d051634f516897eb95943656f8b840b1fb922463f63432934f3dab5c65c44056b72e7ff918b9ca85191d8d7e22c1be0d7d93d7856a47685f073eaf6b24c19e5e73fdedd74dda9d44152b5df29f2349596ce5a365d9fa9fada901203e43cac955d56a9f4493c207d27df2a9d69485639b494a07538110dba4426e4b42597c59909d96869e7d7", 0xbb}, {&(0x7f0000000440)="ae2917d5a4b014842a61845c01908087c19287ad5d95c4053c4acbbd1a55627bf84a05cf9d6eed56274564", 0x2b}, {&(0x7f0000000640)="3fd86240836c56786709aa10b4c27b60ae1dc382c772f8c8004beffbfbff60aee2e3c6af39836c9fc4dbdda40a19e1f2635d7af399581a0f70ddefce87466f1440e2c21a8773ac4f3b2d5c8bfa9451ed3be6e55b68033085556f00db59648336586bf01013a839293a8dce06f9698af2761f685737637ac4282fbef83a45127bc95758c0f7cd74cd77275225e4ff440dd513073746f42cb68a3c32e14c2e6903b2cff77d7a22d28977b8ef1650cbaf8ee0c82770aea9896ef6b2ffba68e7757498d5a8324de270c9a29579bb0443f50f6c84bdd789e89c28a3ff0f5a3cafff994cd1ff8ebcbe46589b216d", 0xeb}, {&(0x7f0000000740)="a92a26692895c48e5670e19cc646f85a75772f22ae06b576502dcae8deef2c85890ba3a489d85a850088295e495a45179795ff4e4e8560da757145dd589c53242fb40dc5641fec08c566e437445c185643ce0a048a29e0694250424da6e4f97c9ad2b4ee41d1a2c517ee", 0x6a}, {&(0x7f00000007c0)="2b0a051fa993351ed5723dcb3ab0688eee58946e525bf73863d753c53084ff25887ff03601f9c579a49c6445c7a92bdcd09da9cbdb79699386f151003e7b33efaa92e9157902eb9c86f09f37922516c03d010650b043161320b26dfd8750d3fdf581c3b2af206b65d0c24082605122cee0924124eeca3c4b2d23c0cc677ceeae", 0x80}, {&(0x7f00000008c0)="21d2844a2d9218dc9d7b519534a4f00b0a36f6ec7af9694cd14a3cd7ce0282e8", 0x20}], 0x7}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000fc0)="538eb34b12b6e78221d826a03b7c0143cd6b6f16b06f4d0fa7269431b78022336d8825fa7a0e3511e83e19a4a17ae750af98ccb9c80337704a140c13b9307b1191af533c2574ef20e724fa7797f387507cb9f93eeebc24a3403aa64f0cd9da80b8e2432ce5be3a878cba0519d691a55d2c50dfb017ef6a444b9c73aab5428ced4fa4a914b178a1d00dfb91aab5b9eddbffdd480964c76916098e4790dabed0d7324638701c4405dec8192232ce17b730425180aff1e87b5648012f5121b23bbdea0fcd703090816285febe7c4b307a536948b6e3853662c9a2d71fe21c5843d97c86dccdff76d3d3fffe58e94dcb93d706fe1c7e23b360a3f189c6ac6644b1aa8c3bbf4fd56998c52011e256bf2267e73fe6de7b57d1d8dc283b9f9a729590e2543d86f7d1f5eae074ebd97c014a0991631bda524a4380c04b2810d2868b8e2edd814da9a9bc9b78b72ae4e5c00da1bee412b2226ed068616823f9cbd256f0bfa2d9819a13b8b79fdf561941335c8ab88fd398320194f829446aa1bda7da4765714e6ab5346f3f0fbf22f06e5de43e3d2f5124a0b96c8b3aa4d7b7a24bfb41a909f8316adea4c95a49fcee2568b9e30fc6a6762cec1f4f7c96774299f7f4403c31431acb4c36a806e0cfc590046b2b982400ff72205ca3986edd7c8a47aae0b57c421d7fcc99e76f5d63d696e4de21e8b4a0966a94576fa8eda2deecd9b92ced18ea74e1c949416768249ccaf9d508d4309eeee299573127ce8f76d15479d9cdeb719411e2682bbb1729358f71538a01b94593ea105843f9169d56bb992d3bae2a3da150fd62c59b1aea8c15f144bab09693a14f6e638628324b952cee8bb6f54c985ec5d95553893a8ec43547d49abd2b11ef310a60c75fc67487d0c1558ff741b4ce134136a6e0675d0f43378e2af7fd3d0832b86bdf8924cc35a99ed8f6d0ec828d4915a98d735e9f4e4f95d24bbe620236202602480995f04bfafe43399bf10ad35beb26a6dc369c91182b9d516c8d10f431bab67bf3a3547a7bd290597a3dcd14b0eac22db094008731433485df92c54b814735b0f1fea5f4b155b5b5542eed11b2ae993538c10fd4ac0391e96f3e999a65c9459f89689775be7d3493f2e4fe0e1e731ab9b7258c0cc202cecc4216a15519474432cd93370b52e7b52c078795139361e42b43f76e86a3862d0442ad47bcc5045d06b625e097f35aa2ef47ec56e376b90728a73a15a2544f5573f6db2a14b696b2317cc4d92836cad8b7effab108c127f4413c4a9ff1891bcae6f3131c061856c1f7f209782f95cec6bc08794ae7b2ef53e397b409b1f6b74097dbe29fa5fb1a7d0bf597586a21a58592ed97e49d49d8dea1285fae317f5689fbc86e8a3dd4efe34fea46d85938f37202c2bbf7c6", 0x3e3}], 0x1}}], 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

44.702109267s ago: executing program 0 (id=1187):
r0 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58)
r3 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/3, 0x3}], 0x1}, 0x0)

43.94647191s ago: executing program 0 (id=1195):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x5)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r2)
dup(r2)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r3, 0x0, r2, 0x0, 0xffff, 0x2)

43.483945954s ago: executing program 39 (id=1195):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x5)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r2)
dup(r2)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r3, 0x0, r2, 0x0, 0xffff, 0x2)

37.706060302s ago: executing program 3 (id=1237):
io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x2, 0xfffffffd, 0x4})
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(0x3)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x802)

37.484124798s ago: executing program 3 (id=1239):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x28)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
r3 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

37.08577254s ago: executing program 3 (id=1242):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2040000, &(0x7f0000000240)={[{@nodots}, {@fat=@fmask={'fmask', 0x3d, 0xa66}}, {@fat=@nfs}, {@fat=@flush}, {@nodots}]}, 0x0, 0x1e8, &(0x7f0000000280)="$eJzs3D9rU10cB/DTNs8TrVQ6Cbp40EWXoJ0dFKkgBhU14p/plt5qaEhKboZEHDL7MhxFdHEuvoG+C7cilE5OXqk3ba3WdrAm0n4+S36c7wnnHC4cLufAXb0yHkLIKgtJJ4yXx8L41dAvhRCmw0Z7oR8uvn+0/ur+4ye3rlWrs+VBc4zx5Nnlpy/fnvvYOfHww9igeW3m08qpldOrXx88r2exnsVmqxOTONdqdZK5Rhrn69liJca7jTTJ0lhvZml7R77QaC0t9WLSnJ+aXGqnWRaTZi8upr3YacVOuxeTZ0m9GSuVSpyaDPyJ2psveR7W8jzPy/2Q5/moJ8SQef5H2+amfi/GYyF87ndr3VrxW+Q3blZnL8Xvprf/td7t1ia28stFHnfm/4XJQT6za/5/uHC+yDey63eqP+XHw/zfXz4AAAAAABxKlbjl1/P9zSvdXfOi+uF+oDi/f708yEvhTGmYKwEAAAB+J+u9WEwajbS9RzERQtivz4EXpTC8sXYvbodRjq44VEU5hLBnn3fhX5nqoNhv5xgbzgYFAAAcmO2X/lHPBAAAAAAAAAAAAAAAAAAAAI6uYXxObNRrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYy7cAAAD//wiXZL4=")
chmod(0x0, 0x22)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/pid\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0)
read$FUSE(r1, &(0x7f0000000780)={0x2020}, 0x2020)
pread64(r1, &(0x7f0000000180)=""/173, 0xad, 0xe4)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x12)

36.874680217s ago: executing program 3 (id=1243):
r0 = socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r0, 0x0, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffe07, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x1000, 0x401, 0x8001}, 0x40000, 0x4000005, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff1, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x10}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xf}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000814}, 0x10)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

36.474968289s ago: executing program 3 (id=1246):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r1, r1)
setpgid(0x0, r1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xf6ff, 0x0)

35.436197411s ago: executing program 3 (id=1261):
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10b241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket$kcm(0x29, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef)

27.65701132s ago: executing program 6 (id=1289):
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = msgget$private(0x0, 0x20)
msgrcv(r0, 0x0, 0x0, 0x3, 0x2000)
msgsnd(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="030000000000000089f5bf4221b4eab8e298f075c26c0cee0bc1d744d03563e510582632c4525bdd668dc5b448a570e8505e081bd6e43d0fa36a526b55d54827544e2d3bf1d3aa057eab761386e4dc8e26df007aa9c6cdf0c6f2d37e0a12237de7bfbe6f6c42ec589a67618e0a27466cfd63a1b331cf52016dff5962f5b59352b2ead223b24361724ec92ac717c89dc36f099dbcb49ea1e4ec8568c964528b13b718a9ba38ce734ddaec68bc10"], 0x401, 0x0)
msgsnd(r0, &(0x7f0000001180)=ANY=[@ANYBLOB="01"], 0x2000, 0x0)
msgctl$IPC_RMID(r0, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f00000000c0))
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
socket(0x10, 0x80002, 0x0)

26.600302673s ago: executing program 6 (id=1300):
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x208000, &(0x7f0000000280)={[{@block_validity}, {}, {@data_err_ignore}, {@journal_ioprio}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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")
r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000140)={0x17c04, r2, 0x6, 0x973f, 0x81, 0x1})
fallocate(r1, 0x0, 0x0, 0x8800000)
r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3)

26.05461902s ago: executing program 6 (id=1306):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffdfd}], 0x0, 0x0, 0x0})

25.768062768s ago: executing program 6 (id=1310):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x83)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

25.019299001s ago: executing program 6 (id=1316):
unshare(0x40200)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = semget(0x1, 0x4, 0x39c)
semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1)
semop(0x0, &(0x7f0000000100)=[{0x0, 0xbbdd, 0x1000}], 0x1)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x7, 0x7fff])
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000))
unshare(0x40400)

23.869338367s ago: executing program 6 (id=1324):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0)
shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23.690231342s ago: executing program 40 (id=1324):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0)
shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20.070266683s ago: executing program 41 (id=1261):
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10b241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket$kcm(0x29, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef)

6.897374689s ago: executing program 9 (id=1406):
eventfd2(0x0, 0x0)
io_setup(0x81, &(0x7f0000000400))
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'})
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0})

3.940954949s ago: executing program 2 (id=1416):
r0 = fanotify_init(0x200, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0)
r2 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil)
shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x712c48a0bda4084)
shmctl$IPC_RMID(r2, 0x0)
shmctl$SHM_STAT_ANY(r2, 0xf, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
fanotify_mark(r0, 0x2, 0x20, r3, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00')
read$eventfd(r4, &(0x7f0000000280), 0x8)

3.669351957s ago: executing program 1 (id=1417):
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240)={0xfffffffa, 0x80000001}, 0x8)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

3.668888477s ago: executing program 9 (id=1418):
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$radio(0x0, 0x2, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0)

3.59304049s ago: executing program 2 (id=1419):
syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x98, &(0x7f0000000080)=ANY=[], 0xff, 0xa4, &(0x7f0000000180)="$eJzs0b+pAkEQB+C5e/C4A9EC7OFq0CKswBKMBEEsyFYswdTIwNTkZHFFuGDBQFH4Ptg/P4ZdBuZw3U9jHNFvI/q/eOiT1XoXJf/FKr+gzmeThj655/M8YhYRVaqn7bJZHvMaPF80xd9Hb+sbAAB4XTXIdXTdM53afGk/2RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7kFAAD//z7jFwY=")
creat(&(0x7f0000000100)='./file1\x00', 0x182)
mknod(&(0x7f0000000000)='.\x02\x00', 0x40, 0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7)
open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0)
rename(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00')
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x30093, 0x0, 0x0, 0x0, &(0x7f00000002c0))

3.489781153s ago: executing program 1 (id=1420):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r1=>0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)

3.470790154s ago: executing program 2 (id=1421):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0)
r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0)
close(r2)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.315916248s ago: executing program 2 (id=1422):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

3.200061642s ago: executing program 2 (id=1423):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0xc800)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)

2.892525062s ago: executing program 2 (id=1424):
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240), 0x4)

2.702857777s ago: executing program 5 (id=1425):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12141, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6tnl0\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
preadv(r4, &(0x7f0000003d40)=[{&(0x7f0000000380)=""/128, 0x80}], 0x1, 0x413, 0xf7)

2.29399745s ago: executing program 9 (id=1426):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chdir(&(0x7f0000000100)='./file0\x00')
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

2.29313485s ago: executing program 5 (id=1435):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000980)={0x3, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}, {0x9000, 0x2f, &(0x7f00000002c0)=""/47}, {0xeeee0000, 0xfc, &(0x7f0000000880)=""/252}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x400000000003ff, 0x7})

2.081865626s ago: executing program 9 (id=1427):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

2.052139317s ago: executing program 5 (id=1428):
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)

1.033313798s ago: executing program 5 (id=1429):
socket(0x400000000010, 0x3, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000003300)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0x100a}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x32}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x2000}], 0x0, 0x0, 0x0})

972.77804ms ago: executing program 9 (id=1430):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f0000000000))

730.550608ms ago: executing program 5 (id=1431):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0)
close(r2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={0x0, 0x0, 0x46, 0x0, 0x1}, 0x28)
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0xa1b92000)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x8}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000001880)=""/4112, 0x1010}], 0x1, 0x20}}], 0x48, 0x80}, 0x0)

428.118087ms ago: executing program 1 (id=1432):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

379.688309ms ago: executing program 1 (id=1433):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x8, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x40020)
syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x400, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000010c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

293.513891ms ago: executing program 1 (id=1434):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x8, 0x8d], 0xeeee8000, 0x240046})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

177.378864ms ago: executing program 1 (id=1436):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12001, 0x0)
r0 = dup(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x5000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4855}, 0x24000052)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r2, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e80050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040)

236.23µs ago: executing program 5 (id=1437):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x2)

0s ago: executing program 9 (id=1438):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp', 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4c95, &(0x7f0000001ac0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@noquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x200004}}, {@errors_continue}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f0000000b40)="$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")
sendto$inet(r0, &(0x7f0000000280)="8d", 0x1, 0x4040895, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0xffffffffffffff19, 0x805, 0x0, 0x0)

kernel console output (not intermixed with test programs):

78][ T7288]  ovl_fill_super+0x164e/0x2a30
[  172.992023][ T7288]  ? ovl_mount+0x30/0x30
[  172.996032][ T5238] usb 2-1: USB disconnect, device number 9
[  172.996509][ T7288]  ? sget+0x427/0x440
[  173.006510][ T7288]  ? free_anon_bdev+0x20/0x20
[  173.011224][ T7288]  ? ovl_mount+0x30/0x30
[  173.015508][ T7288]  mount_nodev+0x52/0xe0
[  173.019794][ T7288]  legacy_get_tree+0xe6/0x180
[  173.022369][ T7300] netlink: 'syz.6.599': attribute type 10 has an invalid length.
[  173.024950][ T7288]  ? virtio_fs_zero_page_range+0x120/0x120
[  173.038569][ T7288]  vfs_get_tree+0x88/0x270
[  173.043003][ T7288]  do_new_mount+0x24a/0xa40
[  173.047629][ T7288]  __se_sys_mount+0x2e3/0x3d0
[  173.052351][ T7288]  ? __x64_sys_mount+0xc0/0xc0
[  173.057540][ T7288]  ? lockdep_hardirqs_on+0x94/0x140
[  173.063117][ T7288]  ? __x64_sys_mount+0x1c/0xc0
[  173.067942][ T7288]  do_syscall_64+0x4c/0xa0
[  173.072403][ T7288]  ? clear_bhb_loop+0x30/0x80
[  173.077117][ T7288]  ? clear_bhb_loop+0x30/0x80
[  173.081973][ T7288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  173.087913][ T7288] RIP: 0033:0x7f0afdda4e59
[  173.092356][ T7288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.112100][ T7288] RSP: 002b:00007f0afbffe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  173.120556][ T7288] RAX: ffffffffffffffda RBX: 00007f0afe01dfa0 RCX: 00007f0afdda4e59
[  173.128561][ T7288] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  173.136542][ T7288] RBP: 00007f0afde3ad6f R08: 0000200000000040 R09: 0000000000000000
[  173.144549][ T7288] R10: 0000000000000108 R11: 0000000000000246 R12: 0000000000000000
[  173.152718][ T7288] R13: 00007f0afe01e038 R14: 00007f0afe01dfa0 R15: 00007ffc3fd9b688
[  173.160835][ T7288]  </TASK>
[  173.164018][    C1] vkms_vblank_simulate: vblank timer overrun
[  173.235189][ T7303] loop9: detected capacity change from 0 to 1024
[  173.273744][ T7288] overlayfs: statfs failed on './file0'
[  173.276240][ T7300] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  173.662007][ T7323] loop1: detected capacity change from 0 to 256
[  173.740745][ T7323] exfat: Deprecated parameter 'namecase'
[  173.746721][ T7323] exfat: Unknown parameter 'sys_tz'
[  173.757369][ T7322] loop9: detected capacity change from 0 to 4096
[  173.782798][ T7328] loop6: detected capacity change from 0 to 128
[  173.907997][ T7328] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  173.932134][ T7322] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  173.946261][ T7328] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  174.042630][ T7322] Quota error (device loop9): find_block_dqentry: Quota for id 0 referenced but not present
[  174.069899][ T7322] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  174.094960][ T7322] EXT4-fs error (device loop9): ext4_acquire_dquot:6236: comm syz.9.604: Failed to acquire dquot type 1
[  174.150979][ T7322] EXT4-fs warning (device loop9): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  174.159857][ T5238] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  174.265585][   T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  174.317290][ T7348] loop6: detected capacity change from 0 to 512
[  174.418901][ T7351] input: syz0 as /devices/virtual/input/input9
[  174.439607][ T5238] usb 4-1: Using ep0 maxpacket: 32
[  174.507111][ T7348] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  174.529795][ T7348] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.560185][ T5238] usb 4-1: config 2 has an invalid interface number: 88 but max is 0
[  174.592313][ T5238] usb 4-1: config 2 has no interface number 0
[  174.598494][ T5238] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  174.650184][   T23] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  174.662116][   T23] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  174.679614][   T23] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  174.688810][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.698025][ T5238] usb 4-1: config 2 interface 88 has no altsetting 0
[  174.871128][ T7366] device batadv_slave_1 entered promiscuous mode
[  174.889936][ T5238] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  174.907041][ T5238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.925277][ T5238] usb 4-1: Product: syz
[  174.933489][ T5238] usb 4-1: Manufacturer: syz
[  174.938184][ T5238] usb 4-1: SerialNumber: syz
[  174.962603][ T7332] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  175.099816][   T23] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[  175.117378][   T23] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input10
[  175.151881][ T7365] device batadv_slave_1 left promiscuous mode
[  175.153048][   T23] input: failed to attach handler kbd to device input10, error: -5
[  175.226085][ T7332] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  175.241030][   T23] usb 5-1: USB disconnect, device number 10
[  175.611151][ T7398] loop9: detected capacity change from 0 to 64
[  175.927956][ T7409] input: syz1 as /devices/virtual/input/input11
[  176.060478][ T5244] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  176.101281][ T7412] overlayfs: failed to get index nlink (file0/file1, err=-61)
[  176.212117][ T7419] loop9: detected capacity change from 0 to 64
[  176.299836][ T5244] usb 5-1: Using ep0 maxpacket: 16
[  176.327642][ T7419] Trying to free block not in datazone
[  176.359963][ T5238] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  176.387791][ T7419] Trying to free block not in datazone
[  176.396652][ T5238] asix: probe of 4-1:2.88 failed with error -71
[  176.403278][ T7425] loop1: detected capacity change from 0 to 512
[  176.425649][ T5244] usb 5-1: config 0 has no interfaces?
[  176.427495][ T7425] EXT4-fs (loop1): Ignoring removed orlov option
[  176.444490][ T7419] Trying to free block not in datazone
[  176.485720][ T7425] EXT4-fs (loop1): Ignoring removed bh option
[  176.488626][ T5238] usb 4-1: USB disconnect, device number 3
[  176.509718][ T7419] Trying to free block not in datazone
[  176.565551][ T7427] attempt to access beyond end of device
[  176.565551][ T7427] loop9: rw=0, want=234881064, limit=64
[  176.589976][ T5244] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  176.599186][ T5244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.622631][ T7427] buffer_io_error: 117 callbacks suppressed
[  176.622652][ T7427] Buffer I/O error on dev loop9, logical block 117440531, async page read
[  176.648463][ T7425] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,orlov,bh,delalloc,,errors=continue. Quota mode: writeback.
[  176.671694][ T7427] attempt to access beyond end of device
[  176.671694][ T7427] loop9: rw=0, want=234881064, limit=64
[  176.705970][ T5244] usb 5-1: Product: syz
[  176.713436][ T5244] usb 5-1: Manufacturer: syz
[  176.718098][ T5244] usb 5-1: SerialNumber: syz
[  176.769422][ T7427] Buffer I/O error on dev loop9, logical block 117440531, async page read
[  176.822503][ T5244] usb 5-1: config 0 descriptor??
[  176.840481][   T26] audit: type=1800 audit(1778848197.071:63): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.632" name="file1" dev="loop9" ino=6 res=0 errno=0
[  176.841746][ T7427] Trying to free block not in datazone
[  176.920927][ T7427] Trying to free block not in datazone
[  176.979675][ T7427] Trying to free block not in datazone
[  176.999886][ T7427] Trying to free block not in datazone
[  177.007186][ T7427] Trying to free block not in datazone
[  177.102608][ T7427] Trying to free block not in datazone
[  177.123735][ T6762] usb 5-1: USB disconnect, device number 11
[  177.170900][ T7427] Trying to free block not in datazone
[  177.176872][ T7427] Trying to free block not in datazone
[  177.199604][ T7427] Trying to free block not in datazone
[  177.205168][ T7427] Trying to free block not in datazone
[  177.272771][ T7427] Trying to free block not in datazone
[  177.278462][ T7427] Trying to free block not in datazone
[  177.328585][ T7427] Trying to free block not in datazone
[  177.362273][ T7427] Trying to free block not in datazone
[  177.367895][ T7427] Trying to free block not in datazone
[  177.406333][ T7427] Trying to free block not in datazone
[  177.434599][ T7427] Trying to free block not in datazone
[  177.459152][ T7427] Trying to free block not in datazone
[  177.479695][ T7427] Trying to free block not in datazone
[  177.485223][ T7427] Trying to free block not in datazone
[  177.503216][ T7427] Trying to free block not in datazone
[  177.509002][ T7427] Trying to free block not in datazone
[  177.548511][ T7427] Trying to free block not in datazone
[  177.578001][ T7427] Trying to free block not in datazone
[  177.593787][ T7427] Trying to free block not in datazone
[  177.625163][ T7427] Trying to free block not in datazone
[  177.639784][   T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  177.662269][ T7427] Trying to free block not in datazone
[  177.667791][ T7427] Trying to free block not in datazone
[  177.705083][ T7427] Trying to free block not in datazone
[  177.715072][ T7427] Trying to free block not in datazone
[  177.727439][ T7427] Trying to free block not in datazone
[  177.733389][ T7427] Trying to free block not in datazone
[  177.740122][ T7427] Trying to free block not in datazone
[  177.745774][ T7427] Trying to free block not in datazone
[  177.759739][ T7427] Trying to free block not in datazone
[  177.789648][ T7427] Trying to free block not in datazone
[  177.795178][ T7427] Trying to free block not in datazone
[  177.816130][ T7427] Trying to free block not in datazone
[  177.838881][ T7427] Trying to free block not in datazone
[  177.852930][ T7427] Trying to free block not in datazone
[  177.869272][ T7427] Trying to free block not in datazone
[  177.892416][ T7427] Trying to free block not in datazone
[  177.897952][ T7427] Trying to free block not in datazone
[  177.916215][ T7427] Trying to free block not in datazone
[  177.923046][ T7467] loop6: detected capacity change from 0 to 32768
[  177.929201][ T7427] Trying to free block not in datazone
[  177.966229][ T7427] Trying to free block not in datazone
[  177.978817][ T7427] Trying to free block not in datazone
[  178.003435][ T7427] Trying to free block not in datazone
[  178.057741][ T7427] Trying to free block not in datazone
[  178.085404][ T7427] Trying to free block not in datazone
[  178.091680][ T7427] Trying to free block not in datazone
[  178.097344][ T7427] Trying to free block not in datazone
[  178.097748][ T7467] XFS (loop6): Mounting V5 Filesystem
[  178.103539][ T7427] Trying to free block not in datazone
[  178.115394][ T7427] Trying to free block not in datazone
[  178.121454][ T7427] Trying to free block not in datazone
[  178.129802][ T7427] Trying to free block not in datazone
[  178.146009][ T7427] Trying to free block not in datazone
[  178.152204][ T7427] Trying to free block not in datazone
[  178.157917][ T7427] Trying to free block not in datazone
[  178.168391][ T7427] Trying to free block not in datazone
[  178.175884][ T7427] Trying to free block not in datazone
[  178.182208][ T7427] Trying to free block not in datazone
[  178.188027][ T7427] Trying to free block not in datazone
[  178.194273][ T7427] Trying to free block not in datazone
[  178.200461][ T7427] Trying to free block not in datazone
[  178.206093][ T7427] Trying to free block not in datazone
[  178.212775][ T7427] Trying to free block not in datazone
[  178.218484][ T7427] Trying to free block not in datazone
[  178.220847][ T7467] XFS (loop6): Ending clean mount
[  178.224733][ T7427] Trying to free block not in datazone
[  178.235092][ T7427] Trying to free block not in datazone
[  178.236060][ T7467] XFS (loop6): Quotacheck needed: Please wait.
[  178.241080][ T7427] Trying to free block not in datazone
[  178.253080][ T7427] Trying to free block not in datazone
[  178.258795][ T7427] Trying to free block not in datazone
[  178.265290][ T7427] Trying to free block not in datazone
[  178.275534][ T7427] Trying to free block not in datazone
[  178.281454][ T7427] Trying to free block not in datazone
[  178.282656][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.287254][ T7427] Trying to free block not in datazone
[  178.315909][ T7427] Trying to free block not in datazone
[  178.322571][ T7427] Trying to free block not in datazone
[  178.322903][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.366145][ T7427] Trying to free block not in datazone
[  178.376977][ T7467] XFS (loop6): Quotacheck: Done.
[  178.378547][ T7427] Trying to free block not in datazone
[  178.398100][ T7427] Trying to free block not in datazone
[  178.401069][   T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  178.414355][ T7427] Trying to free block not in datazone
[  178.435899][ T7427] Trying to free block not in datazone
[  178.442095][ T7427] Trying to free block not in datazone
[  178.447758][ T7427] Trying to free block not in datazone
[  178.479610][ T7427] Trying to free block not in datazone
[  178.485221][ T7427] Trying to free block not in datazone
[  178.487176][   T23] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  178.505288][   T26] audit: type=1800 audit(1778848198.741:64): pid=7467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.643" name="bus" dev="loop6" ino=6155 res=0 errno=0
[  178.514988][ T7427] Trying to free block not in datazone
[  178.564302][ T7427] Trying to free block not in datazone
[  178.589110][ T7427] Trying to free block not in datazone
[  178.590138][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.602839][ T7427] Trying to free block not in datazone
[  178.602861][ T7427] Trying to free block not in datazone
[  178.602870][ T7427] Trying to free block not in datazone
[  178.602878][ T7427] Trying to free block not in datazone
[  178.602885][ T7427] Trying to free block not in datazone
[  178.602893][ T7427] Trying to free block not in datazone
[  178.602901][ T7427] Trying to free block not in datazone
[  178.602909][ T7427] Trying to free block not in datazone
[  178.666202][   T23] usb 2-1: config 0 descriptor??
[  179.273799][   T23] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  179.351749][   T23] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  179.408112][   T26] audit: type=1800 audit(1778848198.771:65): pid=7467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.643" name="file1" dev="loop6" ino=6150 res=0 errno=0
[  179.699312][ T4496] XFS (loop6): Unmounting Filesystem
[  179.915868][ T7427] Trying to free block not in datazone
[  179.921714][ T7427] Trying to free block not in datazone
[  179.927196][ T7427] Trying to free block not in datazone
[  179.933360][ T7427] Trying to free block not in datazone
[  179.938858][ T7427] Trying to free block not in datazone
[  179.959600][ T7427] Trying to free block not in datazone
[  179.965131][ T7427] Trying to free block not in datazone
[  179.975030][ T7427] Trying to free block not in datazone
[  180.022973][ T7427] Trying to free block not in datazone
[  180.028503][ T7427] Trying to free block not in datazone
[  180.076207][ T7427] Trying to free block not in datazone
[  180.092344][ T7427] Trying to free block not in datazone
[  180.097948][ T7427] Trying to free block not in datazone
[  180.139660][ T7427] Trying to free block not in datazone
[  180.145179][ T7427] Trying to free block not in datazone
[  180.169550][ T7427] Trying to free block not in datazone
[  180.175255][ T7427] Trying to free block not in datazone
[  180.227663][ T7427] Trying to free block not in datazone
[  180.247116][ T7427] Trying to free block not in datazone
[  180.269923][ T7427] Trying to free block not in datazone
[  180.275658][ T7427] Trying to free block not in datazone
[  180.326906][ T7427] Trying to free block not in datazone
[  180.347147][ T7427] Trying to free block not in datazone
[  180.366651][ T7427] Trying to free block not in datazone
[  180.385589][ T7427] Trying to free block not in datazone
[  180.404354][ T7427] Trying to free block not in datazone
[  180.418909][ T7427] Trying to free block not in datazone
[  180.445246][ T7427] Trying to free block not in datazone
[  180.482167][ T7427] Trying to free block not in datazone
[  180.487782][ T7427] Trying to free block not in datazone
[  180.531362][ T7427] Trying to free block not in datazone
[  180.536900][ T7427] Trying to free block not in datazone
[  180.569610][ T7427] Trying to free block not in datazone
[  180.575156][ T7427] Trying to free block not in datazone
[  180.619771][ T7427] Trying to free block not in datazone
[  180.625375][ T7427] Trying to free block not in datazone
[  180.665837][ T7427] Trying to free block not in datazone
[  180.693567][ T7427] Trying to free block not in datazone
[  180.699084][ T7427] Trying to free block not in datazone
[  180.731192][ T7427] Trying to free block not in datazone
[  180.736900][ T7427] Trying to free block not in datazone
[  180.769584][ T7427] Trying to free block not in datazone
[  180.775342][ T7427] Trying to free block not in datazone
[  180.822322][ T7427] Trying to free block not in datazone
[  180.827964][ T7427] Trying to free block not in datazone
[  180.861805][ T7427] Trying to free block not in datazone
[  180.867423][ T7427] Trying to free block not in datazone
[  180.909574][ T7427] Trying to free block not in datazone
[  180.915115][ T7427] Trying to free block not in datazone
[  180.964431][ T7427] Trying to free block not in datazone
[  181.009963][ T7427] Trying to free block not in datazone
[  181.015499][ T7427] Trying to free block not in datazone
[  181.037721][ T7427] Trying to free block not in datazone
[  181.062937][ T7529] loop4: detected capacity change from 0 to 128
[  181.064689][ T7427] Trying to free block not in datazone
[  181.099596][ T7427] Trying to free block not in datazone
[  181.105118][ T7427] Trying to free block not in datazone
[  181.139598][ T7427] Trying to free block not in datazone
[  181.145122][ T7427] Trying to free block not in datazone
[  181.168885][ T7529] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  181.213022][ T7427] Trying to free block not in datazone
[  181.218561][ T7427] Trying to free block not in datazone
[  181.259681][ T7427] Trying to free block not in datazone
[  181.265220][ T7427] Trying to free block not in datazone
[  181.339686][ T7427] Trying to free block not in datazone
[  181.356016][ T7535] loop1: detected capacity change from 0 to 512
[  181.371103][ T7529] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  181.410086][ T7427] Trying to free block not in datazone
[  181.415630][ T7427] Trying to free block not in datazone
[  181.430048][ T7529] ext2 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  181.449238][ T7427] Trying to free block not in datazone
[  181.466942][ T4998] usb 2-1: USB disconnect, device number 10
[  181.486009][ T7427] Trying to free block not in datazone
[  181.498245][ T7535] EXT4-fs (loop1): Ignoring removed bh option
[  181.539108][ T7427] Trying to free block not in datazone
[  181.553504][ T7535] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  181.589548][ T7427] Trying to free block not in datazone
[  181.598841][ T7427] Trying to free block not in datazone
[  181.659640][ T7427] Trying to free block not in datazone
[  181.665220][ T7427] Trying to free block not in datazone
[  181.675907][ T7427] Trying to free block not in datazone
[  181.681619][ T7427] Trying to free block not in datazone
[  181.687232][ T7427] Trying to free block not in datazone
[  181.693373][ T7427] Trying to free block not in datazone
[  181.699071][ T7427] Trying to free block not in datazone
[  181.705180][ T7427] Trying to free block not in datazone
[  181.710819][ T7427] Trying to free block not in datazone
[  181.716482][ T7427] Trying to free block not in datazone
[  181.722424][ T7427] Trying to free block not in datazone
[  181.728290][ T7427] Trying to free block not in datazone
[  181.739597][ T7427] Trying to free block not in datazone
[  181.749353][ T7427] Trying to free block not in datazone
[  181.756525][ T7535] EXT4-fs (loop1): 1 truncate cleaned up
[  181.758684][ T7427] Trying to free block not in datazone
[  181.768053][ T7427] Trying to free block not in datazone
[  181.774091][ T7427] Trying to free block not in datazone
[  181.780052][ T7427] Trying to free block not in datazone
[  181.785627][ T7427] Trying to free block not in datazone
[  181.792204][ T7427] Trying to free block not in datazone
[  181.797717][ T7427] Trying to free block not in datazone
[  181.819655][ T7535] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  181.900857][ T7427] Trying to free block not in datazone
[  181.920078][ T5238] Bluetooth: hci4: command 0x0406 tx timeout
[  181.930741][ T7427] Trying to free block not in datazone
[  181.936266][ T7427] Trying to free block not in datazone
[  181.986909][ T7427] Trying to free block not in datazone
[  182.030864][ T7427] Trying to free block not in datazone
[  182.063570][ T7427] Trying to free block not in datazone
[  182.100166][ T7427] Trying to free block not in datazone
[  182.105823][ T7427] Trying to free block not in datazone
[  182.169935][ T7427] Trying to free block not in datazone
[  182.209638][ T7427] Trying to free block not in datazone
[  182.215164][ T7427] Trying to free block not in datazone
[  182.261401][ T7427] Trying to free block not in datazone
[  182.267025][ T7427] Trying to free block not in datazone
[  182.350344][ T7427] Trying to free block not in datazone
[  182.376461][ T7427] Trying to free block not in datazone
[  182.382364][ T7427] Trying to free block not in datazone
[  182.408817][ T7427] Trying to free block not in datazone
[  182.428696][ T7427] Trying to free block not in datazone
[  182.454965][ T7427] Trying to free block not in datazone
[  182.470013][ T7427] Trying to free block not in datazone
[  182.489636][ T7427] Trying to free block not in datazone
[  182.495541][ T7427] Trying to free block not in datazone
[  182.540093][ T7427] Trying to free block not in datazone
[  182.555895][ T7427] Trying to free block not in datazone
[  182.587475][ T7427] Trying to free block not in datazone
[  182.589103][ T7568] loop4: detected capacity change from 0 to 64
[  182.622215][ T7427] Trying to free block not in datazone
[  182.627746][ T7427] Trying to free block not in datazone
[  182.650913][ T7427] Trying to free block not in datazone
[  182.665379][ T7427] Trying to free block not in datazone
[  182.687815][ T7427] Trying to free block not in datazone
[  182.704418][ T7427] Trying to free block not in datazone
[  182.735616][ T7427] Trying to free block not in datazone
[  182.755042][ T7427] Trying to free block not in datazone
[  182.801904][ T7427] Trying to free block not in datazone
[  182.827216][ T7427] Trying to free block not in datazone
[  182.851086][ T7571] team0: Port device team_slave_0 removed
[  182.861476][ T7427] Trying to free block not in datazone
[  182.885831][ T7427] Trying to free block not in datazone
[  182.904105][ T7427] Trying to free block not in datazone
[  182.943016][ T7427] Trying to free block not in datazone
[  182.951823][ T7427] Trying to free block not in datazone
[  182.962227][ T7427] Trying to free block not in datazone
[  182.967907][ T7427] Trying to free block not in datazone
[  182.974079][ T7427] Trying to free block not in datazone
[  182.980984][ T7427] Trying to free block not in datazone
[  182.996049][ T7427] Trying to free block not in datazone
[  183.036390][ T7583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.665'.
[  183.042903][ T7427] Trying to free block not in datazone
[  183.076555][ T7583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.665'.
[  183.083025][ T7427] Trying to free block not in datazone
[  183.112424][ T7427] Trying to free block not in datazone
[  183.137740][ T7427] Trying to free block not in datazone
[  183.146627][ T7427] Trying to free block not in datazone
[  183.153216][ T7427] Trying to free block not in datazone
[  183.177026][ T7427] Trying to free block not in datazone
[  183.223015][ T7427] Trying to free block not in datazone
[  183.228969][ T7427] Trying to free block not in datazone
[  183.246169][ T7591] loop1: detected capacity change from 0 to 512
[  183.254082][ T7427] Trying to free block not in datazone
[  183.276323][ T7427] Trying to free block not in datazone
[  183.288190][ T7427] Trying to free block not in datazone
[  183.307982][ T7427] Trying to free block not in datazone
[  183.342607][ T7427] Trying to free block not in datazone
[  183.348135][ T7427] Trying to free block not in datazone
[  183.370733][ T7591] EXT4-fs (loop1): Ignoring removed orlov option
[  183.419828][ T7427] Trying to free block not in datazone
[  183.426044][ T7427] Trying to free block not in datazone
[  183.460418][ T7591] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  183.467928][ T7427] Trying to free block not in datazone
[  183.476072][ T7591] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  183.510445][ T7427] Trying to free block not in datazone
[  183.516186][ T7427] Trying to free block not in datazone
[  183.523483][ T7427] Trying to free block not in datazone
[  183.525441][   T26] audit: type=1800 audit(1778848203.761:66): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.666" name="file1" dev="loop1" ino=15 res=0 errno=0
[  183.529090][ T7427] Trying to free block not in datazone
[  183.562344][ T7427] Trying to free block not in datazone
[  183.848328][ T7606] kvm: vcpu 0: requested 32768 ns lapic timer period limited to 200000 ns
[  183.904422][ T7606] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  183.942580][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'.
[  183.966569][ T7606] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  184.049999][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'.
[  184.124508][ T7611] loop9: detected capacity change from 0 to 8192
[  184.191231][ T7611] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  185.374353][ T7656] loop4: detected capacity change from 0 to 256
[  185.455411][ T7656] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d)
[  186.212087][   T26] audit: type=1800 audit(1778848206.451:67): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.666" name="file1" dev="loop1" ino=15 res=0 errno=0
[  186.396017][ T7646] loop6: detected capacity change from 0 to 32768
[  186.438172][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.689'.
[  186.540362][ T7646] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.680 (7646)
[  186.589427][ T7646] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  186.655834][ T7646] BTRFS info (device loop6): turning on async discard
[  186.699622][ T7646] BTRFS info (device loop6): metadata ratio 0
[  186.705782][ T7646] BTRFS info (device loop6): setting nodatasum
[  186.758868][ T7646] BTRFS info (device loop6): using free space tree
[  186.787921][ T7646] BTRFS info (device loop6): has skinny extents
[  187.169613][ T7646] BTRFS info (device loop6): enabling ssd optimizations
[  187.961403][ T7710] chnl_net:caif_netlink_parms(): no params data found
[  188.132451][ T7728] loop1: detected capacity change from 0 to 2048
[  188.291966][ T7728] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  188.374130][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.396069][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.436992][ T4182] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop6 scanned by udevd (4182)
[  188.450728][ T7710] device bridge_slave_0 entered promiscuous mode
[  188.464771][ T7728] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  188.489078][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.550845][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.584475][ T7710] device bridge_slave_1 entered promiscuous mode
[  188.735481][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.786120][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.050592][ T7710] team0: Port device team_slave_0 added
[  189.110746][ T7710] team0: Port device team_slave_1 added
[  189.177956][ T7750] netlink: 'syz.1.699': attribute type 12 has an invalid length.
[  189.208071][ T7750] netlink: 'syz.1.699': attribute type 29 has an invalid length.
[  189.242579][ T7750] netlink: 148 bytes leftover after parsing attributes in process `syz.1.699'.
[  189.336941][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.399897][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.439639][ T6762] Bluetooth: hci4: command 0x0409 tx timeout
[  189.561589][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.611783][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.618877][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.799245][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.985455][ T7710] device hsr_slave_0 entered promiscuous mode
[  190.058597][ T7710] device hsr_slave_1 entered promiscuous mode
[  190.078110][ T7710] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.090372][ T7784] Set syz1 is full, maxelem 1029 reached
[  190.109558][ T7710] Cannot create hsr debugfs directory
[  190.121145][ T7786] Set syz1 is full, maxelem 1029 reached
[  190.869726][ T5247] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  190.883777][ T7816] fuse: Bad value for 'fd'
[  191.027842][  T459] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.119993][ T5247] usb 7-1: Using ep0 maxpacket: 32
[  191.280049][ T5247] usb 7-1: unable to get BOS descriptor or descriptor too short
[  191.399771][ T5247] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.412655][  T459] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.429647][ T5247] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  191.619869][ T5247] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  191.670120][ T5247] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.698653][ T5247] usb 7-1: Product: syz
[  191.718939][ T5247] usb 7-1: Manufacturer: syz
[  191.749376][ T5247] usb 7-1: SerialNumber: syz
[  191.902656][  T459] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.092180][  T459] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.171319][ T7847] tipc: Started in network mode
[  192.177866][ T7847] tipc: Node identity 84e, cluster identity 4711
[  192.269075][ T7847] tipc: Node number set to 2126
[  192.380295][ T5247] usb 7-1: USB disconnect, device number 8
[  192.444820][ T7838] loop9: detected capacity change from 0 to 131072
[  192.451819][   T21] Bluetooth: hci4: command 0x041b tx timeout
[  192.457970][ T4998] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  192.631875][ T7838] F2FS-fs (loop9): Found nat_bits in checkpoint
[  192.691921][ T7838] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  192.729700][ T4998] usb 4-1: Using ep0 maxpacket: 16
[  192.847604][ T7710] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  192.890010][ T4998] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  192.901101][ T7710] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  192.919556][ T4998] usb 4-1: config 0 has no interface number 0
[  192.941806][ T4998] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  192.983045][ T4998] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  193.034290][ T7710] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  193.104775][ T7862] loop6: detected capacity change from 0 to 1024
[  193.115117][ T7710] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  193.215365][ T7862] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  193.230557][ T4998] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  193.323012][ T4998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.367544][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.382159][ T7862] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.727: Invalid inode bitmap blk 16439969104516057805 in block_group 0
[  193.389859][ T7866] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 13819022714719739000 in block_group 0
[  193.399564][ T4998] usb 4-1: Product: syz
[  193.425591][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  193.466314][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  193.489771][ T4998] usb 4-1: Manufacturer: syz
[  193.494426][ T4998] usb 4-1: SerialNumber: syz
[  193.520705][ T7710] 8021q: adding VLAN 0 to HW filter on device team0
[  193.549072][ T4998] usb 4-1: config 0 descriptor??
[  193.606395][ T7828] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  193.646151][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  193.657713][ T7828] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  193.669207][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  193.691197][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.698342][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.840093][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  193.851016][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  193.889464][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  193.909023][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.916208][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.938697][ T7828] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  193.967608][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  193.996091][ T7828] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  194.035707][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  194.066305][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  194.094212][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  194.140417][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  194.158800][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  194.189010][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  194.208298][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  194.220680][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  194.266457][ T7710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  194.300676][ T7710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  194.323660][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.330138][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  194.341414][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  194.359383][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  194.480291][ T5001] Bluetooth: hci4: command 0x040f tx timeout
[  194.619761][ T7896] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0)
[  194.679155][ T7898] loop6: detected capacity change from 0 to 512
[  194.859522][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  194.867196][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  194.882570][ T7898] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.731: inode has both inline data and extents flags
[  194.938355][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.976573][ T7898] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.731: couldn't read orphan inode 15 (err -117)
[  195.044933][ T7898] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  195.049207][ T7917] netlink: 63 bytes leftover after parsing attributes in process `syz.9.739'.
[  195.175538][ T7898] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback.
[  195.188635][  T459] device hsr_slave_0 left promiscuous mode
[  195.228095][  T459] device hsr_slave_1 left promiscuous mode
[  195.246612][  T459] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.273014][  T459] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.385872][  T459] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.393724][  T459] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.408853][  T459] device bridge_slave_1 left promiscuous mode
[  195.434452][  T459] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.458176][  T459] device bridge_slave_0 left promiscuous mode
[  195.497941][  T459] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.560930][  T459] device veth1_macvtap left promiscuous mode
[  195.567044][  T459] device veth0_macvtap left promiscuous mode
[  195.573726][  T459] device veth1_vlan left promiscuous mode
[  195.579803][  T459] device veth0_vlan left promiscuous mode
[  195.669929][ T4998] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  195.711123][ T4998] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  195.759419][ T4998] asix: probe of 4-1:0.34 failed with error -71
[  195.798508][ T4998] usb 4-1: USB disconnect, device number 4
[  196.478876][  T459] team0 (unregistering): Port device team_slave_1 removed
[  196.557345][  T459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.569831][   T21] Bluetooth: hci4: command 0x0419 tx timeout
[  196.666862][  T459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.059016][  T459] bond0 (unregistering): Released all slaves
[  197.261718][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  197.285421][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  197.339651][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  197.353559][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  197.381520][ T7710] device veth0_vlan entered promiscuous mode
[  197.407986][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  197.431431][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  197.508214][ T7710] device veth1_vlan entered promiscuous mode
[  197.618063][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  197.643752][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  197.662483][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  197.710566][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  197.775389][ T7710] device veth0_macvtap entered promiscuous mode
[  197.795579][ T7710] device veth1_macvtap entered promiscuous mode
[  197.846051][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.877711][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.908479][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.967445][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.018647][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.049950][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.099550][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.130715][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.204343][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.236400][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  198.255512][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  198.294343][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  198.313572][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  198.350579][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.389538][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.419581][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.449718][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.481863][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.513533][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.544189][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.570334][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.617788][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.645350][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  198.664783][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  198.688228][ T7710] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.719542][ T7710] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.769735][ T7710] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.778504][ T7710] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.121587][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.129468][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.160585][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  199.213530][ T5993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.222686][ T5993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.245814][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  199.316874][ T8024] overlayfs: failed to clone upperpath
[  199.929293][ T8049] netlink: 'syz.1.762': attribute type 10 has an invalid length.
[  200.047091][ T8049] 8021q: adding VLAN 0 to HW filter on device team0
[  200.094588][ T8049] bond0: (slave team0): Enslaving as an active interface with an up link
[  200.215419][ T8057] loop0: detected capacity change from 0 to 128
[  200.516171][ T8020] loop6: detected capacity change from 0 to 32768
[  200.866732][ T8071] Set syz1 is full, maxelem 1029 reached
[  200.967417][ T8076] Set syz1 is full, maxelem 1029 reached
[  201.390814][ T8089] fuse: Bad value for 'fd'
[  201.799770][   T23] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  201.823907][ T8108] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  202.067998][ T8118] loop0: detected capacity change from 0 to 512
[  202.089856][   T23] usb 7-1: Using ep0 maxpacket: 32
[  202.150281][ T8118] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  202.197331][ T8118] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  202.219886][   T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  202.274150][   T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.326755][ T8118] Quota error (device loop0): do_check_range: Getting dqdh_next_free 15 out of range 0-5
[  202.340368][   T23] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  202.361616][ T8118] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  202.371806][ T8118] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.781: Failed to acquire dquot type 1
[  202.388103][   T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.394113][ T8118] EXT4-fs (loop0): Remounting filesystem read-only
[  202.419671][   T23] usb 7-1: config 0 descriptor??
[  202.435651][ T8118] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  202.492906][ T8118] EXT4-fs (loop0): Remounting filesystem read-only
[  202.500777][ T8118] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.781: corrupted inode contents
[  202.556242][ T8118] EXT4-fs (loop0): Remounting filesystem read-only
[  202.566555][ T8118] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #12: comm syz.0.781: mark_inode_dirty error
[  202.615982][ T8118] EXT4-fs (loop0): Remounting filesystem read-only
[  202.633046][ T8118] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.781: corrupted inode contents
[  202.668416][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'.
[  202.686060][ T8118] EXT4-fs (loop0): Remounting filesystem read-only
[  202.699664][ T8118] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #12: comm syz.0.781: mark_inode_dirty error
[  202.747506][ T8118] EXT4-fs (loop0): Remounting filesystem read-only
[  202.754925][ T8118] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.781: corrupted inode contents
[  202.775717][ T8132] bridge0: port 3(syz_tun) entered blocking state
[  202.792613][ T8132] bridge0: port 3(syz_tun) entered disabled state
[  202.813056][ T8118] EXT4-fs (loop0): Remounting filesystem read-only
[  202.818213][ T8132] device syz_tun entered promiscuous mode
[  202.839826][ T8118] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  202.843212][ T8132] bridge0: port 3(syz_tun) entered blocking state
[  202.854938][ T8132] bridge0: port 3(syz_tun) entered forwarding state
[  202.872383][ T8118] EXT4-fs (loop0): Remounting filesystem read-only
[  202.890108][ T8118] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.781: corrupted inode contents
[  202.916662][   T23] savu 0003:1E7D:2D5A.0006: unbalanced collection at end of report description
[  202.937347][   T23] savu 0003:1E7D:2D5A.0006: parse failed
[  202.947021][ T8118] EXT4-fs (loop0): Remounting filesystem read-only
[  202.959769][ T8118] EXT4-fs error (device loop0): ext4_truncate:4286: inode #12: comm syz.0.781: mark_inode_dirty error
[  202.984947][   T23] savu: probe of 0003:1E7D:2D5A.0006 failed with error -22
[  203.030132][ T8118] EXT4-fs (loop0): Remounting filesystem read-only
[  203.036908][ T8118] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  203.119188][ T8118] EXT4-fs (loop0): Remounting filesystem read-only
[  203.140172][ T8118] EXT4-fs (loop0): 1 truncate cleaned up
[  203.147202][   T23] usb 7-1: USB disconnect, device number 9
[  203.177217][ T8118] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000200,noblock_validity,mblk_io_submit,nodiscard,noinit_itable,abort,nouid32,errors=remount-ro,resgid=0x000000000000ee002. Quota mode: writeback.
[  204.099753][ T5002] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  204.201857][ T8144] loop9: detected capacity change from 0 to 32768
[  204.341353][ T8144] XFS (loop9): Mounting V5 Filesystem
[  204.361053][ T5002] usb 1-1: Using ep0 maxpacket: 32
[  204.474687][ T8144] XFS (loop9): Ending clean mount
[  204.530016][ T5002] usb 1-1: unable to get BOS descriptor or descriptor too short
[  204.619848][ T5002] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  204.679387][ T5002] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  204.841185][ T6614] XFS (loop9): Unmounting Filesystem
[  204.870399][ T5002] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  204.888605][ T5002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.909713][ T5002] usb 1-1: Product: syz
[  204.913941][ T5002] usb 1-1: Manufacturer: syz
[  204.918556][ T5002] usb 1-1: SerialNumber: syz
[  205.283710][ T8215] tipc: Started in network mode
[  205.288642][ T8215] tipc: Node identity 84e, cluster identity 4711
[  205.315181][ T8215] tipc: Node number set to 2126
[  205.415579][ T5002] usb 1-1: USB disconnect, device number 3
[  205.805920][ T8227] Set syz1 is full, maxelem 1029 reached
[  205.872645][ T8227] Set syz1 is full, maxelem 1029 reached
[  206.945566][ T8276] loop0: detected capacity change from 0 to 512
[  207.054921][ T8276] EXT4-fs (loop0): Ignoring removed nobh option
[  207.090467][ T8276] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  207.145994][ T8287] fuse: Bad value for 'fd'
[  207.187778][ T8276] EXT4-fs (loop0): 1 truncate cleaned up
[  207.196212][ T8276] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none.
[  207.645188][ T8308] netlink: 'syz.3.834': attribute type 5 has an invalid length.
[  207.711940][ T8308] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  207.721133][ T8308] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  207.729990][ T8308] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  207.738914][ T8308] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  207.863253][ T8308] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  207.872477][ T8308] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  207.881461][ T8308] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  207.890390][ T8308] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  208.041177][ T8310] netlink: 'syz.3.834': attribute type 5 has an invalid length.
[  208.067980][ T8310] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  208.076940][ T8310] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  208.085735][ T8310] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  208.094574][ T8310] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  208.164418][ T8310] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  208.173530][ T8310] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  208.182508][ T8310] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  208.191487][ T8310] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  208.364814][ T8343] loop6: detected capacity change from 0 to 512
[  208.462338][ T8343] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.842: missing EA_INODE flag
[  208.562877][ T8343] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.842: error while reading EA inode 2 err=-117
[  208.580255][ T8343] EXT4-fs (loop6): 1 orphan inode deleted
[  208.594619][ T8343] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  208.848319][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.9.846'.
[  209.376296][   T23] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  209.605251][   T26] audit: type=1804 audit(1778848229.841:68): pid=8403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.854" name="/newroot/170/file0/file1" dev="overlay" ino=969 res=1 errno=0
[  209.698237][ T8405] 0x000000010001-0x000000010007 : ""
[  209.795572][   T23] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  209.832259][   T23] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.842907][ T8405] ftl_cs: FTL header corrupt!
[  209.884037][   T23] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  209.939823][   T23] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.010975][   T23] usb 10-1: config 0 descriptor??
[  210.502129][   T23] elan 0003:04F3:0755.0007: failed to start in urb: -90
[  210.557602][   T23] elan 0003:04F3:0755.0007: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0
[  210.613582][ T8443] xt_TCPMSS: Only works on TCP SYN packets
[  210.714946][ T8385] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  210.979724][   T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  211.189721][ T4998] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  211.359886][   T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  211.376493][   T23] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  211.449870][ T4998] usb 7-1: Using ep0 maxpacket: 32
[  211.499826][   T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  211.518032][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  211.544512][   T23] usb 4-1: SerialNumber: syz
[  211.591400][ T8443] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  211.612133][   T23] usb 4-1: bad CDC descriptors
[  211.617420][   T23] usb-storage 4-1:1.0: USB Mass Storage device detected
[  211.633011][ T8486] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  211.659934][   T23] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  211.769915][ T4998] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  211.779900][ T4998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.788032][ T4998] usb 7-1: Product: syz
[  211.792934][ T4998] usb 7-1: Manufacturer: syz
[  211.798521][ T4998] usb 7-1: SerialNumber: syz
[  211.812600][ T4998] usb 7-1: config 0 descriptor??
[  211.871926][ T4998] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  211.974136][ T5002] usb 4-1: USB disconnect, device number 5
[  212.046710][ T5245] usb 10-1: USB disconnect, device number 3
[  212.284013][ T8525] fuse: Bad value for 'fd'
[  212.536074][ T8540] loop9: detected capacity change from 0 to 128
[  212.641231][ T8540] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  212.717752][ T8540] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  212.881737][ T3042] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  213.215331][ T8579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  213.223443][ T8579] IPv6: NLM_F_CREATE should be set when creating new route
[  213.230765][ T8579] IPv6: NLM_F_CREATE should be set when creating new route
[  213.418671][ T8590] fuse: Bad value for 'fd'
[  213.423862][ T4998] gspca_topro: Sensor cx0342
[  213.659241][ T4998] usb 7-1: USB disconnect, device number 10
[  213.839909][   T26] audit: type=1800 audit(1778848234.081:69): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.887" name="file0" dev="fuse" ino=3 res=0 errno=0
[  214.326913][ T8585] loop0: detected capacity change from 0 to 32768
[  214.331434][ T8599] tipc: Started in network mode
[  214.338370][ T8599] tipc: Node identity pfifo_fa.., cluster identity 4711
[  214.467918][ T8585] XFS (loop0): Mounting V5 Filesystem
[  214.659113][ T8614] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)
[  214.765414][ T8585] XFS (loop0): Ending clean mount
[  214.799460][ T8585] XFS (loop0): Quotacheck needed: Please wait.
[  215.028525][ T8585] XFS (loop0): Quotacheck: Done.
[  215.133691][ T8585] XFS (loop0): Unmounting Filesystem
[  215.226043][ T8633] fuse: Bad value for 'fd'
[  216.692129][ T8663] syz.0.912[8663] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  216.692288][ T8663] syz.0.912[8663] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  217.296342][ T8682] loop6: detected capacity change from 0 to 512
[  217.390413][ T8682] EXT4-fs (loop6): mounted filesystem without journal. Opts: minixdf,errors=continue,acl,,errors=continue. Quota mode: none.
[  218.688335][ T8695] loop9: detected capacity change from 0 to 32768
[  218.738813][ T8695] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.918 (8695)
[  218.833039][ T8695] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm
[  218.890061][ T8695] BTRFS info (device loop9): setting nodatasum
[  218.896288][ T8695] BTRFS info (device loop9): force zlib compression, level 3
[  218.955057][ T8695] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_LZO (0x8)
[  218.996925][ T8695] BTRFS info (device loop9): use lzo compression, level 0
[  219.037360][ T8695] BTRFS info (device loop9): turning on flush-on-commit
[  219.089638][ T8695] BTRFS info (device loop9): enabling auto defrag
[  219.096269][ T8695] BTRFS info (device loop9): max_inline at 4096
[  219.129748][ T8695] BTRFS info (device loop9): using free space tree
[  219.136335][ T8695] BTRFS info (device loop9): has skinny extents
[  219.408358][ T8785] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  219.535117][ T8695] BTRFS info (device loop9): enabling ssd optimizations
[  219.903787][ T5002] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  220.209718][ T5002] usb 7-1: Using ep0 maxpacket: 32
[  220.329973][ T5002] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  220.364009][ T5002] usb 7-1: config 0 has no interface number 0
[  220.385494][ T5002] usb 7-1: config 0 interface 184 has no altsetting 0
[  220.595729][ T5002] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  220.625687][ T5002] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.662526][ T5002] usb 7-1: Product: syz
[  220.688339][ T5002] usb 7-1: Manufacturer: syz
[  220.704678][ T5002] usb 7-1: SerialNumber: syz
[  220.763433][ T5002] usb 7-1: config 0 descriptor??
[  220.821002][ T5002] smsc75xx v1.0.0
[  220.874594][ T8835] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  221.509623][ T5002] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  221.535224][ T5002] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  222.235299][ T8889] input: syz1 as /devices/virtual/input/input12
[  222.412958][ T8894] overlayfs: failed to clone upperpath
[  222.449700][ T5002] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  222.473464][ T5002] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  222.504307][ T5002] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  222.532742][ T5002] smsc75xx: probe of 7-1:0.184 failed with error -71
[  222.573168][ T5002] usb 7-1: USB disconnect, device number 11
[  223.298375][ T8914] device bond1 entered promiscuous mode
[  223.312058][ T8914] 8021q: adding VLAN 0 to HW filter on device bond1
[  223.385446][ T8921] overlayfs: failed to clone lowerpath
[  223.642245][ T8916] netlink: 'syz.6.966': attribute type 10 has an invalid length.
[  224.872780][ T5000] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  225.188556][ T9009] xt_TCPMSS: Only works on TCP SYN packets
[  225.480870][ T5000] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  225.500440][ T5000] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.518184][ T5000] usb 10-1: Product: syz
[  225.528334][ T5000] usb 10-1: Manufacturer: syz
[  225.543670][ T5000] usb 10-1: SerialNumber: syz
[  225.875130][ T9040] overlayfs: failed to set xattr on upper
[  225.889794][ T9040] overlayfs: ...falling back to index=off,metacopy=off.
[  226.679834][ T5000] cdc_ncm 10-1:1.0: bind() failure
[  226.701540][ T5000] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found
[  226.739032][ T5000] cdc_ncm 10-1:1.1: bind() failure
[  226.761457][ T5000] usb 10-1: USB disconnect, device number 4
[  226.956696][ T9100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.000594][ T9100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.013039][ T9100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.066214][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.074688][ T9059] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.891649][ T9059] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.975908][ T9059] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.275786][ T9059] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.286287][ T9059] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.302362][ T9059] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.311813][ T9059] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.499456][ T9059] syz.0.996 (9059) used greatest stack depth: 20112 bytes left
[  228.521633][ T9111] netlink: 'syz.9.1005': attribute type 1 has an invalid length.
[  228.880303][ T9153] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 4, id = 0
[  229.151342][ T9167] loop9: detected capacity change from 0 to 512
[  229.171118][ T9163] kvm: emulating exchange as write
[  229.192778][ T9163] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  229.250402][ T9167] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  229.358973][ T9181] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.396554][ T9181] device syzkaller0 entered promiscuous mode
[  229.396857][ T9167] EXT4-fs error (device loop9): ext4_orphan_get:1432: comm syz.9.1017: bad orphan inode 131083
[  229.432065][ T9180] tipc: Resetting bearer <eth:syzkaller0>
[  229.463154][ T9167] EXT4-fs (loop9): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  229.523784][ T9187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.629355][ T9180] tipc: Disabling bearer <eth:syzkaller0>
[  229.655341][ T9188] sd 0:0:1:0: PR command failed: 2
[  229.656470][ T9167] syz.9.1017 (pid 9167) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  229.663813][ T9188] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  229.678377][ T9188] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  229.760525][ T9167] EXT4-fs (loop9): shut down requested (2)
[  229.780578][ T9167] fscrypt (loop9, inode 18): Error -5 getting encryption context
[  229.815359][ T9199] netlink: 'syz.3.1024': attribute type 12 has an invalid length.
[  229.834056][ T9199] netlink: 'syz.3.1024': attribute type 29 has an invalid length.
[  229.854413][ T9199] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1024'.
[  230.069597][ T5252] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  230.303699][ T9222] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  230.429769][ T5252] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[  230.441635][ T5252] usb 7-1: config 0 has no interface number 0
[  230.454627][ T5252] usb 7-1: config 0 interface 41 has no altsetting 0
[  230.630773][ T5252] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  230.645397][ T5252] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.669570][ T5252] usb 7-1: Product: syz
[  230.679846][ T5252] usb 7-1: Manufacturer: syz
[  230.690222][ T5252] usb 7-1: SerialNumber: syz
[  230.705108][ T5252] usb 7-1: config 0 descriptor??
[  231.261413][ T9254] loop9: detected capacity change from 0 to 128
[  231.340532][ T9254] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  231.360308][ T9254] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  231.621865][ T5252] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  231.766137][ T9270] loop9: detected capacity change from 0 to 1024
[  231.867540][ T9270] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  231.940499][ T9270] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.103277][ T9270] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.1037: bg 0: block 112: padding at end of block bitmap is not set
[  232.173348][ T9270] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28
[  232.225220][ T9270] EXT4-fs (loop9): This should not happen!! Data will be lost
[  232.225220][ T9270] 
[  232.250370][ T9270] EXT4-fs (loop9): Total free blocks count 0
[  232.275371][ T9270] EXT4-fs (loop9): Free/Dirty block details
[  232.291939][ T9270] EXT4-fs (loop9): free_blocks=0
[  232.296983][ T9270] EXT4-fs (loop9): dirty_blocks=16
[  232.326755][ T9270] EXT4-fs (loop9): Block reservation details
[  232.335829][ T9270] EXT4-fs (loop9): i_reserved_data_blocks=1
[  232.627669][ T9321] Set syz1 is full, maxelem 1029 reached
[  232.801638][ T5252] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  232.820704][ T5252] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71
[  232.839337][ T5252] CoreChips: probe of 7-1:0.41 failed with error -71
[  232.867280][ T5252] usb 7-1: USB disconnect, device number 12
[  233.212712][ T9353] fuse: Bad value for 'fd'
[  233.697403][ T9326] loop9: detected capacity change from 0 to 32768
[  233.932303][ T9326] XFS (loop9): Mounting V5 Filesystem
[  234.031632][ T9326] XFS (loop9): Ending clean mount
[  234.443143][ T9339] loop6: detected capacity change from 0 to 32768
[  234.516722][ T9339] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.1052 (9339)
[  234.550805][ T9339] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  234.567536][ T9339] BTRFS info (device loop6): metadata ratio 0
[  234.573764][ T9339] BTRFS info (device loop6): using free space tree
[  234.580557][ T9339] BTRFS info (device loop6): has skinny extents
[  234.610989][ T9339] BTRFS info (device loop6): enabling ssd optimizations
[  234.719427][   T26] audit: type=1800 audit(1778848254.951:70): pid=9339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1052" name="bus" dev="loop6" ino=263 res=0 errno=0
[  234.789846][ T6614] XFS (loop9): Unmounting Filesystem
[  234.831992][   T26] audit: type=1804 audit(1778848255.041:71): pid=9339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1052" name="/newroot/205/file0/file1" dev="loop6" ino=260 res=1 errno=0
[  234.912905][   T26] audit: type=1804 audit(1778848255.151:72): pid=9433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1052" name="/newroot/205/file0/file1" dev="loop6" ino=260 res=1 errno=0
[  235.369876][ T9454] IPVS: Error connecting to the multicast addr
[  235.642123][ T9462] xt_hashlimit: size too large, truncated to 1048576
[  236.415601][ T9491] fuse: root generation should be zero
[  237.012236][ T9512] kvm: pic: single mode not supported
[  237.012454][ T9512] kvm: pic: single mode not supported
[  237.018651][ T9512] kvm: pic: level sensitive irq not supported
[  237.093479][ T9512] kvm: pic: level sensitive irq not supported
[  237.135434][ T9512] kvm: pic: level sensitive irq not supported
[  237.167628][ T9512] kvm: pic: level sensitive irq not supported
[  237.226049][ T9512] kvm: pic: level sensitive irq not supported
[  237.280990][ T9512] kvm: pic: single mode not supported
[  237.287195][ T9512] kvm: pic: level sensitive irq not supported
[  237.316196][ T9512] kvm: pic: level sensitive irq not supported
[  237.334075][ T9512] kvm: pic: single mode not supported
[  237.340308][ T9512] kvm: pic: level sensitive irq not supported
[  237.363798][ T9512] kvm: pic: single mode not supported
[  237.370095][ T9512] kvm: pic: level sensitive irq not supported
[  237.380141][ T9512] kvm: pic: level sensitive irq not supported
[  239.457343][ T9590] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  239.609624][ T5242] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  239.969819][ T5242] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  239.995721][ T5242] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  240.026834][ T5242] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.055185][ T5242] usb 7-1: config 0 descriptor??
[  240.102087][ T5242] pwc: Askey VC010 type 2 USB webcam detected.
[  240.294349][ T9628] netlink: 'syz.1.1105': attribute type 10 has an invalid length.
[  240.329829][    T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  240.343375][ T9628] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  240.553283][ T5242] pwc: recv_control_msg error -32 req 02 val 2b00
[  240.599674][ T5242] pwc: recv_control_msg error -32 req 02 val 2700
[  240.641203][ T5242] pwc: recv_control_msg error -32 req 02 val 2c00
[  240.689835][ T5242] pwc: recv_control_msg error -32 req 04 val 1000
[  240.712496][    T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  240.726320][    T7] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  240.740102][ T5242] pwc: recv_control_msg error -32 req 04 val 1300
[  240.779815][ T5242] pwc: recv_control_msg error -32 req 04 val 1400
[  240.919701][    T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  240.928865][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.940230][    T7] usb 4-1: Product: syz
[  240.944443][    T7] usb 4-1: Manufacturer: syz
[  240.949176][    T7] usb 4-1: SerialNumber: syz
[  241.049612][ T5242] pwc: recv_control_msg error -71 req 02 val 2100
[  241.069737][ T5242] pwc: recv_control_msg error -71 req 04 val 1500
[  241.089745][ T5242] pwc: recv_control_msg error -71 req 02 val 2500
[  241.109739][ T5242] pwc: recv_control_msg error -71 req 02 val 2400
[  241.129708][ T5242] pwc: recv_control_msg error -71 req 02 val 2600
[  241.155809][ T5242] pwc: recv_control_msg error -71 req 02 val 2900
[  241.179706][ T5242] pwc: recv_control_msg error -71 req 02 val 2800
[  241.200110][ T5242] pwc: recv_control_msg error -71 req 04 val 1100
[  241.216583][ T9615] udc-core: couldn't find an available UDC or it's busy
[  241.219662][ T5242] pwc: recv_control_msg error -71 req 04 val 1200
[  241.230386][ T9615] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  241.248769][ T5242] pwc: Registered as video103.
[  241.255676][ T5242] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input13
[  241.270837][    T7] cdc_ether: probe of 4-1:1.0 failed with error -22
[  241.295141][    T7] usb 4-1: USB disconnect, device number 6
[  241.310913][ T5242] usb 7-1: USB disconnect, device number 13
[  241.819683][    T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  241.964798][ T9708] 9pnet: Insufficient options for proto=fd
[  242.051340][ T9714] kvm: pic: single mode not supported
[  242.069631][    T7] usb 4-1: Using ep0 maxpacket: 8
[  242.213049][    T7] usb 4-1: config index 0 descriptor too short (expected 301, got 72)
[  242.232034][    T7] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  242.259580][    T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  242.289737][    T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  242.318060][    T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  242.370078][    T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.424856][    T7] usb 4-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  242.443143][    T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  242.452784][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.729700][    T7] usb 4-1: usb_control_msg returned -71
[  242.735339][    T7] usbtmc 4-1:16.0: can't read capabilities
[  242.794262][    T7] usb 4-1: USB disconnect, device number 7
[  243.714442][ T9759] team0: No ports can be present during mode change
[  244.602390][ T9801] loop9: detected capacity change from 0 to 512
[  245.188172][ T9801] EXT4-fs (loop9): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback.
[  245.215719][ T9801] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  245.482569][   T26] audit: type=1804 audit(1778848265.721:73): pid=9826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1145" name="/newroot/96/bus/bus" dev="loop9" ino=18 res=1 errno=0
[  245.565708][   T26] audit: type=1804 audit(1778848265.751:74): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1145" name="/newroot/96/bus/bus" dev="loop9" ino=18 res=1 errno=0
[  245.609939][   T26] audit: type=1804 audit(1778848265.751:75): pid=9801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1145" name="/newroot/96/bus/bus" dev="loop9" ino=18 res=1 errno=0
[  246.316745][ T9858] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  247.127454][ T9877] loop6: detected capacity change from 0 to 32768
[  247.184870][ T9877] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1161 (9877)
[  247.254579][ T9877] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  247.282436][ T9877] BTRFS info (device loop6): turning on async discard
[  247.311505][ T9877] BTRFS info (device loop6): metadata ratio 0
[  247.317649][ T9877] BTRFS info (device loop6): setting nodatasum
[  247.356301][ T9877] BTRFS info (device loop6): use zlib compression, level 3
[  247.384406][ T9877] BTRFS info (device loop6): enabling auto defrag
[  247.399695][ T9877] BTRFS info (device loop6): using free space tree
[  247.417086][ T9877] BTRFS info (device loop6): has skinny extents
[  247.628465][ T9877] BTRFS info (device loop6): enabling ssd optimizations
[  248.138449][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  248.202760][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  248.270160][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  248.371323][ T9962] futex_wake_op: syz.0.1176 tries to shift op by 144; fix this program
[  248.384826][   T26] audit: type=1800 audit(1778848268.561:76): pid=9960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1161" name="file1" dev="loop6" ino=260 res=0 errno=0
[  249.225544][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1173'.
[  249.657186][ T9983] netlink: 'syz.3.1182': attribute type 1 has an invalid length.
[  249.714977][ T9983] 8021q: adding VLAN 0 to HW filter on device bond1
[  249.854713][ T9992] bond1: (slave geneve2): making interface the new active one
[  249.876220][ T9992] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  249.889070][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  250.207909][ T9992] syz.3.1182 (9992) used greatest stack depth: 19600 bytes left
[  251.472274][  T154] tipc: Left network mode
[  252.012328][   T26] audit: type=1326 audit(1778848272.251:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.6.1185" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ed5a3e59 code=0x7ffc0000
[  252.040522][   T26] audit: type=1326 audit(1778848272.251:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.6.1185" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ed5a3e59 code=0x7ffc0000
[  252.079418][   T26] audit: type=1326 audit(1778848272.271:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.6.1185" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ed5a3e59 code=0x7ffc0000
[  252.181402][   T26] audit: type=1326 audit(1778848272.271:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.6.1185" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9ed56468e code=0x7ffc0000
[  252.224398][   T26] audit: type=1326 audit(1778848272.281:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.6.1185" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9ed56468e code=0x7ffc0000
[  252.263205][   T26] audit: type=1326 audit(1778848272.301:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.6.1185" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9ed56468e code=0x7ffc0000
[  252.292974][   T26] audit: type=1326 audit(1778848272.311:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.6.1185" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9ed56468e code=0x7ffc0000
[  252.366408][   T26] audit: type=1326 audit(1778848272.311:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.6.1185" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9ed56468e code=0x7ffc0000
[  252.482935][   T26] audit: type=1326 audit(1778848272.311:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.6.1185" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9ed56468e code=0x7ffc0000
[  252.508620][   T26] audit: type=1326 audit(1778848272.311:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.6.1185" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9ed56468e code=0x7ffc0000
[  252.679875][  T154] device hsr_slave_0 left promiscuous mode
[  252.703103][  T154] device hsr_slave_1 left promiscuous mode
[  252.722924][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.745100][T10084] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  252.756902][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.758385][T10084] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  252.774102][  T154] device bridge_slave_1 left promiscuous mode
[  252.787960][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.802697][  T154] device bridge_slave_0 left promiscuous mode
[  252.809892][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.401426][  T154] team0 (unregistering): Port device team_slave_1 removed
[  253.449155][  T154] team0 (unregistering): Port device team_slave_0 removed
[  253.496741][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  253.519411][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  253.715509][  T154] bond0 (unregistering): Released all slaves
[  253.803476][T10061] chnl_net:caif_netlink_parms(): no params data found
[  253.999586][ T1108] Bluetooth: hci4: command 0x0409 tx timeout
[  254.151383][T10061] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.206999][T10061] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.239902][T10061] device bridge_slave_0 entered promiscuous mode
[  254.292669][T10061] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.319140][T10061] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.370696][T10061] device bridge_slave_1 entered promiscuous mode
[  254.427380][T10061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  254.479090][T10061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  254.671655][T10061] team0: Port device team_slave_0 added
[  254.735977][T10061] team0: Port device team_slave_1 added
[  254.817986][T10061] batman_adv: batadv0: Adding interface: batadv_slave_0
[  254.844150][T10061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  254.954593][T10061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.029030][T10061] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.041099][T10061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.148683][T10061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.323328][T10061] device hsr_slave_0 entered promiscuous mode
[  255.339032][T10061] device hsr_slave_1 entered promiscuous mode
[  255.762471][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.768908][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  256.079709][ T5240] Bluetooth: hci4: command 0x041b tx timeout
[  256.463951][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'.
[  256.652904][T10061] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  256.706515][T10211] overlayfs: failed to clone upperpath
[  256.717625][T10061] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  256.782526][T10061] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  256.811303][T10061] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  256.837944][T10205] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  256.871027][T10205] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  257.106721][T10061] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.181529][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  257.200673][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  257.241194][T10061] 8021q: adding VLAN 0 to HW filter on device team0
[  257.283470][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  257.310884][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  257.339896][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.347156][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.418643][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  257.452643][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  257.472073][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  257.547720][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.554894][ T5993] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.592586][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  257.620637][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  257.666129][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  257.721714][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  257.757483][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  257.807411][T10248] loop5: detected capacity change from 0 to 1383
[  257.810469][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  257.867350][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  257.900425][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  257.917388][T10251] loop5: detected capacity change from 1383 to 4215
[  257.952418][T10061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  257.997436][T10061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  258.036031][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  258.051226][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  258.110393][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  258.158660][T10255] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  258.159808][ T5240] Bluetooth: hci4: command 0x040f tx timeout
[  258.702856][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  258.714012][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  258.748992][T10061] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.870386][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  258.880327][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  258.935964][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  258.955021][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  258.990059][T10061] device veth0_vlan entered promiscuous mode
[  259.008113][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  259.039893][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  259.056426][T10061] device veth1_vlan entered promiscuous mode
[  259.157412][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  259.171470][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  259.194280][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  259.238376][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  259.280022][T10061] device veth0_macvtap entered promiscuous mode
[  259.306802][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  259.370032][T10294] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[  259.393220][T10294] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  259.415568][T10294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  259.424751][T10294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  259.492170][T10061] device veth1_macvtap entered promiscuous mode
[  259.523172][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1250'.
[  259.601528][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.637871][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.669533][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.699541][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.749576][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.789863][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.808551][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.836970][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.860642][T10061] batman_adv: batadv0: Interface activated: batadv_slave_0
[  259.878548][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  259.896668][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  259.924958][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.958417][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.983367][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.000017][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.019162][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.038115][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.048465][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.066203][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.078419][T10061] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.099155][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  260.116784][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  260.137391][T10061] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.153332][T10061] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.170764][T10061] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.193090][T10061] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.239924][ T5240] Bluetooth: hci4: command 0x0419 tx timeout
[  260.384307][  T459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.421603][  T459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.463029][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  260.494305][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.506088][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.524167][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  260.689398][T10337] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1196'.
[  260.871399][T10349] loop9: detected capacity change from 0 to 256
[  260.913367][T10349] exfat: Deprecated parameter 'utf8'
[  260.949219][T10349] exfat: Deprecated parameter 'namecase'
[  260.984321][T10349] exfat: Deprecated parameter 'namecase'
[  261.026133][T10349] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  261.173694][T10360] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1267'.
[  261.211747][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1266'.
[  261.221647][T10366] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1266'.
[  262.934101][T10369] loop9: detected capacity change from 0 to 262144
[  263.036190][T10369] F2FS-fs (loop9): invalid crc value
[  263.083985][T10369] F2FS-fs (loop9): Found nat_bits in checkpoint
[  263.171709][T10369] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  263.231065][   T26] kauditd_printk_skb: 22 callbacks suppressed
[  263.231083][   T26] audit: type=1804 audit(1778848283.461:109): pid=10369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1268" name="/newroot/129/file0/bus" dev="loop9" ino=10 res=1 errno=0
[  263.275079][T10369] Invalid ELF header magic: != ELF
[  264.813621][T10422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.854405][T10422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.898532][T10422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  265.121372][T10407] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.128841][T10407] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.147865][T10394] loop2: detected capacity change from 0 to 32768
[  265.318867][ T4181] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by udevd (4181)
[  266.037434][T10431] binder: 10430:10431 ioctl c0306201 200000000080 returned -14
[  266.047946][T10431] binder: 10430:10431 ioctl c0306201 2000000003c0 returned -14
[  266.071253][T10407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  266.135649][T10407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  266.612313][T10407] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.621629][T10407] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.630632][T10407] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.641989][T10407] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.847017][T10407] device bond1 left promiscuous mode
[  267.187892][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1287'.
[  267.244834][T10450] netlink: 'syz.9.1287': attribute type 1 has an invalid length.
[  267.263546][T10450] netlink: 'syz.9.1287': attribute type 1 has an invalid length.
[  267.596981][T10469] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  267.689332][T10483] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  268.137563][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888020227000: rx timeout, send abort
[  268.345406][T10513] loop6: detected capacity change from 0 to 1024
[  268.446281][T10513] EXT4-fs (loop6): Ignoring removed orlov option
[  268.520591][T10513] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,data_err=ignore,journal_ioprio=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,usrquota,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback.
[  268.648345][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888020227000: abort rx timeout. Force session deactivation
[  268.934669][T10537] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1308'.
[  268.985006][T10539] binder_alloc: 10538: binder_alloc_buf size 4294966784 failed, no address space
[  269.015778][T10539] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  269.106772][T10545] loop6: detected capacity change from 0 to 128
[  269.307050][T10545] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  269.381620][T10545] ext4 filesystem being mounted at /243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  269.731244][T10545] loop_set_status: loop6 () has still dirty pages (nrpages=2)
[  269.884050][ T4496] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  269.920802][ T4496] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  269.957020][ T4496] EXT4-fs error (device loop6): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  269.995159][ T4496] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  270.069831][ T4496] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  270.103789][ T4496] EXT4-fs error (device loop6): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  270.118081][ T4496] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  270.134427][ T4496] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  270.150126][ T4496] EXT4-fs error (device loop6): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  270.167325][ T4496] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  271.544104][  T154] tipc: Left network mode
[  272.009102][T10624] loop9: detected capacity change from 0 to 1024
[  272.076957][T10624] EXT4-fs (loop9): bad geometry: bigalloc file system with non-zero first_data_block
[  272.076957][T10624] 
[  272.353029][T10618] chnl_net:caif_netlink_parms(): no params data found
[  272.436142][T10624] loop9: detected capacity change from 0 to 8
[  272.523785][T10618] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.586844][T10618] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.595387][T10618] device bridge_slave_0 entered promiscuous mode
[  272.604124][T10618] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.611331][T10618] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.613894][T10624] SQUASHFS error: zlib decompression failed, data probably corrupt
[  272.619404][T10618] device bridge_slave_1 entered promiscuous mode
[  272.652508][T10618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  272.664440][T10618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  272.709887][T10624] SQUASHFS error: Failed to read block 0x9b: -5
[  272.716630][T10624] SQUASHFS error: Unable to read metadata cache entry [99]
[  272.733460][T10624] SQUASHFS error: Unable to read inode 0x127
[  272.755112][T10618] team0: Port device team_slave_0 added
[  272.805526][T10618] team0: Port device team_slave_1 added
[  273.025719][T10618] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.035696][T10618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.106252][T10618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.125602][T10618] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.133212][T10618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.162540][T10618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.199629][ T5245] Bluetooth: hci2: command 0x0406 tx timeout
[  273.235014][T10618] device hsr_slave_0 entered promiscuous mode
[  273.285925][T10618] device hsr_slave_1 entered promiscuous mode
[  273.300163][T10618] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  273.307780][T10618] Cannot create hsr debugfs directory
[  274.679556][ T5245] Bluetooth: hci0: command 0x0409 tx timeout
[  275.062099][  T154] bond0: (slave wlan1): Releasing backup interface
[  275.731956][ T6893] bridge0: port 3(syz_tun) entered disabled state
[  275.892089][ T6893] device syz_tun left promiscuous mode
[  275.897940][ T6893] bridge0: port 3(syz_tun) entered disabled state
[  276.122629][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  276.141104][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  276.150557][  T154] device vlan2 left promiscuous mode
[  276.167641][  T154] bridge0: port 3(vlan2) entered disabled state
[  276.169604][T10673] loop9: detected capacity change from 0 to 32768
[  276.182172][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.208192][T10673] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 scanned by syz.9.1335 (10673)
[  276.209868][  T154] device bridge_slave_0 left promiscuous mode
[  276.252667][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.295046][  T154] bond1 (unregistering): Released all slaves
[  276.296155][T10673] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[  276.353398][T10673] BTRFS info (device loop9): metadata ratio 0
[  276.373541][T10673] BTRFS info (device loop9): using free space tree
[  276.393816][T10673] BTRFS info (device loop9): has skinny extents
[  276.617703][T10673] BTRFS info (device loop9): enabling ssd optimizations
[  276.721794][  T154] team0 (unregistering): Port device team_slave_1 removed
[  276.726396][ T5242] Bluetooth: hci0: command 0x041b tx timeout
[  276.738602][  T154] team0 (unregistering): Port device team_slave_0 removed
[  276.757283][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  276.768720][   T26] audit: type=1800 audit(1778848297.001:110): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1335" name="bus" dev="loop9" ino=263 res=0 errno=0
[  276.800205][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  276.808946][   T26] audit: type=1804 audit(1778848297.031:111): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1335" name="/newroot/143/file0/file1" dev="loop9" ino=260 res=1 errno=0
[  276.846560][   T26] audit: type=1804 audit(1778848297.081:112): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1335" name="/newroot/143/file0/file1" dev="loop9" ino=260 res=1 errno=0
[  277.198585][  T154] bond0 (unregistering): Released all slaves
[  277.487962][T10706] netlink: 'syz.2.1341': attribute type 5 has an invalid length.
[  277.816750][T10712] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1342'.
[  277.847723][ T8872] Bluetooth: hci1: command 0x0409 tx timeout
[  278.244569][T10618] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  278.268783][T10726] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  278.326461][T10618] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  278.350539][T10728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1348'.
[  278.372682][T10726] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  278.387695][T10618] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  278.396765][T10618] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  278.414467][T10677] chnl_net:caif_netlink_parms(): no params data found
[  278.626889][T10677] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.686303][T10677] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.730472][T10677] device bridge_slave_0 entered promiscuous mode
[  278.792671][T10677] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.834820][ T4998] Bluetooth: hci0: command 0x040f tx timeout
[  278.859928][T10677] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.868782][T10677] device bridge_slave_1 entered promiscuous mode
[  278.952827][T10677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  279.429327][T10618] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.781788][T10677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.871697][T10677] team0: Port device team_slave_0 added
[  279.890960][T10677] team0: Port device team_slave_1 added
[  279.919682][ T4998] Bluetooth: hci1: command 0x041b tx timeout
[  279.923595][T10618] 8021q: adding VLAN 0 to HW filter on device team0
[  279.957361][T10748] netlink: 'syz.1.1354': attribute type 1 has an invalid length.
[  280.030201][T10748] 8021q: adding VLAN 0 to HW filter on device bond1
[  280.093548][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  280.114910][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  280.137916][T10752] bond1: (slave vlan2): Opening slave failed
[  280.191247][T10677] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.198577][T10677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.237849][T10760] overlayfs: failed to clone upperpath
[  280.244741][T10677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.267564][ T4998] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  280.278332][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  280.290864][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  280.302450][ T4447] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.309613][ T4447] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.335198][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  280.352093][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  280.367774][ T4447] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.374970][ T4447] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.412094][T10677] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.432264][T10677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.487447][T10677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.505600][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  280.517628][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  280.527600][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  280.622651][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  280.642706][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  280.651570][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  280.662417][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  280.699924][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  280.714077][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  280.727316][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  280.736290][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  280.745396][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  280.765770][T10618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  280.783010][T10677] device hsr_slave_0 entered promiscuous mode
[  280.791602][T10677] device hsr_slave_1 entered promiscuous mode
[  280.798292][T10677] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  280.823429][T10677] Cannot create hsr debugfs directory
[  280.870011][ T4998] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  280.899532][ T4998] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.919630][ T4998] usb 10-1: Product: syz
[  280.924014][ T4998] usb 10-1: Manufacturer: syz
[  280.939600][ T4998] usb 10-1: SerialNumber: syz
[  280.979935][ T1108] Bluetooth: hci0: command 0x0419 tx timeout
[  281.206158][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  281.216101][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  281.268313][T10618] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.461518][ T4998] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  282.001509][ T5000] Bluetooth: hci1: command 0x040f tx timeout
[  282.129359][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  282.158468][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  282.193855][T10618] device veth0_vlan entered promiscuous mode
[  282.257170][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  282.288567][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  282.308630][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  282.316982][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  282.440699][T10805] device bond_slave_0 entered promiscuous mode
[  282.449049][T10805] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  282.460348][T10805] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  282.475973][T10618] device veth1_vlan entered promiscuous mode
[  282.614307][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  282.629212][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  282.643522][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  282.653394][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  282.679051][T10618] device veth0_macvtap entered promiscuous mode
[  282.721178][T10618] device veth1_macvtap entered promiscuous mode
[  282.770201][T10677] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  282.785489][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.824394][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.860082][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.885109][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.902869][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.913892][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.924080][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.934648][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.946070][T10618] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.958379][T10677] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  282.968873][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'.
[  282.978495][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  282.992037][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  283.006703][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  283.017655][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  283.031892][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.046789][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.058111][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.072901][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.083818][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.094663][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.099711][ T4998] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -71
[  283.104769][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.124713][ T4998] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  283.129359][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.150239][T10618] batman_adv: batadv0: Interface activated: batadv_slave_1
[  283.158241][T10677] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  283.159506][ T4998] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  283.175912][ T4998] lan78xx: probe of 10-1:1.0 failed with error -71
[  283.187787][T10827] netlink: 'syz.1.1378': attribute type 1 has an invalid length.
[  283.203595][ T4998] usb 10-1: USB disconnect, device number 5
[  283.229888][T10827] 8021q: adding VLAN 0 to HW filter on device bond2
[  283.252732][T10828] bridge0: port 3(syz_tun) entered disabled state
[  283.278012][T10828] device syz_tun left promiscuous mode
[  283.299917][T10828] bridge0: port 3(syz_tun) entered disabled state
[  283.347998][T10828] bond2: (slave syz_tun): Enslaving as a backup interface with an up link
[  283.364845][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  283.391324][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  283.418763][T10618] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.453296][T10618] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.468845][T10618] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.478194][T10618] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.490325][T10677] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  283.504189][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  283.652357][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1380'.
[  283.837215][  T459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.857253][  T459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.883180][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  283.940994][T10677] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.968290][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.997752][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.007557][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  284.024897][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  284.067431][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  284.080308][ T4998] Bluetooth: hci1: command 0x0419 tx timeout
[  284.098254][T10677] 8021q: adding VLAN 0 to HW filter on device team0
[  284.141183][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  284.160495][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  284.189068][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.196242][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.240488][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  284.256803][T10860] netlink: 'syz.2.1385': attribute type 10 has an invalid length.
[  284.339241][T10860] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  284.366932][T10860] team0: Failed to send options change via netlink (err -105)
[  284.386664][T10860] team0: Port device netdevsim0 added
[  284.411814][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  284.433129][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  284.447879][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.455057][ T5993] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.491568][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  284.507872][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  284.532345][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  284.588515][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  284.614303][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  284.638936][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  284.672740][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  284.695526][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  284.751396][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  284.778081][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  284.866710][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  285.033140][T10677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  285.076659][T10897] loop9: detected capacity change from 0 to 4096
[  285.121073][T10897] EXT4-fs (loop9): Test dummy encryption mode enabled
[  285.147302][T10897] EXT4-fs (loop9): Ignoring removed orlov option
[  285.209410][T10897] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[  285.565836][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  285.592536][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  285.605390][T10677] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.017087][T10924] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  287.129521][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[  287.763765][T10959] loop5: detected capacity change from 0 to 512
[  287.882174][T10959] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.1404: iget: bad i_size value: 38620345925642
[  287.980737][T10949] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.988467][T10949] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.007060][T10959] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1404: couldn't read orphan inode 15 (err -117)
[  288.060371][T10959] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback.
[  288.266655][T10959] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1404: bg 0: block 5: invalid block bitmap
[  288.347737][T10959] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 244 with error 28
[  288.371998][T10959] EXT4-fs (loop5): This should not happen!! Data will be lost
[  288.371998][T10959] 
[  288.408028][T10959] EXT4-fs (loop5): Total free blocks count 0
[  288.416105][T10959] EXT4-fs (loop5): Free/Dirty block details
[  288.438484][T10959] EXT4-fs (loop5): free_blocks=0
[  288.460516][T10959] EXT4-fs (loop5): dirty_blocks=248
[  288.483731][T10959] EXT4-fs (loop5): Block reservation details
[  288.497356][T10959] EXT4-fs (loop5): i_reserved_data_blocks=248
[  289.441397][T10949] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.846833][T10949] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  290.406801][T10949] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  290.416440][T10949] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  290.426126][T10949] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  290.435471][T10949] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  290.526497][T10989] loop5: detected capacity change from 0 to 32768
[  290.646425][T10949] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  290.655501][T10949] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  290.664492][T10949] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  290.673504][T10949] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  290.738994][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1406'.
[  290.889959][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  290.900672][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  290.967297][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  291.057648][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  291.094014][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  291.147400][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  291.205672][T10677] device veth0_vlan entered promiscuous mode
[  291.220823][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1417'.
[  291.236974][T11002] netlink: del zone limit has 4 unknown bytes
[  291.266343][T10677] device veth1_vlan entered promiscuous mode
[  291.337718][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  291.374375][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  291.403674][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  291.428559][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  291.470292][T10677] device veth0_macvtap entered promiscuous mode
[  291.500959][T10677] device veth1_macvtap entered promiscuous mode
[  291.576487][T10677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.615313][T10677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.637717][T10677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.662152][T10677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.702192][T10677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.740377][T10677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.774407][T10677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.858695][T10677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.921555][T10677] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.950690][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  291.976282][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  292.001031][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  292.026307][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  292.048316][T10677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.076620][T10677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.107312][T10677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.137651][T10677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.177641][T10677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.226933][T10677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.249183][T10677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.271201][T10677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.298649][T10677] batman_adv: batadv0: Interface activated: batadv_slave_1
[  293.859944][T11072] binder: 11071:11072 unknown command 0
[  293.865568][T11072] binder: 11071:11072 ioctl c0306201 200000000080 returned -22
[  293.983397][T11077] binder: BINDER_SET_CONTEXT_MGR already set
[  294.012512][T11077] binder: 11071:11077 ioctl 4018620d 200000000040 returned -16
[  294.140612][T11034] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.148139][T11034] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.226811][T11034] device bond_slave_0 left promiscuous mode
[  294.878577][T11095] loop9: detected capacity change from 0 to 512
[  294.927668][T11095] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  294.978676][T11095] EXT4-fs (loop9): orphan cleanup on readonly fs
[  294.989036][T11034] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.017787][T11095] 
[  295.020208][T11095] ======================================================
[  295.027243][T11095] WARNING: possible circular locking dependency detected
[  295.034286][T11095] syzkaller #0 Not tainted
[  295.038724][T11095] ------------------------------------------------------
[  295.045767][T11095] syz.9.1438/11095 is trying to acquire lock:
[  295.051852][T11095] ffff888147e10c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x20f/0x2df0
[  295.062076][T11095] 
[  295.062076][T11095] but task is already holding lock:
[  295.069458][T11095] ffff88805f539eb0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700
[  295.079329][T11095] 
[  295.079329][T11095] which lock already depends on the new lock.
[  295.079329][T11095] 
[  295.089753][T11095] 
[  295.089753][T11095] the existing dependency chain (in reverse order) is:
[  295.098788][T11095] 
[  295.098788][T11095] -> #2 (&ei->xattr_sem){++++}-{3:3}:
[  295.106381][T11095]        down_write+0x38/0x60
[  295.111095][T11095]        ext4_inline_data_truncate+0x1b2/0xbf0
[  295.117279][T11095]        ext4_truncate+0x3a7/0x10f0
[  295.122507][T11095]        ext4_evict_inode+0xb4f/0x1090
[  295.127994][T11095]        evict+0x4c9/0x8d0
[  295.132427][T11095]        vfs_rmdir+0x3b4/0x430
[  295.137205][T11095]        do_rmdir+0x2a1/0x740
[  295.141883][T11095]        __x64_sys_unlinkat+0xc0/0xe0
[  295.147268][T11095]        do_syscall_64+0x4c/0xa0
[  295.152216][T11095]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  295.158626][T11095] 
[  295.158626][T11095] -> #1 (sb_internal){++++}-{0:0}:
[  295.166003][T11095]        percpu_down_read+0x46/0x1b0
[  295.171296][T11095]        ext4_evict_inode+0x44a/0x1090
[  295.176777][T11095]        evict+0x4c9/0x8d0
[  295.181212][T11095]        ext4_ext_migrate+0xc0c/0xe60
[  295.186579][T11095]        ext4_ioctl+0x1a84/0x3870
[  295.191595][T11095]        __se_sys_ioctl+0xfa/0x170
[  295.196699][T11095]        do_syscall_64+0x4c/0xa0
[  295.201712][T11095]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  295.208209][T11095] 
[  295.208209][T11095] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  295.216640][T11095]        __lock_acquire+0x2c42/0x7d10
[  295.222008][T11095]        lock_acquire+0x19e/0x400
[  295.227052][T11095]        percpu_down_read+0x46/0x1b0
[  295.232338][T11095]        ext4_writepages+0x20f/0x2df0
[  295.237718][T11095]        do_writepages+0x476/0x6e0
[  295.242818][T11095]        __writeback_single_inode+0x153/0xda0
[  295.249144][T11095]        writeback_single_inode+0x3cb/0x8e0
[  295.255031][T11095]        write_inode_now+0x23b/0x2c0
[  295.260399][T11095]        iput+0x5ab/0x8a0
[  295.264722][T11095]        ext4_xattr_set_entry+0x34f4/0x3ea0
[  295.270615][T11095]        ext4_xattr_block_set+0x4fd/0x2d20
[  295.276428][T11095]        ext4_expand_extra_isize_ea+0xf3f/0x19b0
[  295.282766][T11095]        __ext4_expand_extra_isize+0x301/0x3e0
[  295.288933][T11095]        __ext4_mark_inode_dirty+0x469/0x700
[  295.294904][T11095]        ext4_evict_inode+0xa8d/0x1090
[  295.300372][T11095]        evict+0x4c9/0x8d0
[  295.304778][T11095]        ext4_orphan_cleanup+0xad2/0x1320
[  295.310501][T11095]        ext4_fill_super+0x8d6e/0x94f0
[  295.315955][T11095]        mount_bdev+0x287/0x3c0
[  295.320822][T11095]        legacy_get_tree+0xe6/0x180
[  295.326017][T11095]        vfs_get_tree+0x88/0x270
[  295.330955][T11095]        do_new_mount+0x24a/0xa40
[  295.336006][T11095]        __se_sys_mount+0x2e3/0x3d0
[  295.341291][T11095]        do_syscall_64+0x4c/0xa0
[  295.346214][T11095]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  295.352650][T11095] 
[  295.352650][T11095] other info that might help us debug this:
[  295.352650][T11095] 
[  295.362889][T11095] Chain exists of:
[  295.362889][T11095]   &sbi->s_writepages_rwsem --> sb_internal --> &ei->xattr_sem
[  295.362889][T11095] 
[  295.376373][T11095]  Possible unsafe locking scenario:
[  295.376373][T11095] 
[  295.383829][T11095]        CPU0                    CPU1
[  295.389291][T11095]        ----                    ----
[  295.394663][T11095]   lock(&ei->xattr_sem);
[  295.399001][T11095]                                lock(sb_internal);
[  295.405606][T11095]                                lock(&ei->xattr_sem);
[  295.412484][T11095]   lock(&sbi->s_writepages_rwsem);
[  295.417671][T11095] 
[  295.417671][T11095]  *** DEADLOCK ***
[  295.417671][T11095] 
[  295.425819][T11095] 3 locks held by syz.9.1438/11095:
[  295.431027][T11095]  #0: ffff888147e160e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950
[  295.441118][T11095]  #1: ffff888147e16650 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x44a/0x1090
[  295.450589][T11095]  #2: ffff88805f539eb0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700
[  295.460866][T11095] 
[  295.460866][T11095] stack backtrace:
[  295.466752][T11095] CPU: 0 PID: 11095 Comm: syz.9.1438 Not tainted syzkaller #0
[  295.474212][T11095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  295.484377][T11095] Call Trace:
[  295.487690][T11095]  <TASK>
[  295.490737][T11095]  dump_stack_lvl+0x188/0x250
[  295.495421][T11095]  ? load_image+0x400/0x400
[  295.499955][T11095]  ? show_regs_print_info+0x20/0x20
[  295.505153][T11095]  ? print_circular_bug+0x12b/0x1a0
[  295.510399][T11095]  check_noncircular+0x296/0x330
[  295.515415][T11095]  ? look_up_lock_class+0x71/0x110
[  295.520626][T11095]  ? add_chain_block+0x940/0x940
[  295.525579][T11095]  ? lockdep_lock+0xf1/0x1f0
[  295.530168][T11095]  ? mark_lock+0x94/0x320
[  295.534494][T11095]  ? mark_lock+0x94/0x320
[  295.538830][T11095]  __lock_acquire+0x2c42/0x7d10
[  295.543708][T11095]  ? finish_task_switch+0x1e4/0x640
[  295.548900][T11095]  ? verify_lock_unused+0x140/0x140
[  295.554094][T11095]  ? mark_lock+0x94/0x320
[  295.558515][T11095]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  295.564516][T11095]  ? lock_chain_count+0x20/0x20
[  295.569367][T11095]  ? __queue_work+0x9e2/0xd50
[  295.574065][T11095]  lock_acquire+0x19e/0x400
[  295.578591][T11095]  ? ext4_writepages+0x20f/0x2df0
[  295.583725][T11095]  ? __might_sleep+0xf0/0xf0
[  295.588428][T11095]  ? read_lock_is_recursive+0x10/0x10
[  295.593841][T11095]  ? mark_lock+0x94/0x320
[  295.598182][T11095]  ? __lock_acquire+0x13bc/0x7d10
[  295.603217][T11095]  percpu_down_read+0x46/0x1b0
[  295.608003][T11095]  ? ext4_writepages+0x20f/0x2df0
[  295.613036][T11095]  ext4_writepages+0x20f/0x2df0
[  295.617889][T11095]  ? rcu_is_watching+0x11/0xa0
[  295.622652][T11095]  ? lock_release+0xb5/0x8a0
[  295.627284][T11095]  ? rcu_lock_release+0x5/0x20
[  295.632040][T11095]  ? verify_lock_unused+0x140/0x140
[  295.637232][T11095]  ? mark_lock+0x94/0x320
[  295.641554][T11095]  ? ext4_readpage+0x2e0/0x2e0
[  295.646311][T11095]  ? __lock_acquire+0x13bc/0x7d10
[  295.651370][T11095]  ? rcu_lock_release+0x5/0x20
[  295.656157][T11095]  ? __lock_acquire+0x7d10/0x7d10
[  295.661176][T11095]  ? do_raw_spin_lock+0x128/0x2f0
[  295.666198][T11095]  ? do_raw_spin_unlock+0x11d/0x230
[  295.671393][T11095]  ? ext4_readpage+0x2e0/0x2e0
[  295.676241][T11095]  do_writepages+0x476/0x6e0
[  295.680843][T11095]  ? __writepage+0x130/0x130
[  295.685425][T11095]  ? writeback_single_inode+0x3c0/0x8e0
[  295.691060][T11095]  ? __lock_acquire+0x7d10/0x7d10
[  295.696079][T11095]  ? do_raw_spin_lock+0x128/0x2f0
[  295.701113][T11095]  __writeback_single_inode+0x153/0xda0
[  295.706884][T11095]  writeback_single_inode+0x3cb/0x8e0
[  295.712267][T11095]  ? write_inode_now+0x2c0/0x2c0
[  295.717206][T11095]  write_inode_now+0x23b/0x2c0
[  295.722008][T11095]  ? bdi_split_work_to_wbs+0x8a0/0x8a0
[  295.727494][T11095]  ? do_raw_spin_unlock+0x11d/0x230
[  295.732693][T11095]  iput+0x5ab/0x8a0
[  295.736511][T11095]  ext4_xattr_set_entry+0x34f4/0x3ea0
[  295.741913][T11095]  ? ext4_xattr_ibody_set+0x330/0x330
[  295.747287][T11095]  ? rcu_is_watching+0x11/0xa0
[  295.752045][T11095]  ? kmem_cache_free+0x14c/0x210
[  295.756974][T11095]  ? mb_cache_entry_delete_or_get+0x1bd/0x1e0
[  295.763040][T11095]  ext4_xattr_block_set+0x4fd/0x2d20
[  295.768331][T11095]  ? ext4_get_inode_loc+0x120/0x120
[  295.773558][T11095]  ? __ext4_xattr_check_block+0x7d8/0x8d0
[  295.779292][T11095]  ? ext4_xattr_block_find+0x500/0x500
[  295.784744][T11095]  ? ext4_xattr_block_find+0x433/0x500
[  295.790209][T11095]  ext4_expand_extra_isize_ea+0xf3f/0x19b0
[  295.796126][T11095]  __ext4_expand_extra_isize+0x301/0x3e0
[  295.801761][T11095]  __ext4_mark_inode_dirty+0x469/0x700
[  295.807242][T11095]  ext4_evict_inode+0xa8d/0x1090
[  295.812186][T11095]  ? _raw_spin_unlock+0x24/0x40
[  295.817119][T11095]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  295.823007][T11095]  ? do_raw_spin_unlock+0x11d/0x230
[  295.828297][T11095]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  295.834296][T11095]  evict+0x4c9/0x8d0
[  295.838223][T11095]  ? proc_nr_inodes+0x320/0x320
[  295.843072][T11095]  ? do_raw_spin_unlock+0x11d/0x230
[  295.848266][T11095]  ? _raw_spin_unlock+0x24/0x40
[  295.853115][T11095]  ? iput+0x706/0x8a0
[  295.857109][T11095]  ext4_orphan_cleanup+0xad2/0x1320
[  295.862300][T11095]  ? ext4_orphan_del+0xbf0/0xbf0
[  295.867229][T11095]  ? errseq_check_and_advance+0x62/0x120
[  295.872862][T11095]  ext4_fill_super+0x8d6e/0x94f0
[  295.877920][T11095]  ? format_decode+0x898/0x1300
[  295.882777][T11095]  ? ext4_mount+0x40/0x40
[  295.887095][T11095]  ? set_blocksize+0x1f3/0x370
[  295.891857][T11095]  ? sb_set_blocksize+0xa5/0xe0
[  295.896718][T11095]  mount_bdev+0x287/0x3c0
[  295.901135][T11095]  ? ext4_mount+0x40/0x40
[  295.905544][T11095]  legacy_get_tree+0xe6/0x180
[  295.910214][T11095]  ? ext4_errno_to_code+0x160/0x160
[  295.915402][T11095]  vfs_get_tree+0x88/0x270
[  295.919821][T11095]  do_new_mount+0x24a/0xa40
[  295.924804][T11095]  __se_sys_mount+0x2e3/0x3d0
[  295.929479][T11095]  ? __x64_sys_mount+0xc0/0xc0
[  295.934323][T11095]  ? lockdep_hardirqs_on+0x94/0x140
[  295.939515][T11095]  ? __x64_sys_mount+0x1c/0xc0
[  295.944271][T11095]  do_syscall_64+0x4c/0xa0
[  295.948677][T11095]  ? clear_bhb_loop+0x30/0x80
[  295.953343][T11095]  ? clear_bhb_loop+0x30/0x80
[  295.958022][T11095]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  295.963905][T11095] RIP: 0033:0x7fda28cc60ca
[  295.968312][T11095] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.988087][T11095] RSP: 002b:00007fda26f1de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  295.996499][T11095] RAX: ffffffffffffffda RBX: 00007fda26f1dee0 RCX: 00007fda28cc60ca
[  296.004473][T11095] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fda26f1dea0
[  296.012433][T11095] RBP: 0000200000000180 R08: 00007fda26f1dee0 R09: 0000000000004c95
[  296.020420][T11095] R10: 0000000000004c95 R11: 0000000000000246 R12: 0000200000000000
[  296.028583][T11095] R13: 00007fda26f1dea0 R14: 000000000000047a R15: 0000200000001ac0
[  296.036584][T11095]  </TASK>
[  296.051959][T11095] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #11: comm syz.9.1438: iget: bad extra_isize 90 (inode size 256)
[  296.065704][T11095] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.1438: error while reading EA inode 11 err=-117
[  296.081648][T11095] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  296.082668][T11034] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  296.095002][T11095] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #11: comm syz.9.1438: iget: bad extra_isize 90 (inode size 256)
[  296.129917][T11095] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.1438: error while reading EA inode 11 err=-117
[  296.145546][T11095] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #18: comm syz.9.1438: iget: bad extra_isize 90 (inode size 256)
[  296.162442][T11095] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.1438: error while reading EA inode 18 err=-117
[  296.175732][T11095] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #18: comm syz.9.1438: iget: bad extra_isize 90 (inode size 256)
[  296.189777][T11095] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.1438: error while reading EA inode 18 err=-117
[  296.202601][T11095] EXT4-fs (loop9): 1 orphan inode deleted
[  296.208361][T11095] EXT4-fs (loop9): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,noquota,max_dir_size_kb=0x0000000000200004,errors=continue,min_batch_time=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: none.
[  296.465056][T11034] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.474025][T11034] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.484316][T11034] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.493371][T11034] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.605840][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  296.617700][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  296.628520][T10677] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.638095][T10677] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.646981][T10677] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.656519][T10677] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.670321][T11097] device vlan2 entered promiscuous mode
[  296.723359][T10677] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht'
[  296.758536][  T459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.759350][T10677] ieee80211 phy34: Selected rate control algorithm 'minstrel_ht'
[  296.774040][  T459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.799082][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  296.819087][ T4447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.827656][ T4447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.837601][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready