last executing test programs:

3m28.484449839s ago: executing program 1 (id=108):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}})
io_uring_enter(r1, 0x32d7, 0x0, 0x46, 0x0, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x7ff})

3m28.284382968s ago: executing program 1 (id=110):
syz_mount_image$xfs(&(0x7f00000001c0), &(0x7f0000009640)='./file1\x00', 0x10040, &(0x7f0000000100)={[{@quota}, {@uqnoenforce}, {@inode32}, {@sysvgroups}, {@grpquota}, {@bsdgroups}, {@largeio}]}, 0x4, 0x968d, &(0x7f000001c300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
fchown(r0, r2, r3)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x62)

3m27.196869258s ago: executing program 1 (id=115):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='htcp', 0x4)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

3m25.625672923s ago: executing program 1 (id=123):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_lower}, {@fat=@nfs_nostale_ro}, {@fat=@showexec}, {@utf8no}, {@shortname_winnt}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

3m25.500445964s ago: executing program 1 (id=125):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x64082000, 0x0, 0x0, 0x7, 0xa18, 0x0, 0x0, 0x1}}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62)
syz_fuse_handle_req(r0, &(0x7f0000008180)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x8, 0x272, 0x0, 0x0, {0x40000, 0xd39, 0x200000000000000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, r3, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="fc146a996fb7b62acdb763adf4c360c8df3b5ef41d1f603840120bf00ae2bd9a9e91973afec72f115ea5ed7e21dd7c9a8a012576ebaeb8d73de2de2bb3754d920ed9d28d75510d38ab9160aaedd911f3f5e6bc90afc973a5a5bd81793cf40160909c7a1b8ba87329148e1b3b09db424b1022b647420478df5056f5242dfad151129cfe61b7da212c56d7173435698c4e62fdf839f4281e42de8adcf39c0d95fa02fd128991a7495d56d0cc03a72763a64361600fd02fa1b8a45f763aa46bb51b7b0ee8c5f9b5c158ca66f8c4fb076137b6e21fa87cb46d3ea3a82937399fcc644ea4510179414b95ac54f08dfad45450cfb0b6af43bd4b5ee223825a5ea5cb9342cf0b92a4020e339bbb1040a1bd4809a1acf2d16f3d11c88f5e3a3abd7aca500f8c4365e171dc9717e6e6238a342c19be9a64c4825c22fcf66aceb66ab675d00272cbd0ee1c1c0565dcc1aab69409f94a2b517fde7e5f246c4473fe8741660aa8e41ad9bee9e2ec9caf33657c98501246310dcd0675c7e4754f57c043eef502856adfc14ea076e08e1eef2ed3ef062e8ef6499a87cdb1f6d8d238daa4a85d5f42f510a53ea52048f07dbe8d8b97beb6dd47b49d7c5f2c4445c8fcba8394eea5d142bec801f73eadfbf12010b9282195cd88f75825706246c457f6b6167166219a21878d65b8d7dfc621ce678f8e0011ee5c171d9c16d978ef222a6805bf0f95252a1df53fbaf0f36820620a28b2e429e753a7d6c30dacba0e8672778b5ca862c5ac24991a5f76c6d96ba166d9dfa5fa28573035b532f65cc3420ef1e0b9df13be7342553ff4f06fa004a143481ef3eb263fe56c9b4239feb54d9cd5f7766b050db5c4c13794a92cdbcff267c2e70a464506d837f91e2222fea8a03e473a32eea3de6c0c943686268962cd789ec0888004abe1cb6f0778b3c26d49a3a4218215086083beec95065d87397d25b3b69c5245fe85c06fb24ac60571f6fa828df84e5258633f45f08940d360040596c5e0ffc8878a00cc7ad78e04f1154e0a8a7a3432cceaae32469db91edb8c2b1fa3bfc91f935a7cb584fab569a2146b742489020e01e5a8c5e6733048bc26d18f686652f6853aed25e1739452de5b0776ddce6038d019a08b85657721064a6d7fec935f44e555a04d889d1a6e02a2da06a544f49e7959a97701c7a3b1b4d008c6340aafc3752286138a52d393235fffe813b236bb31d1896ea976d5bac68d3e923f7f0db2008634fe495d398b1509b0e28c381ad2896cbaa9d6b53a09e4cb2a737354f18808a2ee69b7327c905819372f14918bf3d07bd0e78c0cdd8f8417ff37ad1acd4159e0623c4bb973a1fa3704671ac044365fd844aa519ee77639d67393d29f3e7f5f2569b40dd5fe902a2148f48bc86569a748d9a0435a66acf420e93e11b9082a7c67727ce33c758c56b630d47d0202be2f389821d6cceb322730a00333da6749c29e6207f22bb8f84576aa667e0d3795b44d3be5638f6e8573ef142f97739be92f283e11eecc29cf17bd61dfe60e2e80cc73bb582467643c3d69326906b73350b597f5c05079b7c6db1cd5c7d6c92fd9e16a6241037ebbf3f62e88b2cd3c9a89620795971b64845c2c3d189a3aa245bad699a193750f36a42d7ce3908787607102be22ec9f33797d17d6abe452871264cb5de2e25926d381329c61562200b8cad83c1613218ac22a2c590f76a3b32882061b18f6e67794439361faec7160054b0e97d163cc749c8f16771eaec6c0421ceb6bbaa03b345f605da3c0087c0ccc104b73b8e019f61dd3f697c50ac027c269ae3a53088240c3ae097c69e670cf480044efa74a6c9cd25c2922b22efb812cbfad02e4539032ff18fd4a0d6f467dd6be1fb51ab5bcf193609bc2fa9fa9cba668d3de5a85aea7ea055c43dd049eaf2dc1db48293f53dad10651a9de56f308c535365d5ddc3380c173edadac3d2d29c0b513ce8f44b498d19a4ffda565802e746aa203931bfd93858aa699bd052e99e62b1076e72931907e3847078289d47c26dacaac3623b343e52e4d1f9cdfef024a878651706c352cbaf7e03185740859bbe99b62abc089f74488b86aec4ff6b16628083a1961541f03aa4d434387248b338fb8c940a819067d815a41ea9102b7484abfdad472d2b7c4b77995d2d49a08ff9c8c1b5a44ecf686a1ebf5cf73258d681b4910779ec1f5e2bde60ee384a7b505a8d88899f8e953120b339db584cd39018be516b7f2288fc32a3a453e9938ace77e07f8565d10229d878184000c59b2f622cf465a3ec1243341bb8d175a07a06e5cfa736aff0b3e0df937f2ac11305a5288d398654f08eb7907ea97132b4b64be74024fb4f3d3231d4589632d3dd91c17a492e11481e726629d480878a3135c1ab39ecbcf0c9196ccbba17971884008cddc72c06c879c6b09c04b22e772a91edb2cf1e99273ebf120b02668e353b1a2e31ef131f9c7250d5370c6d10427f13c6c3cc2aace8e708ac4302630d3cb0e85fd354edbb5e0db9284955706253d18141b14a8a1bd2e99a638f654dbecf5d452d2d7d9a32e7ccfaf21b3fbfa6c73264d106f3661075d165638751fe1fa54e5ad011440aaeb666d86e22983514b7b451056edf79fb7f22687ef21cdfa4ebba504bd33f1c0d86f542df6931f468fc0331b1ba45c224edd7f85d33dbd2574882950a1b34ca2bed79cde9b361ce920a7935d19ff8bb8ecf68207047651f70759a92123dd291d0570e46683b8078303d6097f84eb82ed66c329d22cbee1250c1752401ef5fcc70a22e6629c1e6580d06491063d0339cf9d9f085edff66ef85f149b69d3effb812d460cbc8b6fadcbce6381260d8522844cf65aab98f90a83d733c1d8677cb3a9d3001eeec30b38a9baa8473460c7e284fe6923c0c1d1b5f4e6153f639ca265180ef35b539e1928da4ff54f903c6e3a8463b8731437da1de74962258c7618a950c25b7c190085b962681fe0183cb9dd8153046deb073d6a6de34e338e5b15c7cc118aaaeb3f69b7a0cee8c3a5a1494f4c05c566dbcee189eebab44e9c3765b4d4c10fd26143b94ca0a91b3e2ff97a3be69aa82aafe9cfd3d26deee194e9fe1643aa148545313ebb90903f06919f2bd67f7a159382ed053d07905d89ffa25331dc2b28e75d13e74cf98014b8c19d196966c71661f35bd410119101bee38f119c9f1fa58b8165c98e8123aa795aded63faf74006a290115d3da09a87f98caa0673606341dbd48e0028326ea90db8b054783b56496ebaa6585a932fab11510d3884e0b9bd42d810df49c678f341b8f8e8bf88cf9e47c03c4820c2d009832ae2e9f334b89c5c684fdab220f3a9f91c938c278de33e6404927b68d2e76a5dd4e8a9493612f97f1805f448fabfc634ea203b785faaa30e3e29344a396a33b957c7aec7ec8d474878ec9dbf662e0015e0b6ec6bc31d7660bd7629a46f58fc83f443924274d082e0dd86d211f4db3ff3881e19ecd36d09b7566ff38094c3644c3c490ebafefcf4289160c4cccc8c379a4a3ff7680b9abadba9ad10dc081aa645974eabb283e64f4fd2a77bd31b9245ed8e31bca8895a1ad8ff8b7c195dbcccc9d3708f3441f5967eee20899d7b1122804834d8dcdfa2f06497b2a060f9a792bafd187cd52a59cc7330a10e5560ec301ef184aa325ee13fab323ef0553b103f9080b8a0fb93f98b66febb1905170af26a5b8d0b3ec2aa6345ec08f808255d112060d7de29678fd22a94c82d1703576ab06a5300f93fc85f059c236542aa5ea60fff0081cc57855fdcefc0a6e9498e5337804b6ff50363be8ac62acb12559876d7877b5be8917aef1669191c50366d6a705f821ba782bbaf3364b42da056d81415a4d49adb057e0bbdbde1da007f20fdbe60d14dcf07455aa116ba0fb06801760b10a58d3378f8c0cf174e672b7dbc0d95ed3b0d156d06913deccfe492b1f9bb948d7f95e749c1ae6dfceb44852d4e15e6bc80e886e5ab3dc55f3201029353a11ca58b529b9f6e18c1a31c8238723533bc9c83aee9468078f22071a227657cca79101b5eac2cb7a95607db17128fe2b5dd7de4a3984baa9c2b785bf8b99f9f048f1451f07b92048637c3fc212a76de5ad9e0c550098fb0fe9cd0ed22b036be78bbbd92d7f1a2ed1b27166b6d2bbb9d905ef8d7c00a8bf5cd101937f179c943017e2a6a3ea4bd9fc026da90dcfc160f81937b13a2e9dbdfdef3b8e471ef3790cb3f58f8db41ca7c3ab74958fd28601d0cfe35e05cea75b88c39d6f23c137ab2ea55860fa92a5c4e9dc39db47965ee782766c1fd114050ff698e4540f2d6846a4ff1d97f8d71e5efe77ec4bed1d97de1ed33a2975c69545388f4dde07be948919a423fcb3bd773d9c3cf26240ecd8edafdfb5cace35e364a49b27ec3f88a53188acafb484632cf85c04ba9ac44cdb9bb6a58aaccb3d7f6378098d173f474cf5cbc895dfd28f59de2197a5c01e973dab21f4cc3ed3ed01e92791dfa746d1ad2099957e25d9a7a634c242f3ddf3283ac76dd6a4067c536e2e2884d6616b0a84beb3e1117a9d35404175ccbdb223d0874bbbd6d0b35a9015f10d5ac2fc2a90259273fe26b493d1a69bdfa63cbd5fb8546a251259269f20b1a2971c6eaaeaba777061d0c0eb7acb47fd5957c0a8ddb8591cdea6aa0f604bc9e1ad953fe68c6cf0e655faed21de5a2cb3005c29751912943eeda9f83f527003d95235c22f26f28b181f792184d6261e7501136e6a7f0eb0a464ffb237d9a432cce8aea7935e466cf04d60e90d9d06c5707195100e5ef663650be6806085da33950c3ad0b8e4f06b7654fe7c840b3fda9a4a58d8425f911c2d543691a36840e90cba778bc5d047cd78bcec4c81688ce3e37542c3a7cacdf4005b635db9136d0fadc4e44a0eff6a7f066efed759f03e1fe8c3890288d29409af1b8abf5bb422efe9042c517d3ebcca7794ad1cefbb13b15d548a9a850fd1fe0b3f110a7cb42cccb684acb40ee862233cf5e1eb86a6b94f82540982257da5745076515d3ceb238aa4cf5aea40bf794d8a34c14d4dfaab24c5e31a3f4cb54dcce8ff8cab28507c172aa33bea71940d8ca0f1e33985f46e17c685c6ca5202acf45ce802d726537e81a7399e82922cb6b9de4abc60acc97e691ca92289ee29bc2eef66b980ba22a215bb0855e91f3bc63c0764297d7837a439320cf886bed57cce894a8f27f24aa085122a9737df00f41b35d277334460df7e8649acd9cbb2a9347c5772b61bb74cf0877f9c2e022f6ffe7dad0b17e11c3f666cb17e7f0e5adb0536acf9aaa39770a198f251a041cf1f8ad578b16a92eb0e001181a9ed6f157b68ec6c60ecefdcbcfcd9ef3332e056bdf297a0bd36e4235a618ef87789a837222991129ae767da14e778072a6bed300164273187ccfb712c64ff708c0c0e1147c508610474a7de0f9c3220a61769dddae040e726413ff9f617f7d1dff84929e977b1b24b0ad8a6a510afe2f370b40c791c562ca8ed51f19a7bdafefa47604a85d39885f4ccc0f7936016b1e808165b1aa283e954db5f154f56161832cb0331d0042ab15c68d0e83a7d8b67cf28acb16195ee026b13fe18691686269802b6edb1987f3584ae0ce993ab6634f13f37121f9982dc417f54217cbc611d8faa8cf992d40a632d6b9dbc4fd572a7823664ffc5525a34287db6e3710bebf0ca9300d3eb4cde0b0954d2d3d41bba880c6fbdb7e2f324d9b9e2557bbfa0721bb2dafcad4bbe4efafd7649513307267342868912b729988feaf3d8a6f9fdab0109b23e823ab080b1f1e3811e6015692cc20a4acbdbbe59b67df42fbb8f6cf0bdba2b263bdbe51f51f2a2f56cc5ad9ba386ede1ac4d256d929ed1b092f52865b86419ed5a80ca93a78ae4d9757b3e4b34e93b07da97100859d242c66c1c584431f135bd642802a10f957c2bdb2d79f95202a35f11bd70f60eeae25d3f0001025232212a58a5bd7df0da91667c99114f25a92b2e6da790e23c9531788b52af5588bedf69f3400eff3b5cfca2f63737c5b706aee653359a3933e1a6a341f581e16b2d400ce0cd4f9ce95c1bc8566883358327aa94f4ee201f553f4db5b1515a646761d82167ec5e4b9690d499a16c471f0f4ab50a6cacc86b5912df9389b8a0b9a5f251e06418edd6923a8d8a494891effca14a825d0c0f28311c84ce8f1e71971219321fc633c82bbaa26cd0ecb7685c24ef9a82e42d7386dc88d6c650cd53a5132d2e2404d6df38077906acc5796d2f90245249eebea7fc1b74855605da7bafd841f84c4e9fa0720dce7920d5084f79ea485b12984468eac751d47622f2244ad84b4ccd48896e224118c3880350b0e3f6c2e62ea475fce925de2c8200f8740f4a6c0975b4404015d60856280beb68613d91d43b8396c3f75417bb12f14c4d4ff7820ae0b657604b969cb18fdebf80e9b194daf16e75bb5207fd5a33326ceeaace85dd98458c6e56a4044b36485db88f55a699ea40006e3b8d16e4f6155ece64aeb9d6ae9d41b62c99c5b09be25e2b483bdc5650a6b67222fe0ff070fb543381ba8fa21e6daaea1b3185ee57a3abd9faa482d7e902b957a1e49cf7e8908c2a840effec48cea27b6e8353d228f958f4c7e899b640dc2e6f6e22fb52aca5c2246e384362d4839f3e59eefff5a4b61b43a871e28cc3280df956ef01fe34af42f90d33166f96ee7e63badc6a47413bcf8ec8d0c62cf81b6ef601c113c9557d2bb569480fb041af6f09a3730ab8a1fe3f43a9f98574e30dc54899e818cec24564309952724f38638637d38dd043973f6b459f529be21b9e264e6f3678f9f18fdfc2d21bd2be32972bf3ac2c9863d6cd43bc1353f9b34a3fd66faaebd57cd788f7b2414d35108c2a4e00aa9789b9da2d4d24856a5da02ae4377aea0e3f69f190644097767be9371ef6525c7e19d747d87f89b7a86423960c8ec9405a7f3aa0a8fd0f405b7ca33ed66004ee31b8369955d7ac39cec30958f4970dd58062e65ce09a1199b93a7a1b59c90401a9b0859bf437b2211083c5c0e192c86f7572cd85c228b255c1a30252f6f038b4f95cd2eaec189e1efdce9953c461044043b330970f8f75a2f6ffeb31cffaa6fe7ac7bf8fcfeb5b468d9b599fff576b2418f960be7b7aee1beaf1d1c283ad3756686139a4cb94dd1ae2ad85e87dcc70ff246147658a64b51eea9f682ba40d498f87f901fd413fc2b895020162a89315188b581b64cf415206805d6f678b7fec45b342fe88c3f158f0d221719423ed4655c2539bab277b9d1b08753e568244831186c0ce47b1114df12b506d57acda485959d84d0ab3c72a583c86fc69237ae46d44a6b683fd618d65e7f466e43f449b910516af4cf8233b5af3a572a699abc3a79a30fec9ba0ce24d75108a20d1cbeb03109a2081ef28b86db0b3a1336acbaef9f564c970319c2257d8998d040c4e921d51f1456277179cad1de91667f540cf889415db2af003565d3bac40c7603e69c8f9cd736552f35a9489f06fdd3f3eb05a230e9d17dabe225ffe77b4fad07c0427576696e8e7c4a2113151447466e1864d696ba28335192d86e4179784999b0e0aa3514e7f28f7a90bc84643b1d1b137882344f91aa313ea4c8cf4417c2dd419d45e820443ecf38bab63215ad41a5bc1d32505ebdb166d1bf0b6ea91dc7dd0b3ba8a80b15e2673e469c4ea830582a08775f2bdaf1a4d70da7e52efd13c3f9225d043c17d3f7ab0a2da9bf781913340ee331bbef0dc991ca9a6b893cf56de1495d2e604228e2efaa358c95f47a9162428691de8e1f90179df61d1d449aec1340c08792f04726e40dd7ed37cd86364113dc4d6878a9a3a23506a7127410bfe031550eb7b71bcc4029d1097b5c89990653f12797f68689c04156b174fb0516f07ad26ccf19460408d14e40301c9aaea0931fe842a50830185e29fe0caa409d56b22c9009903b113abbb2385cf49677e3f9989d263e01d6a843d36a621e643083dd6508283027594922fd53d5db6c42a642a82369726cfd8ca0e6d59e809d8a08b5ae5356d6b7540cc8b068f1f1536eac6603bb38b7df29ee92c7a6bc54c2c9998b912ce0e217f5ca0765bdbc1575cbc2bd8d912414a4130d3a075fc0c8ca47f7a95b087b76918583737b11cf7e9519b62251b92b54bd3a07ceccfa937b6f4835f7e81426af295c12bd11ce8ce3e6d29a6a251ae2fb302d3fba6c4733a6018a800a342da85d382be757e4310e3cedbb6c1aab080e9452cc9a74f132122d699657c684fac9a0058915571c61eb9821a1d1e01a38a9662c5fc63e4ec7d9105d5f97d2682efc98cc89a9e320088f6319a49a5f4b6dfdcc4f3b56908f6d0c597a9a5e808935645c83211c418c62616fe2581b997fa5e1f9bdc33b6f22d4cf25787412e8b82e8cc800d947adc3fbf9e5d70b927d9c451d8f0a08f6d526f1d27a3afd1f8d1038d020aa6e947f4f4c0af761eddd120dc56c828c59246ec024f1c3e8430d500365b17853634bc7f039757e1a600404dbbb6729280857327ee9badd366214f1caf9b4313714784e5b0b92c3c39940bd4703ef28540059ca9240cb90a7eff4f76e5122c6e2db276d642bcf4cb94589733be01cb626d9f671c37d6df39adef4b9391b4a37873276d00187268ccedbe8de586388e9402d271b7439b6868434e29267ad38f09d106d9e1b86856f56ae63642fc097a64c7ebea08a428ca022f9d5ff5e032519988f6527aa0ac985f280ee4fa8212bfae653726303015d6676e2c2fdf64ecf280db6a479af62e169d4290722d0fac394f8193771abc0964a732dcdbf1da5e558a034b4a91d83f678e22ee6b81a3676d1f752a267e9b15a6f27f5cb421a260593dbc57c11c2a6006e169e95b5836ce82e75e01432ad8eca12f82325a26832821e8d34c1079b60eb1e3be2d828ad03b1936b25b73fe51760658d6d14d1da27f6071e1e07cf785e66316c6aad82889275c6d9f0153ebd24e48994b0eed48bb756be3baa4d618382ec031d50f15662646007718f0133ca950285d504c3c0e28f12b23552ea38d9f11d9d591e9f07ad5aa8691dccdac9e54f2c96e9d6b89781c81dcfd223c6a2e1987f6a6b8f1480f76ca777d623045659bc38332c4a47734a71c13173fbaa9ec4eea98f1848c2ed26afb4eb77d3e4e34188734eb96c0b6f41cd93901e91fc678a3b33bfef1d7d192d1b622483f6d5441619ed711330af7fed8e92fa0313a42eda4b114cc7438f4af80c2fb36707249ef681db88d239875dd40024e8f7cd9dd82e9764912e9a90b1e785b19c277409f8097ddb260b4b6ff8617d245bf20f95067bf00ec2536a7f229746aa7250328cd7f46a224e8479caa0e83a0ad93a25c8056822a2fef998b5ca9fe2d08eb692dcbc5b3e5022653242cc5026a5a71bf9dd5c3f6d68c62f15b21ad4d1a766b29f1d7c899591b58d5e060d68d0119b34353a3ee5b49be5ec6349e487ae8e3499c8959a104f8c1a3960385d9c41a42eba4cf305ed8048f70f0518afd6c36b015e9b071ec87b752db3faeb2a8a5f9041fbe571f069d6e7d9ed2cd02b2fe973d00edd4286aa06eb56b9c50cdb1c52250ab3e92e8f5eefafdff1f17057910979895d7586a72037b1982f9a318599b7343d6a0b80d3f1d7ebafb1d95c5848a7952d023f3f3998c4d1e7ceec59be57ccde61c0ec1d177c0fe6bd54f2038a3ed85f2bae94778eb7d66f26c81ebc9958acea8637cc544f7df4c838ed1a2f4e0dd05880b94e5865843235ab121f4b1dfd21f16db3779a781d464c9c054d5affc001ba00ccd329c2639fc2f63343f79c42cad8c584ba5e85daefd6fe202ad08e9fdea6fb9b5963e763da3e3096db47d5abee5cc9eee73a192cfc42a96b3ab6aab20c4915bdbb70cdaae0061e0bd2c60b2ee985905438d3d11fe618de4c5302987522c8be1ec6af574f967dc1b095b461f34db945f3d570241f196146d5ce560437b3c9fb2db84f883b9712cc1a3974cad9624afd74f8044b95c9b6c9e0f27768254e92bc014efed25c7526a51bcd38ae25ec37a3cf0e96b974cc74c0f54c0586c9c9f15268a63033316970f9fdf471e118d1c2523f42b351d9d913267a4759a4a58850418d6c6b4ad1498d9a626478034e32c9504e572686fcf8d35435b2d132a3bebe28e1cd7fa3e5f86c57d77545bc6cf46dbc0061d9a5b272622660b2669ed2fd3d28f8018242effd3e6b67eacbc8c8aaa7e121535edc1a06d937d95c95d7b88c7d135ccb9395578d1eb7dbae0706d167b3650f8b07b02b13b63533bdfdaadcd650382f71b56d76a19b962c42606b6896cdfcf34905950beb8c5a250a8a4c008182531e996f8073ab33aaa71e2bf255dbe2743820ce2d08749e21d132d94b9e3463a9988c16dcc70af77ac4cc2cf1c7c5909e91834f68a9444f13c1ebe8689799bc4671019530c050132e85f21711d8eec4a54b87259f12e13962fb6e5c02fa925b2fd7b5f9e3898b7142b0bbccf35bd9b5ba5d1e405d22ccf94f63cebcb0bae35fcb8f7d90bf4bdee092409f71290f72208f050ee4fba3dcb5b149daff7484cc100c4087e0917c21a93a351d4bbf3bcd7374f54c510037b8361b859738d999113b613f79b8e31e5fb1fb47147a92f9b9ea309ae733b0dba4192405269dd7089b688038394d7b5ffe09e9793b4a4065b59bd4f28df7904d4dafcbb10cd0f03a1f9259466730696f4a1c23257cd0362a6d4b613a48a28c8cb6549ee55dc8edfe9ef1902fb8ee691d1e929a04a73e083513d4c7d27c6d36b2efd933ddc754a2248073bf6530ea9f0f2705ffb9864debb640dfb01bf135b45a3196f8fcdc065ed592d9f25d8b1f612635ad539c60292575358fd017dc018fad405552352813f231fe85c7095be0acd24972150cac7cd2ace2872eda1637058bc09fd5ee56163ae2f0c489254532165514d6a3b5bbcc1856572e5f5ef3d9ba7a9f5813719ec1e1478c0f00e160973259c542a88ffdaa770c526179b85600b5ebe1b3e7ae18471e51b7d2cbfe0a8b29a947fbf0994ae30acb664778f211df0fedc2146a9bdfca2d3da2ee93e684c0e79d8ba917b68cc5a9aae1f0b3aca5335a703871e58fcb4488b29770983ccdee0a09ab7e203cec649a45b204012b3769197cc343d647f2421ade855c043997d9d3d85e7605863e22cd38e28d67086ad5f67a8b713afa43d25e7d38a3fe498b81a95f9ddc3e1718ce5c3ac81712231bb817e5b4578e8675bbb769d8df285c3eb8d89a94cb2a2e5229ebb7d29d174a58b499e1115d33f0f505047c693908306f570755aeff25d7f567ff29b79610005ad445079e77d21211cec6aaa176f60558e76345ebd208cf4e821dcafd466c2f31cdb9ff5304b6773cae555a6c2df0f749154c84cc8404872f4156807236e7dad2f63ef65f0945db98bf67c6db728800e2b35b2186fc4987e79f05eab127d3e03795089fc3972ebeef566ebad643203d658851aa2223c909fa5e4e32acc80b8f608eb9ae22cf7356dab37d35ae324c3a68b2b90786bccd019232a7c07a6a4e8221281721781a3702573e6cdccb3bd3ce48d4453096bea6a7ca79fcbbb8a9de36fc181e5fb42cc19bdff6cceb3c5846cb1", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x90, 0x0, 0x7, {0x5, 0x2, 0x6, 0x8, 0x5, 0x2, {0x1, 0x1, 0x8, 0x6, 0x8, 0x558630b4, 0x7f, 0xfffffffa, 0xb7, 0xa000, 0x2, r2, r3, 0x0, 0x200}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)

3m24.846884099s ago: executing program 1 (id=130):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000002c0), 0x12)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r2, 0x0, 0x2, 0x0)
unshare(0x6020400)
r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)

3m23.827727565s ago: executing program 32 (id=130):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000002c0), 0x12)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r2, 0x0, 0x2, 0x0)
unshare(0x6020400)
r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)

3m10.248697947s ago: executing program 2 (id=179):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, 0x0, 0x0, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x4}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r9, 0x1, 0x0, 0x0, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30)
syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x86, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {0x1, 0x4}, [{0x2, 0x3}, {0x2, 0x2}], {}, [{0x8, 0x7}, {0x8, 0x4}, {}, {0x8, 0x1}, {0x8, 0x1}, {0x8, 0x3}, {0x8, 0x5}], {0x10, 0x5}}, 0x6c, 0x3)
mount$cgroup(0x0, &(0x7f0000000000)='./file0/file0/..\x00', 0x0, 0x50000, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x1)

3m9.170079281s ago: executing program 2 (id=182):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xc, 0xfffffffff9400f4f, 0x8, 0xe000, 0xf, 0x2, 0x0, 0x0, 0x80, 0xe}}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x15, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3m8.705535553s ago: executing program 2 (id=188):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000890, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3m8.535965413s ago: executing program 2 (id=190):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x4)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)

3m8.387926261s ago: executing program 2 (id=191):
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, 0x0, 0x0, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x4}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r8, 0x1, 0x0, 0x0, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x86, 0x0, 0x1, 0x0, 0x0)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {0x1, 0x4}, [{0x2, 0x3}, {0x2, 0x2}], {}, [{0x8, 0x7}, {0x8, 0x4}, {}, {0x8, 0x1}, {0x8, 0x1}, {0x8, 0x3}, {0x8, 0x5}], {0x10, 0x5}}, 0x6c, 0x3)
mount$cgroup(0x0, &(0x7f0000000000)='./file0/file0/..\x00', 0x0, 0x50000, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x1)

3m7.694577657s ago: executing program 2 (id=193):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'veth0\x00', &(0x7f0000000440)=@ethtool_coalesce={0x1, 0x5, 0x0, 0x3, 0xffff1da5, 0x9, 0x7e62, 0x0, 0x2bd, 0xa027, 0x0, 0xb59, 0x0, 0xffff0001, 0x7, 0x8001, 0x3, 0x1, 0x401, 0x7, 0x9, 0xffffffff}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c081, 0x8, 0xd1})
io_uring_enter(r1, 0x0, 0x2, 0x17, 0x0, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x16b200, 0x0)
ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000100)={0x1b2a, 0xe, [{0xa, 0x1}, {0x5}, {0x8, 0x1}, {0xe}, {0xa}, {0xe}, {0xd}, {0xe}, {0x2, 0x1}, {0xa}, {0x3}, {}, {0x3}, {0x0, 0x1}]})
ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gretap0\x00'})

3m7.186584436s ago: executing program 33 (id=193):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'veth0\x00', &(0x7f0000000440)=@ethtool_coalesce={0x1, 0x5, 0x0, 0x3, 0xffff1da5, 0x9, 0x7e62, 0x0, 0x2bd, 0xa027, 0x0, 0xb59, 0x0, 0xffff0001, 0x7, 0x8001, 0x3, 0x1, 0x401, 0x7, 0x9, 0xffffffff}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c081, 0x8, 0xd1})
io_uring_enter(r1, 0x0, 0x2, 0x17, 0x0, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x16b200, 0x0)
ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000100)={0x1b2a, 0xe, [{0xa, 0x1}, {0x5}, {0x8, 0x1}, {0xe}, {0xa}, {0xe}, {0xd}, {0xe}, {0x2, 0x1}, {0xa}, {0x3}, {}, {0x3}, {0x0, 0x1}]})
ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gretap0\x00'})

2m14.550546478s ago: executing program 5 (id=428):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"})
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c6700002c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bd6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287eda920fe0f7cfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de132cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f5b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4786c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, 0x0)
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, 0x1b, "00000000000000000000ffff00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x21, 0xffff1322, 0x0, 0x2006, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$FUSE(r2, &(0x7f000000a380)={0x2020}, 0x2020)
read$watch_queue(r2, &(0x7f0000000600)=""/149, 0x95)

2m13.639989938s ago: executing program 5 (id=439):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5800, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)

2m12.581383639s ago: executing program 5 (id=450):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x4}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r9, 0x1, 0x0, 0x0, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x86, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x3)
mount$cgroup(0x0, &(0x7f0000000000)='./file0/file0/..\x00', 0x0, 0x50000, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x1)

2m9.450935584s ago: executing program 5 (id=460):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

2m9.279585335s ago: executing program 5 (id=462):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000840)=ANY=[], 0x4, 0x27a, &(0x7f0000000440)="$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")
r0 = creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x2, 0x6, 0x7f})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]})
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)

2m8.409480627s ago: executing program 5 (id=468):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000380)='./file0\x00', 0x1)

2m7.090586062s ago: executing program 34 (id=468):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000380)='./file0\x00', 0x1)

19.54507993s ago: executing program 4 (id=806):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = gettid()
r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00')
write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e00, @local}, 0x8)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e)
openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8)
setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, 0x0, 0x0)

18.840082607s ago: executing program 7 (id=808):
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019c80)=""/102400, 0x19000)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_triestat\x00')
read$FUSE(r3, &(0x7f0000002c00)={0x2020}, 0x2020)

17.167152069s ago: executing program 7 (id=809):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14)
sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010)

17.166184189s ago: executing program 4 (id=810):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
readv(r3, &(0x7f0000000040)=[{0x0}], 0x1)

17.01107476s ago: executing program 3 (id=812):
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)
r0 = timerfd_create(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r2, 0x2040403)
keyctl$KEYCTL_WATCH_KEY(0x6, r2, 0xffffffffffffffff, 0x4)
r3 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000180)={0x3})

15.94079807s ago: executing program 3 (id=815):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = gettid()
process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

14.68096241s ago: executing program 3 (id=816):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x802446, &(0x7f00000001c0)={[{@grpquota}, {}, {@nogrpid}, {@abort}]}, 0x4, 0x566, &(0x7f0000001b80)="$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")
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
shmget(0x0, 0x1000, 0x208, &(0x7f0000fff000/0x1000)=nil)
shmget(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$packet(0x11, 0x2, 0x300)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000040)=0xb2b9, 0x4)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x74, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x3, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r8, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)

12.831285847s ago: executing program 0 (id=819):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac0000000001050500000000000000000a0000003c0002802c00018014000300fe800000000000000000000000a9b6bb14000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040020010000000000000000000000000001080007400000000018000d8014000400ff010000000000000000000000000001"], 0xac}}, 0x0)

11.978357451s ago: executing program 4 (id=820):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xf})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

11.849319943s ago: executing program 0 (id=821):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = gettid()
r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00')
write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e00, @local}, 0x8)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e)
openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8)
setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, 0x0, 0x0)

11.752636445s ago: executing program 4 (id=823):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x5, &(0x7f0000000040)=0x29)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)

10.223186346s ago: executing program 4 (id=824):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100})
io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0)

10.108655706s ago: executing program 0 (id=825):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001200010000"], 0x54}}, 0x20004010)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108)

8.238971731s ago: executing program 6 (id=827):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0xa002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x4}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

8.133580396s ago: executing program 0 (id=828):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x44000)
getgroups(0x16, 0xfffffffffffffffe)

5.374685471s ago: executing program 6 (id=829):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0)
unshare(0x62070000)
open(0x0, 0x141142, 0xc)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
readv(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
close(0x3)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

5.351041306s ago: executing program 0 (id=830):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r0, 0x40047459, 0x0)
sendmsg$rds(r0, &(0x7f0000001d40)={&(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f00000004c0)=""/176, 0xb0}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000580)=""/223, 0xdf}, {&(0x7f0000001800)=""/192, 0xc0}], 0x5, 0x0, 0x0, 0x90}, 0x24060940)
bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x20}, 0x10)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xca)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x8044)
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000010000004feffffff192560e200000000", @ANYRES32=0x0], 0x5c}}, 0x2000000)
close(0x4)

4.508355873s ago: executing program 3 (id=831):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x80010, r0, 0x0)
ioctl$KVM_TDX_FINALIZE_VM(r0, 0xc008aeba, &(0x7f0000000040))
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0)

4.422875793s ago: executing program 7 (id=832):
pipe(&(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="796100000000000000007e00000008000300"], 0x1c}}, 0x24000090)

4.351291572s ago: executing program 6 (id=833):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [<r5=>0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6})

3.182042596s ago: executing program 3 (id=834):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
gettid()
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

3.147487653s ago: executing program 7 (id=835):
syz_open_dev$audion(0x0, 0x9, 0x400)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.830779943s ago: executing program 6 (id=836):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa6e6, 0x1000, 0x1, 0xbfdbfffc}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40})
io_uring_enter(r3, 0x4e14, 0x912a, 0x41, 0x0, 0x0)

1.59935745s ago: executing program 7 (id=837):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a80)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x2, 0x3, 0x0, 0x0, 0xff, 0x9}, [@TCA_NETEM_CORR={0x10, 0x1, {0x7, 0x5, 0x7}}, @TCA_NETEM_DELAY_DIST={0x6, 0x2, "1b6b"}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="7fc8ca712208"}, 0x14)

1.464418911s ago: executing program 6 (id=838):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x4, 0xaf7, &(0x7f0000000380)="$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")
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x10104a8, 0x0, 0x81, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148)
setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000)

1.073590494s ago: executing program 3 (id=839):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4f24, 0xc, @mcast2, 0x4}, 0x1c, 0x0}, 0x4048053)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})

369.214964ms ago: executing program 6 (id=840):
mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xe79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86g\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf17\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\tA\xed\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\x00', 0x42, 0x4c, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

296.653534ms ago: executing program 7 (id=841):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x802446, &(0x7f00000001c0)={[{@grpquota}, {}, {@nogrpid}, {@abort}]}, 0x4, 0x566, &(0x7f0000001b80)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0XUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++FK56U2XLUmbtVnTmc8H7nZO7k3O+ebec/q9uTckgIE1lv1TiHg5Ir5JIg5HRJKvG4585djadisPr09nSxKrq5/+ldS3y+qN12o872BeeSkifvsq4mShtd3q0vJcqVxOF/L6eG3+ynh1afnUpfnSbDqbXp6cmjrz9tTke+++07NY3zj/z/ef3P3wzNfHV7775f6R20mcjUP5uuY4tuFGc2UsxvL3ZCTOPrHhRA8a202SfneALRnKx/lIZHPA4RjKRz3w//dlRKwCAyppM/735rNDP/oD7JRGHtA4t+/RefBz48EHaydArfEPr302Evvq50YHVpLHzoyy893RHrSftfHrn3duZ0v07nMIgE3duBkRp4eHW+e/JJ//tu50F9ust7F/7T/zH+ycu1n+82a7/Kewnv9Em/znYPPY3YYnX6N1/Bfu96CZjrL87/22+e/6RavRobz2Qj3nG0kuXiqn2dz2YkSciJG9WX2j6zlnVu6tdlrXnP9lS9Z+IxfM+3F/eO/jz5kp1UrbibnZg5sRr7TNf5P1/Z+02f/Z+3G+yzaOpXde67Ru8/ifrdWfIl5vu/8fXdFKNr4+OV4/HsYbR0Wrv28d+71T+/2OP9v/BzaOfzRpvl5bffo2ftz3b9pp3WPxR/fH/57ks3p5T/7YtVKttjARsSf5uPXxyUfPbdQb22fxnzi+8fzX7vjP0pXPu4z/1tGfX+0q/j7t/5mn2v9PX7j30Rc/dGq/u/nvrXrpRP5IN/Nftx3cznsHAAAAAAAAu00hIg5FUiiulwuFYnHt/o6jcaBQrlRrJy9WFi/PRP27sqMxUmhc6T7cdD/ERH4/bKM++UR9KiKORMS3Q/vr9eJ0pTzT7+ABAAAAAAAAAAAAAAAAAABglzjY4fv/mT+G+t074Jnzk98wuDYd/734pSdgV9r8739hR/oB7Dz5Pwwu4x8Gl/EPg8v4h8Fl/MPgMv5hcBn/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FPnz53LltWVh9ens/rM1aXFucrVUzNpda44vzhdnK4sXCnOViqz5bQ4XZnf7PXKlcqViclYvDZeS6u18erS8oX5yuLl2oVL86XZ9EI6siNRAQAAAAAAAAAAAAAAAAAAwPOlurQ8VyqX0wUFhS0VhndHNxR6XOj3zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj/wXAAD//w7mL8s=")
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
shmget(0x0, 0x1000, 0x208, &(0x7f0000fff000/0x1000)=nil)
shmget(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$packet(0x11, 0x2, 0x300)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000040)=0xb2b9, 0x4)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x6, 0xf, [@random={0xbf}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r8, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)

196.659601ms ago: executing program 4 (id=842):
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
mkdir(0x0, 0xf)
fanotify_init(0x200, 0x0)
socket(0x400000000010, 0x3, 0x0)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)

0s ago: executing program 0 (id=843):
creat(0x0, 0x6a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r5 = syz_open_dev$vim2m(0x0, 0x0, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0)

kernel console output (not intermixed with test programs):

nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[   82.899491][ T6108] Remounting filesystem read-only
[   82.965239][ T5824] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[   82.975790][ T5832] Bluetooth: hci2: command tx timeout
[   83.112239][ T1002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.131822][ T1002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.176657][ T1002] bond0 (unregistering): Released all slaves
[   83.275733][ T6129] Zero length message leads to an empty skb
[   84.252309][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.297723][ T6157] loop3: detected capacity change from 0 to 1024
[   84.305186][ T6157] EXT4-fs: inline encryption not supported
[   84.319711][ T1002] hsr_slave_0: left promiscuous mode
[   84.381343][ T6157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.421603][ T1002] hsr_slave_1: left promiscuous mode
[   84.437936][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.456051][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.484286][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.496596][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.567712][ T1002] veth1_macvtap: left promiscuous mode
[   84.573386][ T1002] veth0_macvtap: left promiscuous mode
[   84.579409][ T6157] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[   84.611648][ T1002] veth1_vlan: left promiscuous mode
[   84.627338][ T1002] veth0_vlan: left promiscuous mode
[   84.644268][ T6157] EXT4-fs (loop3): Remounting filesystem read-only
[   84.865711][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.962203][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.048174][ T5832] Bluetooth: hci2: command tx timeout
[   85.072423][   T30] audit: type=1326 audit(1770669581.327:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.3.34" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc9b39af79 code=0x0
[   85.093993][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.102890][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.113017][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.122638][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.346372][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   85.467481][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.527153][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   85.847610][ T6168] loop4: detected capacity change from 0 to 32768
[   85.907322][ T6168] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.35 (6168)
[   86.046289][ T6168] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   86.101391][ T6168] BTRFS info (device loop4): using blake2b checksum algorithm
[   86.147324][ T1002] team0 (unregistering): Port device team_slave_1 removed
[   86.200396][ T1002] team0 (unregistering): Port device team_slave_0 removed
[   86.323370][ T6206] loop0: detected capacity change from 0 to 128
[   86.384843][ T6206] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   86.410177][ T6206] hpfs: filesystem error: improperly stopped
[   86.439281][ T6206] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   86.440247][ T6168] BTRFS info (device loop4): setting nodatasum
[   86.454567][ T6168] BTRFS info (device loop4): enabling ssd optimizations
[   86.464458][ T6168] BTRFS info (device loop4): turning on async discard
[   86.473639][ T6168] BTRFS info (device loop4): enabling free space tree
[   86.486868][ T6206] hpfs: You really don't want any checks? You are crazy...
[   86.505906][ T6206] hpfs: hpfs_map_sector(): read error
[   86.560163][ T6206] hpfs: code page support is disabled
[   86.595620][ T6206] hpfs: hpfs_map_4sectors(): unaligned read
[   86.618741][ T6206] hpfs: hpfs_map_4sectors(): unaligned read
[   86.624986][ T6206] hpfs: filesystem error: unable to find root dir
[   86.751720][  T796] cfg80211: failed to load regulatory.db
[   86.825743][ T6080] chnl_net:caif_netlink_parms(): no params data found
[   87.126891][ T5832] Bluetooth: hci2: command tx timeout
[   87.192036][ T6225] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.243014][ T6225] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   87.540963][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.570471][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.597144][ T6080] bridge_slave_0: entered allmulticast mode
[   87.609982][ T5830] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   87.624628][ T6080] bridge_slave_0: entered promiscuous mode
[   87.652334][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.667145][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.697546][ T6080] bridge_slave_1: entered allmulticast mode
[   87.731435][ T6080] bridge_slave_1: entered promiscuous mode
[   87.947546][ T6080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.975372][ T6250] loop4: detected capacity change from 0 to 1024
[   88.000115][ T6080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.107858][ T6250] loop4: detected capacity change from 0 to 1024
[   88.138550][ T6250] EXT4-fs: Ignoring removed i_version option
[   88.166803][ T6250] EXT4-fs: inline encryption not supported
[   88.211388][ T6250] EXT4-fs (loop4): Test dummy encryption mode enabled
[   88.212761][ T6080] team0: Port device team_slave_0 added
[   88.257364][ T6080] team0: Port device team_slave_1 added
[   88.314762][ T6238] loop0: detected capacity change from 0 to 32768
[   88.335554][ T6250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.382109][ T6238] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.48 (6238)
[   88.481014][ T6080] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.523273][ T6080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.772147][ T6238] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   88.775204][ T6080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.800518][ T6080] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.807904][ T6080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.816683][ T6238] BTRFS info (device loop0): using sha256 checksum algorithm
[   89.224236][ T5832] Bluetooth: hci2: command tx timeout
[   89.345364][ T6080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.511996][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.600914][ T6238] BTRFS info (device loop0): enabling ssd optimizations
[   89.665949][ T6238] BTRFS info (device loop0): turning on async discard
[   89.677118][ T6238] BTRFS info (device loop0): enabling free space tree
[   89.751144][ T6080] hsr_slave_0: entered promiscuous mode
[   89.783133][ T6080] hsr_slave_1: entered promiscuous mode
[   89.810285][ T6080] debugfs: 'hsr0' already exists in 'hsr'
[   89.846657][ T6080] Cannot create hsr debugfs directory
[   89.863330][ T6285] kvm: emulating exchange as write
[   89.933396][ T5820] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   90.637920][ T6268] loop2: detected capacity change from 0 to 32768
[   90.669741][ T6268] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.51 (6268)
[   90.859148][ T6268] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   90.886662][ T6268] BTRFS info (device loop2): using crc32c checksum algorithm
[   90.924574][ T6268] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   91.045548][ T6316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.60'.
[   91.808727][ T6268] BTRFS info (device loop2): rebuilding free space tree
[   92.047427][ T6268] BTRFS info (device loop2): disabling free space tree
[   92.161377][ T6268] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   92.177090][ T6268] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   92.216728][ T6268] BTRFS info (device loop2): checking UUID tree
[   92.237427][ T6344] loop4: detected capacity change from 0 to 1024
[   92.246216][ T6268] BTRFS warning (device loop2): failed to start uuid_rescan task
[   92.389446][ T6352] x_tables: duplicate underflow at hook 1
[   92.471695][ T6268] BTRFS warning (device loop2): failed to check the UUID tree: -4
[   92.970354][ T6268] BTRFS error (device loop2): open_ctree failed: -4
[   93.715122][ T6080] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   93.740170][ T6080] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   93.839553][ T6080] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   93.943193][ T6080] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   94.327344][ T6080] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.400840][ T6080] 8021q: adding VLAN 0 to HW filter on device team0
[   94.463100][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.470295][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.481436][ T6363] loop3: detected capacity change from 0 to 32768
[   94.516205][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.523459][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.570751][ T6363] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   94.721778][ T6080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.756097][ T6363] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   94.839366][ T6363] XFS (loop3): Starting recovery (logdev: internal)
[   94.921326][ T6363] XFS (loop3): Ending recovery (logdev: internal)
[   94.975966][ T6407] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   94.977284][   T30] audit: type=1800 audit(1770669591.237:4): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.64" name="file1" dev="loop3" ino=4422 res=0 errno=0
[   95.060574][ T6370] loop4: detected capacity change from 0 to 40427
[   95.123607][ T6370] F2FS-fs (loop4): build fault injection rate: 174
[   95.158756][ T6370] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[   95.187633][ T6370] F2FS-fs (loop4): invalid crc value
[   95.589636][ T5824] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   95.594086][ T6370] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   95.616342][ T6080] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.782099][ T6431] loop2: detected capacity change from 0 to 1024
[   95.789648][ T6370] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   96.155561][ T6431] loop2: detected capacity change from 0 to 1024
[   96.226659][ T6431] EXT4-fs: Ignoring removed i_version option
[   96.251806][ T6431] EXT4-fs: inline encryption not supported
[   96.306967][   T30] audit: type=1800 audit(1770669592.557:5): pid=6370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.66" name="file1" dev="loop4" ino=10 res=0 errno=0
[   96.330821][ T6431] EXT4-fs (loop2): Test dummy encryption mode enabled
[   96.395721][ T6431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.434743][ T6436] netlink: 7 bytes leftover after parsing attributes in process `syz.0.77'.
[   96.653197][ T6080] veth0_vlan: entered promiscuous mode
[   96.678467][ T5830] syz-executor: attempt to access beyond end of device
[   96.678467][ T5830] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   96.723999][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   96.724026][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   96.724044][ T5830] Call Trace:
[   96.724052][ T5830]  <TASK>
[   96.724060][ T5830]  dump_stack_lvl+0xe8/0x150
[   96.724091][ T5830]  f2fs_handle_critical_error+0x37c/0x540
[   96.724124][ T5830]  f2fs_write_end_io+0xcdb/0xff0
[   96.724152][ T5830]  ? __submit_merged_bio+0x256/0x700
[   96.724192][ T5830]  __submit_merged_bio+0x256/0x700
[   96.724222][ T5830]  __submit_merged_write_cond+0x3c3/0x4e0
[   96.724256][ T5830]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   96.724303][ T5830]  f2fs_write_data_pages+0x2975/0x35e0
[   96.724366][ T5830]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   96.724405][ T5830]  ? unwind_get_return_address+0x4d/0x90
[   96.724432][ T5830]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   96.724478][ T5830]  ? check_noncircular+0xda/0x150
[   96.724512][ T5830]  ? lockdep_unlock+0x5d/0xd0
[   96.724531][ T5830]  ? __lock_acquire+0x146e/0x2cf0
[   96.724577][ T5830]  ? do_raw_spin_lock+0x12b/0x2f0
[   96.724613][ T5830]  ? do_raw_spin_unlock+0xf5/0x210
[   96.724633][ T5830]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   96.724661][ T5830]  do_writepages+0x32e/0x550
[   96.724697][ T5830]  ? do_raw_spin_unlock+0xf5/0x210
[   96.724721][ T5830]  filemap_fdatawrite+0x1e9/0x2f0
[   96.724750][ T5830]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   96.724824][ T5830]  ? do_raw_spin_unlock+0xf5/0x210
[   96.724848][ T5830]  f2fs_sync_dirty_inodes+0x30e/0x860
[   96.724881][ T5830]  f2fs_write_checkpoint+0x9cf/0x2680
[   96.724932][ T5830]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   96.725004][ T5830]  kill_f2fs_super+0x314/0x720
[   96.725038][ T5830]  ? __pfx_kill_f2fs_super+0x10/0x10
[   96.725078][ T5830]  ? lockdep_hardirqs_on+0x7a/0x110
[   96.725115][ T5830]  deactivate_locked_super+0xbc/0x130
[   96.725145][ T5830]  cleanup_mnt+0x437/0x4d0
[   96.725163][ T5830]  ? _raw_spin_unlock_irq+0x23/0x50
[   96.725188][ T5830]  task_work_run+0x1d9/0x270
[   96.725211][ T5830]  ? __pfx_task_work_run+0x10/0x10
[   96.725242][ T5830]  exit_to_user_mode_loop+0xed/0x480
[   96.725262][ T5830]  ? rcu_is_watching+0x15/0xb0
[   96.725292][ T5830]  do_syscall_64+0x32d/0xf80
[   96.725314][ T5830]  ? trace_irq_disable+0x3b/0x150
[   96.725339][ T5830]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.725358][ T5830]  ? clear_bhb_loop+0x40/0x90
[   96.725382][ T5830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.725400][ T5830] RIP: 0033:0x7f4caa79c1d7
[   96.725425][ T5830] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   96.725440][ T5830] RSP: 002b:00007ffcc50a49a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   96.725461][ T5830] RAX: 0000000000000000 RBX: 00007f4caa830b3b RCX: 00007f4caa79c1d7
[   96.725474][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc50a4a60
[   96.725485][ T5830] RBP: 00007ffcc50a4a60 R08: 00007ffcc50a5a60 R09: 00000000ffffffff
[   96.725498][ T5830] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc50a5af0
[   96.725509][ T5830] R13: 00007f4caa830b3b R14: 0000000000017829 R15: 00007ffcc50a5b30
[   96.725540][ T5830]  </TASK>
[   96.725822][ T5830] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[   96.996320][ T6080] veth1_vlan: entered promiscuous mode
[   97.162497][ T6080] veth0_macvtap: entered promiscuous mode
[   97.273838][ T6080] veth1_macvtap: entered promiscuous mode
[   97.285371][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.304968][ T6080] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.382298][ T6080] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.470521][ T1002] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.492961][ T1002] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.536652][ T1002] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.578931][ T1002] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.832265][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.889830][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.993186][  T520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.017606][  T520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.437839][ T6482] tmpfs: Too small a size for current use
[   98.904949][ T6478] loop1: detected capacity change from 0 to 32768
[   98.996024][   T30] audit: type=1800 audit(1770669595.257:6): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11" name="file1" dev="loop1" ino=4 res=0 errno=0
[   99.085497][ T6060] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   99.241965][ T6499] loop2: detected capacity change from 0 to 32768
[   99.290843][ T6060] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   99.313257][ T6499] JBD2: Ignoring recovery information on journal
[   99.321117][ T6060] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.401416][ T6060] usb 5-1: Product: syz
[   99.405936][ T6060] usb 5-1: Manufacturer: syz
[   99.412691][ T6499] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   99.457061][ T6060] usb 5-1: SerialNumber: syz
[   99.503023][ T6060] usb 5-1: config 0 descriptor??
[   99.686626][ T5896] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   99.741011][ T6060] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   99.876968][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.903900][ T5896] usb 4-1: config 0 interface 0 has no altsetting 0
[   99.918292][ T5896] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9
[   99.936531][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.954044][ T5896] usb 4-1: Product: syz
[   99.958927][ T5896] usb 4-1: Manufacturer: syz
[   99.963546][ T5896] usb 4-1: SerialNumber: syz
[   99.985142][ T5896] usb 4-1: config 0 descriptor??
[  100.004030][ T5896] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  100.051012][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  100.083760][ T5896] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  100.119103][ T5896] usb 4-1: media controller created
[  100.141922][ T5821] ocfs2: Unmounting device (7,2) on (node local)
[  100.184256][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  100.242124][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'.
[  100.358087][ T5896] DVB: Unable to find symbol tda10046_attach()
[  100.364455][ T5896] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  100.377032][ T5896] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  101.175462][ T6060] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  101.225814][ T6060] usb 5-1: USB disconnect, device number 2
[  101.487319][  T796] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  101.669314][  T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.716591][  T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.726390][  T796] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  101.772137][  T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.790087][ T5896] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  101.801654][  T796] usb 3-1: config 0 descriptor??
[  101.844354][ T5896] usb 4-1: USB disconnect, device number 2
[  102.095202][ T6553] loop1: detected capacity change from 0 to 32768
[  102.132121][ T6553] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  102.150146][ T6555] loop0: detected capacity change from 0 to 32768
[  102.183759][ T6555] JBD2: Ignoring recovery information on journal
[  102.221220][ T6553] XFS (loop1): Ending clean mount
[  102.256166][  T796] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  102.265421][ T6553] XFS (loop1): Quotacheck needed: Please wait.
[  102.292629][  T796] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  102.318236][ T6555] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  102.369603][ T6553] XFS (loop1): Quotacheck: Done.
[  102.406799][ T5942] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  102.442608][  T796] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE
[  102.572451][ T6080] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  102.603220][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.627096][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.638210][ T5942] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  102.663510][ T5942] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  102.675269][ T5820] ocfs2: Unmounting device (7,0) on (node local)
[  102.681869][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.750522][ T5942] usb 5-1: config 0 descriptor??
[  103.059485][  T796] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71
[  103.150319][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'.
[  103.593760][  T796] usb 3-1: USB disconnect, device number 2
[  103.620876][ T5942] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  103.737784][ T5942] usb 5-1: USB disconnect, device number 3
[  103.830241][ T6589] fido_id[6589]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  104.148316][ T6602] loop1: detected capacity change from 0 to 128
[  104.753872][ T6618] loop4: detected capacity change from 0 to 512
[  104.778250][ T6618] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  104.819972][ T6618] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.129: iget: bogus i_mode (5)
[  104.885020][ T6618] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  104.886567][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  104.902522][    C0] EXT4-fs (loop4): initial error at time 1770669601: ext4_orphan_get:1391: inode 15
[  104.912017][    C0] EXT4-fs (loop4): last error at time 1770669601: ext4_orphan_get:1391: inode 15
[  105.029529][ T6618] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.129: couldn't read orphan inode 15 (err -117)
[  105.240252][ T6618] loop4: lost filesystem error report for type 5 error -117
[  105.318696][ T6618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.341665][ T6618] ext2 filesystem being mounted at /23/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.435360][  T520] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.833198][  T520] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.004074][  T520] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.189232][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  106.198903][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  106.207149][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  106.217040][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  106.227208][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  106.243237][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.155724][  T520] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.727218][ T6644] overlay: ./file0 is not a directory
[  107.794490][ T6656] capability: warning: `syz.3.140' uses deprecated v2 capabilities in a way that may be insecure
[  107.881968][ T6656] overlayfs: upper fs does not support file handles, falling back to index=off.
[  108.372745][ T5832] Bluetooth: hci2: command tx timeout
[  108.813307][  T520] bridge_slave_1: left allmulticast mode
[  108.838889][  T520] bridge_slave_1: left promiscuous mode
[  108.912868][  T520] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.007627][  T520] bridge_slave_0: left allmulticast mode
[  109.036600][  T520] bridge_slave_0: left promiscuous mode
[  109.042443][  T520] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.458265][ T6693] syz.2.142 uses obsolete (PF_INET,SOCK_PACKET)
[  109.652021][  T520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  109.693041][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  109.948529][  T520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  109.990592][  T520] bond0 (unregistering): Released all slaves
[  110.046625][    T9] usb 1-1: Using ep0 maxpacket: 32
[  110.139136][ T6693] syzkaller1: entered promiscuous mode
[  110.144652][ T6693] syzkaller1: entered allmulticast mode
[  110.183675][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.257061][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.267441][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  110.270780][ T6634] chnl_net:caif_netlink_parms(): no params data found
[  110.284034][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.295189][    T9] usb 1-1: config 0 descriptor??
[  110.310314][    T9] hub 1-1:0.0: USB hub found
[  110.419591][ T5832] Bluetooth: hci2: command tx timeout
[  110.538766][ T5896] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  110.546824][    T9] hub 1-1:0.0: 1 port detected
[  110.709063][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.716940][ T6634] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.724309][ T6634] bridge_slave_0: entered allmulticast mode
[  110.732391][ T5896] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.746361][ T5896] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  110.757998][ T6634] bridge_slave_0: entered promiscuous mode
[  110.767525][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.774830][ T6634] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.784520][ T5896] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  110.794015][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  110.802391][ T6634] bridge_slave_1: entered allmulticast mode
[  110.808823][ T5896] usb 5-1: SerialNumber: syz
[  110.817611][ T6634] bridge_slave_1: entered promiscuous mode
[  110.886798][ T6060] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  110.973921][  T520] hsr_slave_0: left promiscuous mode
[  110.992106][  T520] hsr_slave_1: left promiscuous mode
[  111.007559][  T520] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.027027][  T520] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.041160][ T5896] usb 5-1: 0:2 : does not exist
[  111.054548][  T520] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.075846][ T6060] usb 3-1: config 0 has an invalid interface number: 142 but max is 0
[  111.092358][ T6060] usb 3-1: config 0 has no interface number 0
[  111.102064][  T520] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.116534][ T6060] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=62.09
[  111.137782][ T6060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.154946][  T520] veth1_macvtap: left promiscuous mode
[  111.164836][  T520] veth0_macvtap: left promiscuous mode
[  111.172457][ T6060] usb 3-1: config 0 descriptor??
[  111.180012][  T520] veth1_vlan: left promiscuous mode
[  111.191923][ T5896] usb 5-1: USB disconnect, device number 4
[  111.194300][  T520] veth0_vlan: left promiscuous mode
[  111.321994][ T5873] udevd[5873]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  111.431910][ T6060] usb 3-1: string descriptor 0 read error: -71
[  111.489499][ T6060] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.142/input/input5
[  111.521258][ T5176] bcm5974 3-1:0.142: could not read from device
[  111.539970][ T5176] bcm5974 3-1:0.142: could not read from device
[  111.563874][ T5176] bcm5974 3-1:0.142: could not read from device
[  111.572044][ T6060] usb 3-1: USB disconnect, device number 3
[  111.632715][ T5924] hub 1-1:0.0: activate --> -90
[  111.644271][ T6213] udevd[6213]: Error opening device "/dev/input/event4": No such file or directory
[  111.685975][ T6213] udevd[6213]: Unable to EVIOCGABS device "/dev/input/event4"
[  111.699198][ T6213] udevd[6213]: Unable to EVIOCGABS device "/dev/input/event4"
[  111.707232][ T6213] udevd[6213]: Unable to EVIOCGABS device "/dev/input/event4"
[  111.714891][ T6213] udevd[6213]: Unable to EVIOCGABS device "/dev/input/event4"
[  111.921992][ T5924] usb 1-1-port1: cannot disable (err = -71)
[  111.928372][ T6060] usb 1-1: USB disconnect, device number 2
[  112.157356][ T6750] loop2: detected capacity change from 0 to 256
[  112.159974][  T520] team0 (unregistering): Port device team_slave_1 removed
[  112.233491][ T6750] exfat: Deprecated parameter 'namecase'
[  112.240302][  T520] team0 (unregistering): Port device team_slave_0 removed
[  112.257710][ T6750] exfat: Deprecated parameter 'namecase'
[  112.332275][ T6750] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  112.486591][ T5832] Bluetooth: hci2: command tx timeout
[  112.717027][ T6634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.795107][ T6634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.884128][ T6634] team0: Port device team_slave_0 added
[  112.917861][ T6634] team0: Port device team_slave_1 added
[  112.984260][ T6764] loop2: detected capacity change from 0 to 512
[  112.991388][ T6765] TCP: TCP_TX_DELAY enabled
[  113.025572][ T6764] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  113.059003][ T6634] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.059440][ T6764] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.160: iget: bogus i_mode (5)
[  113.069811][ T6634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  113.105845][ T6634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.129815][ T6764] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  113.130716][ T6764] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.160: couldn't read orphan inode 15 (err -117)
[  113.139961][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  113.139984][    C1] EXT4-fs (loop2): initial error at time 1770669609: ext4_orphan_get:1391: inode 15
[  113.140015][    C1] EXT4-fs (loop2): last error at time 1770669609: ext4_orphan_get:1391: inode 15
[  113.159874][ T6634] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.184708][ T6634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  113.211718][ T6764] loop2: lost filesystem error report for type 5 error -117
[  113.213971][ T6764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.240187][ T6634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.257348][ T6764] ext2 filesystem being mounted at /28/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.380611][ T6634] hsr_slave_0: entered promiscuous mode
[  113.401127][ T6634] hsr_slave_1: entered promiscuous mode
[  113.514310][ T6634] debugfs: 'hsr0' already exists in 'hsr'
[  113.540630][ T6634] Cannot create hsr debugfs directory
[  114.432922][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.571602][ T5832] Bluetooth: hci2: command tx timeout
[  114.769605][ T6807] loop4: detected capacity change from 0 to 512
[  114.793649][ T6807] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  114.840367][ T6807] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.168: iget: bogus i_mode (5)
[  114.929007][ T6807] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  114.929887][ T6807] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.168: couldn't read orphan inode 15 (err -117)
[  114.939118][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  114.939141][    C0] EXT4-fs (loop4): initial error at time 1770669611: ext4_orphan_get:1391: inode 15
[  114.939173][    C0] EXT4-fs (loop4): last error at time 1770669611: ext4_orphan_get:1391: inode 15
[  114.973846][ T5896] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  114.977095][ T6807] loop4: lost filesystem error report for type 5 error -117
[  114.998603][ T6807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.052037][ T6807] ext2 filesystem being mounted at /32/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.058705][ T6634] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  115.083597][ T6634] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  115.112459][ T6634] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  115.146241][ T6634] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  115.256705][ T5896] usb 1-1: Using ep0 maxpacket: 8
[  115.267101][ T5896] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  115.276057][ T5896] usb 1-1: config 0 has no interface number 0
[  115.289563][ T5896] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  115.350460][ T5896] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  115.558723][ T5896] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  115.713029][ T5896] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  115.783973][ T5896] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  115.856408][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.999065][ T5896] usb 1-1: config 0 descriptor??
[  116.048477][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.059401][ T5896] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  116.532498][ T6829] loop3: detected capacity change from 0 to 32768
[  116.642077][ T6829] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  116.650721][ T6829] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  117.032250][ T6829] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  117.052707][ T6634] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.133906][  T796] usb 1-1: USB disconnect, device number 3
[  117.141159][ T5896] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  117.150607][ T5896] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  117.208975][  T796] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  117.245517][ T6634] 8021q: adding VLAN 0 to HW filter on device team0
[  117.310444][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.317679][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.351724][ T5896] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 201ms
[  117.371403][ T5896] gfs2: fsid=syz:syz.0: jid=0: Done
[  117.375124][  T520] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.383845][  T520] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.387866][ T6829] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  117.517089][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  117.703141][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.725378][    T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  117.734198][ T6829] gfs2: fsid=syz:syz.0: found 1 quota changes
[  117.761917][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.786401][   T30] audit: type=1800 audit(1770669614.047:7): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.171" name="bus" dev="loop3" ino=9378 res=0 errno=0
[  117.808882][    T9] usb 5-1: config 0 descriptor??
[  118.023057][ T6634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.108114][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  118.114831][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  118.161019][    T9] usb 5-1: USB disconnect, device number 5
[  118.386427][ T6871] loop3: detected capacity change from 0 to 512
[  118.414869][ T6871] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  118.434104][ T6871] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.175: iget: bogus i_mode (5)
[  118.483847][ T6871] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  118.484599][ T6871] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.175: couldn't read orphan inode 15 (err -117)
[  118.494071][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  118.494094][    C1] EXT4-fs (loop3): initial error at time 1770669614: ext4_orphan_get:1391: inode 15
[  118.494149][    C1] EXT4-fs (loop3): last error at time 1770669614: ext4_orphan_get:1391: inode 15
[  118.536691][ T6871] loop3: lost filesystem error report for type 5 error -117
[  118.547986][ T6871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.574530][ T6871] ext2 filesystem being mounted at /43/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.627204][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  118.684051][ T5924] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  118.717513][ T6881] loop0: detected capacity change from 0 to 2048
[  118.734964][ T5924] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  118.767177][ T6881] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  118.796908][    T9] usb 5-1: Using ep0 maxpacket: 32
[  118.805210][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.855969][ T6634] veth0_vlan: entered promiscuous mode
[  118.868182][    T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  119.404183][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.416710][ T6634] veth1_vlan: entered promiscuous mode
[  119.430847][    T9] usb 5-1: config 0 descriptor??
[  119.472885][    T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  119.529126][    T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  119.689360][ T6634] veth0_macvtap: entered promiscuous mode
[  119.783011][ T6634] veth1_macvtap: entered promiscuous mode
[  119.819685][ T6634] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.843555][ T6634] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.865310][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.903205][   T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.932199][   T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.958521][ T6843] ldusb 5-1:0.0: Read buffer overflow, 316 bytes dropped
[  119.978865][   T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.018447][   T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.043643][ T5882] usb 5-1: USB disconnect, device number 6
[  120.422751][ T5882] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  120.775142][  T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.800145][  T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.876432][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.905013][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.557360][ T5924] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  121.731719][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.752629][ T5924] usb 5-1: config 0 has no interfaces?
[  121.759621][ T5924] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  121.786737][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.815669][ T5924] usb 5-1: config 0 descriptor??
[  121.994496][ T6938] loop0: detected capacity change from 0 to 128
[  122.172795][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.286207][ T6060] usb 5-1: USB disconnect, device number 7
[  122.444421][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.623610][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.831412][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  122.841526][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  122.850580][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  122.873388][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  122.888753][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  122.948722][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.135515][ T6960] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  123.296797][ T6060] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  123.558815][ T6060] usb 6-1: config 0 has no interfaces?
[  123.564350][ T6060] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  123.581708][   T13] bridge_slave_1: left allmulticast mode
[  123.594801][   T13] bridge_slave_1: left promiscuous mode
[  123.614686][ T6060] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.625366][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.638060][ T6060] usb 6-1: config 0 descriptor??
[  123.696047][   T13] bridge_slave_0: left allmulticast mode
[  123.701890][   T13] bridge_slave_0: left promiscuous mode
[  123.707849][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.060595][ T5896] usb 6-1: USB disconnect, device number 2
[  124.164174][ T6982] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  124.493814][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  124.551459][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  124.631773][   T13] bond0 (unregistering): Released all slaves
[  124.968680][ T5832] Bluetooth: hci0: command tx timeout
[  125.206440][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'.
[  125.257400][    T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  125.265373][ T6953] chnl_net:caif_netlink_parms(): no params data found
[  125.439287][   T13] hsr_slave_0: left promiscuous mode
[  125.457006][    T9] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  125.477540][   T13] hsr_slave_1: left promiscuous mode
[  125.487455][    T9] usb 6-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  125.490923][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.516939][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  125.543966][    T9] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  125.560279][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.631354][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.642684][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.651839][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.674520][    T9] usb 6-1: config 0 descriptor??
[  125.694889][ T7015] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  125.734417][   T13] veth1_macvtap: left promiscuous mode
[  125.755304][   T13] veth0_macvtap: left promiscuous mode
[  125.774009][   T13] veth1_vlan: left promiscuous mode
[  125.779457][   T13] veth0_vlan: left promiscuous mode
[  125.916616][ T5924] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  126.086881][ T5924] usb 1-1: Using ep0 maxpacket: 8
[  126.108761][ T5924] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  126.140281][    T9] uclogic 0003:28BD:0094.0004: interface is invalid, ignoring
[  126.147986][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.156309][ T5924] usb 1-1: Product: syz
[  126.177087][ T5924] usb 1-1: Manufacturer: syz
[  126.181804][ T5924] usb 1-1: SerialNumber: syz
[  126.233391][ T5924] usb 1-1: config 0 descriptor??
[  126.251400][ T5924] gspca_main: se401-2.14.0 probing 047d:5003
[  126.314286][   T13] team0 (unregistering): Port device team_slave_1 removed
[  126.333914][   T13] team0 (unregistering): Port device team_slave_0 removed
[  126.354332][ T6060] usb 6-1: USB disconnect, device number 3
[  126.648480][ T6953] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.656007][ T6953] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.663714][ T6953] bridge_slave_0: entered allmulticast mode
[  126.667487][ T5924] gspca_se401: Frame size: 0x2 1/4th janggu
[  126.672758][ T6953] bridge_slave_0: entered promiscuous mode
[  126.693710][ T6953] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.697067][ T5924] gspca_se401: Frame size: 0x127 bayer
[  126.709838][ T6953] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.712323][ T5924] gspca_se401: Frame size: 256x0 bayer
[  126.730511][ T5924] gspca_se401: Frame size: 0x1 1/16th janggu
[  126.737342][ T6953] bridge_slave_1: entered allmulticast mode
[  126.755899][ T6953] bridge_slave_1: entered promiscuous mode
[  126.760109][ T5924] gspca_se401: Frame size: 0x4 bayer
[  126.851437][ T7058] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  126.865173][ T6953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.881500][ T5924] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6
[  126.906158][ T6953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.952064][ T5924] usb 1-1: USB disconnect, device number 4
[  127.047392][ T5832] Bluetooth: hci0: command tx timeout
[  127.163581][ T6953] team0: Port device team_slave_0 added
[  127.193942][ T6953] team0: Port device team_slave_1 added
[  127.378634][ T6953] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.406675][ T6953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  127.544762][ T6953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.679781][ T7078] x_tables: duplicate underflow at hook 1
[  128.054304][ T6953] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.061743][ T6953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  128.092239][ T6953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.463703][ T6953] hsr_slave_0: entered promiscuous mode
[  128.492421][ T6953] hsr_slave_1: entered promiscuous mode
[  128.508024][ T6953] debugfs: 'hsr0' already exists in 'hsr'
[  128.524362][ T6953] Cannot create hsr debugfs directory
[  128.568311][ T7070] loop3: detected capacity change from 0 to 32768
[  128.608707][ T7070] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  128.907160][ T7114] x_tables: duplicate underflow at hook 1
[  129.101352][ T7070] XFS (loop3): Ending clean mount
[  129.136891][ T5832] Bluetooth: hci0: command tx timeout
[  129.635379][ T5824] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  130.180360][ T7144] vlan2: entered promiscuous mode
[  130.203240][ T7144] bridge0: entered promiscuous mode
[  130.391108][ T7145] team0: Port device macvlan2 added
[  130.509157][ T5882] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  130.641822][ T7156] fuse: Bad value for 'fd'
[  130.844694][ T6953] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  131.052486][ T6953] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  131.096550][ T5882] usb 4-1: Using ep0 maxpacket: 16
[  131.103564][ T5882] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  131.114247][ T5882] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  131.128060][ T6953] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  131.199530][ T6953] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  131.223476][ T5832] Bluetooth: hci0: command tx timeout
[  131.251713][ T5882] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  131.268704][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.317860][ T5882] usb 4-1: Product: syz
[  131.331934][ T5882] usb 4-1: Manufacturer: syz
[  131.346872][ T5882] usb 4-1: SerialNumber: syz
[  131.568217][ T5882] usb 4-1: 0:2 : does not exist
[  131.581764][ T5882] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  131.717240][ T5882] usb 4-1: USB disconnect, device number 3
[  131.783136][ T5873] udevd[5873]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  131.936329][ T7181] x_tables: duplicate underflow at hook 1
[  132.507975][ T6953] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.604073][ T6953] 8021q: adding VLAN 0 to HW filter on device team0
[  132.680355][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.687626][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.789582][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.797177][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.832500][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  132.842529][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  133.219509][ T7203] tipc: Started in network mode
[  133.236564][ T7203] tipc: Node identity 0e3398c22ecd, cluster identity 4711
[  133.262751][ T7203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.483083][ T7207] 0x00000000000f-0x000000000014 : ""
[  133.501763][ T7202] tipc: Disabling bearer <eth:syzkaller0>
[  133.630468][ T7220] fuse: Bad value for 'fd'
[  133.667822][ T7207] ftl_cs: FTL header corrupt!
[  134.019216][ T7222] loop4: detected capacity change from 0 to 1024
[  134.188294][ T6953] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.559013][ T7242] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  134.639280][ T7250] netlink: 'syz.3.255': attribute type 1 has an invalid length.
[  134.784459][   T49] hfsplus: b-tree write err: -5, ino 3
[  134.793039][ T7250] 8021q: adding VLAN 0 to HW filter on device bond1
[  134.845277][ T7255] bond1: entered allmulticast mode
[  135.042530][ T7264] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  135.073439][ T7264] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  135.104172][ T7264] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  135.154856][ T7264] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  135.206933][ T7264] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  135.242285][ T6953] veth0_vlan: entered promiscuous mode
[  135.259849][ T6953] veth1_vlan: entered promiscuous mode
[  135.345563][ T6953] veth0_macvtap: entered promiscuous mode
[  135.390113][ T6953] veth1_macvtap: entered promiscuous mode
[  135.494793][ T6953] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.911337][ T6953] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.977754][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.011582][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.074307][   T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.095621][   T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.359190][ T7293] loop4: detected capacity change from 0 to 4096
[  136.366168][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.389625][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.410413][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'.
[  136.543849][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.562540][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.801852][ T7313] loop6: detected capacity change from 0 to 512
[  136.899063][ T7313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.912005][ T7313] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.205164][ T7320] loop0: detected capacity change from 0 to 32768
[  137.229285][ T7320] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.268 (7320)
[  137.231929][ T6953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.266289][ T7320] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  137.276588][ T7320] BTRFS info (device loop0): using sha256 checksum algorithm
[  137.440612][ T7320] BTRFS info (device loop0): enabling ssd optimizations
[  137.448552][ T7320] BTRFS info (device loop0): turning on async discard
[  137.455346][ T7320] BTRFS info (device loop0): enabling free space tree
[  137.825822][ T7320] BTRFS info (device loop0): balance: start -d -m
[  137.847990][ T7320] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata
[  137.932947][ T7320] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata
[  138.021363][ T7320] BTRFS info (device loop0): found 10 extents, stage: move data extents
[  138.061100][ T7320] BTRFS info (device loop0): found 1 extents, stage: update data pointers
[  138.098682][ T7320] BTRFS info (device loop0): balance: ended with status: 0
[  138.934962][ T5820] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  139.611517][ T7380] x_tables: duplicate underflow at hook 1
[  140.150319][ T7383] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  140.303814][ T7388] loop0: detected capacity change from 0 to 512
[  140.367631][ T7388] EXT4-fs: Ignoring removed i_version option
[  140.417309][ T7388] EXT4-fs: Ignoring removed bh option
[  140.549881][ T7388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.662867][ T7388] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  140.681530][ T7403] loop5: detected capacity change from 0 to 256
[  140.756897][ T7405] bond2: entered promiscuous mode
[  140.840492][ T7403] FAT-fs (loop5): Directory bread(block 64) failed
[  140.848957][ T7403] FAT-fs (loop5): Directory bread(block 65) failed
[  140.855946][ T7403] FAT-fs (loop5): Directory bread(block 66) failed
[  140.863317][ T7403] FAT-fs (loop5): Directory bread(block 67) failed
[  140.871434][ T7403] FAT-fs (loop5): Directory bread(block 68) failed
[  140.880422][ T7403] FAT-fs (loop5): Directory bread(block 69) failed
[  140.888251][ T7403] FAT-fs (loop5): Directory bread(block 70) failed
[  140.894948][ T7403] FAT-fs (loop5): Directory bread(block 71) failed
[  140.903864][ T7403] FAT-fs (loop5): Directory bread(block 72) failed
[  140.910943][ T7403] FAT-fs (loop5): Directory bread(block 73) failed
[  141.061652][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.631857][ T7428] fuse: Bad value for 'fd'
[  143.336791][   T30] audit: type=1326 audit(1770669639.587:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4275d9af79 code=0x7ffc0000
[  143.367000][ T7457] loop0: detected capacity change from 0 to 1024
[  143.442962][   T30] audit: type=1326 audit(1770669639.587:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4275d9af79 code=0x7ffc0000
[  143.546973][   T30] audit: type=1326 audit(1770669639.587:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4275d9af79 code=0x7ffc0000
[  143.727532][   T30] audit: type=1326 audit(1770669639.587:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4275d9af79 code=0x7ffc0000
[  143.877548][   T30] audit: type=1326 audit(1770669639.587:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4275d9af79 code=0x7ffc0000
[  143.984984][   T30] audit: type=1326 audit(1770669639.587:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4275d9af79 code=0x7ffc0000
[  144.061452][   T30] audit: type=1326 audit(1770669639.587:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4275d9af79 code=0x7ffc0000
[  144.140719][   T30] audit: type=1326 audit(1770669639.587:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4275d9af79 code=0x7ffc0000
[  144.140762][   T30] audit: type=1326 audit(1770669639.587:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4275d9af79 code=0x7ffc0000
[  144.140795][   T30] audit: type=1326 audit(1770669639.587:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4275d9af79 code=0x7ffc0000
[  144.456676][ T7473] fuse: Bad value for 'fd'
[  146.253414][ T5832] Bluetooth: hci0: connection err: -111
[  146.351722][ T7498] loop6: detected capacity change from 0 to 512
[  146.438720][ T7498] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  146.527263][ T7498] EXT4-fs (loop6): warning: maximal mount count reached, running e2fsck is recommended
[  146.615940][ T7498] EXT4-fs error (device loop6): ext4_orphan_get:1391: comm syz.6.311: inode #15: comm syz.6.311: iget: illegal inode #
[  146.765654][ T7498] loop6: lost filesystem error report for type 5 error -117
[  146.766678][    C1] EXT4-fs (loop6): initial error at time 1770669643: ext4_orphan_get:1391
[  146.775445][    C1] EXT4-fs (loop6): last error at time 1770669643: ext4_orphan_get:1391
[  146.839134][ T7498] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.311: couldn't read orphan inode 15 (err -117)
[  147.027103][ T7498] loop6: lost filesystem error report for type 5 error -117
[  147.035937][ T7498] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.419201][ T7514] loop0: detected capacity change from 0 to 32768
[  147.589527][ T6953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.088264][ T7529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.324'.
[  148.113453][ T7523] netlink: 156 bytes leftover after parsing attributes in process `syz.5.322'.
[  148.156786][ T7525] bond3: entered allmulticast mode
[  148.251245][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.322'.
[  148.450633][ T7529] bond3: entered promiscuous mode
[  148.457411][ T7529] 8021q: adding VLAN 0 to HW filter on device bond3
[  148.469881][ T7531] syzkaller1: entered promiscuous mode
[  148.475393][ T7531] syzkaller1: entered allmulticast mode
[  148.849643][ T7546] loop5: detected capacity change from 0 to 1024
[  148.944909][ T7550] netlink: 'syz.3.329': attribute type 1 has an invalid length.
[  148.989044][ T7546] loop5: detected capacity change from 0 to 1024
[  149.020061][ T7546] EXT4-fs: Ignoring removed i_version option
[  149.042847][ T7546] EXT4-fs: inline encryption not supported
[  149.087367][ T7546] EXT4-fs (loop5): Test dummy encryption mode enabled
[  149.140128][ T7546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.976727][ T6634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.378318][ T7564] loop5: detected capacity change from 0 to 7
[  150.396627][ T5873] Dev loop5: unable to read RDB block 7
[  150.416885][ T5873]  loop5: unable to read partition table
[  150.422944][ T5873] loop5: partition table beyond EOD, truncated
[  150.437223][ T7564] Dev loop5: unable to read RDB block 7
[  150.446836][ T7564]  loop5: unable to read partition table
[  150.488456][ T7564] loop5: partition table beyond EOD, truncated
[  150.504981][ T7564] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  150.761860][ T7570] kvm: pic: non byte write
[  151.067010][ T7576] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7
[  151.697013][ T7590] x_tables: duplicate underflow at hook 1
[  152.030658][ T7594] loop0: detected capacity change from 0 to 512
[  152.052903][ T7594] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  152.195339][ T7594] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.338: iget: bogus i_mode (5)
[  152.217949][ T7594] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  152.218426][ T7594] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.338: couldn't read orphan inode 15 (err -117)
[  152.227738][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  152.227770][    C0] EXT4-fs (loop0): initial error at time 1770669648: ext4_orphan_get:1391: inode 15
[  152.227827][    C0] EXT4-fs (loop0): last error at time 1770669648: ext4_orphan_get:1391: inode 15
[  152.266063][ T7594] loop0: lost filesystem error report for type 5 error -117
[  152.438416][ T7594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.736845][ T7594] ext2 filesystem being mounted at /92/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.792187][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.340'.
[  154.120883][ T7550] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  154.221944][ T7615] netlink: 'syz.6.341': attribute type 1 has an invalid length.
[  154.309406][ T7615] bond1 (unregistering): Released all slaves
[  154.366372][ T7620] netlink: 28 bytes leftover after parsing attributes in process `syz.6.341'.
[  154.559444][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.604294][ T7619] loop4: detected capacity change from 0 to 32768
[  154.622483][ T7619] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.342 (7619)
[  154.666576][ T7619] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  154.678729][ T7619] BTRFS info (device loop4): using sha256 checksum algorithm
[  154.697604][ T7624] loop5: detected capacity change from 0 to 64
[  154.840119][ T7619] BTRFS info (device loop4): enabling ssd optimizations
[  154.847417][ T7619] BTRFS info (device loop4): turning on async discard
[  154.854269][ T7619] BTRFS info (device loop4): enabling free space tree
[  154.994639][ T7647] loop0: detected capacity change from 0 to 512
[  155.222978][ T7647] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  155.256943][ T7619] BTRFS info (device loop4): balance: start -d -m
[  155.264231][ T7619] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata
[  155.336354][ T7647] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.344: iget: bogus i_mode (5)
[  155.426661][ T7647] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  155.434798][ T7647] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.344: couldn't read orphan inode 15 (err -117)
[  155.444045][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  155.444067][    C1] EXT4-fs (loop0): initial error at time 1770669651: ext4_orphan_get:1391: inode 15
[  155.444095][    C1] EXT4-fs (loop0): last error at time 1770669651: ext4_orphan_get:1391: inode 15
[  155.446245][ T7619] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata
[  155.581643][ T7647] loop0: lost filesystem error report for type 5 error -117
[  155.643227][ T7619] BTRFS info (device loop4): found 11 extents, stage: move data extents
[  155.713628][ T7619] BTRFS info (device loop4): found 1 extents, stage: update data pointers
[  155.718264][ T7647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.785826][ T7619] BTRFS info (device loop4): balance: ended with status: 0
[  155.874118][ T7647] ext2 filesystem being mounted at /93/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.758542][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.265762][ T5830] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  157.753315][ T7685] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  159.198946][ T7713] netlink: 'syz.0.356': attribute type 4 has an invalid length.
[  159.288066][ T7715] netlink: 'syz.0.356': attribute type 4 has an invalid length.
[  159.322591][ T7681] loop5: detected capacity change from 0 to 32768
[  159.400522][ T7681] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  159.803293][ T7681] XFS (loop5): Ending clean mount
[  160.096694][ T6060] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  160.287093][ T6060] usb 1-1: Using ep0 maxpacket: 16
[  160.674581][ T6634] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  160.698964][ T6060] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  160.796763][ T6060] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  160.837065][ T6060] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  160.856827][ T6060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.864884][ T6060] usb 1-1: Product: syz
[  160.876516][ T6060] usb 1-1: Manufacturer: syz
[  160.886822][ T6060] usb 1-1: SerialNumber: syz
[  160.997533][ T6060] usb 1-1: config 0 descriptor??
[  161.031727][ T6060] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  161.061938][ T6060] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  161.497104][ T7770] loop3: detected capacity change from 0 to 512
[  161.662300][ T7770] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  161.673461][ T6060] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  161.746195][ T7780] x_tables: duplicate underflow at hook 1
[  162.236632][ T6060] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  162.290417][ T7770] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.368: iget: bogus i_mode (5)
[  162.335516][ T7770] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  162.336786][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  162.352500][    C1] EXT4-fs (loop3): initial error at time 1770669658: ext4_orphan_get:1391: inode 15
[  162.361952][    C1] EXT4-fs (loop3): last error at time 1770669658: ext4_orphan_get:1391: inode 15
[  162.387406][ T5896] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  162.454835][ T7770] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.368: couldn't read orphan inode 15 (err -117)
[  162.475201][ T7770] loop3: lost filesystem error report for type 5 error -117
[  162.478308][ T7770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.506012][ T7770] ext2 filesystem being mounted at /75/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.726310][ T6060] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[  162.744241][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.372'.
[  162.786612][ T5896] usb 6-1: Using ep0 maxpacket: 8
[  162.799098][ T5896] usb 6-1: config 0 has no interfaces?
[  162.804794][ T5896] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  162.935199][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.303746][ T6060] em28xx 1-1:0.0: couldn't setup AC97 register 2
[  163.316925][ T6060] em28xx 1-1:0.0: couldn't setup AC97 register 4
[  163.324016][ T5896] usb 6-1: config 0 descriptor??
[  163.345249][ T6060] em28xx 1-1:0.0: couldn't setup AC97 register 6
[  163.459644][ T6060] em28xx 1-1:0.0: couldn't setup AC97 register 54
[  163.471908][ T6060] em28xx 1-1:0.0: couldn't setup AC97 register 56
[  163.475310][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.490102][ T6060] usb 1-1: USB disconnect, device number 5
[  163.633736][    T9] usb 6-1: USB disconnect, device number 4
[  163.724603][ T7819] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  163.883515][ T7825] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  164.768017][ T7842] fuse: Bad value for 'fd'
[  165.296326][ T5896] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  165.445742][ T7847] overlayfs: failed to clone upperpath
[  165.476605][ T5896] usb 6-1: Using ep0 maxpacket: 8
[  165.483103][ T5896] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  165.503841][ T5896] usb 6-1: config 0 has no interface number 0
[  165.516713][ T5896] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  165.560302][ T5896] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  165.593102][ T5896] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  165.625096][ T5896] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  165.656730][ T5896] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  165.683059][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.721118][ T5896] usb 6-1: config 0 descriptor??
[  165.754163][ T5896] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  166.012022][ T5896] usb 6-1: USB disconnect, device number 5
[  166.018010][    C1] ldusb 6-1:0.55: usb_submit_urb failed (-19)
[  166.207331][ T7855] x_tables: duplicate underflow at hook 1
[  166.614161][ T5896] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  166.621854][ T7837] ldusb: No device or device unplugged -19
[  166.776188][ T7832] loop6: detected capacity change from 0 to 32768
[  166.862694][ T7832] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.378 (7832)
[  166.981451][ T7832] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  167.032595][ T7832] BTRFS info (device loop6): using crc32c checksum algorithm
[  167.070083][ T7832] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  167.151279][ T7832] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  167.155035][ T7832] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  167.217275][ T7832] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  167.257014][ T7832] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  167.409949][ T7832] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  167.547854][ T7832] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  167.757114][ T7832] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  167.795718][ T7832] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  167.826942][ T7832] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  167.876218][ T7832] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  167.941832][ T7832] BTRFS error (device loop6): open_ctree failed: -12
[  168.407676][ T7894] fuse: Bad value for 'fd'
[  169.076659][ T5896] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  169.336662][ T5896] usb 6-1: Using ep0 maxpacket: 16
[  169.382884][ T5896] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  169.454741][ T5896] usb 6-1: config 0 has no interface number 0
[  169.573598][ T5896] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  169.664694][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.752289][ T5896] usb 6-1: Product: syz
[  169.803961][ T5896] usb 6-1: Manufacturer: syz
[  169.872259][ T5896] usb 6-1: SerialNumber: syz
[  170.197663][ T5896] usb 6-1: config 0 descriptor??
[  170.272284][ T5896] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  170.339198][   T30] kauditd_printk_skb: 42 callbacks suppressed
[  170.339217][   T30] audit: type=1800 audit(1770669666.607:60): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.398" name="bus" dev="tmpfs" ino=599 res=0 errno=0
[  170.667987][ T6060] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  170.877158][ T6060] usb 7-1: Using ep0 maxpacket: 16
[  170.891883][ T6060] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  170.925354][ T6060] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  170.961654][ T6060] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  170.984691][ T6060] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.026618][ T6060] usb 7-1: Product: syz
[  171.030917][ T6060] usb 7-1: Manufacturer: syz
[  171.035533][ T6060] usb 7-1: SerialNumber: syz
[  171.062828][ T6060] usb 7-1: config 0 descriptor??
[  171.083656][ T7925] netlink: 52 bytes leftover after parsing attributes in process `syz.4.404'.
[  171.106623][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.109319][ T6060] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  171.116168][ T7925] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.141479][ T7926] netlink: 76 bytes leftover after parsing attributes in process `syz.4.404'.
[  171.159949][ T5889] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  171.173846][ T7926] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.175480][ T6060] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  171.181510][ T7926] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.195970][ T7926] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.203226][ T7926] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.248803][ T7926] netlink: 52 bytes leftover after parsing attributes in process `syz.4.404'.
[  171.261693][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.269227][ T7926] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.322147][ T5889] usb 1-1: Using ep0 maxpacket: 32
[  171.340099][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  171.351766][ T5889] usb 1-1: config 0 has no interfaces?
[  171.369382][ T5889] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  171.383470][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  171.402078][ T5889] usb 1-1: Product: syz
[  171.417186][ T5889] usb 1-1: Manufacturer: syz
[  171.421851][ T5889] usb 1-1: SerialNumber: syz
[  171.448117][ T5889] usb 1-1: config 0 descriptor??
[  171.724801][ T6060] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  171.732762][ T6060] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  171.754544][ T5896] gspca_spca1528: reg_w err -71
[  171.761162][ T5896] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71
[  171.783698][ T5896] usb 6-1: USB disconnect, device number 6
[  171.794105][   T24] usb 1-1: USB disconnect, device number 6
[  172.346434][ T6060] em28xx 7-1:0.0: Unknown AC97 audio processor detected!
[  172.570998][ T6060] em28xx 7-1:0.0: couldn't setup AC97 register 2
[  172.671061][ T6060] em28xx 7-1:0.0: couldn't setup AC97 register 4
[  172.980188][ T6060] em28xx 7-1:0.0: couldn't setup AC97 register 6
[  173.372254][ T6060] em28xx 7-1:0.0: couldn't setup AC97 register 54
[  173.519061][ T6060] em28xx 7-1:0.0: couldn't setup AC97 register 56
[  173.607677][ T6060] usb 7-1: USB disconnect, device number 2
[  173.834300][ T7975] netlink: 'syz.3.418': attribute type 1 has an invalid length.
[  173.942102][ T7975] bond4: entered promiscuous mode
[  173.974706][ T7975] bond4: entered allmulticast mode
[  173.981798][ T7975] 8021q: adding VLAN 0 to HW filter on device bond4
[  174.099255][ T7975] 8021q: adding VLAN 0 to HW filter on device bond5
[  174.210400][ T7975] bond5: entered promiscuous mode
[  174.278027][ T7975] bond5: entered allmulticast mode
[  174.359069][ T7975] bond4: (slave bond5): Enslaving as a backup interface with a down link
[  174.524678][ T7996] fuse: Bad value for 'fd'
[  175.087187][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'.
[  175.755905][ T6060] IPVS: starting estimator thread 0...
[  175.869716][ T8030] IPVS: using max 28 ests per chain, 67200 per kthread
[  175.895924][ T5832] Bluetooth: hci4: unexpected subevent 0x0e length: 30 > 15
[  175.903810][ T5832] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  175.923153][ T8034] 9pnet_fd: p9_fd_create_tcp (8034): problem connecting socket to 127.0.0.1
[  176.034387][ T8038] loop3: detected capacity change from 0 to 512
[  176.045652][ T8038] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  176.059957][ T8038] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  176.079268][ T8038] EXT4-fs (loop3): 1 truncate cleaned up
[  176.086923][ T8038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.121419][ T8038] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.438: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  176.172794][ T8038] EXT4-fs (loop3): Remounting filesystem read-only
[  176.209098][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.601327][ T8085] fuse: Bad value for 'fd'
[  177.861627][ T8092] fuse: Bad value for 'fd'
[  178.642656][ T8096] x_tables: duplicate underflow at hook 1
[  179.749039][ T8100] x_tables: duplicate underflow at hook 1
[  181.457819][ T8132] fuse: Bad value for 'fd'
[  181.970592][ T3496] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.611050][ T3496] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.777743][ T3496] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.811829][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  182.821257][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  182.834491][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  182.842577][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  182.851485][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  182.925462][ T3496] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.621430][ T3496] bridge_slave_1: left allmulticast mode
[  183.632123][ T3496] bridge_slave_1: left promiscuous mode
[  183.638873][ T3496] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.650492][ T3496] bridge_slave_0: left allmulticast mode
[  183.673881][ T3496] bridge_slave_0: left promiscuous mode
[  183.687866][ T3496] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.040042][ T8167] overlayfs: failed to clone upperpath
[  184.078353][ T3496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.093764][ T3496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.109271][ T3496] bond0 (unregistering): Released all slaves
[  184.227163][ T3496] tipc: Left network mode
[  184.406789][ T8141] chnl_net:caif_netlink_parms(): no params data found
[  184.834337][ T8183] fuse: Bad value for 'fd'
[  184.967726][   T51] Bluetooth: hci2: command tx timeout
[  186.710298][ T8141] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.724684][ T8141] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.757426][ T8141] bridge_slave_0: entered allmulticast mode
[  186.781949][ T8141] bridge_slave_0: entered promiscuous mode
[  186.886741][ T3496] hsr_slave_0: left promiscuous mode
[  186.939139][ T3496] hsr_slave_1: left promiscuous mode
[  186.945308][ T3496] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.976096][ T3496] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.025070][ T3496] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.057674][   T51] Bluetooth: hci2: command tx timeout
[  187.066586][ T3496] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.121779][ T3496] veth1_macvtap: left promiscuous mode
[  187.138884][ T3496] veth0_macvtap: left promiscuous mode
[  187.144498][ T3496] veth1_vlan: left promiscuous mode
[  187.176666][ T3496] veth0_vlan: left promiscuous mode
[  187.792215][ T8245] x_tables: duplicate underflow at hook 1
[  189.127413][   T51] Bluetooth: hci2: command tx timeout
[  189.156342][ T3496] team0 (unregistering): Port device team_slave_1 removed
[  189.407071][ T3496] team0 (unregistering): Port device team_slave_0 removed
[  190.281866][ T8259] loop0: detected capacity change from 0 to 1024
[  190.576900][ T8141] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.581471][ T8262] openvswitch: netlink: IP tunnel dst address not specified
[  190.585292][ T8141] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.603235][ T8141] bridge_slave_1: entered allmulticast mode
[  191.236423][   T51] Bluetooth: hci2: command tx timeout
[  191.281154][ T8141] bridge_slave_1: entered promiscuous mode
[  192.055022][ T8141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.147039][ T8141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.951594][ T8281] loop3: detected capacity change from 0 to 128
[  192.997162][ T8281] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  193.035837][ T8281] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.182175][   T30] audit: type=1326 audit(1770669689.447:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8279 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9b39af79 code=0x7ffc0000
[  193.240917][ T8141] team0: Port device team_slave_0 added
[  193.303008][ T8141] team0: Port device team_slave_1 added
[  193.331591][   T30] audit: type=1326 audit(1770669689.447:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8279 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9b39af79 code=0x7ffc0000
[  193.487613][   T30] audit: type=1326 audit(1770669689.477:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8279 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fcc9b39af79 code=0x7ffc0000
[  193.979428][   T30] audit: type=1326 audit(1770669689.477:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8279 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9b39af79 code=0x7ffc0000
[  194.007016][   T30] audit: type=1326 audit(1770669689.477:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8279 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9b39af79 code=0x7ffc0000
[  194.057739][   T30] audit: type=1326 audit(1770669689.477:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8279 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fcc9b39af79 code=0x7ffc0000
[  194.097717][   T30] audit: type=1326 audit(1770669689.477:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8279 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9b39af79 code=0x7ffc0000
[  194.123205][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.138496][ T5824] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  194.172886][   T30] audit: type=1326 audit(1770669689.477:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8279 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9b39af79 code=0x7ffc0000
[  194.195534][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  194.234151][   T30] audit: type=1326 audit(1770669689.487:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8279 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fcc9b39af79 code=0x7ffc0000
[  194.262850][ T8141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.273172][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  194.278770][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.301105][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  194.301965][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  194.363122][   T30] audit: type=1326 audit(1770669689.527:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8279 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9b39af79 code=0x7ffc0000
[  194.391306][ T8141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.417386][ T8333] capability: warning: `syz.4.512' uses 32-bit capabilities (legacy support in use)
[  195.458980][ T8141] hsr_slave_0: entered promiscuous mode
[  195.466409][ T8141] hsr_slave_1: entered promiscuous mode
[  195.496007][ T8141] debugfs: 'hsr0' already exists in 'hsr'
[  195.512039][ T8141] Cannot create hsr debugfs directory
[  196.344756][ T5836] Bluetooth: hci1: command 0x0406 tx timeout
[  196.397500][ T5828] Bluetooth: hci3: command 0x0406 tx timeout
[  196.403873][ T5838] Bluetooth: hci4: command 0x0406 tx timeout
[  196.469503][ T8141] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  196.531140][ T8141] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  196.562782][ T8141] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  196.571588][ T6060] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  196.601425][ T8141] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  196.622137][ T6060] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  196.663621][ T8381] loop6: detected capacity change from 0 to 1024
[  196.711043][ T8381] hfsplus: Bad value for 'gid'
[  197.286945][ T8141] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.376600][ T8402] fuse: Bad value for 'fd'
[  197.795134][ T8141] 8021q: adding VLAN 0 to HW filter on device team0
[  197.896704][ T8141] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  197.926587][ T8141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  197.980874][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.988114][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.045639][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.052897][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.197700][ T8141] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.679524][ T8141] veth0_vlan: entered promiscuous mode
[  200.907483][ T8141] veth1_vlan: entered promiscuous mode
[  201.084927][ T8141] veth0_macvtap: entered promiscuous mode
[  201.110595][ T8141] veth1_macvtap: entered promiscuous mode
[  201.250813][ T8141] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.274642][ T8141] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.845475][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.887108][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.912538][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.952368][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.350070][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.358182][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.127678][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.246548][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.959768][ T8507] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  204.333556][ T8515] loop0: detected capacity change from 0 to 128
[  204.364126][ T8515] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  204.413464][ T8515] hpfs: filesystem error: improperly stopped
[  204.446247][ T8515] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  204.464545][ T8515] hpfs: You really don't want any checks? You are crazy...
[  204.482612][ T8515] hpfs: hpfs_map_sector(): read error
[  204.525340][ T8515] hpfs: code page support is disabled
[  204.553528][ T8515] hpfs: hpfs_map_4sectors(): unaligned read
[  204.632060][ T8515] hpfs: hpfs_map_4sectors(): unaligned read
[  204.667138][ T8515] hpfs: filesystem error: unable to find root dir
[  204.919185][ T8530] hpfs: hpfs_map_4sectors(): unaligned read
[  206.403775][ T8543] IPVS: Error connecting to the multicast addr
[  206.929551][ T8542] netlink: 16 bytes leftover after parsing attributes in process `syz.6.555'.
[  207.280918][ T8549] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  207.439233][ T8555] netlink: 'syz.0.557': attribute type 4 has an invalid length.
[  209.071870][ T8575] loop6: detected capacity change from 0 to 512
[  209.118879][ T8575] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  209.168596][ T8575] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.565: iget: bogus i_mode (5)
[  209.271470][ T8575] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  209.271838][ T8575] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.565: couldn't read orphan inode 15 (err -117)
[  209.281185][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  209.281199][    C1] EXT4-fs (loop6): initial error at time 1770669705: ext4_orphan_get:1391: inode 15
[  209.281217][    C1] EXT4-fs (loop6): last error at time 1770669705: ext4_orphan_get:1391: inode 15
[  209.338238][ T8575] loop6: lost filesystem error report for type 5 error -117
[  209.384156][ T8575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.488976][ T8575] ext2 filesystem being mounted at /74/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.730563][ T6953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.987022][   T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  214.166851][   T29] usb 7-1: Using ep0 maxpacket: 32
[  214.174631][   T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.186183][   T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.205976][   T29] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  214.242210][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.278227][   T29] usb 7-1: config 0 descriptor??
[  214.813392][   T29] ft260 0003:0403:6030.0006: unknown main item tag 0x7
[  214.975662][   T29] ft260 0003:0403:6030.0006: chip code: 6424 8183
[  215.668690][   T29] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0
[  215.682780][   T29] ft260 0003:0403:6030.0006: failed to retrieve status: -32, no wakeup
[  217.321016][ T5924] usb 7-1: USB disconnect, device number 3
[  217.596935][ T8681] tmpfs: Bad value for 'mpol'
[  217.639624][ T8659] loop0: detected capacity change from 0 to 32768
[  218.539865][ T8659] JBD2: Ignoring recovery information on journal
[  218.762422][ T8659] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  219.481166][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  219.481186][   T30] audit: type=1800 audit(1770669715.517:74): pid=8659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.581" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  219.549695][   T29] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  219.819308][   T29] usb 7-1: Using ep0 maxpacket: 8
[  219.851199][   T29] usb 7-1: config 0 has an invalid interface number: 52 but max is 0
[  219.908596][   T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  219.935290][   T29] usb 7-1: config 0 has no interface number 0
[  219.945400][ T5820] ocfs2: Unmounting device (7,0) on (node local)
[  219.946010][   T29] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  219.986563][   T29] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  220.006536][   T29] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  220.044772][   T29] usb 7-1: config 0 interface 52 has no altsetting 0
[  220.121400][   T29] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  220.140917][   T29] usb 7-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[  220.166316][   T29] usb 7-1: Product: syz
[  220.180014][   T29] usb 7-1: Manufacturer: syz
[  220.196636][   T29] usb 7-1: SerialNumber: syz
[  220.233583][   T29] usb 7-1: config 0 descriptor??
[  220.394409][ T8722] netlink: 'syz.4.596': attribute type 1 has an invalid length.
[  220.505502][   T29] usb 7-1: Can not set alternate setting to 1, error: -71
[  220.562886][ T8731] netlink: 'syz.7.599': attribute type 1 has an invalid length.
[  220.583510][   T29] synaptics_usb 7-1:0.52: probe with driver synaptics_usb failed with error -71
[  220.595333][ T8722] 8021q: adding VLAN 0 to HW filter on device bond1
[  220.657603][   T29] usb 7-1: USB disconnect, device number 4
[  220.688496][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.812995][ T8731] bridge_slave_1 (unregistering): left allmulticast mode
[  220.843050][ T8731] bridge_slave_1 (unregistering): left promiscuous mode
[  220.864814][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.020835][ T8737] bond1: (slave gretap1): making interface the new active one
[  221.032017][ T8737] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  221.237490][ T8753] loop3: detected capacity change from 0 to 128
[  221.249876][ T8753] vfat: Unknown parameter '18446744073709551615ÿÿÿ'
[  221.590028][ T8767] netlink: 16 bytes leftover after parsing attributes in process `syz.6.605'.
[  222.564060][ T8791] loop6: detected capacity change from 0 to 512
[  222.592066][ T8791] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  222.620904][ T8780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  222.680642][ T8791] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.611: iget: bogus i_mode (5)
[  223.400471][ T8791] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  223.400973][ T8791] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.611: couldn't read orphan inode 15 (err -117)
[  223.410203][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  223.410225][    C1] EXT4-fs (loop6): initial error at time 1770669719: ext4_orphan_get:1391: inode 15
[  223.410258][    C1] EXT4-fs (loop6): last error at time 1770669719: ext4_orphan_get:1391: inode 15
[  223.535128][ T8791] loop6: lost filesystem error report for type 5 error -117
[  223.545423][ T8791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.635846][ T8791] ext2 filesystem being mounted at /83/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  224.444834][ T6953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.642399][   T30] audit: type=1804 audit(1770669720.897:75): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.616" name="/newroot/129/file0" dev="tmpfs" ino=720 res=1 errno=0
[  226.552370][ T8837] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.584758][ T8837] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.170531][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.299979][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.338295][ T8853] vlan3: entered promiscuous mode
[  227.346807][ T8853] syz_tun: entered promiscuous mode
[  227.556603][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.576141][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.404474][   T51] Bluetooth: hci1: unexpected event for opcode 0x1003
[  229.150851][ T8875] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0)
[  232.830476][   T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  232.840853][   T51] Bluetooth: hci1: Injecting HCI hardware error event
[  233.570962][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  233.697980][ T5832] Bluetooth: hci1: hardware error 0x00
[  235.766681][ T5832] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  235.797540][ T8934] tipc: Started in network mode
[  235.806617][ T8934] tipc: Node identity beda18fd2fcd, cluster identity 4711
[  235.814092][ T8934] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.958595][ T8939] syzkaller0: entered promiscuous mode
[  236.007182][ T8939] syzkaller0: entered allmulticast mode
[  236.116279][ T8931] tipc: Resetting bearer <eth:syzkaller0>
[  236.242596][ T8931] tipc: Disabling bearer <eth:syzkaller0>
[  237.252562][ T8970] loop0: detected capacity change from 0 to 256
[  238.109311][ T8970] FAT-fs (loop0): Directory bread(block 64) failed
[  238.116142][ T8970] FAT-fs (loop0): Directory bread(block 65) failed
[  238.149046][ T8970] FAT-fs (loop0): Directory bread(block 66) failed
[  238.235423][ T8970] FAT-fs (loop0): Directory bread(block 67) failed
[  238.266730][ T8970] FAT-fs (loop0): Directory bread(block 68) failed
[  238.273303][ T8970] FAT-fs (loop0): Directory bread(block 69) failed
[  238.403845][ T8970] FAT-fs (loop0): Directory bread(block 70) failed
[  238.410931][ T8970] FAT-fs (loop0): Directory bread(block 71) failed
[  238.417680][ T8970] FAT-fs (loop0): Directory bread(block 72) failed
[  238.424216][ T8970] FAT-fs (loop0): Directory bread(block 73) failed
[  240.204219][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.7.667'.
[  240.423271][   T30] audit: type=1804 audit(1770669736.687:76): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.670" name="/newroot/146/file1" dev="fuse" ino=1 res=1 errno=0
[  240.446005][ T9016] warning: `syz.6.673' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  240.454021][ T9012] loop3: detected capacity change from 0 to 512
[  240.475814][   T30] audit: type=1800 audit(1770669736.687:77): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.670" name="/" dev="fuse" ino=1 res=0 errno=0
[  240.497211][ T9016] netlink: 'syz.6.673': attribute type 10 has an invalid length.
[  240.508768][ T9012] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  240.536227][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.674'.
[  240.547417][ T9012] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.672: iget: bogus i_mode (5)
[  240.564988][   T30] audit: type=1800 audit(1770669736.687:78): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.670" name="/" dev="fuse" ino=1 res=0 errno=0
[  240.612782][ T9012] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  240.617796][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  240.622077][ T9012] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.672: couldn't read orphan inode 15 (err -117)
[  240.627021][    C1] EXT4-fs (loop3): initial error at time 1770669736: ext4_orphan_get:1391: inode 15
[  240.656939][    C1] EXT4-fs (loop3): last error at time 1770669736: ext4_orphan_get:1391: inode 15
[  240.657401][ T9012] loop3: lost filesystem error report for type 5 error -117
[  240.673350][ T9016] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  240.710382][ T9012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.724686][ T9012] ext2 filesystem being mounted at /139/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.248800][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.640509][ T9081] loop0: detected capacity change from 0 to 2048
[  246.678771][ T9081] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  246.761779][ T9081] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  246.937984][ T9092] loop6: detected capacity change from 0 to 512
[  247.077064][ T9092] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  247.252054][ T9100] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  247.384140][ T9092] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.692: iget: bogus i_mode (5)
[  247.899310][ T9092] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  247.906533][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  247.922225][    C1] EXT4-fs (loop6): initial error at time 1770669744: ext4_orphan_get:1391: inode 15
[  247.931655][    C1] EXT4-fs (loop6): last error at time 1770669744: ext4_orphan_get:1391: inode 15
[  247.956662][ T9092] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.692: couldn't read orphan inode 15 (err -117)
[  248.035821][ T9092] loop6: lost filesystem error report for type 5 error -117
[  248.041094][ T9092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.206168][ T9092] ext2 filesystem being mounted at /99/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  250.862597][ T6953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.689769][ T9140] loop3: detected capacity change from 0 to 512
[  251.719190][ T9140] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  251.879472][ T9140] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.702: iget: bogus i_mode (5)
[  251.976668][ T9140] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  251.977306][ T9140] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.702: couldn't read orphan inode 15 (err -117)
[  251.998254][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  251.998279][    C1] EXT4-fs (loop3): initial error at time 1770669748: ext4_orphan_get:1391: inode 15
[  251.998324][    C1] EXT4-fs (loop3): last error at time 1770669748: ext4_orphan_get:1391: inode 15
[  252.033975][   T30] audit: type=1326 audit(1770669748.297:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.6.703" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f033579af79 code=0x0
[  252.066098][ T9140] loop3: lost filesystem error report for type 5 error -117
[  252.098853][ T9140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.146712][ T9140] ext2 filesystem being mounted at /145/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.312627][ T9171] ptrace attach of ""[9172] was attempted by "./syz-executor exec"[9171]
[  254.490461][ T9170] loop0: detected capacity change from 0 to 128
[  254.543963][ T9170] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  254.573708][ T9170] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  254.641589][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.010876][ T9179] overlayfs: failed to clone upperpath
[  255.705801][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  255.712349][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  255.812772][ T9175] loop3: detected capacity change from 0 to 32768
[  255.825722][ T9175] jfs: Unknown parameter 'integ`ity'
[  256.262601][ T9191] loop6: detected capacity change from 0 to 40427
[  256.337534][ T9191] F2FS-fs (loop6): invalid crc value
[  256.975055][ T9191] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  256.985185][ T9191] F2FS-fs (loop6): Start checkpoint disabled!
[  257.003881][ T9191] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[  257.016707][ T9191] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  257.135708][   T30] audit: type=1800 audit(1770669753.397:80): pid=9206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.716" name="bus" dev="loop6" ino=10 res=0 errno=0
[  257.164507][ T9206] syz.6.716: attempt to access beyond end of device
[  257.164507][ T9206] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  257.189288][ T9206] syz.6.716: attempt to access beyond end of device
[  257.189288][ T9206] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  257.211432][ T9206] syz.6.716: attempt to access beyond end of device
[  257.211432][ T9206] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  257.234268][ T9206] syz.6.716: attempt to access beyond end of device
[  257.234268][ T9206] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  257.254452][ T9206] syz.6.716: attempt to access beyond end of device
[  257.254452][ T9206] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  257.281601][ T9206] syz.6.716: attempt to access beyond end of device
[  257.281601][ T9206] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  257.300589][ T9206] syz.6.716: attempt to access beyond end of device
[  257.300589][ T9206] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  257.319554][ T9206] syz.6.716: attempt to access beyond end of device
[  257.319554][ T9206] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  257.338347][ T9206] syz.6.716: attempt to access beyond end of device
[  257.338347][ T9206] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  257.358521][ T9206] syz.6.716: attempt to access beyond end of device
[  257.358521][ T9206] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  257.393250][   T29] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  257.467874][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'.
[  258.238599][   T29] usb 1-1: Using ep0 maxpacket: 32
[  258.326390][   T29] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  258.396582][   T29] usb 1-1: config 0 has no interface number 0
[  258.451137][   T29] usb 1-1: config 0 interface 184 has no altsetting 0
[  258.709310][   T29] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  258.891764][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.937456][   T29] usb 1-1: Product: syz
[  258.967932][   T29] usb 1-1: Manufacturer: syz
[  259.007324][   T29] usb 1-1: SerialNumber: syz
[  259.185743][   T29] usb 1-1: config 0 descriptor??
[  260.158976][ T9218] Cannot find add_set index 0 as target
[  260.177176][   T29] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  260.557377][   T29] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71
[  260.585855][   T29] usb 1-1: USB disconnect, device number 7
[  260.888687][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  260.888713][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  260.888724][   T13] Workqueue: writeback wb_workfn (flush-7:6)
[  260.888759][   T13] Call Trace:
[  260.888767][   T13]  <TASK>
[  260.888776][   T13]  dump_stack_lvl+0xe8/0x150
[  260.888805][   T13]  f2fs_handle_critical_error+0x37c/0x540
[  260.888837][   T13]  f2fs_write_end_io+0xcdb/0xff0
[  260.888879][   T13]  __submit_merged_bio+0x256/0x700
[  260.888909][   T13]  __submit_merged_write_cond+0x3c3/0x4e0
[  260.888942][   T13]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  260.888992][   T13]  f2fs_write_data_pages+0x2975/0x35e0
[  260.889018][   T13]  ? unwind_next_frame+0xa5/0x23c0
[  260.889044][   T13]  ? lock_release+0x4b/0x3d0
[  260.889099][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  260.889138][   T13]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  260.889194][   T13]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  260.889259][   T13]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  260.889287][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  260.889315][   T13]  do_writepages+0x32e/0x550
[  260.889349][   T13]  ? reacquire_held_locks+0x104/0x190
[  260.889374][   T13]  ? writeback_sb_inodes+0x43d/0x19a0
[  260.889404][   T13]  __writeback_single_inode+0x133/0x11a0
[  260.889428][   T13]  ? do_raw_spin_unlock+0xf5/0x210
[  260.889451][   T13]  writeback_sb_inodes+0x944/0x19a0
[  260.889498][   T13]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  260.889519][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  260.889580][   T13]  ? rcu_is_watching+0x15/0xb0
[  260.889615][   T13]  wb_writeback+0x456/0xb70
[  260.889642][   T13]  ? queue_io+0x291/0x4a0
[  260.889677][   T13]  ? __pfx_wb_writeback+0x10/0x10
[  260.889697][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  260.889734][   T13]  wb_workfn+0x414/0xf50
[  260.889756][   T13]  ? look_up_lock_class+0x57/0x110
[  260.889795][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  260.889818][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  260.889840][   T13]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  260.889882][   T13]  ? process_one_work+0x87c/0x1650
[  260.889905][   T13]  process_one_work+0x949/0x1650
[  260.889952][   T13]  ? __pfx_process_one_work+0x10/0x10
[  260.889973][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  260.890008][   T13]  worker_thread+0xb46/0x1140
[  260.890059][   T13]  kthread+0x388/0x470
[  260.890078][   T13]  ? __pfx_worker_thread+0x10/0x10
[  260.890101][   T13]  ? __pfx_kthread+0x10/0x10
[  260.890120][   T13]  ret_from_fork+0x51e/0xb90
[  260.890148][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  260.890171][   T13]  ? __switch_to+0xc7d/0x1450
[  260.890197][   T13]  ? __pfx_kthread+0x10/0x10
[  260.890216][   T13]  ret_from_fork_asm+0x1a/0x30
[  260.890261][   T13]  </TASK>
[  260.890309][   T13] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  261.395185][ T9234] loop0: detected capacity change from 0 to 512
[  261.518162][ T9234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  261.607116][ T9234] ext4 filesystem being mounted at /158/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.834759][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  262.338466][ T5832] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  262.350304][ T5832] Bluetooth: hci2: Injecting HCI hardware error event
[  262.366684][ T5832] Bluetooth: hci2: hardware error 0x00
[  262.791316][ T9255] loop0: detected capacity change from 0 to 512
[  262.859145][ T9255] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  262.911759][ T9255] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.731: iget: bogus i_mode (5)
[  262.926630][ T9255] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  262.933354][ T9255] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.731: couldn't read orphan inode 15 (err -117)
[  262.942618][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  262.942640][    C1] EXT4-fs (loop0): initial error at time 1770669759: ext4_orphan_get:1391: inode 15
[  262.942658][    C1] EXT4-fs (loop0): last error at time 1770669759: ext4_orphan_get:1391: inode 15
[  263.088710][ T9255] loop0: lost filesystem error report for type 5 error -117
[  263.090861][ T9255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.100956][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.7.735'.
[  263.161282][ T9255] ext2 filesystem being mounted at /159/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  263.923971][ T9271] netlink: 'syz.7.738': attribute type 4 has an invalid length.
[  264.332276][ T9278] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  264.367926][ T9278] kvm: pic: level sensitive irq not supported
[  264.369436][ T9278] kvm: pic: non byte read
[  264.393145][ T9278] kvm: pic: level sensitive irq not supported
[  264.393461][ T9278] kvm: pic: non byte read
[  264.457151][ T9278] kvm: pic: level sensitive irq not supported
[  264.457231][ T9278] kvm: pic: non byte read
[  264.897721][ T5832] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  265.449517][ T9297] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  266.575705][ T9313] loop3: detected capacity change from 0 to 512
[  266.796816][ T9313] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  267.316266][ T9313] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  267.365576][ T9313] EXT4-fs (loop3): 1 truncate cleaned up
[  267.398268][ T9313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.153563][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.175531][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.462668][ T9334] loop3: detected capacity change from 0 to 128
[  268.570202][ T9334] vfat: Unknown parameter '1844674407370955161500000000000000000000ÿ'
[  272.155785][ T9344] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.163313][ T9344] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.561449][ T9344] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  273.593049][ T9344] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  274.057177][   T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.086807][  T169] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.106053][  T169] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.132202][  T169] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  275.470984][ T9412] loop6: detected capacity change from 0 to 4096
[  275.488688][ T9412] EXT4-fs: inline encryption not supported
[  275.533768][ T9412] EXT4-fs (loop6): Test dummy encryption mode enabled
[  275.549691][ T9412] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  275.574087][ T9412] System zones: 0-5
[  275.609826][ T9412] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.743808][ T9410] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  275.823794][ T6953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.929440][ T9450] loop3: detected capacity change from 0 to 512
[  278.941279][ T9450] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  279.002620][ T9450] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.780: iget: bogus i_mode (5)
[  279.029474][ T9450] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  279.029954][ T9450] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.780: couldn't read orphan inode 15 (err -117)
[  279.039199][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  279.039224][    C0] EXT4-fs (loop3): initial error at time 1770669775: ext4_orphan_get:1391: inode 15
[  279.039259][    C0] EXT4-fs (loop3): last error at time 1770669775: ext4_orphan_get:1391: inode 15
[  279.084762][ T9450] loop3: lost filesystem error report for type 5 error -117
[  279.097080][ T9450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.117090][ T9450] ext2 filesystem being mounted at /157/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  282.361328][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.499677][ T9483] syzkaller0: entered promiscuous mode
[  283.650358][ T9483] syzkaller0: entered allmulticast mode
[  284.103924][ T9502] loop6: detected capacity change from 0 to 512
[  284.209457][ T9502] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  284.841572][ T9502] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.794: iget: bogus i_mode (5)
[  284.896682][ T9502] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  284.906543][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  284.922210][    C0] EXT4-fs (loop6): initial error at time 1770669781: ext4_orphan_get:1391: inode 15
[  284.931638][    C0] EXT4-fs (loop6): last error at time 1770669781: ext4_orphan_get:1391: inode 15
[  285.021422][ T9502] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.794: couldn't read orphan inode 15 (err -117)
[  285.069478][ T9502] loop6: lost filesystem error report for type 5 error -117
[  285.616309][ T9502] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.446987][ T9502] ext2 filesystem being mounted at /116/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.141221][ T6953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.188497][ T9551] binder: 9545:9551 ioctl 4018620d 0 returned -22
[  291.017441][ T9555] loop3: detected capacity change from 0 to 1024
[  293.854435][ T9579] loop6: detected capacity change from 0 to 512
[  293.887166][ T9579] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  295.097510][ T9579] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.814: iget: bogus i_mode (5)
[  295.119031][ T9579] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  295.120040][ T9579] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.814: couldn't read orphan inode 15 (err -117)
[  295.129307][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  295.129333][    C1] EXT4-fs (loop6): initial error at time 1770669791: ext4_orphan_get:1391: inode 15
[  295.129369][    C1] EXT4-fs (loop6): last error at time 1770669791: ext4_orphan_get:1391: inode 15
[  295.166750][ T9579] loop6: lost filesystem error report for type 5 error -117
[  295.196252][ T9579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.218218][ T9579] ext2 filesystem being mounted at /118/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.786791][ T6953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.659731][ T9628] loop3: detected capacity change from 0 to 1024
[  301.814467][ T9628] loop3: detected capacity change from 0 to 1024
[  304.384034][ T9628] EXT4-fs: Ignoring removed i_version option
[  304.416799][ T9628] EXT4-fs: inline encryption not supported
[  304.567817][ T9628] EXT4-fs (loop3): Test dummy encryption mode enabled
[  304.616980][ T9628] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  304.618766][ T9628] EXT4-fs: failed to create workqueue
[  305.116656][ T9628] EXT4-fs (loop3): mount failed
[  305.585327][ T9656] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size.
[  306.380572][ T9657] syz.7.832 (9657) used greatest stack depth: 16960 bytes left
[  308.231786][ T9668] mmap: syz.3.834 (9668) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  308.834282][ T9671] loop6: detected capacity change from 0 to 40427
[  308.862305][ T9671] F2FS-fs (loop6): invalid crc value
[  308.959301][ T9671] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  308.977934][ T9671] F2FS-fs (loop6): Start checkpoint disabled!
[  309.007352][ T9671] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[  309.022690][ T9671] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  309.054810][ T9678] bio_check_eod: 182 callbacks suppressed
[  309.054830][ T9678] syz.6.838: attempt to access beyond end of device
[  309.054830][ T9678] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  309.264598][ T9671] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only
[  309.274883][ T9671] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null.
[  309.329270][ T6953] syz-executor: attempt to access beyond end of device
[  309.329270][ T6953] loop6: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  309.408211][ T6953] syz-executor: attempt to access beyond end of device
[  309.408211][ T6953] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  310.081624][ T7582] ==================================================================
[  310.089730][ T7582] BUG: KASAN: use-after-free in __mutex_lock+0x812/0x1300
[  310.096936][ T7582] Read of size 8 at addr ffff8880591fc0a8 by task khidpd_04580058/7582
[  310.105164][ T7582] 
[  310.107480][ T7582] CPU: 1 UID: 0 PID: 7582 Comm: khidpd_04580058 Not tainted syzkaller #0 PREEMPT(full) 
[  310.107498][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  310.107508][ T7582] Call Trace:
[  310.107515][ T7582]  <TASK>
[  310.107521][ T7582]  dump_stack_lvl+0xe8/0x150
[  310.107544][ T7582]  print_report+0xba/0x230
[  310.107562][ T7582]  ? __mutex_lock+0x812/0x1300
[  310.107586][ T7582]  kasan_report+0x117/0x150
[  310.107604][ T7582]  ? __mutex_lock+0x812/0x1300
[  310.107624][ T7582]  __mutex_lock+0x812/0x1300
[  310.107645][ T7582]  ? __mutex_lock+0x5ac/0x1300
[  310.107665][ T7582]  ? l2cap_unregister_user+0x6a/0x1b0
[  310.107686][ T7582]  ? __pfx___mutex_lock+0x10/0x10
[  310.107707][ T7582]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  310.107724][ T7582]  ? lockdep_hardirqs_on+0x7a/0x110
[  310.107741][ T7582]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  310.107758][ T7582]  l2cap_unregister_user+0x6a/0x1b0
[  310.107779][ T7582]  hidp_session_thread+0x3cb/0x440
[  310.107802][ T7582]  ? __pfx_hidp_session_thread+0x10/0x10
[  310.107822][ T7582]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  310.107846][ T7582]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  310.107867][ T7582]  ? __kthread_parkme+0x7a/0x1f0
[  310.107887][ T7582]  ? __kthread_parkme+0x19c/0x1f0
[  310.107908][ T7582]  kthread+0x388/0x470
[  310.107922][ T7582]  ? __pfx_hidp_session_thread+0x10/0x10
[  310.107942][ T7582]  ? __pfx_kthread+0x10/0x10
[  310.107955][ T7582]  ret_from_fork+0x51e/0xb90
[  310.107975][ T7582]  ? __pfx_ret_from_fork+0x10/0x10
[  310.107993][ T7582]  ? __switch_to+0xc7d/0x1450
[  310.108011][ T7582]  ? __pfx_kthread+0x10/0x10
[  310.108027][ T7582]  ret_from_fork_asm+0x1a/0x30
[  310.108061][ T7582]  </TASK>
[  310.108067][ T7582] 
[  310.274784][ T7582] The buggy address belongs to the physical page:
[  310.281203][ T7582] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880591fc000 pfn:0x591fc
[  310.291273][ T7582] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  310.298476][ T7582] raw: 00fff00000000000 ffffea00009da608 ffff8880b8640c40 0000000000000000
[  310.307063][ T7582] raw: ffff8880591fc000 0000000000000000 00000000ffffffff 0000000000000000
[  310.315642][ T7582] page dumped because: kasan: bad access detected
[  310.322053][ T7582] page_owner tracks the page as freed
[  310.327403][ T7582] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 6953, tgid 6953 (syz-executor), ts 122818427679, free_ts 310066316183
[  310.345451][ T7582]  post_alloc_hook+0x231/0x280
[  310.350217][ T7582]  get_page_from_freelist+0x24dc/0x2580
[  310.355748][ T7582]  __alloc_frozen_pages_noprof+0x18d/0x380
[  310.361537][ T7582]  alloc_pages_mpol+0x232/0x4a0
[  310.366373][ T7582]  ___kmalloc_large_node+0x4e/0x150
[  310.371552][ T7582]  __kmalloc_large_node_noprof+0x18/0x90
[  310.377169][ T7582]  __kmalloc_noprof+0x3e8/0x760
[  310.382027][ T7582]  hci_alloc_dev_priv+0x28/0x2060
[  310.387057][ T7582]  vhci_create_device+0x120/0x650
[  310.392078][ T7582]  vhci_write+0x3ce/0x4a0
[  310.396492][ T7582]  vfs_write+0x61d/0xb90
[  310.400744][ T7582]  ksys_write+0x150/0x270
[  310.405063][ T7582]  do_syscall_64+0x14d/0xf80
[  310.409750][ T7582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.415650][ T7582] page last free pid 6953 tgid 6953 stack trace:
[  310.421976][ T7582]  __free_frozen_pages+0xc01/0xd80
[  310.427088][ T7582]  bt_host_release+0x82/0x90
[  310.431692][ T7582]  device_release+0x9e/0x1d0
[  310.436278][ T7582]  kobject_put+0x228/0x560
[  310.440692][ T7582]  vhci_release+0x15a/0x1a0
[  310.445181][ T7582]  __fput+0x44f/0xa70
[  310.449152][ T7582]  task_work_run+0x1d9/0x270
[  310.453728][ T7582]  do_exit+0x69b/0x2310
[  310.457865][ T7582]  do_group_exit+0x21b/0x2d0
[  310.462436][ T7582]  __x64_sys_exit_group+0x3f/0x40
[  310.467442][ T7582]  x64_sys_call+0x221a/0x2240
[  310.472209][ T7582]  do_syscall_64+0x14d/0xf80
[  310.476793][ T7582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.482692][ T7582] 
[  310.485016][ T7582] Memory state around the buggy address:
[  310.490646][ T7582]  ffff8880591fbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  310.498710][ T7582]  ffff8880591fc000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  310.506766][ T7582] >ffff8880591fc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  310.514814][ T7582]                                   ^
[  310.520169][ T7582]  ffff8880591fc100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  310.528249][ T7582]  ffff8880591fc180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  310.536376][ T7582] ==================================================================
[  310.545541][ T7582] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  310.552754][ T7582] CPU: 1 UID: 0 PID: 7582 Comm: khidpd_04580058 Not tainted syzkaller #0 PREEMPT(full) 
[  310.562492][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  310.572552][ T7582] Call Trace:
[  310.575818][ T7582]  <TASK>
[  310.578732][ T7582]  vpanic+0x56c/0xa60
[  310.582707][ T7582]  ? __pfx_vpanic+0x10/0x10
[  310.587498][ T7582]  panic+0xc5/0xd0
[  310.591204][ T7582]  ? __pfx_panic+0x10/0x10
[  310.595604][ T7582]  ? __mutex_lock+0x812/0x1300
[  310.600353][ T7582]  ? __mutex_lock+0x812/0x1300
[  310.605094][ T7582]  check_panic_on_warn+0x89/0xb0
[  310.610008][ T7582]  ? __mutex_lock+0x812/0x1300
[  310.614751][ T7582]  end_report+0x73/0x180
[  310.618974][ T7582]  ? __mutex_lock+0x812/0x1300
[  310.623891][ T7582]  kasan_report+0x128/0x150
[  310.628377][ T7582]  ? __mutex_lock+0x812/0x1300
[  310.633127][ T7582]  __mutex_lock+0x812/0x1300
[  310.637700][ T7582]  ? __mutex_lock+0x5ac/0x1300
[  310.642498][ T7582]  ? l2cap_unregister_user+0x6a/0x1b0
[  310.647872][ T7582]  ? __pfx___mutex_lock+0x10/0x10
[  310.652896][ T7582]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  310.658868][ T7582]  ? lockdep_hardirqs_on+0x7a/0x110
[  310.664052][ T7582]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  310.670112][ T7582]  l2cap_unregister_user+0x6a/0x1b0
[  310.675320][ T7582]  hidp_session_thread+0x3cb/0x440
[  310.680413][ T7582]  ? __pfx_hidp_session_thread+0x10/0x10
[  310.686035][ T7582]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  310.692270][ T7582]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  310.698494][ T7582]  ? __kthread_parkme+0x7a/0x1f0
[  310.703414][ T7582]  ? __kthread_parkme+0x19c/0x1f0
[  310.708421][ T7582]  kthread+0x388/0x470
[  310.712468][ T7582]  ? __pfx_hidp_session_thread+0x10/0x10
[  310.718099][ T7582]  ? __pfx_kthread+0x10/0x10
[  310.722684][ T7582]  ret_from_fork+0x51e/0xb90
[  310.727262][ T7582]  ? __pfx_ret_from_fork+0x10/0x10
[  310.732353][ T7582]  ? __switch_to+0xc7d/0x1450
[  310.737012][ T7582]  ? __pfx_kthread+0x10/0x10
[  310.741579][ T7582]  ret_from_fork_asm+0x1a/0x30
[  310.746329][ T7582]  </TASK>
[  310.749490][ T7582] Kernel Offset: disabled
[  310.753796][ T7582] Rebooting in 86400 seconds..