last executing test programs:

8m25.721901998s ago: executing program 32 (id=27):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x38, 0x65, 0x100, 0x170bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8030)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000400)=0xfffffe6f)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r4 = gettid()
rt_tgsigqueueinfo(0x0, r4, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4})
prlimit64(r0, 0xc, &(0x7f0000000000)={0xfffffffffffffffb, 0x40000000000006}, 0x0)
brk(0x600000000000)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x8)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)

8m6.003022513s ago: executing program 33 (id=71):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x1008050, &(0x7f0000000600)=ANY=[], 0x1, 0x150e, &(0x7f0000003680)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x81fe)

7m32.657812024s ago: executing program 34 (id=142):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10)

7m27.082645061s ago: executing program 35 (id=156):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x8063b)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x9, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8000ffe, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x6, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x5, 0x80, 0xb, 0x8001, 0x40, 0xa4, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x100007ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x10001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0})
close(0xffffffffffffffff)

7m20.375289203s ago: executing program 36 (id=167):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0)
bind$inet6(r0, 0x0, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
r1 = openat(0xffffffffffffffff, 0x0, 0x3e5d43, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000005c0)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303030332c7569643dfe7535ac037d815b39b7111a418d41b178db88f48d304c08", @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYBLOB="f5df4a5f9cbebf405c8be1bf09c3103d44ed26f5382ee5bb2e7c496face15c359b8aae576bf026540e35a2a40866003d03e265118a3c4493c96190c31810369da638e5983b56530e7110346cf625f2166f33e803a47e266503039be40801928860e5431b176d837d4ce51c228a9734f8865b2d8402534a0e8bc919b9d3ef10b8fcd0dcbf15906ccdf4eba2649662b579eafcf8eb724db5125bebde6aa1ba3c04ec355b26ab21e8fe7129f5eb0af16579ce409f4bf9c92dde5bada508", @ANYRESHEX=r1], 0x4, 0x2dc, &(0x7f0000000bc0)="$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")
pipe(&(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
ioprio_set$pid(0x1, r3, 0x200e)
prctl$PR_SCHED_CORE(0x3e, 0x400001, r3, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r5, &(0x7f0000000300), 0x6)

7m19.113067017s ago: executing program 37 (id=169):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000004600)=""/102400, 0x19000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
ptrace$getregset(0x4204, r0, 0x4, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

7m12.928798649s ago: executing program 38 (id=179):
syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000000000000ee00000000000000000001ac1e000100000000000000000000000000000000000000000a00300000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000300000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000088010000000000000001"], 0xfc}}, 0x0)
ftruncate(r5, 0x200004)
sendfile(r4, r5, 0x0, 0x80001d00c0d1)

7m10.672571071s ago: executing program 39 (id=184):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe0, 0x29, 0x4, {0x4, 0x18, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x56, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93}]}}}, @hoplimit={{0x14}}, @hopopts={{0x138, 0x29, 0x36, {0x5e, 0x24, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x7b, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x2e0}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6m58.792202537s ago: executing program 40 (id=197):
syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000300000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000088010000000000000001"], 0xfc}}, 0x0)
sendfile(r4, r5, 0x0, 0x80001d00c0d1)

6m54.881096746s ago: executing program 41 (id=204):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x1}}], 0x1, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x4, 0xc, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x2b, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d41787454"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93}]}}}, @hoplimit={{0x14}}, @hopopts={{0x130, 0x29, 0x36, {0x5e, 0x23, '\x00', [@generic={0xff}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0xae, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e3"}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0x7}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x278}}], 0x1, 0x810)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

5m39.867947817s ago: executing program 6 (id=370):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x880, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x408e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x5, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xae2, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x7, 0x7, 0x8ac1, 0x3, 0x4, 0x401, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0x2, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48)

5m37.816414476s ago: executing program 6 (id=373):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"})
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x1200840, &(0x7f0000000640)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r0, @ANYBLOB="ac1c647f10d8ec09d5318dc1b6ce4d7e72be50cce2fe691f9b59f973dc82412ea16286c15c1a74e0973fb8c7cde39ebf1731235bbd862e32462d423a0b0d0b3559ee38c05153bcea69e8b02eb8151b8eab31595f66a5a14b97fbaa4b83be39c7c99ad466ec7bc0d045b193f081227bf09fa93d4aac93e77305fe57268e3970f833304d8d088860dfbc76f924f795e099e8db481e3ddc42d4d1816cb146b3f355a4867b5032", @ANYRESOCT=r0], 0x3, 0x3ad, &(0x7f0000000280)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
setresuid(0xee01, 0x0, 0xffffffffffffffff)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2d02}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000078c0), 0x200)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000007900)={{0x3, 0x2, 0x1, 0x2, 0xfffffefd}, 0x2, 0xfeffffffffffffff})

5m36.892031991s ago: executing program 6 (id=375):
inotify_init()
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a})
chdir(&(0x7f0000000140)='mnt/encrypted_dir\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0)

5m36.171210943s ago: executing program 6 (id=378):
io_setup(0x1, &(0x7f0000000000))
syz_open_dev$usbfs(0x0, 0x800000001fe, 0x2)
syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00')
socket$inet6(0xa, 0x3, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000240)=0x7, &(0x7f0000000280)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000010, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0)

5m34.104738424s ago: executing program 42 (id=348):
syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x3)
fcntl$setsig(r0, 0xa, 0x11)
fcntl$setlease(r0, 0x400, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getpid()
fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2})
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=<r3=>0x0)
fcntl$setown(r0, 0x8, r3)
truncate(&(0x7f0000000000)='./file0\x00', 0x0)

5m33.891217546s ago: executing program 6 (id=384):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)

5m33.306244731s ago: executing program 6 (id=385):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"})
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x1200840, &(0x7f0000000640)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r0, @ANYBLOB="ac1c647f10d8ec09d5318dc1b6ce4d7e72be50cce2fe691f9b59f973dc82412ea16286c15c1a74e0973fb8c7cde39ebf1731235bbd862e32462d423a0b0d0b3559ee38c05153bcea69e8b02eb8151b8eab31595f66a5a14b97fbaa4b83be39c7c99ad466ec7bc0d045b193f081227bf09fa93d4aac93e77305fe57268e3970f833304d8d088860dfbc76f924f795e099e8db481e3ddc42d4d1816cb146b3f355a4867b5032", @ANYRESOCT=r0], 0x3, 0x3ad, &(0x7f0000000280)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
setresuid(0xee01, 0x0, 0xffffffffffffffff)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2d02}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000078c0), 0x200)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000007900)={{0x3, 0x2, 0x1, 0x2, 0xfffffefd}, 0x2, 0xfeffffffffffffff})

5m18.083706502s ago: executing program 43 (id=385):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"})
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x1200840, &(0x7f0000000640)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r0, @ANYBLOB="ac1c647f10d8ec09d5318dc1b6ce4d7e72be50cce2fe691f9b59f973dc82412ea16286c15c1a74e0973fb8c7cde39ebf1731235bbd862e32462d423a0b0d0b3559ee38c05153bcea69e8b02eb8151b8eab31595f66a5a14b97fbaa4b83be39c7c99ad466ec7bc0d045b193f081227bf09fa93d4aac93e77305fe57268e3970f833304d8d088860dfbc76f924f795e099e8db481e3ddc42d4d1816cb146b3f355a4867b5032", @ANYRESOCT=r0], 0x3, 0x3ad, &(0x7f0000000280)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
setresuid(0xee01, 0x0, 0xffffffffffffffff)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2d02}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000078c0), 0x200)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000007900)={{0x3, 0x2, 0x1, 0x2, 0xfffffefd}, 0x2, 0xfeffffffffffffff})

3m11.234284727s ago: executing program 7 (id=728):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2000759, &(0x7f0000000640)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x6}}, {@usrquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}, 0x0}, {@stripe={'stripe', 0x3d, 0x9}}, {@nobh}, {@dax_inode}, {@mblk_io_submit}, {@dax_always}, {@usrjquota}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x724}}, {@usrquota}, {@jqfmt_vfsold}, {@journal_checksum}, {@journal_checksum}], [{@audit}, {@fowner_gt}, {@audit}], 0x2c}, 0x6, 0x50c, &(0x7f0000000a40)="$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")
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x4000, &(0x7f0000000940)=ANY=[@ANYRES64=0x0], 0x1, 0x2c1, &(0x7f0000000400)="$eJzs3E1rE1scx/Ff0yZNU9pkcblwL4gH3ehmaOMrCNKCGFBqI+pCmNqJhoxJycTUiNhuxK2vo7h0J1jfQDfqxr24KYLgpgvpSJMZm5RIHzSdPnw/UOZ0zvxzHmYS/jMwZ/3Wy4flomcV7bpiSaOYtKwNKbNVCgwE21irnFCnZV0c/f7pzI3bd67m8vmpGWOmc7OXssaY8bNvF5++OveuPnrz9fibYa1l7q5/y35e+3ftv/XN2fDTq3Vjm7lqtW7PuY6ZL3lly5jrrmN7jilVPKfWVV90qwsLTWNX5sdSCzXH84xdaZqy0zT1qqnXmsa+b5cqxrIsM5bSaTO474jCysyMnetLZxCFkV47a7WcPdizsrByGJ0CAABHSz/y/4E95P8PSp4peaayW/4fE/l//7Ty/82eSSNOhvjWDUDOTgXf327k/wAAAAAAAAAAAAAAAAAAAAAAHAcbvp/2fT8dbsO/YUlJSeH/XUEDkXUXf9kBzj9n/wTpeHEvKbkvGoVGob1t1+eKKsmVo4m49KN1PQTa5ekr+akJ05LRqrsUxLdeEhwO40OZ3vGT7XjTEb/UKMSV6mw/q7T+6R2f3REfl9QoJHThfEe8pbTe31NVruZb13UQ/zg/9WzSmMvX8jvaH2kdBwAAAADASWCZXzLd97/t1SQty4TLhuyob+/cfj6g9C7PB4xWE9qOH9L/Q9GNGwAAAACA08RrPinbruvUjmshHgzksFs/6NQlJB2Rqdt3wUq257pHVVLhHt/3l7YO+vNGY5IiGunX319R4UOro3JS9lP48kjSh497mtWIfpAAAAAA9M120i9p8XnU3QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FTa6+Jh4fEHWXuso7nB7tZHD3GkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPR+BgAA//9IXxRU")
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet(0x2, 0x801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r2, &(0x7f0000000780)}, 0x20)

3m9.169788127s ago: executing program 0 (id=733):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"})
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x1200840, &(0x7f0000000640)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r1, @ANYBLOB="ac1c647f10d8ec09d5318dc1b6ce4d7e72be50cce2fe691f9b59f973dc82412ea16286c15c1a74e0973fb8c7cde39ebf1731235bbd862e32462d423a0b0d0b3559ee38c05153bcea69e8b02eb8151b8eab31595f66a5a14b97fbaa4b83be39c7c99ad466ec7bc0d045b193f081227bf09fa93d4aac93e77305fe57268e3970f833304d8d088860dfbc76f924f795e099e8db481e3ddc42d4d1816cb146b3f355a4867b5032", @ANYRESOCT=r1], 0x3, 0x3ad, &(0x7f0000000280)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
setresuid(0xee01, 0x0, 0xffffffffffffffff)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2d02}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000078c0), 0x200)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000007900)={{0x3, 0x2, 0x1, 0x2, 0xfffffefd}, 0x2, 0xfeffffffffffffff})
timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x1, @thr={&(0x7f0000000780)="9cf1463a4f2af2f96a471de25f1f7d08", &(0x7f0000000840)="f1791021a4e8de8eb7a7a5582a07b8e98dbec9c3f0e430847b62aeb1bba69be3b47c09501c36a415ef504b761e19b1d52a6a0ab63fc3178742db3aaaa9da3255ea73208a1c284feeb55c08e3fcdff92ce0a6f583773d801ce3bfcd00ab1e46a2a8c8e5d177c0a88fb8b123159bb873a60ec425fde6c19d1e461cf1a5aeb56015874e4890dfb7c685d697aaa4f456"}}, &(0x7f00000007c0)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)
syz_mount_image$fuse(0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_pts(r1, 0x141601)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x43, 0x4)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0)
ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000100)={0x8, 0x2, 0xce7, 0x6, 0x7, "0741354fd0a75136d52ad46a076b66fd337c36", 0x76e5})
close_range(r0, 0xffffffffffffffff, 0x0)

3m7.216184552s ago: executing program 0 (id=738):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0xa, 0xffffffff}]}, @enum]}}, &(0x7f0000000f40)=""/4086, 0x3a, 0xff6, 0x8, 0x7}, 0x28)

3m7.006237144s ago: executing program 0 (id=742):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x803, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xec)
socket$inet6(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
getpid()
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x9, 0x1, "cdaaf1", 0x3, 0x7, "8e60c15df36640acbce967e3e19d05dc5dd83ba298452e1b35c4a49ec78e56646874086553f36812819d35d5b6582eb675271ae90c090d172912fb7a10a55b9dff73f2a3e5424d2d4007e168ee80ba624185929136a7a9a4e818e91d439c8290c8d81c64a31cd3371b338be158a092d3c7aa8333083dc9581f700354ee4a14b7b5ae3ff2fb1f108b03fd189a72d141cb17c8a62ee457183a331cb1f91a43d32d1e3ad225bf38823cfe8bbb251381862fca291e50b580118c6dd0337fa73815b8ab6a9883299fea154fbb99d7ed794159fb7d59ad9193e1487e53e929784790e8fae420a0748f6da4856119e5c22d5a15"}, {@none, 0x9, 0x1, "934479", 0xe, 0x5, "a63b657443c6f8ed6b53826d51eac3616c07dfe09fe6efd8e74255f0081b4fac0747f5ce2531907337994eb30bab94b5b30e8b5d6c35569060dea2bd369c06877688358f5172452535cff4d3836726fa2094965f435c64ce98e4ff210722666285fee85395f91796a4716c9c735d52b9427c1d76d281be037f6461c931086aa052204f927578b23fde572778b3e92073d17bd9c549e3f4058af41520984cf2a186ec09e4f493b82fa9b08d94a564b2d43f5545f5fdf7367244d57047cae8fd2bc72f022a4e6b57ff599cc8624fa985026a84d0b743b2451c3702e9dd3f5348470ee2acdcb3c4d667f487d8646dbaecee"}]}}}, 0x200)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
syz_open_dev$MSR(&(0x7f0000000040), 0x7, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')
pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000102030000000000000000000a000008300001802c0001"], 0x44}, 0x1, 0x0, 0x0, 0x14840}, 0x10)

3m6.276164147s ago: executing program 0 (id=745):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@minixdf}, {@grpquota}, {@auto_da_alloc}, {@grpquota}]}, 0xfe, 0x572, &(0x7f0000000240)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x4, 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81)
ioctl$FITRIM(r1, 0x40086604, &(0x7f00000000c0)={0x746e, 0x731b, 0x7ffff8})
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r2=>0x0)
ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000100))
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x24}, 0xfffffffffffffdcb)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)

3m5.582864597s ago: executing program 0 (id=748):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"})
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x1200840, &(0x7f0000000640)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r1, @ANYBLOB="ac1c647f10d8ec09d5318dc1b6ce4d7e72be50cce2fe691f9b59f973dc82412ea16286c15c1a74e0973fb8c7cde39ebf1731235bbd862e32462d423a0b0d0b3559ee38c05153bcea69e8b02eb8151b8eab31595f66a5a14b97fbaa4b83be39c7c99ad466ec7bc0d045b193f081227bf09fa93d4aac93e77305fe57268e3970f833304d8d088860dfbc76f924f795e099e8db481e3ddc42d4d1816cb146b3f355a4867b5032", @ANYRESOCT=r1], 0x3, 0x3ad, &(0x7f0000000280)="$eJzs3UFoHOUXAPC3mU02+f/bJgdBKgijN0FLWw+iFxskhWIuVZaqBzHYVEs2CgkuJodu04v0KPSoJ28e9OChN0FERXrz0KsVpCoetLeCpSOzM7M7201toKS1+Psdltc3733zze5sd7LZ/fLGkVg5ORmnrl27GtPTjSwijsT1RsxFEpWzMW5qmxwA8GC4nmXxZ1aI+HInLY3dnxUAsJv6r/9v7a1lzn07jL8Zq8+KV//JezE3AGB3lD//z9RzyS0102NdM7s9LQBgF+Wv/9GsJR4fK6n9qr85dm0AADx4Xn71tRfnFyNeStPpiNUPuu1uO54bbp8/FaejE8txMGbjRkTxQYH8ptG/PXpsceFgmqa9+GUu2nlHtx3T0eu2iyuF+aTf34pDMRtzZX/5aYMsy5KjXywuHEr7IuJsrzuZj7La6LYn++8yzM/E6R//F8txONJ4aKw/4tjiwuCapL3a688/VicjtobvW+TzPxCz8cOb8W504mTkvdVlzeLCmUNp+kK2uKcx7O91261+XWH8HRAAAAAAAAAAAAAAAAAAAAAAALgbB4q1d/amaTo3WD8nWx2s33OgLCi3/z8i2v31AttFf7k+0FaxPlDWyiLL/nj/qfb5JEbWB+ov8JOPXy3W027GxP07bAAAAAAAAAAAAAAAAAAAAPhXWd+YiqVOZ3ltfWNzpR701tY3JiIiz7zz/Wdfz8T5fRHDmplygNGukaBZltQ2pcOuLKmKs2SkpgySfOeNZpH59OJgxrWa2lEM2yeGNa1bNo0Eex/7+aPNlWqER5Oq6+awJoltj2szGZ3G+sZma3Bcq/uKqNp04fb3z3hw+A41V7Isu137mdfHu6IR0Yyd7n2HQZYH3119e//TgwUcssITT86euHLhk99Wljr5nnOdztTa+o1sZan89/Yn21jQqk6bpHb+NMqTrVE/E5pfTd08vuc2I2+NZpaSy7+/8siHl8rMRO1h2mYa2YlLw8x729QkxU4/rzKX9xdPh6miJp/moPj5PMjvo7FxqmfJHe+WZ+KuHriHPz6ydPHMT7/utKv2n4SFOgAAAAAAAAAAAAAAAAAA4J6ofVe8VH7Zd/Kfup49vvszAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB7Z/j3/wdBTGzdktlZ8FcvqsyJqDa1lteWz8VUbY9z9/FoAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4r/o7AAD///CXRjo=")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
setresuid(0xee01, 0x0, 0xffffffffffffffff)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2d02}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000078c0), 0x200)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000007900)={{0x3, 0x2, 0x1, 0x2, 0xfffffefd}, 0x2, 0xfeffffffffffffff})
timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x1, @thr={&(0x7f0000000780)="9cf1463a4f2af2f96a471de25f1f7d08", &(0x7f0000000840)="f1791021a4e8de8eb7a7a5582a07b8e98dbec9c3f0e430847b62aeb1bba69be3b47c09501c36a415ef504b761e19b1d52a6a0ab63fc3178742db3aaaa9da3255ea73208a1c284feeb55c08e3fcdff92ce0a6f583773d801ce3bfcd00ab1e46a2a8c8e5d177c0a88fb8b123159bb873a60ec425fde6c19d1e461cf1a5aeb56015874e4890dfb7c685d697aaa4f456"}}, &(0x7f00000007c0)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)
syz_mount_image$fuse(0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_pts(r1, 0x141601)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x43, 0x4)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0)
ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000100)={0x8, 0x2, 0xce7, 0x6, 0x7, "0741354fd0a75136d52ad46a076b66fd337c36", 0x76e5})
close_range(r0, 0xffffffffffffffff, 0x0)

3m4.269538404s ago: executing program 7 (id=755):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000080))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

3m4.182292149s ago: executing program 0 (id=756):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x2f)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000500)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@dax_inode}, {@nojournal_checksum}, {@noauto_da_alloc}], [{@obj_type={'obj_type', 0x3d, '-!!}*@\xc3\xe8P\xe4(\xb1\x1f1\xa1-7\xa3\x9a\xb0C\x84Q\x9d\x7fiuP\xf9\xf9(\xb8\xa3\xac\xc12\xebg\xaa\xb8@\x00\x9a\xef$\x83\xc8\x00\x89\xc7\x19\x9f3$d\x1d\xcfY\xd5S]\xfa\x1bZ4\x8b\tK\xc9W\x87\xd4q\xfeS\xe9\x12\xb2\xc21\x1e\f\xaf\xb3\x04E2T\xdb\xd1\x9a-|\x8e\x9a\x9e\xd4\xb7eU\xa1\xef\xa8\x93\x8cvW\x9bYcG\x97s\x1e\xc6\xe8L5\xaddxlZ\x9d\x18y;\xbfE\xa0n\xc7\x02\r\xaa\t\x19\x17W\xa8\x82|\xc8o.\xd8\x954\xc0\x87\x06\x8d\xf4\x9eh\xfa\x90\xf5n\xfc#f2\xa6\x9e\xfc\xb8\x94\x14\x99\xfd\xc9\xe2\x92\xca\xf33\xea\xd2\v*f=\x9fJ\xdb\xbaSIy\xf6\xfc\xca>\xa5\xa1\xe9\x88\xa4a\xcd\xc7\x825L\x8bt\x87\xa9i\xcd\xd2A|}\xe5\xc7)X\x93\x9aM\"5\x03ni\n\xe9s\x92\xf8Qs\xa3\x9c}\x05\xcc\xeaO\x87\xe0\x98\xae\xa3=\x92\x16\xbb\xb3\xe1A\xae\xce\x1epF6W\xba6<,k6N\xeby\x88Kuw%\x11?iaj\xc7\xb3Y!\x06\xa5X+\x12%\xe0\xbeX\xf9\xa1`G4\xa4u\x8eB\x86\x01\x9a\xcd\xee6\xd6Y\xb4k\xe7}\x88\x8b\xb7_\xcfM\x9b\xe2\x86\xb1\xde\x0e\xfb\xbd\x19\x13\"\x90\xab\x85\xc18!\xee\b\x16\xd2\xcaZ\x96\\\xabd\xe3\xd7\x0f\xa9P\xa6\x97\x14\xb8n\x8c\x1d\xdag\xa4\xb7@\xc4\xc6QJ\xb6xW\x98\xc0\xfaS\x9f2\xb5\xbc\xa6\x131;\x90\xf9\xe1\xbe\x982J\xa5\b\xbf\x9e'}}]}, 0x3, 0x441, &(0x7f0000000ac0)="$eJzs281vG0UbAPBn7Th9+/UmlPLRtECgICI+kiYt0AMXEEgcQEKCQzmGJK1C0gY1QaJVBClC5YgqcUcckfgLOMEFASckrnBHlSqUSwsno7V3E8exUyfYcal/P2mTmd1xZh7Pjj27kw2gZw2nP5KIAxHxW0QMVLMbCwxXf91aXZ76a3V5Koly+a0/k0q5m6vLU3nR/HX7s8xIIaLwaRJHG9S7eOny3OT8/MzFLD+2dP79scVLl5+dPT95bubczIWJ06dPnRx/4fmJ59oSZ9qmm0MfLRw78to7196YOnPt3Z++SfL46+Jok+GtDj5RLre5uu46WJNO+rrYELalGBFpd5Uq438girHeeQPx6iddbRzQUeVyuby/+eGVMnAXS6LVknPZ5wVwd8i/6NPr33zbpanHHeHGS9ULoDTuW9lWPdIXhaxMqe76tp2GI+LMyt9fplt05j4EAMAG36Xzn2cazf8KcX9Nuf9na0ODEXFPRByKiHsj4nBE3BdRKftARDy4zfrrF0k2z38K13cUWIvS+d+L2drWxvlfPvuLwWKWO1iJv5ScnZ2fOZG9JyNR2pPmx7eo4/tXfv282bHa+V+6pfXnc8GsHdf79mx8zfTk0uS/ibnWjSsRQ32N4k/WVgKSiDgSEUM7rGP2qa+PNTvWLP5SK3+4DetM5a8inqz2/0rUxZ9Ltl6fHPtfzM+cGMvPis1+/uXqm83qv33/d1ba//sanv9r8Q8mteu1i9uv4+rvnzW9ptnp+d+fvF1J92f7PpxcWro4HtGfvF5tdO3+ifXX5vm8fBr/yPHG4/9QrL8TRyMiPYkfioiHI+KRrO2PRsRjEXF8i/h/fPnx93Yef2el8U/X9P+VtSPN+n890R/1exoninM/fLuh0sH1ZGv9f6qSGsn2tPL510q7dnY2AwAAwH9PISIORFIYXUsXCqOj1f+XPxz7irGwuPT02YUPLkxXnxEYjFIhv9M1UHM/dDy7rM/zE3X5k9l94y+Keyv50amF+eluBw89bn+T8Z/6o9jt1gEd53kt6F3GP/Qu4x96l/EPvavB+N/bjXYAu6/R9//HXWgHsPvqxr9lP+ghrv+hdxn/0LuMf+hJi3vj9g/JS0hsSkThjmiGRIcS3f5kAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AgAA///+neCS")
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
fdatasync(0xffffffffffffffff)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x80000800, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@remote, 0x4, 0x33}, 0x2, @in6=@mcast1, 0x3505, 0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)

3m3.715599167s ago: executing program 44 (id=756):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x2f)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000500)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@dax_inode}, {@nojournal_checksum}, {@noauto_da_alloc}], [{@obj_type={'obj_type', 0x3d, '-!!}*@\xc3\xe8P\xe4(\xb1\x1f1\xa1-7\xa3\x9a\xb0C\x84Q\x9d\x7fiuP\xf9\xf9(\xb8\xa3\xac\xc12\xebg\xaa\xb8@\x00\x9a\xef$\x83\xc8\x00\x89\xc7\x19\x9f3$d\x1d\xcfY\xd5S]\xfa\x1bZ4\x8b\tK\xc9W\x87\xd4q\xfeS\xe9\x12\xb2\xc21\x1e\f\xaf\xb3\x04E2T\xdb\xd1\x9a-|\x8e\x9a\x9e\xd4\xb7eU\xa1\xef\xa8\x93\x8cvW\x9bYcG\x97s\x1e\xc6\xe8L5\xaddxlZ\x9d\x18y;\xbfE\xa0n\xc7\x02\r\xaa\t\x19\x17W\xa8\x82|\xc8o.\xd8\x954\xc0\x87\x06\x8d\xf4\x9eh\xfa\x90\xf5n\xfc#f2\xa6\x9e\xfc\xb8\x94\x14\x99\xfd\xc9\xe2\x92\xca\xf33\xea\xd2\v*f=\x9fJ\xdb\xbaSIy\xf6\xfc\xca>\xa5\xa1\xe9\x88\xa4a\xcd\xc7\x825L\x8bt\x87\xa9i\xcd\xd2A|}\xe5\xc7)X\x93\x9aM\"5\x03ni\n\xe9s\x92\xf8Qs\xa3\x9c}\x05\xcc\xeaO\x87\xe0\x98\xae\xa3=\x92\x16\xbb\xb3\xe1A\xae\xce\x1epF6W\xba6<,k6N\xeby\x88Kuw%\x11?iaj\xc7\xb3Y!\x06\xa5X+\x12%\xe0\xbeX\xf9\xa1`G4\xa4u\x8eB\x86\x01\x9a\xcd\xee6\xd6Y\xb4k\xe7}\x88\x8b\xb7_\xcfM\x9b\xe2\x86\xb1\xde\x0e\xfb\xbd\x19\x13\"\x90\xab\x85\xc18!\xee\b\x16\xd2\xcaZ\x96\\\xabd\xe3\xd7\x0f\xa9P\xa6\x97\x14\xb8n\x8c\x1d\xdag\xa4\xb7@\xc4\xc6QJ\xb6xW\x98\xc0\xfaS\x9f2\xb5\xbc\xa6\x131;\x90\xf9\xe1\xbe\x982J\xa5\b\xbf\x9e'}}]}, 0x3, 0x441, &(0x7f0000000ac0)="$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")
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
fdatasync(0xffffffffffffffff)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x80000800, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@remote, 0x4, 0x33}, 0x2, @in6=@mcast1, 0x3505, 0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)

3m3.689617408s ago: executing program 7 (id=759):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000440)=[{0x4, 0x4}, {0x6, 0xff, 0x0, 0x7fff0000}]})
fchown(0xffffffffffffffff, 0x0, 0xee01)

3m3.451949222s ago: executing program 7 (id=761):
socket$unix(0x1, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@init_itable}]}, 0xff, 0x55c, &(0x7f0000000440)="$eJzs3c9rHFUcAPDvbDb9rU2hFPQgwR6s1G6axB8VPNSjaLGg97ok01Cy6ZbspjSxYHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzUx+7ubntkndzwdm+97O27757pv3+mbelA2gZw1mL6WIVyLi2yTi+Ip95ch3Di6Wm396eyzbklhY+OyvJJL8vaJ8kv95tMiUI377OuJsaVWVA9lLY3ZuslqrpdP5m0PNqRtDjdm5c9emqhPpRHp9ZHT0wjujI++/9+7aQ07u7DDWNy//88OnDz+68M3p+e9/eXzifhIX41i+b2Ucu7Dq0AZjMP9O+uPimoLDXahsP0n2+gDYkb68n/dHNgYcj7681wP/f19FxALQoxL9H3pUMQ8oru27dB38wnjy4eIF0Pr4y4v3RuJQ69royHyy6sooKW5k7FJWx69/PrifbdG9+xAAm7pzNyLOl8vrx78kH/927vwWyqytw/gHz8/DbP7zVrv5T2lp/hNt5j9H2/Tdndi8/5ced6GajrL53wdt57/5otVADPTluZda2f7k6rVamo1tL0fEmeg/mOU3Ws+5MP9oodO+lfO/bMvqL+aC+XE8Lh9c/ZnxarO6u6iXPbkb8Wrb+W+y1P5Jm/bPvo/LW6zjVPrgtU77No//2Vr4OeKNtu2/vKKVbLw+OdQ6H4aKs2K9v++d+r1T/Xsdf9b+RzaOfyBZuV7b2H4dPx36N+20r2P8B4oS7c//A8nnrXRR7Fa12ZwejjiQfLL+/ZHlzxb5onwW/5nTG49/7c7/wxHxxRbjv3fyXseiu2r/Liy6ZvGPb6v9t5949PGXP24//kv53Yms/d9ulT2Tf2Yr499WD3D33yAAAAAAAADsH6WIOBZJqbKULpUqlcXnO07GkVKt3mievVp/PVr7Ws8/lIqV7uMrnocYzp+HLfIja/KjEXEiIr7rO9zKV8bqtfG9Dh4AAAAAAAAAAAAAAAAAAAD2iaMd/v9/5o++vT464Jnzk9/Quzbt/934pSdgX/LvP/Qu/R96l/4PvUv/h96l/0Pv0v+hd+n/0Lv0fwAAAAAAAAAAAAAAAAAAAAAAAAAAAOiqy5cuZdvC/NPbY1l+/ObszGT95rnxtDFZmZoZq4zVp29UJur1iVpaGatPbfb31er1G8MjMXNrqJk2mkON2bkrU/WZ680r16aqE+mVtP+5RAUAAAAAAAAAAAAAAAAAAAAvlsbs3GS1VkunJSR2lCjvj8OQ6HJir0cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFj2XwAAAP//4Uw7cA==")
chdir(0x0)
setxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [], {0x4, 0x7}, [], {}, {0x20, 0x2}}, 0x24, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x143142, 0x40)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2}}, 0xe8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
capset(&(0x7f0000000380)={0x20071026}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
r1 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0)
r3 = syz_open_procfs(r1, &(0x7f0000000040)='stat\x00')
pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4)

3m2.28569146s ago: executing program 7 (id=767):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2000759, &(0x7f0000000640)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x6}}, {@usrquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}, 0x0}, {@stripe={'stripe', 0x3d, 0x9}}, {@nobh}, {@dax_inode}, {@mblk_io_submit}, {@dax_always}, {@usrjquota}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x724}}, {@usrquota}, {@jqfmt_vfsold}, {@journal_checksum}, {@journal_checksum}], [{@audit}, {@fowner_gt}, {@audit}], 0x2c}, 0x6, 0x50c, &(0x7f0000000a40)="$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")
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x4000, &(0x7f0000000940)=ANY=[@ANYRES64=0x0], 0x1, 0x2c1, &(0x7f0000000400)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet(0x2, 0x801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r3, &(0x7f0000000780)}, 0x20)

3m0.876959223s ago: executing program 7 (id=771):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328)

3m0.635083937s ago: executing program 45 (id=771):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328)

2m45.958417536s ago: executing program 3 (id=809):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)

2m45.284857106s ago: executing program 3 (id=811):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x24008800, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)="e7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)}], 0x1}}], 0x2, 0x880)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x4de, 0x0, 0x1, 0x0, @dev, @local, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast2}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast, 0x3}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x7, 0x20, 0xffffffff, 0x0]}]}}}}}}}, 0x0)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd14b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee5", 0xda, 0x805, 0x0, 0x0)

2m44.959400145s ago: executing program 3 (id=814):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2000759, &(0x7f0000000640)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x6}}, {@usrquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}, 0x0}, {@stripe={'stripe', 0x3d, 0x9}}, {@nobh}, {@dax_inode}, {@mblk_io_submit}, {@dax_always}, {@usrjquota}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x724}}, {@usrquota}, {@jqfmt_vfsold}, {@journal_checksum}, {@journal_checksum}], [{@audit}, {@fowner_gt}, {@audit}], 0x2c}, 0x6, 0x50c, &(0x7f0000000a40)="$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")
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x4000, &(0x7f0000000940)=ANY=[@ANYRES64=0x0], 0x1, 0x2c1, &(0x7f0000000400)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet(0x2, 0x801, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r3, &(0x7f0000000780)}, 0x20)

2m42.252890534s ago: executing program 3 (id=818):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write$bt_hci(r1, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa)
sendfile(r1, r0, 0x0, 0x40001)

2m41.223081663s ago: executing program 3 (id=820):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x880, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x408e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x5, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xae2, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x7, 0x7, 0x8ac1, 0x3, 0x4, 0x401, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0x2, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48)

2m38.298151374s ago: executing program 3 (id=828):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000001ec0))
madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x15)

2m21.622452771s ago: executing program 46 (id=828):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000001ec0))
madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x15)

1m25.545526233s ago: executing program 1 (id=1007):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
getpriority(0x1, r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
syz_open_procfs(0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil)
syz_open_procfs(0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80040c, &(0x7f0000000440)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965720063726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYBLOB="3ef628a9ecf9e1751ed9b65d6a5359bd9afb81136cbff69e1bdbcb39d60e9b32d9f142ac189ae0d659610ddf0bf8c95e8f1a51f27bbb9098900d07e5f0303418856a470de86ec769d69ea60f0ea33a2089c2a2d372ec5958bbc02c2b4d00f71d7062876aa812e57f7333fa60a4d976aba0ce610efbc27f6cd9f0eee7074c05c92ae57e5e1b9afed08d27df4b8b9fb9a30a14a0b4a82028df4924d31f4c15fe48e62ddf7437e325ec87679945ecbaeda079054d10574c0036c82e2fbc9d073f4f6644162662a8dc5700d5943d13b93f9868919746c86a6d48", @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYBLOB="a520ad23321534a883fa116848e7295e8693132df1638d943e7dacc03c8d2d9fca2aeb72f72ed82af2ceb592a5eea7e56631ff9ac0d92bcc666859b316fd2ac8694577d071f3f31f92dfdbdd695e5edca5b90abb53107e708b90150fc9eee8418e9511b8a4ce6f69a31472378258a55e8aa64d4a9859bfb3d6d3e49cf0a4c8b0044d37812dd15af758d8177ad1d630193b27881a8a06b8221dbceefe3fbf199b81bc31338d35cf4cb9f7f28e7abc55afd41f3a8b4a1e3fc4cd2dece6d1659ab1fc8511c18f9bd3c80004efbd7cfda12866316c01cc4a69ca09f85189380f835231d8ae5332237152dc3ed45d7f88", @ANYRES64, @ANYRESDEC], 0x1, 0x703, &(0x7f0000001f80)="$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")

1m25.104611259s ago: executing program 1 (id=1008):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x0)
bind$inet6(r1, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x974c, 0x7})
r8 = fcntl$dupfd(r0, 0x406, r0)
write$cgroup_pid(r8, &(0x7f0000000240), 0xb375)

1m23.89289083s ago: executing program 1 (id=1010):
r0 = socket$inet6(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f006e409000000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd4e32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe406000049f0d4794eedfca92c09aa93e7a90ab79a6f00a1960548deac279c00"/252, 0xfc)

1m23.731588369s ago: executing program 1 (id=1012):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002f00)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c000200a200000004000000532e3e7997a02cce0e62e3c31aa6"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

1m23.594664468s ago: executing program 1 (id=1013):
socket(0x28, 0x5, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x7c2)
syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a010000090780000132a69cb8fd05417120af9897b010000000000"], 0x0)
r1 = socket(0x28, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x16)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$inet6(0xa, 0x2, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)

1m22.753774257s ago: executing program 1 (id=1014):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "73cd11", 0x8, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x9, 0x6}}}}}}, 0x0)

1m6.133900379s ago: executing program 47 (id=1014):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "73cd11", 0x8, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x9, 0x6}}}}}}, 0x0)

13.901323407s ago: executing program 9 (id=1134):
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x7, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000104010300000000000000000a00000105000100010000000a000200ffffff6601"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

11.401077973s ago: executing program 8 (id=1142):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r1=>0x0}, &(0x7f00000001c0)=0xc)
setregid(r1, r1)

11.374730635s ago: executing program 8 (id=1143):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc2000000000001090224000100000003090400000103000300092130b4000122060009058103"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)={0x0, 0x9, 0x1})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000010000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x20)

8.309972594s ago: executing program 9 (id=1149):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000)

5.875787427s ago: executing program 9 (id=1159):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80b04)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r2 = dup3(r0, r1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0))

5.457266341s ago: executing program 9 (id=1161):
syz_usb_connect(0x2, 0x47, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000, 0x1}, 0x20)
close(r0)
sigaltstack(0x0, 0x0)
rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
socket$netlink(0x10, 0x3, 0x0)

4.662512978s ago: executing program 5 (id=1162):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x44, 0x7b1, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x8000, 0x1b2)
getdents(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
prlimit64(0x0, 0x2, 0x0, &(0x7f0000000280))

4.128885859s ago: executing program 2 (id=1164):
r0 = fanotify_init(0x20, 0x800)
socket$inet6(0xa, 0x80003, 0x6)
getpgrp(0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
socket$packet(0x11, 0x3, 0x300)
r3 = dup(r2)
fanotify_mark(r0, 0x1, 0x8000003, r3, 0x0)
ftruncate(r3, 0xaa0b)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendfile(r4, r3, 0x0, 0x4)

4.047492113s ago: executing program 9 (id=1165):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x40040)

3.866063814s ago: executing program 4 (id=1166):
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x6, 0xfffffe01, 0x7fff, 0xb2, "20ab980900eea4a7446c180000cd681ec267a0", 0x6, 0xd})
ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0)

3.798418548s ago: executing program 8 (id=1167):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_buf(r0, 0x1, 0xd, &(0x7f00000002c0)=""/225, &(0x7f0000000080)=0xe1)

3.670435555s ago: executing program 8 (id=1168):
getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000001180), &(0x7f0000000000)=0x4)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001b40)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x100, @private=0xa010101}]}, &(0x7f0000000240)=0x10)
getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006)

3.60066432s ago: executing program 5 (id=1169):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x8000000)
sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700", 0x28, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14)

3.200899663s ago: executing program 5 (id=1170):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x803, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xec)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
getpid()
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x9, 0x1, "cdaaf1", 0x3, 0x7, "8e60c15df36640acbce967e3e19d05dc5dd83ba298452e1b35c4a49ec78e56646874086553f36812819d35d5b6582eb675271ae90c090d172912fb7a10a55b9dff73f2a3e5424d2d4007e168ee80ba624185929136a7a9a4e818e91d439c8290c8d81c64a31cd3371b338be158a092d3c7aa8333083dc9581f700354ee4a14b7b5ae3ff2fb1f108b03fd189a72d141cb17c8a62ee457183a331cb1f91a43d32d1e3ad225bf38823cfe8bbb251381862fca291e50b580118c6dd0337fa73815b8ab6a9883299fea154fbb99d7ed794159fb7d59ad9193e1487e53e929784790e8fae420a0748f6da4856119e5c22d5a15"}, {@none, 0x9, 0x1, "934479", 0xe, 0x5, "a63b657443c6f8ed6b53826d51eac3616c07dfe09fe6efd8e74255f0081b4fac0747f5ce2531907337994eb30bab94b5b30e8b5d6c35569060dea2bd369c06877688358f5172452535cff4d3836726fa2094965f435c64ce98e4ff210722666285fee85395f91796a4716c9c735d52b9427c1d76d281be037f6461c931086aa052204f927578b23fde572778b3e92073d17bd9c549e3f4058af41520984cf2a186ec09e4f493b82fa9b08d94a564b2d43f5545f5fdf7367244d57047cae8fd2bc72f022a4e6b57ff599cc8624fa985026a84d0b743b2451c3702e9dd3f5348470ee2acdcb3c4d667f487d8646dbaecee"}]}}}, 0x200)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
syz_open_dev$MSR(&(0x7f0000000040), 0x7, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')
pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000102030000000000000000000a000008300001802c0001"], 0x44}, 0x1, 0x0, 0x0, 0x14840}, 0x10)

2.182660222s ago: executing program 5 (id=1171):
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28)
close(r0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_disconnect(0xffffffffffffffff)
r2 = syz_pidfd_open(r1, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
r5 = pidfd_getfd(r4, r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}})

2.181833363s ago: executing program 8 (id=1172):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fedcdf250300000008000100", @ANYRESOCT=0x0], 0x20}, 0x1, 0x0, 0x0, 0x4004800}, 0x4)
listen(r1, 0x20)
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$eJzs3TFrE2EYB/DHNm1DFjuLw4GLU1C/wSEVxAMhkkEnD6pLK8J1OZ3uY/gZ/Eh+jEzdTpIrTRujiyav6f1+EPInfw6ey5A3w/sm7x9+Ojv9fPGx/fEthsMsBhFNXEYcx17sR+fe1fPeIh/GTU0AALtmMinz1DOwWVWVlwcRcfRLM/2eZCAAAAAAAAAAAAD+mv3/ANA/9v/ffVWVl6Or72+32f8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApHPZtvfbPzxSzwcA/HvWfwDoH+s/APSP9R8A+ufN23ev8qI4mWTZMGLW1O381VlTTyNGEfHiZXHyJFs4Xl41q+vp/iLN+6ddn93uD66vf7a2P4zHj7p+3j1/Xaz0R3G6jTcAAAAAAAAAAAAAAAAAAAAA/gPj7Nra8/3j8e/6Lt34fYCV8/uDeDDY2m0AAAAAAAAAAAAAAAAAAADATrv48vWsPD//UAmC0NMwWlOl/mQCAAAAAAAAAAAAAAAAAID+WR76TT0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKSz/P//zYXU9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w88AAAD//9vbk2A=")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = syz_open_dev$loop(&(0x7f0000000540), 0xf, 0x602)
ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f0000000580))
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x18082, 0x0)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')
r5 = syz_io_uring_setup(0x760d, &(0x7f0000000300)={0x0, 0xaee2, 0x1000, 0x3, 0x39e}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000180)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}})
io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0)
shutdown(r1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file2\x00', 0x2, &(0x7f0000000600)={[{@data_err_abort}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@noload}, {@debug}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}], [{@context={'context', 0x3d, 'staff_u'}}, {@dont_appraise}]}, 0xfa, 0x477, &(0x7f00000000c0)="$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")

2.176672763s ago: executing program 2 (id=1173):
unshare(0x400)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r0, 0x4)

2.006222473s ago: executing program 2 (id=1174):
setresgid(0xee00, 0xee00, 0x0)
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)

1.957487226s ago: executing program 2 (id=1175):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {@quota}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x57d, &(0x7f0000000c80)="$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")
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xa4000061)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

1.956977256s ago: executing program 4 (id=1176):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000d00)="$eJzs3cFq1EAcBvB/220be7Fn8RDw4qmobxBkBTEgrOSgJwPVSytCeome9jF8Bh/Jx+ipt4hN6NZUPUjadJvfD5Z87MfAzGVnDzO77x9+Ojr8fPKx+fEtkiSNWcQyziL2YzO2orXRPTfP805ctgwAYN0sFmU29hwY0MbVt6oqK7cjYvdKU3y/mUkBAAAAAAAAAAAwNOf/AWB6nP+/+6oqK/e672+/c/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGM9Z09xv/vEae34AwPDs/wAwPfZ/AJge+z8ATM+bt+9eZXk+X6RpEnG6rIu6aJ9t/+JlPn+SnttfjTqt62K7y/n8adun/X6vG//sj/1OPH7U9r+656/zXr8bh9e9eAAAAAAAAAAAAAAAAAAAALglDtILvfv9W21/8Le+TZd+H6B3f38WD2Y3tgwAAAAAAAAAAAAAAAAAAABYaydfvh6Vx8cfKkG4CPfiP0YlcTsmLwwSxv5kAgAAAAAAAAAAAAAAAACA6Vld+h17JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwntX//19fGHuNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDT8DAAA//8GmZGk")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x40, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x2)

1.841794203s ago: executing program 8 (id=1177):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc2000000000001090224000100000003090400000103000300092130b4000122060009058103"], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)={0x0, 0x9, 0x1})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000010000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x20)

1.650244264s ago: executing program 9 (id=1178):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x25, 0x1, 0x0)
recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200), 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0xf0)
sendto$inet6(r4, 0x0, 0x0, 0x44004, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)

1.649827264s ago: executing program 4 (id=1179):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x24008800, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)="e7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1}}], 0x2, 0x880)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
syz_emit_ethernet(0xaa, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x20, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x4de, 0x0, 0x1, 0x0, @dev, @local, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast2}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast, 0x3}, {@broadcast}]}]}}}}}}}, 0x0)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd14b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee5", 0xda, 0x805, 0x0, 0x0)

1.406971918s ago: executing program 2 (id=1180):
unshare(0x400)
r0 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @empty, 0x80ad}, 0xfffffffffffffd67)

1.352710541s ago: executing program 4 (id=1181):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385", 0x84}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857", 0xda}], 0x1}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1.19835929s ago: executing program 2 (id=1182):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = getpgrp(0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=0x1, 0xffffffffffffffff, 0x11}, 0x20)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
listen(r3, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x4e28, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x2, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466fb19f71e96642faa2300"}]}}}}}}}}, 0x0)
epoll_create1(0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@subsystem='memory'}]})
socket$igmp(0x2, 0x3, 0x2)
r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/fib_trie\x00')
read(r5, &(0x7f00000005c0)=""/4096, 0x1000)

1.157270723s ago: executing program 4 (id=1183):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x803, 0x0)
socket$inet6(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
getpid()
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x9, 0x1, "cdaaf1", 0x3, 0x7, "8e60c15df36640acbce967e3e19d05dc5dd83ba298452e1b35c4a49ec78e56646874086553f36812819d35d5b6582eb675271ae90c090d172912fb7a10a55b9dff73f2a3e5424d2d4007e168ee80ba624185929136a7a9a4e818e91d439c8290c8d81c64a31cd3371b338be158a092d3c7aa8333083dc9581f700354ee4a14b7b5ae3ff2fb1f108b03fd189a72d141cb17c8a62ee457183a331cb1f91a43d32d1e3ad225bf38823cfe8bbb251381862fca291e50b580118c6dd0337fa73815b8ab6a9883299fea154fbb99d7ed794159fb7d59ad9193e1487e53e929784790e8fae420a0748f6da4856119e5c22d5a15"}, {@none, 0x9, 0x1, "934479", 0xe, 0x5, "a63b657443c6f8ed6b53826d51eac3616c07dfe09fe6efd8e74255f0081b4fac0747f5ce2531907337994eb30bab94b5b30e8b5d6c35569060dea2bd369c06877688358f5172452535cff4d3836726fa2094965f435c64ce98e4ff210722666285fee85395f91796a4716c9c735d52b9427c1d76d281be037f6461c931086aa052204f927578b23fde572778b3e92073d17bd9c549e3f4058af41520984cf2a186ec09e4f493b82fa9b08d94a564b2d43f5545f5fdf7367244d57047cae8fd2bc72f022a4e6b57ff599cc8624fa985026a84d0b743b2451c3702e9dd3f5348470ee2acdcb3c4d667f487d8646dbaecee"}]}}}, 0x200)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
syz_open_dev$MSR(&(0x7f0000000040), 0x7, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')
pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000102030000000000000000000a000008300001802c0001"], 0x44}, 0x1, 0x0, 0x0, 0x14840}, 0x10)

284.174634ms ago: executing program 4 (id=1184):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"})
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x1200840, &(0x7f0000000640)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r1, @ANYBLOB="ac1c647f10d8ec09d5318dc1b6ce4d7e72be50cce2fe691f9b59f973dc82412ea16286c15c1a74e0973fb8c7cde39ebf1731235bbd862e32462d423a0b0d0b3559ee38c05153bcea69e8b02eb8151b8eab31595f66a5a14b97fbaa4b83be39c7c99ad466ec7bc0d045b193f081227bf09fa93d4aac93e77305fe57268e3970f833304d8d088860dfbc76f924f795e099e8db481e3ddc42d4d1816cb146b3f355a4867b5032", @ANYRESOCT=r1], 0x3, 0x3ad, &(0x7f0000000280)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
setresuid(0xee01, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2d02}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000078c0), 0x200)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000007900)={{0x3, 0x2, 0x1, 0x2, 0xfffffefd}, 0x2, 0xfeffffffffffffff})
timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x1, @thr={&(0x7f0000000780)="9cf1463a4f2af2f96a471de25f1f7d08", &(0x7f0000000840)="f1791021a4e8de8eb7a7a5582a07b8e98dbec9c3f0e430847b62aeb1bba69be3b47c09501c36a415ef504b761e19b1d52a6a0ab63fc3178742db3aaaa9da3255ea73208a1c284feeb55c08e3fcdff92ce0a6f583773d801ce3bfcd00ab1e46a2a8c8e5d177c0a88fb8b123159bb873a60ec425fde6c19d1e461cf1a5aeb56015874e4890dfb7c685d697aaa4f456"}}, &(0x7f00000007c0)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)
syz_mount_image$fuse(0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_pts(r1, 0x141601)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080))
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x43, 0x4)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0)
ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000100)={0x8, 0x2, 0xce7, 0x6, 0x7, "0741354fd0a75136d52ad46a076b66fd337c36", 0x76e5})
close_range(r0, 0xffffffffffffffff, 0x0)

154.171971ms ago: executing program 5 (id=1185):
r0 = socket$unix(0x1, 0x5, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20040054)

0s ago: executing program 5 (id=1186):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x786)
write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)

kernel console output (not intermixed with test programs):

 ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  281.123011][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  281.159970][ T6692] 8021q: adding VLAN 0 to HW filter on device team0
[  281.196645][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  281.231941][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  281.264827][ T4352] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.271982][ T4352] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.316078][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  281.341737][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  281.375228][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  281.401526][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.408697][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.472608][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  281.494242][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  281.539065][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  281.582304][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  281.612891][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  281.641297][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  281.659361][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  281.700734][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  281.720512][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  281.740340][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  281.759243][ T6692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  281.794163][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  281.899110][ T6900] loop0: detected capacity change from 0 to 128
[  285.020986][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  285.028486][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  285.108395][ T6692] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.458272][ T6932] loop0: detected capacity change from 0 to 1024
[  286.177658][ T6943] netlink: 168 bytes leftover after parsing attributes in process `syz.3.465'.
[  288.537310][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  288.636662][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  289.340988][ T4290] Bluetooth: hci3: command 0x0406 tx timeout
[  289.940485][ T6975] loop3: detected capacity change from 0 to 8
[  290.167793][  T154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.229143][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  290.247194][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  290.311051][  T154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.340576][ T6692] device veth0_vlan entered promiscuous mode
[  290.351379][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  290.370436][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  290.401220][ T6692] device veth1_vlan entered promiscuous mode
[  290.418430][  T154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.485092][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  290.494951][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  290.506954][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  290.527741][ T7001] loop0: detected capacity change from 0 to 2048
[  290.538347][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  290.549230][ T6692] device veth0_macvtap entered promiscuous mode
[  290.594353][  T154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.691967][ T6692] device veth1_macvtap entered promiscuous mode
[  290.709479][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.722610][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.733007][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.733519][ T7001] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none.
[  290.743503][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.743524][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.743537][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.743554][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.743566][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.743584][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.743596][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.744910][ T6692] batman_adv: batadv0: Interface activated: batadv_slave_0
[  290.838783][ T7001] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  290.856041][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.893570][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.925928][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.948464][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.976904][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.999561][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.009451][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.036698][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.046564][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.076644][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.120113][ T6692] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.188175][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  291.253308][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  291.275206][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  291.309828][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  291.350971][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  291.678936][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  292.816580][ T7032] loop0: detected capacity change from 0 to 1024
[  292.881476][ T6692] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.895618][ T7032] hfsplus: unable to parse mount options
[  292.918282][ T6692] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.927011][ T6692] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.955688][ T7039] netlink: 440 bytes leftover after parsing attributes in process `syz.1.486'.
[  292.974378][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'.
[  293.058587][ T7041] Zero length message leads to an empty skb
[  293.086254][ T6692] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.157196][ T7041] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  293.675534][ T4423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.713770][ T4423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.766947][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  293.859659][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.060198][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.083862][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  295.829877][ T7063] loop7: detected capacity change from 0 to 128
[  295.842215][ T7063] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  297.442674][ T7063] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  297.932734][ T5120] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  298.392044][ T5120] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30
[  298.413865][ T5120] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.451600][ T5120] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  298.489007][ T5120] usb 2-1: config 0 interface 0 has no altsetting 0
[  298.496546][ T5120] usb 2-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00
[  298.585379][ T5120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.633598][ T5120] usb 2-1: config 0 descriptor??
[  299.375424][ T7096] loop0: detected capacity change from 0 to 4096
[  299.628638][ T7096] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  299.772803][ T5120] chicony 0003:04F2:1123.0005: invalid report_count 15576
[  299.796457][ T5120] chicony 0003:04F2:1123.0005: item 0 2 1 9 parsing failed
[  299.839036][ T5120] chicony 0003:04F2:1123.0005: Chicony hid parse failed: -22
[  300.942623][ T5120] chicony: probe of 0003:04F2:1123.0005 failed with error -22
[  301.681556][ T4290] usb 2-1: USB disconnect, device number 5
[  301.966539][  T154] device hsr_slave_0 left promiscuous mode
[  301.974030][  T154] device hsr_slave_1 left promiscuous mode
[  302.151245][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  302.187137][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  302.247708][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  302.279778][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  302.571729][  T154] device bridge_slave_1 left promiscuous mode
[  303.199306][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.210590][  T154] device bridge_slave_0 left promiscuous mode
[  303.224262][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.276060][  T154] device veth1_macvtap left promiscuous mode
[  303.319476][  T154] device veth0_macvtap left promiscuous mode
[  303.671211][  T154] device veth1_vlan left promiscuous mode
[  303.681301][  T154] device veth0_vlan left promiscuous mode
[  303.940616][ T7134] 9pnet_virtio: no channels available for device syz
[  304.252087][ T7148] loop2: detected capacity change from 0 to 512
[  304.298035][ T7148] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  307.386403][  T154] team0 (unregistering): Port device team_slave_1 removed
[  307.530718][  T154] team0 (unregistering): Port device team_slave_0 removed
[  307.618948][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  307.674072][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.686602][ T7163] loop1: detected capacity change from 0 to 8192
[  308.744789][ T7169] loop7: detected capacity change from 0 to 512
[  308.785638][ T7163] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  308.828087][ T7169] EXT4-fs (loop7): Test dummy encryption mode enabled
[  308.846645][ T7169] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  308.922219][ T7169] EXT4-fs (loop7): SIPHASH is not a valid default hash value
[  308.934151][  T154] bond0 (unregistering): Released all slaves
[  310.222882][ T7175] loop1: detected capacity change from 0 to 1024
[  310.382537][ T7175] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002]
[  310.409780][ T7175] System zones: 0-1, 3-36
[  310.499860][ T7175] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.519: bad orphan inode 134217728
[  311.164914][ T7175] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,debug,journal_dev=0x0000000000000007,,errors=continue. Quota mode: writeback.
[  311.768512][   T26] audit: type=1804 audit(1770746102.597:8): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.519" name="/newroot/74/bus/bus" dev="loop1" ino=18 res=1 errno=0
[  312.101901][ T7191] loop1: detected capacity change from 0 to 512
[  312.212663][ T7191] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  312.300390][ T5120] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  312.327790][ T7191] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  312.392179][ T7191] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.524: Failed to acquire dquot type 1
[  312.460065][ T7191] EXT4-fs (loop1): 1 truncate cleaned up
[  312.471636][ T7191] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,resuid=0x0000000000000000,nodelalloc,dioread_nolock,quota,,errors=continue. Quota mode: writeback.
[  312.547700][ T7191] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  312.771225][ T5120] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  312.808567][ T5120] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  312.863109][ T5120] usb 1-1: config 0 interface 0 has no altsetting 0
[  313.691550][ T5120] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  313.734698][ T7179] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set
[  314.836600][ T5120] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  314.869061][ T5120] usb 1-1: Product: syz
[  314.873382][ T5120] usb 1-1: Manufacturer: syz
[  314.909560][ T5120] usb 1-1: SerialNumber: syz
[  314.979458][ T5120] usb 1-1: config 0 descriptor??
[  315.086357][ T5120] hub 1-1:0.0: bad descriptor, ignoring hub
[  315.101336][ T5120] hub: probe of 1-1:0.0 failed with error -5
[  315.137448][ T5120] usb 1-1: selecting invalid altsetting 0
[  315.273161][ T5120] usb 1-1: USB disconnect, device number 3
[  315.287911][ T7229] capability: warning: `syz.7.522' uses 32-bit capabilities (legacy support in use)
[  315.338170][ T5378] udevd[5378]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  315.498332][ T7233] loop0: detected capacity change from 0 to 4096
[  315.647025][ T7233] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  315.650722][ T7244] loop1: detected capacity change from 0 to 128
[  317.178270][ T7276] loop0: detected capacity change from 0 to 1024
[  320.777051][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  320.783424][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  320.928774][ T4415] hfsplus: b-tree write err: -5, ino 3
[  326.481679][ T7359] loop3: detected capacity change from 0 to 1024
[  329.504801][ T4352] hfsplus: b-tree write err: -5, ino 3
[  331.293887][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'.
[  331.908847][ T7407] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  331.918294][ T7407] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  331.927013][ T7407] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  331.935766][ T7407] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  332.175968][ T7407] device vxlan0 entered promiscuous mode
[  333.022350][ T7422] loop7: detected capacity change from 0 to 128
[  333.313492][ T7407] syz.3.571 (7407) used greatest stack depth: 20528 bytes left
[  335.368276][ T7444] loop1: detected capacity change from 0 to 1024
[  335.429997][   T26] audit: type=1326 audit(1770746124.729:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d81793f79 code=0x7ffc0000
[  335.544931][   T26] audit: type=1326 audit(1770746124.785:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d81793f79 code=0x7ffc0000
[  335.571056][ T7445] loop3: detected capacity change from 0 to 256
[  335.764972][   T26] audit: type=1326 audit(1770746124.785:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d81793f79 code=0x7ffc0000
[  335.807411][   T26] audit: type=1326 audit(1770746124.822:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d81793f79 code=0x7ffc0000
[  335.952255][   T26] audit: type=1326 audit(1770746124.822:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d81793f79 code=0x7ffc0000
[  336.258168][   T26] audit: type=1326 audit(1770746124.822:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d81793f79 code=0x7ffc0000
[  336.317082][   T26] audit: type=1326 audit(1770746124.822:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d81793f79 code=0x7ffc0000
[  336.386330][   T26] audit: type=1326 audit(1770746124.822:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d81793f79 code=0x7ffc0000
[  336.653802][   T26] audit: type=1326 audit(1770746124.822:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d81793f79 code=0x7ffc0000
[  338.960302][ T7471] loop7: detected capacity change from 0 to 512
[  338.969554][ T1275] hfsplus: b-tree write err: -5, ino 3
[  339.005831][   T26] audit: type=1326 audit(1770746124.822:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d81793f79 code=0x7ffc0000
[  339.132703][ T7471] EXT4-fs (loop7): VFS: Can't find ext4 filesystem
[  339.233341][ T7476] loop1: detected capacity change from 0 to 128
[  340.803183][ T7491] loop2: detected capacity change from 0 to 512
[  341.001646][ T7491] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  341.226444][ T7491] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  341.443125][ T7491] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  341.462158][ T7491] System zones: 1-12
[  341.474200][ T7491] EXT4-fs (loop2): orphan cleanup on readonly fs
[  341.509509][ T7491] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33619980: comm syz.2.595: invalid block
[  341.591396][ T7491] EXT4-fs (loop2): Remounting filesystem read-only
[  341.609094][ T7491] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.595: invalid indirect mapped block 2 (level 2)
[  341.709245][ T7491] EXT4-fs (loop2): Remounting filesystem read-only
[  341.720101][ T7491] EXT4-fs (loop2): 1 truncate cleaned up
[  341.742125][ T7491] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback.
[  342.979655][ T7502] loop7: detected capacity change from 0 to 8192
[  344.807630][ T7537] loop2: detected capacity change from 0 to 128
[  344.837819][ T7539] loop0: detected capacity change from 0 to 512
[  345.575712][ T7539] EXT4-fs (loop0): 1 truncate cleaned up
[  345.612289][ T7539] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none.
[  345.722412][ T7548] loop2: detected capacity change from 0 to 512
[  345.841481][ T7539] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.607: bg 0: block 465: padding at end of block bitmap is not set
[  345.883618][ T7548] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  345.954999][ T7548] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  345.994348][ T7548] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  346.002750][ T7539] EXT4-fs (loop0): Remounting filesystem read-only
[  346.013605][ T7548] System zones: 1-12
[  346.034263][ T7548] EXT4-fs (loop2): orphan cleanup on readonly fs
[  346.093810][ T7548] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.609: invalid indirect mapped block 2 (level 2)
[  346.743281][ T7548] EXT4-fs (loop2): Remounting filesystem read-only
[  346.788664][ T7548] EXT4-fs (loop2): 1 truncate cleaned up
[  346.794358][ T7548] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback.
[  349.786105][ T7593] loop1: detected capacity change from 0 to 512
[  349.993614][ T7593] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  350.140330][ T7593] EXT4-fs (loop1): 1 truncate cleaned up
[  350.146141][ T7593] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  351.061256][ T7609] loop1: detected capacity change from 0 to 1024
[  351.137064][ T7609] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,grpquota,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback.
[  351.153767][ T7609] EXT4-fs (loop1): shut down requested (1)
[  354.718085][ T7655] loop1: detected capacity change from 0 to 2048
[  354.941607][ T7655] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  355.053048][ T7655] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none.
[  355.058747][ T7665] loop2: detected capacity change from 0 to 512
[  355.127165][ T7665] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  355.233189][ T7665] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  355.336208][ T7665] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  355.373108][ T7665] System zones: 1-12
[  355.377562][ T7665] EXT4-fs (loop2): orphan cleanup on readonly fs
[  355.929124][ T7665] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.638: invalid indirect mapped block 2 (level 2)
[  356.004576][ T7665] EXT4-fs (loop2): Remounting filesystem read-only
[  356.466522][ T7665] EXT4-fs (loop2): 1 truncate cleaned up
[  356.598372][ T7681] loop0: detected capacity change from 0 to 256
[  356.653027][ T7677] loop1: detected capacity change from 0 to 512
[  356.677111][ T7665] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback.
[  356.941525][ T7681] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  356.998306][ T7677] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.639: bad orphan inode 15
[  357.010855][ T7681] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  357.021651][ T7681] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  357.043428][ T7677] ext4_test_bit(bit=14, block=5) = 0
[  357.048768][ T7677] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none.
[  357.073176][   T26] kauditd_printk_skb: 55 callbacks suppressed
[  357.073190][   T26] audit: type=1800 audit(1770746144.952:74): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.629" name="file1" dev="loop0" ino=1048629 res=0 errno=0
[  359.445239][ T7721] loop0: detected capacity change from 0 to 128
[  362.228705][ T7747] loop7: detected capacity change from 0 to 512
[  362.308075][ T7749] loop0: detected capacity change from 0 to 128
[  362.327372][ T7747] EXT4-fs (loop7): Ignoring removed orlov option
[  362.342137][ T7747] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  362.382658][ T7747] EXT4-fs (loop7): 1 orphan inode deleted
[  362.471811][ T7747] EXT4-fs (loop7): 1 truncate cleaned up
[  362.492788][ T7747] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,lazytime,,errors=continue. Quota mode: none.
[  362.704419][ T4290] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  363.038036][ T4290] usb 3-1: Using ep0 maxpacket: 32
[  363.173061][ T4290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  363.218528][ T4290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  363.899815][ T4290] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  363.909236][ T4290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.921689][ T4290] usb 3-1: config 0 descriptor??
[  363.922123][ T7770] loop1: detected capacity change from 0 to 512
[  363.928984][ T7771] loop0: detected capacity change from 0 to 1024
[  363.967318][ T7770] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  364.021708][ T7770] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  364.078835][ T7770] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  364.185131][ T7770] System zones: 1-12
[  364.220354][ T7770] EXT4-fs (loop1): orphan cleanup on readonly fs
[  364.282242][ T7770] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.662: invalid indirect mapped block 2 (level 2)
[  365.381759][ T7770] EXT4-fs (loop1): Remounting filesystem read-only
[  365.433581][ T4290] usbhid 3-1:0.0: can't add hid device: -71
[  365.441906][ T4290] usbhid: probe of 3-1:0.0 failed with error -71
[  365.480214][ T4290] usb 3-1: USB disconnect, device number 4
[  365.520748][ T7770] EXT4-fs (loop1): 1 truncate cleaned up
[  365.526546][ T7770] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback.
[  366.121364][ T7792] loop3: detected capacity change from 0 to 8
[  366.205555][    T9] hfsplus: b-tree write err: -5, ino 3
[  369.375244][ T7830] loop2: detected capacity change from 0 to 128
[  371.003502][ T7853] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  371.003502][ T7853] The task syz.3.670 (7853) triggered the difference, watch for misbehavior.
[  371.451132][ T7855] loop0: detected capacity change from 0 to 1024
[  371.502247][ T7859] loop2: detected capacity change from 0 to 8
[  371.643910][ T7855] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  373.009893][ T7885] loop3: detected capacity change from 0 to 512
[  373.141450][ T7885] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  373.206251][ T7885] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  373.285704][ T7885] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  373.343969][ T7885] System zones: 1-12
[  373.348858][ T7885] EXT4-fs (loop3): orphan cleanup on readonly fs
[  373.381225][ T7885] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.684: invalid indirect mapped block 2 (level 2)
[  373.395899][ T7885] EXT4-fs (loop3): Remounting filesystem read-only
[  373.405708][ T7885] EXT4-fs (loop3): 1 truncate cleaned up
[  373.412242][ T7885] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback.
[  373.784816][ T7900] loop7: detected capacity change from 0 to 128
[  373.895283][ T7900] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  374.048637][ T7900] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  376.647154][ T4233] Bluetooth: hci5: command 0x0406 tx timeout
[  377.339604][ T7946] loop2: detected capacity change from 0 to 128
[  377.549933][ T7951] loop7: detected capacity change from 0 to 128
[  377.579519][ T7953] attempt to access beyond end of device
[  377.579519][ T7953] loop2: rw=2049, want=281, limit=128
[  377.712919][ T7951] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  377.761941][ T7951] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  378.791008][ T7967] loop2: detected capacity change from 0 to 8
[  379.695654][ T7984] loop7: detected capacity change from 0 to 512
[  380.841607][ T7984] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  380.894784][ T7984] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  380.990835][ T7984] EXT4-fs (loop7): 1 truncate cleaned up
[  380.996493][ T7984] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x00000000000007ff,jqfmt=vfsold,debug_want_extra_isize=0x0000000000000066,user_xattr,nolazytime,quota,,errors=continue. Quota mode: writeback.
[  381.152992][ T7991] loop1: detected capacity change from 0 to 128
[  381.762034][ T8001] loop7: detected capacity change from 0 to 512
[  381.883417][ T8001] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  381.971140][ T8001] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  382.037053][ T8001] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  382.045207][ T8001] System zones: 1-12
[  382.076335][ T8001] EXT4-fs (loop7): orphan cleanup on readonly fs
[  382.086021][ T8001] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.706: invalid indirect mapped block 2 (level 2)
[  382.103308][ T8001] EXT4-fs (loop7): Remounting filesystem read-only
[  382.112985][ T8001] EXT4-fs (loop7): 1 truncate cleaned up
[  382.118649][ T8001] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback.
[  384.827414][ T8044] loop0: detected capacity change from 0 to 256
[  385.382150][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  385.388695][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  386.264704][ T8048] loop0: detected capacity change from 0 to 8
[  386.684784][ T8062] loop1: detected capacity change from 0 to 8
[  387.332440][ T8067] loop7: detected capacity change from 0 to 256
[  387.460565][ T8067] FAT-fs (loop7): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  388.216420][ T8078] netlink: 14 bytes leftover after parsing attributes in process `syz.1.721'.
[  388.308345][ T8078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  388.372163][ T8078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  388.424464][ T8078] bond0 (unregistering): Released all slaves
[  388.619253][ T8083] syzkaller1: tun_chr_ioctl cmd 1074025677
[  388.632361][ T8083] syzkaller1: linktype set to 768
[  388.761084][ T8089] loop7: detected capacity change from 0 to 1024
[  388.769518][ T8091] raw_sendmsg: syz.2.724 forgot to set AF_INET. Fix it!
[  388.951529][ T8089] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x000000006f253caa,journal_dev=0x00000000000000ff,nombcache,quota,init_itable,errors=remount-ro,. Quota mode: writeback.
[  388.962529][ T8101] loop1: detected capacity change from 0 to 2048
[  389.240773][ T4414] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  389.343680][ T8101] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c128, mo2=0003]
[  389.397902][ T8117] loop7: detected capacity change from 0 to 512
[  389.439349][ T8101] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,lazytime,noblock_validity,delalloc,norecovery,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none.
[  389.862088][ T8117] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  389.891293][ T8101] EXT4-fs error (device loop1): ext4_find_extent:929: inode #2: comm syz.1.727: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  389.973639][ T8121] loop2: detected capacity change from 0 to 1024
[  390.014154][ T8117] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  390.697020][ T4414] usb 4-1: device descriptor read/64, error -71
[  390.812128][    C0] sched: RT throttling activated
[  390.841422][ T8117] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  390.859229][ T8117] System zones: 1-12
[  390.864310][ T8117] EXT4-fs (loop7): orphan cleanup on readonly fs
[  390.865669][ T8101] EXT4-fs (loop1): Remounting filesystem read-only
[  390.900389][ T8117] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.728: invalid indirect mapped block 2 (level 2)
[  391.022871][ T8117] EXT4-fs (loop7): Remounting filesystem read-only
[  391.121035][ T8117] EXT4-fs (loop7): 1 truncate cleaned up
[  391.126804][ T8117] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback.
[  391.188091][ T8104] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  391.188123][ T4414] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  391.681044][ T8139] loop0: detected capacity change from 0 to 256
[  391.697801][ T8104] EXT4-fs (loop1): Remounting filesystem read-only
[  391.797137][ T8139] FAT-fs (loop0): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  392.125574][ T4414] usb 4-1: device descriptor read/64, error -71
[  392.275610][ T4414] usb usb4-port1: attempt power cycle
[  392.745432][ T8151] loop3: detected capacity change from 0 to 512
[  392.931526][ T8151] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2757: inode #11: comm syz.3.736: corrupted xattr block 95
[  393.002556][ T8151] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.736: bg 0: block 7: invalid block bitmap
[  393.010854][ T8158] team0: No ports can be present during mode change
[  393.066761][ T8151] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6194: Corrupt filesystem
[  393.089957][ T5361] Bluetooth: hci4: command 0x0406 tx timeout
[  393.127982][ T8151] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2923: inode #11: comm syz.3.736: corrupted xattr block 95
[  393.217687][ T8151] EXT4-fs warning (device loop3): ext4_evict_inode:302: xattr delete (err -117)
[  393.226817][ T8151] EXT4-fs (loop3): 1 orphan inode deleted
[  393.295675][ T8151] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  394.109177][ T8180] loop2: detected capacity change from 0 to 1024
[  394.424098][ T8183] netlink: 64 bytes leftover after parsing attributes in process `syz.1.744'.
[  394.467522][ T8185] loop0: detected capacity change from 0 to 1024
[  394.542291][ T8185] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,grpquota,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback.
[  394.559083][ T8185] EXT4-fs (loop0): shut down requested (1)
[  394.826311][ T5118] hfsplus: b-tree write err: -5, ino 8
[  395.012736][ T8200] loop2: detected capacity change from 0 to 512
[  395.103844][ T8200] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  395.622984][ T8200] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.749: bad orphan inode 16
[  395.719410][ T8200] ext4_test_bit(bit=15, block=4) = 0
[  395.725135][ T8200] EXT4-fs (loop2): 1 orphan inode deleted
[  395.826123][ T8200] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000100,acl,stripe=0x0000000000000001,init_itable=0x0000000000000008,journal_dev=0x000000007ffffffe,auto_da_alloc,,errors=continue. Quota mode: none.
[  396.553545][ T8219] loop2: detected capacity change from 0 to 512
[  396.673994][ T8227] netlink: 92 bytes leftover after parsing attributes in process `syz.3.760'.
[  396.714817][ T8219] EXT4-fs error (device loop2): ext4_iget_extra_inode:4566: inode #15: comm syz.2.757: corrupted in-inode xattr
[  396.801271][ T8219] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.757: couldn't read orphan inode 15 (err -117)
[  396.907975][ T8219] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000040000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none.
[  396.958503][ T8234] loop7: detected capacity change from 0 to 1024
[  397.050808][ T8234] EXT4-fs (loop7): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,nogrpid,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,jqfmt=vfsold,bsdgroups,init_itable,,errors=continue. Quota mode: writeback.
[  397.944999][ T8248] loop2: detected capacity change from 0 to 128
[  397.998217][ T8245] Core dump to core aborted: cannot preserve file permissions
[  398.031612][ T8253] loop3: detected capacity change from 0 to 256
[  398.054357][ T8253] FAT-fs (loop3): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  399.404644][ T8243] chnl_net:caif_netlink_parms(): no params data found
[  400.428523][ T4253] Bluetooth: hci2: command 0x0409 tx timeout
[  400.458329][ T8243] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.476638][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.494944][ T8243] device bridge_slave_0 entered promiscuous mode
[  400.565983][ T8243] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.592676][ T8243] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.607272][ T8280] loop1: detected capacity change from 0 to 128
[  400.637851][ T8243] device bridge_slave_1 entered promiscuous mode
[  400.683476][ T8282] loop3: detected capacity change from 0 to 256
[  400.725356][ T8243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  400.742002][ T8282] FAT-fs (loop3): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  400.770161][ T8243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  401.146808][ T8243] team0: Port device team_slave_0 added
[  401.210845][ T8243] team0: Port device team_slave_1 added
[  401.358610][ T8243] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.393655][ T8243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.629130][ T8243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  402.067158][ T8243] batman_adv: batadv0: Adding interface: batadv_slave_1
[  402.071259][ T8289] loop1: detected capacity change from 0 to 1024
[  402.094070][ T8243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.193304][ T8243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.573295][ T8291] loop3: detected capacity change from 0 to 512
[  402.603752][ T8291] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  402.646816][ T5361] Bluetooth: hci2: command 0x041b tx timeout
[  402.665826][ T8291] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  402.693586][ T8291] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  402.695779][ T8243] device hsr_slave_0 entered promiscuous mode
[  402.706316][ T8291] System zones: 1-12
[  402.713939][ T8291] EXT4-fs (loop3): orphan cleanup on readonly fs
[  402.720747][ T8291] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.780: invalid indirect mapped block 2 (level 2)
[  402.784565][ T8243] device hsr_slave_1 entered promiscuous mode
[  402.803038][ T8243] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  402.817346][ T8243] Cannot create hsr debugfs directory
[  402.899351][ T8291] EXT4-fs (loop3): Remounting filesystem read-only
[  403.003917][ T8291] EXT4-fs (loop3): 1 truncate cleaned up
[  403.032933][ T8291] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback.
[  403.104148][ T4298] hfsplus: b-tree write err: -5, ino 3
[  403.136613][ T8303] loop2: detected capacity change from 0 to 136
[  403.287759][ T8285] chnl_net:caif_netlink_parms(): no params data found
[  403.311479][ T8303] Attempt to read inode for relocated directory
[  403.331210][    T7] Bluetooth: hci4: command 0x0409 tx timeout
[  404.355519][ T8285] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.363655][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.370238][ T8315] loop2: detected capacity change from 0 to 128
[  404.371887][ T8285] device bridge_slave_0 entered promiscuous mode
[  404.392546][ T8285] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.399825][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.408026][ T8285] device bridge_slave_1 entered promiscuous mode
[  404.431085][ T8285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  404.445475][ T8285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  404.472135][ T8285] team0: Port device team_slave_0 added
[  404.480277][ T8285] team0: Port device team_slave_1 added
[  404.870404][ T4312] Bluetooth: hci2: command 0x040f tx timeout
[  404.962945][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_0
[  404.999256][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.123719][ T8285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.230568][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.254847][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.281077][ T8321] loop2: detected capacity change from 0 to 256
[  405.297136][ T8285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  405.331414][ T8321] FAT-fs (loop2): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  405.385939][ T6986] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.452073][ T8285] device hsr_slave_0 entered promiscuous mode
[  405.469561][ T8285] device hsr_slave_1 entered promiscuous mode
[  405.503224][ T8285] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  405.591846][    T7] Bluetooth: hci4: command 0x041b tx timeout
[  405.593555][ T8285] Cannot create hsr debugfs directory
[  406.080272][ T6986] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.197420][ T6986] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.521700][ T6986] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.583716][ T8332] loop3: detected capacity change from 0 to 2048
[  406.718851][ T8243] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  406.742072][ T8332] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  406.883776][ T8243] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  406.946297][ T6986] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.094107][ T4414] Bluetooth: hci2: command 0x0419 tx timeout
[  407.136555][ T8243] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  407.248672][ T6986] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.330320][ T8243] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  407.386260][ T8340] loop3: detected capacity change from 0 to 1024
[  407.617520][ T8337] loop2: detected capacity change from 0 to 8192
[  407.825499][ T5377]  loop2: p2 < > p3 p4 < >
[  407.993332][ T5377] loop2: partition table partially beyond EOD, truncated
[  408.157284][ T6986] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.198882][ T5377] loop2: p2 start 328960 is beyond EOD, truncated
[  408.206079][ T4312] Bluetooth: hci4: command 0x040f tx timeout
[  408.230051][ T5377] loop2: p3 start 33572980 is beyond EOD, truncated
[  408.496693][ T8350] loop1: detected capacity change from 0 to 1024
[  408.808013][ T8350] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  408.893256][ T8337]  loop2: p2 < > p3 p4 < >
[  408.897739][ T8337] loop2: partition table partially beyond EOD, truncated
[  408.910743][ T8337] loop2: p2 start 328960 is beyond EOD, truncated
[  408.919167][ T8337] loop2: p3 start 33572980 is beyond EOD, truncated
[  408.919738][ T4352] hfsplus: b-tree write err: -5, ino 3
[  409.105249][ T6986] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.282813][ T8363] loop1: detected capacity change from 0 to 512
[  409.330584][ T8364] loop2: detected capacity change from 0 to 256
[  409.407827][ T5379] udevd[5379]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  409.408084][ T8364] FAT-fs (loop2): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  409.444155][ T8368] netlink: 14 bytes leftover after parsing attributes in process `syz.3.799'.
[  409.496704][ T8368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  409.516227][ T8363] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  409.564300][ T8363] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  409.656474][ T8363] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  409.665641][ T8363] System zones: 1-12
[  410.083453][ T5379] udevd[5379]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  410.099483][ T8363] EXT4-fs (loop1): orphan cleanup on readonly fs
[  410.133760][ T8368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  410.180540][ T8368] bond0 (unregistering): Released all slaves
[  410.187315][ T8363] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.798: invalid indirect mapped block 2 (level 2)
[  410.233639][ T8243] 8021q: adding VLAN 0 to HW filter on device bond0
[  410.320484][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  410.333862][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  410.369064][ T8243] 8021q: adding VLAN 0 to HW filter on device team0
[  410.440283][ T4414] Bluetooth: hci4: command 0x0419 tx timeout
[  410.565899][ T8363] EXT4-fs (loop1): Remounting filesystem read-only
[  410.613978][ T8363] EXT4-fs (loop1): 1 truncate cleaned up
[  410.621094][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  410.642713][ T8363] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback.
[  410.665652][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  410.694443][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.701603][ T6013] bridge0: port 1(bridge_slave_0) entered forwarding state
[  410.769107][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  410.836161][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  410.944122][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.951248][ T6013] bridge0: port 2(bridge_slave_1) entered forwarding state
[  411.102454][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  411.112562][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  411.136798][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  411.163945][ T8243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  411.174601][ T8243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  411.194885][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  411.213019][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  411.228443][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  411.240261][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  411.256234][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  411.269693][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  411.360542][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  411.369068][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  411.378142][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  411.391798][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  411.400912][ T8285] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  411.498781][ T8285] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  411.501773][ T8285] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  411.532835][ T8285] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  411.825744][ T8285] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.874686][ T8417] loop2: detected capacity change from 0 to 512
[  411.884305][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  411.905383][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  412.029753][ T8417] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  412.059085][ T8285] 8021q: adding VLAN 0 to HW filter on device team0
[  412.113784][ T8243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  412.353846][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  412.421300][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  413.563310][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.570390][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state
[  413.634888][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  413.665325][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  413.694591][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  413.751046][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  413.784073][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.791239][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state
[  413.834290][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  414.032348][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  414.086362][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  414.125249][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  414.157050][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  414.179477][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  414.201180][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  414.212300][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  414.250781][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  414.272744][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  414.285421][   T26] audit: type=1400 audit(1770746198.485:75): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8447 comm="syz.3.808"
[  414.292722][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  414.336758][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  414.367153][ T8285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  414.384286][ T8451] loop3: detected capacity change from 0 to 512
[  414.530605][ T8451] EXT4-fs (loop3): Ignoring removed bh option
[  414.569185][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  414.571716][ T8451] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  414.593808][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  414.667171][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  414.686886][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  414.688093][ T8451] EXT4-fs (loop3): 1 truncate cleaned up
[  414.716635][ T8451] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  414.726480][ T8243] device veth0_vlan entered promiscuous mode
[  414.807572][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  414.826445][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  414.896265][ T8243] device veth1_vlan entered promiscuous mode
[  414.929597][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  414.948682][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  414.974263][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  414.997694][ T8285] 8021q: adding VLAN 0 to HW filter on device batadv0
[  415.019218][ T8471] netlink: 80 bytes leftover after parsing attributes in process `syz.1.810'.
[  415.079441][ T8243] device veth0_macvtap entered promiscuous mode
[  415.140433][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  415.160988][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  415.223075][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  415.261127][ T8243] device veth1_macvtap entered promiscuous mode
[  415.328064][ T8243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  415.364160][ T8243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.414877][ T8243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  415.430344][ T8487] loop2: detected capacity change from 0 to 512
[  415.441444][ T8488] loop3: detected capacity change from 0 to 512
[  415.454031][ T8243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.479540][ T8487] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  415.485566][ T8243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  415.516371][ T8243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.537624][ T8488] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  415.538689][ T8243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  415.572964][ T8488] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  415.582391][ T8243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.590264][ T8488] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  415.600586][ T8488] System zones: 1-12
[  415.603770][ T8243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  415.612548][ T8488] EXT4-fs (loop3): orphan cleanup on readonly fs
[  415.622104][ T8488] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 33619980: comm syz.3.814: invalid block
[  415.634291][ T8243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.635707][ T8243] batman_adv: batadv0: Interface activated: batadv_slave_0
[  415.646008][ T8488] EXT4-fs (loop3): Remounting filesystem read-only
[  415.661384][ T8488] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.814: invalid indirect mapped block 2 (level 2)
[  415.682790][ T8488] EXT4-fs (loop3): Remounting filesystem read-only
[  415.700396][ T8488] EXT4-fs (loop3): 1 truncate cleaned up
[  415.702695][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  415.706076][ T8488] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback.
[  415.746279][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  415.775994][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  416.747242][ T8243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.810625][ T8243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.864203][ T8243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.896844][ T8243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.907826][ T8243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.920075][ T8243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.931142][ T8243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.942059][ T8243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.958504][ T8243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.981649][ T8243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.011271][ T8243] batman_adv: batadv0: Interface activated: batadv_slave_1
[  417.036125][ T8243] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.044931][ T8243] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.054959][ T8243] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.064267][ T8243] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  417.121951][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  417.130703][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  417.261375][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  417.292278][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  417.330146][ T8285] device veth0_vlan entered promiscuous mode
[  417.371858][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  417.384359][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  417.460639][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  417.482431][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  417.505570][ T8285] device veth1_vlan entered promiscuous mode
[  417.601112][ T6986] device hsr_slave_0 left promiscuous mode
[  417.615763][ T6986] device hsr_slave_1 left promiscuous mode
[  417.626524][ T6986] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  417.644827][ T6986] batman_adv: batadv0: Removing interface: batadv_slave_0
[  417.656296][ T6986] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  417.663745][ T6986] batman_adv: batadv0: Removing interface: batadv_slave_1
[  417.689362][ T6986] device bridge_slave_1 left promiscuous mode
[  417.706482][ T6986] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.715787][ T6986] device bridge_slave_0 left promiscuous mode
[  417.731316][ T6986] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.760360][ T6986] device hsr_slave_0 left promiscuous mode
[  417.771213][ T6986] device hsr_slave_1 left promiscuous mode
[  417.782591][ T6986] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  417.803594][ T6986] batman_adv: batadv0: Removing interface: batadv_slave_0
[  417.811802][ T6986] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  417.828881][ T6986] batman_adv: batadv0: Removing interface: batadv_slave_1
[  417.867932][ T6986] device bridge_slave_1 left promiscuous mode
[  417.885335][ T6986] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.909451][ T6986] device bridge_slave_0 left promiscuous mode
[  417.916185][ T6986] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.940223][ T6986] device veth1_macvtap left promiscuous mode
[  417.951844][ T6986] device veth0_macvtap left promiscuous mode
[  417.966171][ T6986] device veth1_vlan left promiscuous mode
[  417.982183][ T6986] device veth0_vlan left promiscuous mode
[  417.993965][ T6986] device veth1_macvtap left promiscuous mode
[  418.003415][ T6986] device veth0_macvtap left promiscuous mode
[  418.014066][ T6986] device veth1_vlan left promiscuous mode
[  418.023333][ T6986] device veth0_vlan left promiscuous mode
[  418.165795][ T8505] loop3: detected capacity change from 0 to 1024
[  418.240493][ T8505] EXT4-fs (loop3): Ignoring removed oldalloc option
[  418.257649][ T8505] EXT4-fs (loop3): Ignoring removed bh option
[  418.263959][ T8505] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  418.292660][ T8505] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  418.349376][   T26] audit: type=1804 audit(1770746202.292:76): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.818" name="/newroot/134/file1/bus" dev="loop3" ino=18 res=1 errno=0
[  418.421338][ T6986] team0 (unregistering): Port device team_slave_1 removed
[  418.438985][ T6986] team0 (unregistering): Port device team_slave_0 removed
[  418.456215][ T6986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  418.473026][ T6986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  418.557213][ T6986] bond0 (unregistering): Released all slaves
[  418.725253][ T6986] team0 (unregistering): Port device team_slave_1 removed
[  418.745632][ T6986] team0 (unregistering): Port device team_slave_0 removed
[  418.769608][ T6986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  418.787032][ T6986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  418.881300][ T6986] bond0 (unregistering): Released all slaves
[  418.950406][ T8285] device veth0_macvtap entered promiscuous mode
[  418.974858][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  418.991509][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.008140][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.016221][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  419.054414][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  419.077793][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  419.094353][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  419.117368][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  419.187104][ T8285] device veth1_macvtap entered promiscuous mode
[  419.220330][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.227377][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.238962][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.270231][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.303939][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.325402][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.345447][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.377572][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.387412][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.398554][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.412020][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_0
[  419.478419][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  419.493984][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  419.531655][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  419.542521][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.554143][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.564487][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.576577][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.667456][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.704129][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.735842][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.767053][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.811310][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_1
[  419.872981][ T8285] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.952188][ T8285] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.984697][ T8285] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  419.993546][ T8285] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.011585][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  420.021292][ T8528] loop2: detected capacity change from 0 to 512
[  420.034224][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  420.044587][ T8528] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  420.055855][ T8529] loop5: detected capacity change from 0 to 1024
[  420.152534][ T8529] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,grpquota,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback.
[  420.195205][ T8529] EXT4-fs (loop5): shut down requested (1)
[  420.841561][ T5972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.848648][ T5972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.929138][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  422.018252][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  422.026101][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  422.783191][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  424.095261][ T8576] loop9: detected capacity change from 0 to 8
[  424.115125][ T8574] loop2: detected capacity change from 0 to 512
[  424.194007][ T8574] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  424.226101][ T8574] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  424.249566][ T8574] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  424.307442][ T8574] System zones: 1-12
[  424.363254][ T8574] EXT4-fs (loop2): orphan cleanup on readonly fs
[  424.443642][ T8574] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.826: invalid indirect mapped block 2 (level 2)
[  424.565448][ T8574] EXT4-fs (loop2): Remounting filesystem read-only
[  424.572337][ T8574] EXT4-fs (loop2): 1 truncate cleaned up
[  424.682318][ T8574] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback.
[  425.050443][ T8592] loop5: detected capacity change from 0 to 256
[  425.088032][ T8592] FAT-fs (loop5): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  425.243392][ T8596] loop9: detected capacity change from 0 to 1024
[  425.863856][ T8596] EXT4-fs (loop9): mounted filesystem without journal. Opts: minixdf,grpquota,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback.
[  425.880252][ T8596] EXT4-fs (loop9): shut down requested (1)
[  426.312789][ T8610] loop9: detected capacity change from 0 to 512
[  426.387187][ T8610] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities
[  427.854272][ T8622] loop5: detected capacity change from 0 to 4096
[  427.994389][ T8622] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  428.128969][ T8622] EXT4-fs (loop5): re-mounted. Opts: usrjquota=,bsdgroups,stripe=0x00000000000000fd,usrquota,i_version,noinit_itable,. Quota mode: writeback.
[  428.866620][ T8641] netlink: 16 bytes leftover after parsing attributes in process `syz.5.844'.
[  429.156597][ T8654] loop5: detected capacity change from 0 to 1024
[  429.246681][ T8654] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,grpquota,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback.
[  429.263422][ T8654] EXT4-fs (loop5): shut down requested (1)
[  429.929859][ T8670] fuse: Bad value for 'fd'
[  430.512617][ T8666] loop5: detected capacity change from 0 to 256
[  430.527679][ T8666] FAT-fs (loop5): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000003" or missing value
[  432.567338][ T8692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.857'.
[  432.881950][ T8696] loop2: detected capacity change from 0 to 1024
[  432.936880][ T8699] loop5: detected capacity change from 0 to 512
[  433.004038][ T8696] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,grpquota,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback.
[  433.036727][ T8696] EXT4-fs (loop2): shut down requested (1)
[  433.680951][ T8699] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities
[  435.789742][ T8732] loop9: detected capacity change from 0 to 256
[  435.824566][ T8732] FAT-fs (loop9): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  437.305349][ T8749] netlink: 16 bytes leftover after parsing attributes in process `syz.9.869'.
[  438.651377][ T8755] loop2: detected capacity change from 0 to 1024
[  438.801564][ T8755] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,grpquota,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback.
[  438.818486][ T8755] EXT4-fs (loop2): shut down requested (1)
[  439.849355][ T8775] chnl_net:caif_netlink_parms(): no params data found
[  440.060119][ T8792] loop5: detected capacity change from 0 to 512
[  440.149105][ T8792] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities
[  440.196840][ T8775] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.850197][ T8775] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.942663][ T8775] device bridge_slave_0 entered promiscuous mode
[  440.969306][ T8775] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.995616][ T8775] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.001866][ T8803] loop2: detected capacity change from 0 to 256
[  441.003933][ T8775] device bridge_slave_1 entered promiscuous mode
[  441.145355][ T8803] FAT-fs (loop2): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  441.185530][ T8775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  441.710320][ T8808] netlink: 16 bytes leftover after parsing attributes in process `syz.5.881'.
[  442.086412][ T4414] Bluetooth: hci5: command 0x0409 tx timeout
[  443.590859][ T8775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  443.617777][ T8818] loop9: detected capacity change from 0 to 1024
[  443.664931][  T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  443.696541][ T8818] EXT4-fs (loop9): mounted filesystem without journal. Opts: minixdf,grpquota,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback.
[  443.714313][ T8818] EXT4-fs (loop9): shut down requested (1)
[  443.965644][  T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.095258][  T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  444.106517][  T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.293618][ T8775] team0: Port device team_slave_0 added
[  444.332735][ T8775] team0: Port device team_slave_1 added
[  444.406326][  T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  444.563282][  T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.645983][ T8775] batman_adv: batadv0: Adding interface: batadv_slave_0
[  444.811797][   T13] Bluetooth: hci5: command 0x041b tx timeout
[  444.891886][ T8775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.920363][ T8775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  444.961518][ T8775] batman_adv: batadv0: Adding interface: batadv_slave_1
[  444.961599][ T8775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.962644][ T8775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  445.126125][ T8849] loop5: detected capacity change from 0 to 8
[  445.478177][  T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  445.478216][  T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.536431][ T8857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.893'.
[  445.536524][ T8857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.893'.
[  446.189231][ T8775] device hsr_slave_0 entered promiscuous mode
[  446.198859][ T8775] device hsr_slave_1 entered promiscuous mode
[  446.362694][ T8865] loop2: detected capacity change from 0 to 1024
[  446.899261][ T8865] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,grpquota,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback.
[  446.915832][ T8865] EXT4-fs (loop2): shut down requested (1)
[  447.109851][   T13] Bluetooth: hci5: command 0x040f tx timeout
[  447.224203][ T8875] loop9: detected capacity change from 0 to 256
[  447.311810][ T8875] FAT-fs (loop9): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  447.366948][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'.
[  449.365751][   T13] Bluetooth: hci5: command 0x0419 tx timeout
[  451.092625][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  451.099855][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  452.207552][ T8775] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  452.243008][ T8775] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  452.310949][ T8775] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  452.331258][ T8775] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  452.413567][ T8938] loop2: detected capacity change from 0 to 512
[  452.636108][ T8938] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.909: bad orphan inode 15
[  452.657641][ T8938] ext4_test_bit(bit=14, block=5) = 0
[  452.662965][ T8938] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none.
[  453.078305][  T154] device hsr_slave_0 left promiscuous mode
[  453.101121][  T154] device hsr_slave_1 left promiscuous mode
[  453.178948][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  453.224352][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  453.265370][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  453.354960][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  453.453132][  T154] device bridge_slave_1 left promiscuous mode
[  453.942223][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.017245][  T154] device bridge_slave_0 left promiscuous mode
[  454.023420][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.078088][  T154] device veth1_macvtap left promiscuous mode
[  454.099282][  T154] device veth0_macvtap left promiscuous mode
[  454.110140][  T154] device veth1_vlan left promiscuous mode
[  454.123077][  T154] device veth0_vlan left promiscuous mode
[  456.861392][  T154] team0 (unregistering): Port device team_slave_1 removed
[  456.955981][  T154] team0 (unregistering): Port device team_slave_0 removed
[  456.972203][ T8986] loop9: detected capacity change from 0 to 256
[  457.029438][ T8986] FAT-fs (loop9): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  458.971091][ T8775] 8021q: adding VLAN 0 to HW filter on device bond0
[  459.329639][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  459.656659][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  459.866358][ T8775] 8021q: adding VLAN 0 to HW filter on device team0
[  459.983105][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  460.064454][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  460.075959][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.083121][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state
[  460.092360][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  460.104122][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  460.793155][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  460.819505][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.826727][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state
[  460.943707][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  461.008595][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  461.048457][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  461.104651][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  461.135536][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  461.211064][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  461.253493][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  461.296075][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  461.349489][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  461.389953][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  461.432402][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  461.530637][ T8775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  462.211784][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  462.283469][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  462.456001][ T9045] loop2: detected capacity change from 0 to 256
[  462.476067][ T8775] 8021q: adding VLAN 0 to HW filter on device batadv0
[  462.510719][ T9045] FAT-fs (loop2): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  463.826260][ T9072] netlink: 40 bytes leftover after parsing attributes in process `syz.1.938'.
[  463.835727][ T9072] netlink: 40 bytes leftover after parsing attributes in process `syz.1.938'.
[  464.425691][ T9075] loop2: detected capacity change from 0 to 1024
[  464.485033][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  464.538027][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  464.628894][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  464.648809][ T9075] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  464.710634][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  464.748538][ T9075] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  464.803037][ T9075] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 3: comm syz.2.936: lblock 3 mapped to illegal pblock 3 (length 3)
[  464.944331][ T8775] device veth0_vlan entered promiscuous mode
[  464.955402][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  465.047331][ T9075] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  465.115511][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  465.168663][ T8775] device veth1_vlan entered promiscuous mode
[  465.210970][ T9075] EXT4-fs (loop2): This should not happen!! Data will be lost
[  465.210970][ T9075] 
[  465.248718][ T9090] EXT4-fs error (device loop2): ext4_ext_remove_space:2929: inode #15: comm syz.2.936: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  465.337568][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  465.389188][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  465.408490][ T9090] EXT4-fs error (device loop2) in ext4_setattr:5626: Corrupt filesystem
[  465.473290][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  465.532229][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  465.553747][ T8775] device veth0_macvtap entered promiscuous mode
[  465.583870][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  465.607691][ T8775] device veth1_macvtap entered promiscuous mode
[  465.708748][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  465.802839][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.857635][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  465.886380][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.912734][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  466.021933][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.032055][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  466.055010][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.070373][ T8775] batman_adv: batadv0: Interface activated: batadv_slave_0
[  466.147680][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  466.242537][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.352870][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  466.364251][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.377209][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  466.388475][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.398591][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  466.480180][ T9117] netlink: 64 bytes leftover after parsing attributes in process `syz.9.946'.
[  467.197322][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.787236][ T8775] batman_adv: batadv0: Interface activated: batadv_slave_1
[  467.801446][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  467.829517][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  467.885111][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  468.747917][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  468.786508][ T8775] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  468.827885][ T8775] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  468.891530][ T8775] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  468.935520][ T8775] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  469.539077][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.539683][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.560510][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  470.092148][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.125028][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.179924][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  470.517487][ T9147] loop8: detected capacity change from 0 to 1024
[  470.610603][ T9147] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  473.088146][ T9169] loop2: detected capacity change from 0 to 1024
[  474.817734][ T4383] hfsplus: b-tree write err: -5, ino 3
[  476.843528][ T9207] loop5: detected capacity change from 0 to 512
[  477.219229][ T9207] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.955: invalid indirect mapped block 256 (level 2)
[  477.909204][ T9207] EXT4-fs (loop5): Remounting filesystem read-only
[  477.916137][ T9207] EXT4-fs (loop5): 2 truncates cleaned up
[  477.997953][ T9207] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,auto_da_alloc,lazytime,errors=remount-ro,. Quota mode: writeback.
[  479.401674][ T9228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.969'.
[  479.410670][ T9228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.969'.
[  479.927598][ T9236] loop5: detected capacity change from 0 to 1024
[  480.980320][ T4298] hfsplus: b-tree write err: -5, ino 3
[  481.148888][ T9254] loop5: detected capacity change from 0 to 1024
[  481.227041][ T9254] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  481.244632][ T9254] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  481.254064][ T9254] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  481.423833][ T9254] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nojournal_checksum,nomblk_io_submit,resgid=0x0000000000000000,grpid,jqfmt=vfsv0,nomblk_io_submit,i_version,,errors=continue. Quota mode: writeback.
[  481.911690][ T9264] loop5: detected capacity change from 0 to 512
[  482.393506][ T9264] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  482.593120][ T9264] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  483.299622][ T9264] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  483.318174][ T9264] System zones: 1-12
[  483.752928][ T9264] EXT4-fs (loop5): orphan cleanup on readonly fs
[  484.089154][ T9279] loop9: detected capacity change from 0 to 1024
[  484.164722][ T9264] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 33619980: comm syz.5.979: invalid block
[  484.455246][ T9264] EXT4-fs (loop5): Remounting filesystem read-only
[  484.461841][ T9264] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.979: invalid indirect mapped block 2 (level 2)
[  484.561083][ T9279] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  484.636697][ T9264] EXT4-fs (loop5): Remounting filesystem read-only
[  484.647889][ T9280] loop2: detected capacity change from 0 to 256
[  484.693655][ T9264] EXT4-fs (loop5): 1 truncate cleaned up
[  484.741770][ T9280] FAT-fs (loop2): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  484.833150][ T9264] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback.
[  485.104999][ T9283] loop9: detected capacity change from 0 to 1024
[  485.628536][ T9283] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  485.770027][ T9283] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none.
[  486.222161][ T9300] loop9: detected capacity change from 0 to 1024
[  489.229488][    T9] hfsplus: b-tree write err: -5, ino 3
[  489.509239][ T9323] 9pnet: Insufficient options for proto=fd
[  491.046954][ T9341] loop8: detected capacity change from 0 to 1024
[  491.478632][ T9348] loop5: detected capacity change from 0 to 256
[  491.485344][ T9341] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002]
[  491.536188][ T9341] System zones: 0-1, 3-8
[  491.587354][ T9341] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,init_itable,,errors=continue. Quota mode: none.
[  491.621716][ T9348] FAT-fs (loop5): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  491.679874][ T9341] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  491.771538][ T9341] EXT4-fs error (device loop8): ext4_free_blocks:6234: comm syz.8.989: Freeing blocks not in datazone - block = 0, count = 16
[  492.885872][ T9378] loop5: detected capacity change from 0 to 1024
[  492.973018][ T9379] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1002'.
[  494.470609][  T154] hfsplus: b-tree write err: -5, ino 3
[  494.644069][ T9392] loop5: detected capacity change from 0 to 512
[  494.756506][ T9392] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  494.843011][ T9392] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  494.909725][ T9392] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  495.216766][ T9392] System zones: 1-12
[  495.292663][ T9392] EXT4-fs (loop5): orphan cleanup on readonly fs
[  495.299356][ T9392] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1005: invalid indirect mapped block 2 (level 2)
[  495.475967][ T9392] EXT4-fs (loop5): Remounting filesystem read-only
[  495.499600][ T9392] EXT4-fs (loop5): 1 truncate cleaned up
[  495.591020][ T9392] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback.
[  496.457741][ T9418] netlink: 'syz.1.1010': attribute type 12 has an invalid length.
[  496.622278][ T9422] loop2: detected capacity change from 0 to 256
[  496.665442][ T9422] FAT-fs (loop2): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  496.674789][ T9420] loop8: detected capacity change from 0 to 4096
[  496.935331][ T9420] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  497.664018][ T9420] EXT4-fs (loop8): re-mounted. Opts: usrjquota=,journal_ioprio=0x0000000000000000,stripe=0x00000000000000f9,nodiscard,sb=0x0000000000000d98,noinit_itable,. Quota mode: writeback.
[  498.236861][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1015'.
[  498.341148][ T9445] loop9: detected capacity change from 0 to 1024
[  498.451376][ T9448] loop8: detected capacity change from 0 to 128
[  499.854213][ T9466] loop2: detected capacity change from 0 to 1024
[  500.030774][ T1167] hfsplus: b-tree write err: -5, ino 3
[  500.057571][ T9468] xt_hashlimit: size too large, truncated to 1048576
[  500.267691][ T9480] loop9: detected capacity change from 0 to 512
[  500.283948][ T9480] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities
[  501.856018][ T4448] hfsplus: b-tree write err: -5, ino 8
[  503.370834][ T9502] loop8: detected capacity change from 0 to 128
[  504.035601][ T9511] loop2: detected capacity change from 0 to 512
[  504.195780][ T9511] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  504.233665][ T9514] loop8: detected capacity change from 0 to 1024
[  504.299487][ T9511] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  504.940112][ T9511] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  505.127037][ T9511] System zones: 1-12
[  505.140038][ T9526] loop5: detected capacity change from 0 to 256
[  505.147983][ T9511] EXT4-fs (loop2): orphan cleanup on readonly fs
[  505.218474][ T4298] hfsplus: b-tree write err: -5, ino 3
[  505.219616][ T9526] FAT-fs (loop5): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  505.261827][ T9511] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33619980: comm syz.2.1033: invalid block
[  505.537951][ T9511] EXT4-fs (loop2): Remounting filesystem read-only
[  505.715123][ T9511] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1033: invalid indirect mapped block 2 (level 2)
[  506.115012][ T9511] EXT4-fs (loop2): Remounting filesystem read-only
[  506.303366][ T9511] EXT4-fs (loop2): 1 truncate cleaned up
[  506.309033][ T9511] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback.
[  506.551494][ T9542] loop8: detected capacity change from 0 to 1024
[  509.798807][ T9560] loop2: detected capacity change from 0 to 128
[  509.841179][ T1167] hfsplus: b-tree write err: -5, ino 8
[  510.661254][ T9571] loop2: detected capacity change from 0 to 512
[  510.726641][ T9571] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  513.282911][ T9598] loop5: detected capacity change from 0 to 256
[  513.373982][ T9598] FAT-fs (loop5): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  514.016073][ T9602] loop2: detected capacity change from 0 to 1024
[  515.870254][ T4355] hfsplus: b-tree write err: -5, ino 3
[  516.794811][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  516.801224][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  517.185346][ T9638] loop9: detected capacity change from 0 to 512
[  517.354321][ T9638] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities
[  518.865793][ T9632] chnl_net:caif_netlink_parms(): no params data found
[  519.131663][    T7] Bluetooth: hci3: command 0x0409 tx timeout
[  519.218053][  T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.010924][ T9665] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1057'.
[  520.379177][ T9632] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.510737][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.518806][ T9632] device bridge_slave_0 entered promiscuous mode
[  520.563031][ T9632] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.585694][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.593863][ T9632] device bridge_slave_1 entered promiscuous mode
[  520.645831][  T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.776896][ T9632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.838925][  T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.898891][ T9632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  521.162316][  T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.231992][ T9632] team0: Port device team_slave_0 added
[  521.251742][ T9632] team0: Port device team_slave_1 added
[  521.307071][ T9632] batman_adv: batadv0: Adding interface: batadv_slave_0
[  521.367867][ T9632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  521.376619][    T7] Bluetooth: hci3: command 0x041b tx timeout
[  521.472020][ T9684] loop5: detected capacity change from 0 to 256
[  521.488555][ T9632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  521.527907][ T9684] FAT-fs (loop5): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  521.573816][ T9632] batman_adv: batadv0: Adding interface: batadv_slave_1
[  521.604698][ T9632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  521.686805][ T9632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  522.671154][ T9697] loop8: detected capacity change from 0 to 1024
[  522.962813][ T9632] device hsr_slave_0 entered promiscuous mode
[  522.972719][ T9632] device hsr_slave_1 entered promiscuous mode
[  523.014074][ T9697] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  523.152780][ T9632] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  523.160370][ T9632] Cannot create hsr debugfs directory
[  524.273358][   T13] Bluetooth: hci3: command 0x040f tx timeout
[  526.669075][ T1326] Bluetooth: hci3: command 0x0419 tx timeout
[  527.206236][ T9739] loop8: detected capacity change from 0 to 512
[  527.301696][ T9739] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities
[  528.610440][ T9632] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  528.640407][ T9632] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  528.658009][ T9632] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  528.674533][ T9632] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  528.809115][  T154] device hsr_slave_0 left promiscuous mode
[  528.824064][  T154] device hsr_slave_1 left promiscuous mode
[  528.860844][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  528.868292][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  528.934548][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  528.978008][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  529.000019][  T154] device bridge_slave_1 left promiscuous mode
[  529.002588][ T9763] loop5: detected capacity change from 0 to 256
[  529.006256][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.056560][  T154] device bridge_slave_0 left promiscuous mode
[  529.062808][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.123682][  T154] device veth1_macvtap left promiscuous mode
[  529.152986][ T9763] FAT-fs (loop5): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  529.193053][  T154] device veth0_macvtap left promiscuous mode
[  529.219677][  T154] device veth1_vlan left promiscuous mode
[  529.240922][  T154] device veth0_vlan left promiscuous mode
[  529.970234][ T9773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1070'.
[  530.173848][ T5120] Bluetooth: hci2: command 0x0406 tx timeout
[  532.004291][  T154] team0 (unregistering): Port device team_slave_1 removed
[  532.025467][  T154] team0 (unregistering): Port device team_slave_0 removed
[  532.062228][ T9788] loop9: detected capacity change from 0 to 1024
[  534.015017][ T4355] hfsplus: b-tree write err: -5, ino 3
[  535.224339][ T9632] 8021q: adding VLAN 0 to HW filter on device bond0
[  535.419472][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  535.859204][ T4290] Bluetooth: hci4: command 0x0406 tx timeout
[  535.910317][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  535.975401][ T9632] 8021q: adding VLAN 0 to HW filter on device team0
[  536.027140][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  536.076887][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  536.136109][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.143338][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state
[  536.184041][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  536.197220][ T9811] loop9: detected capacity change from 0 to 512
[  536.239733][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  536.277410][ T9811] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities
[  536.288863][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  536.335242][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.342444][ T5972] bridge0: port 2(bridge_slave_1) entered forwarding state
[  536.386795][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  536.417394][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  536.701886][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  536.749158][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  537.509371][ T9830] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1079'.
[  537.785635][ T9632] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  537.810880][ T9839] loop8: detected capacity change from 0 to 256
[  537.938403][ T9632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  537.980477][ T9839] FAT-fs (loop8): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  538.033179][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  538.041213][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  538.138787][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  538.202459][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  538.222402][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  538.252715][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  538.532020][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  538.545321][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  540.441311][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  541.073894][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  541.489234][ T9632] 8021q: adding VLAN 0 to HW filter on device batadv0
[  541.820044][ T9871] loop2: detected capacity change from 0 to 1024
[  543.795020][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  543.850432][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  543.882637][ T6013] hfsplus: b-tree write err: -5, ino 3
[  543.888286][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  543.907865][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  543.938398][ T9632] device veth0_vlan entered promiscuous mode
[  543.978435][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  543.993897][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  544.035428][ T9632] device veth1_vlan entered promiscuous mode
[  544.097432][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  544.119674][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  544.159154][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  544.189500][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  544.255278][ T9632] device veth0_macvtap entered promiscuous mode
[  544.294562][ T9632] device veth1_macvtap entered promiscuous mode
[  544.354477][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  544.382832][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.392677][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  544.432397][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.492467][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  544.521883][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.586170][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  544.623887][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.683476][ T9632] batman_adv: batadv0: Interface activated: batadv_slave_0
[  544.704997][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  544.725535][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  544.762607][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  544.816869][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  545.133253][ T9908] loop8: detected capacity change from 0 to 1024
[  545.422754][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.451850][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.484136][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.527300][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.563963][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.595636][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.639012][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.692578][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.748553][ T9632] batman_adv: batadv0: Interface activated: batadv_slave_1
[  545.788164][ T9908] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  545.871489][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  545.908218][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  546.881386][ T9632] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  547.087580][ T9632] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  547.096334][ T9632] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  547.177430][ T9632] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  547.800253][ T4423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.862048][ T4423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.010230][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  548.150168][ T4423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.248971][ T4423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.338583][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  548.486709][ T9941] loop4: detected capacity change from 0 to 512
[  548.639478][ T9941] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  548.701923][ T9941] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  548.744991][ T9941] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  548.753659][ T9941] System zones: 1-12
[  548.787203][ T9941] EXT4-fs (loop4): orphan cleanup on readonly fs
[  548.850500][ T9941] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1050: invalid indirect mapped block 2 (level 2)
[  548.964827][ T9941] EXT4-fs (loop4): Remounting filesystem read-only
[  548.979024][ T9941] EXT4-fs (loop4): 1 truncate cleaned up
[  549.006263][ T9941] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback.
[  551.944137][ T9980] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1098'.
[  552.515182][ T9989] loop8: detected capacity change from 0 to 512
[  552.608401][ T9989] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities
[  553.624270][T10002] loop4: detected capacity change from 0 to 1024
[  553.707894][T10005] loop9: detected capacity change from 0 to 512
[  553.922780][T10010] loop2: detected capacity change from 0 to 1024
[  554.099577][T10010] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  554.282570][T10005] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  554.362758][T10005] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  554.646536][T10005] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  555.362373][T10005] System zones: 1-12
[  555.367285][T10005] EXT4-fs (loop9): orphan cleanup on readonly fs
[  555.555398][T10005] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1107: invalid indirect mapped block 2 (level 2)
[  555.636582][T10005] EXT4-fs (loop9): Remounting filesystem read-only
[  555.886324][T10005] EXT4-fs (loop9): 1 truncate cleaned up
[  555.892017][T10005] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback.
[  555.991515][ T6013] hfsplus: b-tree write err: -5, ino 3
[  557.820703][   T26] audit: type=1326 audit(1770746332.752:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.9.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c8f69f79 code=0x7ffc0000
[  557.972781][   T26] audit: type=1326 audit(1770746332.780:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.9.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c8f69f79 code=0x7ffc0000
[  558.083580][   T26] audit: type=1326 audit(1770746332.780:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.9.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c8f69f79 code=0x7ffc0000
[  558.157041][   T26] audit: type=1326 audit(1770746332.790:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.9.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f36c8f69f79 code=0x7ffc0000
[  558.223178][   T26] audit: type=1326 audit(1770746332.790:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.9.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c8f69f79 code=0x7ffc0000
[  558.299343][   T26] audit: type=1326 audit(1770746332.790:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.9.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f36c8f69f79 code=0x7ffc0000
[  558.370392][   T26] audit: type=1326 audit(1770746332.790:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.9.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f36c8f69f79 code=0x7ffc0000
[  560.372266][T10066] loop2: detected capacity change from 0 to 4096
[  560.542983][T10066] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  560.544282][T10072] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1109'.
[  560.806630][T10081] loop2: detected capacity change from 0 to 512
[  560.878636][T10081] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  560.887749][T10081] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  560.931771][T10083] loop4: detected capacity change from 0 to 512
[  561.002220][T10081] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  561.002861][T10083] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  561.129511][T10081] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  561.162153][T10081] System zones: 0-2, 18-18, 34-35
[  561.200910][T10081] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  561.326005][T10081] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.2.1118: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[  562.164127][T10081] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem
[  562.231191][T10081] EXT4-fs warning (device loop2): ext4_rename_delete:3792: inode #2: comm syz.2.1118: Deleting old file: nlink 4, error=-117
[  562.920436][ T5361] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  563.731906][ T5361] usb 3-1: Using ep0 maxpacket: 32
[  563.804718][T10124] loop4: detected capacity change from 0 to 512
[  563.946841][ T5361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  563.968017][ T5361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  563.971225][T10124] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  563.978042][ T5361] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  564.000115][ T5361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.010859][ T5361] usb 3-1: config 0 descriptor??
[  564.032002][T10124] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  564.584730][T10141] loop9: detected capacity change from 0 to 1024
[  564.988306][T10141] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  566.161025][T10145] device syzkaller0 entered promiscuous mode
[  566.321433][ T5361] usbhid 3-1:0.0: can't add hid device: -71
[  566.328330][ T5361] usbhid: probe of 3-1:0.0 failed with error -71
[  566.356509][ T5361] usb 3-1: USB disconnect, device number 5
[  566.413128][T10154] loop2: detected capacity change from 0 to 256
[  566.526808][T10154] FAT-fs (loop2): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  567.596539][T10177] loop2: detected capacity change from 0 to 1024
[  567.719465][T10177] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noauto_da_alloc,barrier=0x0000000000000007,nodioread_nolock,grpjquota=,max_dir_size_kb=0x00000000004007b1,noinit_itable,nouid32,nobarrier,noauto_da_alloc,nouid32,dioread_lock,,errors=continue. Quota mode: none.
[  568.025697][T10182] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1134'.
[  568.303786][T10189] loop2: detected capacity change from 0 to 128
[  568.867514][T10189] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,nodelalloc,,errors=continue. Quota mode: none.
[  568.943169][T10189] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  569.074587][T10189] EXT4-fs warning (device loop2): verify_group_input:165: Last group not full
[  569.227944][ T5361] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  569.378635][T10207] loop2: detected capacity change from 0 to 1024
[  569.495091][ T5361] usb 9-1: Using ep0 maxpacket: 32
[  569.647224][ T5361] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  569.667676][ T5361] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  569.677737][ T5361] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  569.687294][ T5361] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.748847][ T5361] usb 9-1: config 0 descriptor??
[  570.098926][  T154] hfsplus: b-tree write err: -5, ino 3
[  571.498843][T10229] loop5: detected capacity change from 0 to 256
[  571.541262][T10235] loop2: detected capacity change from 0 to 512
[  571.786150][T10229] FAT-fs (loop5): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value
[  571.942678][T10235] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback.
[  572.066221][T10235] ext4 filesystem being mounted at /261/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  572.828285][T10249] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1149'.
[  573.696597][ T5120] Bluetooth: hci5: command 0x0406 tx timeout
[  575.588825][ T5361] usbhid 9-1:0.0: can't add hid device: -32
[  575.594828][ T5361] usbhid: probe of 9-1:0.0 failed with error -32
[  575.904757][T10292] loop5: detected capacity change from 0 to 2048
[  575.939375][T10292] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  576.012206][T10292] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none.
[  576.290791][T10292] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1162: bg 0: block 234: padding at end of block bitmap is not set
[  576.309999][ T5361] usb 9-1: USB disconnect, device number 3
[  576.518935][T10292] EXT4-fs (loop5): Remounting filesystem read-only
[  576.969955][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  578.201529][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1172'.
[  578.238238][T10329] loop8: detected capacity change from 0 to 512
[  578.375741][T10343] loop2: detected capacity change from 0 to 1024
[  578.422661][T10345] loop4: detected capacity change from 0 to 512
[  578.514399][T10343] EXT4-fs (loop2): Ignoring removed orlov option
[  578.642249][T10343] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,quota,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,user_xattr,,errors=continue. Quota mode: writeback.
[  578.892558][ T5120] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  579.223982][ T5120] usb 9-1: Using ep0 maxpacket: 32
[  579.384530][ T5120] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  580.044982][ T5120] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  580.100830][ T5120] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  580.110253][ T5120] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.160129][ T5120] usb 9-1: config 0 descriptor??
[  580.387868][T10383] 
[  580.390237][T10383] =====================================================
[  580.397168][T10383] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  580.404646][T10383] syzkaller #0 Not tainted
[  580.409065][T10383] -----------------------------------------------------
[  580.416004][T10383] syz.5.1186/10383 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  580.423762][T10383] ffff888062096168 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x16d/0x490
[  580.432612][T10383] 
[  580.432612][T10383] and this task is already holding:
[  580.439980][T10383] ffff888077804028 (&client->buffer_lock){..-.}-{2:2}, at: evdev_pass_values+0xcb/0xab0
[  580.450017][T10383] which would create a new lock dependency:
[  580.456092][T10383]  (&client->buffer_lock){..-.}-{2:2} -> (&new->fa_lock){....}-{2:2}
[  580.464210][T10383] 
[  580.464210][T10383] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  580.473930][T10383]  (&client->buffer_lock){..-.}-{2:2}
[  580.473963][T10383] 
[  580.473963][T10383] ... which became SOFTIRQ-irq-safe at:
[  580.487038][T10383]   lock_acquire+0x19e/0x400
[  580.491746][T10383]   _raw_spin_lock+0x2a/0x40
[  580.496442][T10383]   evdev_pass_values+0xcb/0xab0
[  580.501404][T10383]   evdev_events+0x1c0/0x2f0
[  580.506006][T10383]   input_pass_values+0x87e/0x1210
[  580.511135][T10383]   input_handle_event+0xbe0/0x1490
[  580.516351][T10383]   input_inject_event+0x1b9/0x2c0
[  580.521488][T10383]   led_trigger_event+0x10a/0x1e0
[  580.526558][T10383]   kbd_bh+0x195/0x2a0
[  580.530730][T10383]   tasklet_action_common+0x2ad/0x410
[  580.536117][T10383]   handle_softirqs+0x339/0x830
[  580.540982][T10383]   run_ksoftirqd+0xa4/0x100
[  580.545588][T10383]   smpboot_thread_fn+0x4f6/0x970
[  580.550631][T10383]   kthread+0x436/0x520
[  580.554801][T10383]   ret_from_fork+0x1f/0x30
[  580.559332][T10383] 
[  580.559332][T10383] to a SOFTIRQ-irq-unsafe lock:
[  580.566352][T10383]  (tasklist_lock){.+.+}-{2:2}
[  580.566387][T10383] 
[  580.566387][T10383] ... which became SOFTIRQ-irq-unsafe at:
[  580.579120][T10383] ...
[  580.579128][T10383]   lock_acquire+0x19e/0x400
[  580.586408][T10383]   _raw_read_lock+0x32/0x40
[  580.591088][T10383]   do_wait+0x293/0xac0
[  580.595240][T10383]   kernel_wait+0xd3/0x1c0
[  580.599745][T10383]   call_usermodehelper_exec_work+0xb5/0x220
[  580.605886][T10383]   process_one_work+0x85f/0x1010
[  580.611446][T10383]   worker_thread+0xaa6/0x1290
[  580.616207][T10383]   kthread+0x436/0x520
[  580.620348][T10383]   ret_from_fork+0x1f/0x30
[  580.624835][T10383] 
[  580.624835][T10383] other info that might help us debug this:
[  580.624835][T10383] 
[  580.635044][T10383] Chain exists of:
[  580.635044][T10383]   &client->buffer_lock --> &new->fa_lock --> tasklist_lock
[  580.635044][T10383] 
[  580.648409][T10383]  Possible interrupt unsafe locking scenario:
[  580.648409][T10383] 
[  580.656753][T10383]        CPU0                    CPU1
[  580.662116][T10383]        ----                    ----
[  580.667467][T10383]   lock(tasklist_lock);
[  580.671715][T10383]                                local_irq_disable();
[  580.678481][T10383]                                lock(&client->buffer_lock);
[  580.685953][T10383]                                lock(&new->fa_lock);
[  580.692900][T10383]   <Interrupt>
[  580.696342][T10383]     lock(&client->buffer_lock);
[  580.701365][T10383] 
[  580.701365][T10383]  *** DEADLOCK ***
[  580.701365][T10383] 
[  580.709603][T10383] 7 locks held by syz.5.1186/10383:
[  580.714812][T10383]  #0: ffff888148ad0110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x17c/0x490
[  580.723939][T10383]  #1: ffff88801e8c8230 (&dev->event_lock#2){-.-.}-{2:2}, at: input_inject_event+0x9e/0x2c0
[  580.734127][T10383]  #2: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  580.743427][T10383]  #3: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  580.753103][T10383]  #4: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  580.762512][T10383]  #5: ffff888077804028 (&client->buffer_lock){..-.}-{2:2}, at: evdev_pass_values+0xcb/0xab0
[  580.772680][T10383]  #6: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  580.781968][T10383] 
[  580.781968][T10383] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  580.792366][T10383] -> (&client->buffer_lock){..-.}-{2:2} {
[  580.798087][T10383]    IN-SOFTIRQ-W at:
[  580.802084][T10383]                     lock_acquire+0x19e/0x400
[  580.808315][T10383]                     _raw_spin_lock+0x2a/0x40
[  580.814457][T10383]                     evdev_pass_values+0xcb/0xab0
[  580.821029][T10383]                     evdev_events+0x1c0/0x2f0
[  580.827284][T10383]                     input_pass_values+0x87e/0x1210
[  580.834067][T10383]                     input_handle_event+0xbe0/0x1490
[  580.840825][T10383]                     input_inject_event+0x1b9/0x2c0
[  580.847513][T10383]                     led_trigger_event+0x10a/0x1e0
[  580.854306][T10383]                     kbd_bh+0x195/0x2a0
[  580.859932][T10383]                     tasklet_action_common+0x2ad/0x410
[  580.866857][T10383]                     handle_softirqs+0x339/0x830
[  580.873263][T10383]                     run_ksoftirqd+0xa4/0x100
[  580.879504][T10383]                     smpboot_thread_fn+0x4f6/0x970
[  580.886116][T10383]                     kthread+0x436/0x520
[  580.891861][T10383]                     ret_from_fork+0x1f/0x30
[  580.898010][T10383]    INITIAL USE at:
[  580.902060][T10383]                    lock_acquire+0x19e/0x400
[  580.908284][T10383]                    _raw_spin_lock+0x2a/0x40
[  580.914332][T10383]                    evdev_pass_values+0xcb/0xab0
[  580.920737][T10383]                    evdev_events+0x1c0/0x2f0
[  580.926796][T10383]                    input_pass_values+0x87e/0x1210
[  580.933371][T10383]                    input_handle_event+0xb3f/0x1490
[  580.940116][T10383]                    input_inject_event+0x1b9/0x2c0
[  580.946697][T10383]                    evdev_write+0x35b/0x490
[  580.952783][T10383]                    vfs_write+0x30b/0xd60
[  580.958697][T10383]                    ksys_write+0x152/0x260
[  580.965018][T10383]                    do_syscall_64+0x4c/0xa0
[  580.970993][T10383]                    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  580.978437][T10383]  }
[  580.981032][T10383]  ... key      at: [<ffffffff9663c2e0>] evdev_open.__key.22+0x0/0x20
[  580.989291][T10383] 
[  580.989291][T10383] the dependencies between the lock to be acquired
[  580.989301][T10383]  and SOFTIRQ-irq-unsafe lock:
[  581.002966][T10383]   -> (tasklist_lock){.+.+}-{2:2} {
[  581.008384][T10383]      HARDIRQ-ON-R at:
[  581.012527][T10383]                         lock_acquire+0x19e/0x400
[  581.019016][T10383]                         _raw_read_lock+0x32/0x40
[  581.025501][T10383]                         do_wait+0x293/0xac0
[  581.031633][T10383]                         kernel_wait+0xd3/0x1c0
[  581.037941][T10383]                         call_usermodehelper_exec_work+0xb5/0x220
[  581.045820][T10383]                         process_one_work+0x85f/0x1010
[  581.052756][T10383]                         worker_thread+0xaa6/0x1290
[  581.059421][T10383]                         kthread+0x436/0x520
[  581.065467][T10383]                         ret_from_fork+0x1f/0x30
[  581.072193][T10383]      SOFTIRQ-ON-R at:
[  581.076336][T10383]                         lock_acquire+0x19e/0x400
[  581.082916][T10383]                         _raw_read_lock+0x32/0x40
[  581.089403][T10383]                         do_wait+0x293/0xac0
[  581.095477][T10383]                         kernel_wait+0xd3/0x1c0
[  581.101789][T10383]                         call_usermodehelper_exec_work+0xb5/0x220
[  581.109664][T10383]                         process_one_work+0x85f/0x1010
[  581.116672][T10383]                         worker_thread+0xaa6/0x1290
[  581.123426][T10383]                         kthread+0x436/0x520
[  581.129477][T10383]                         ret_from_fork+0x1f/0x30
[  581.135887][T10383]      INITIAL USE at:
[  581.139943][T10383]                        lock_acquire+0x19e/0x400
[  581.146513][T10383]                        _raw_write_lock_irq+0xab/0xf0
[  581.153343][T10383]                        copy_process+0x236f/0x3e20
[  581.160000][T10383]                        kernel_clone+0x23f/0x990
[  581.166396][T10383]                        kernel_thread+0xfa/0x160
[  581.172803][T10383]                        rest_init+0x21/0x330
[  581.178949][T10383]                        start_kernel+0x489/0x540
[  581.185368][T10383]                        secondary_startup_64_no_verify+0xb1/0xbb
[  581.193185][T10383]      INITIAL READ USE at:
[  581.197677][T10383]                             lock_acquire+0x19e/0x400
[  581.204611][T10383]                             _raw_read_lock+0x32/0x40
[  581.211441][T10383]                             do_wait+0x293/0xac0
[  581.218033][T10383]                             kernel_wait+0xd3/0x1c0
[  581.224704][T10383]                             call_usermodehelper_exec_work+0xb5/0x220
[  581.232929][T10383]                             process_one_work+0x85f/0x1010
[  581.240203][T10383]                             worker_thread+0xaa6/0x1290
[  581.247293][T10383]                             kthread+0x436/0x520
[  581.253694][T10383]                             ret_from_fork+0x1f/0x30
[  581.260537][T10383]    }
[  581.263195][T10383]    ... key      at: [<ffffffff8c00a058>] tasklist_lock+0x18/0x40
[  581.271199][T10383]    ... acquired at:
[  581.275158][T10383]    _raw_read_lock+0x32/0x40
[  581.279821][T10383]    send_sigio+0xd2/0x330
[  581.284307][T10383]    kill_fasync+0x20a/0x490
[  581.288887][T10383]    lease_break_callback+0x22/0x30
[  581.294200][T10383]    __break_lease+0x4a1/0x12b0
[  581.299126][T10383]    vfs_truncate+0x1fb/0x2f0
[  581.303786][T10383]    do_sys_truncate+0xf2/0x1c0
[  581.308623][T10383]    do_syscall_64+0x4c/0xa0
[  581.313197][T10383]    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  581.319251][T10383] 
[  581.321622][T10383]  -> (&f->f_owner.lock){...-}-{2:2} {
[  581.327080][T10383]     IN-SOFTIRQ-R at:
[  581.331136][T10383]                       lock_acquire+0x19e/0x400
[  581.337486][T10383]                       _raw_read_lock_irqsave+0xb8/0x100
[  581.344675][T10383]                       send_sigurg+0x25/0x390
[  581.350818][T10383]                       sk_send_sigurg+0x6b/0xc0
[  581.357129][T10383]                       tcp_urg+0x2bc/0xb20
[  581.362999][T10383]                       tcp_rcv_established+0xac2/0x1ce0
[  581.369999][T10383]                       tcp_v4_do_rcv+0x44b/0x9b0
[  581.376527][T10383]                       tcp_v4_rcv+0x26d8/0x2d10
[  581.382844][T10383]                       ip_protocol_deliver_rcu+0x3ad/0x770
[  581.390119][T10383]                       ip_local_deliver_finish+0x1d5/0x320
[  581.397398][T10383]                       NF_HOOK+0x303/0x390
[  581.403275][T10383]                       NF_HOOK+0x303/0x390
[  581.409147][T10383]                       __netif_receive_skb+0xcc/0x290
[  581.415985][T10383]                       process_backlog+0x370/0x790
[  581.422558][T10383]                       __napi_poll+0xc0/0x430
[  581.428709][T10383]                       net_rx_action+0x4d4/0xa10
[  581.435130][T10383]                       handle_softirqs+0x339/0x830
[  581.441706][T10383]                       run_ksoftirqd+0xa4/0x100
[  581.448024][T10383]                       smpboot_thread_fn+0x4f6/0x970
[  581.454767][T10383]                       kthread+0x436/0x520
[  581.460638][T10383]                       ret_from_fork+0x1f/0x30
[  581.466885][T10383]     INITIAL USE at:
[  581.470931][T10383]                      lock_acquire+0x19e/0x400
[  581.477163][T10383]                      _raw_write_lock_irq+0xab/0xf0
[  581.483832][T10383]                      __f_setown+0x37/0x330
[  581.489807][T10383]                      generic_setlease+0xec1/0x12f0
[  581.496471][T10383]                      fcntl_setlease+0x262/0x330
[  581.502867][T10383]                      do_fcntl+0x11a/0x1360
[  581.508832][T10383]                      __se_sys_fcntl+0xcc/0x190
[  581.515140][T10383]                      do_syscall_64+0x4c/0xa0
[  581.521276][T10383]                      entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  581.528906][T10383]     INITIAL READ USE at:
[  581.533307][T10383]                           lock_acquire+0x19e/0x400
[  581.540006][T10383]                           _raw_read_lock_irqsave+0xb8/0x100
[  581.547451][T10383]                           send_sigurg+0x25/0x390
[  581.553946][T10383]                           sk_send_sigurg+0x6b/0xc0
[  581.560619][T10383]                           tcp_urg+0x2bc/0xb20
[  581.566842][T10383]                           tcp_rcv_established+0xac2/0x1ce0
[  581.574189][T10383]                           tcp_v4_do_rcv+0x44b/0x9b0
[  581.580929][T10383]                           __release_sock+0x1e1/0x450
[  581.587761][T10383]                           release_sock+0x5b/0x1b0
[  581.594338][T10383]                           tcp_sendmsg+0x35/0x40
[  581.600755][T10383]                           __sys_sendto+0x46d/0x620
[  581.607450][T10383]                           __x64_sys_sendto+0xda/0xf0
[  581.614425][T10383]                           do_syscall_64+0x4c/0xa0
[  581.621262][T10383]                           entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  581.629655][T10383]   }
[  581.632259][T10383]   ... key      at: [<ffffffff9633fb00>] __alloc_file.__key+0x0/0x10
[  581.640409][T10383]   ... acquired at:
[  581.644278][T10383]    _raw_read_lock_irqsave+0xb8/0x100
[  581.649723][T10383]    send_sigio+0x2f/0x330
[  581.654296][T10383]    kill_fasync+0x20a/0x490
[  581.658876][T10383]    lease_break_callback+0x22/0x30
[  581.664058][T10383]    __break_lease+0x4a1/0x12b0
[  581.668898][T10383]    vfs_truncate+0x1fb/0x2f0
[  581.673554][T10383]    do_sys_truncate+0xf2/0x1c0
[  581.678506][T10383]    do_syscall_64+0x4c/0xa0
[  581.683089][T10383]    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  581.689141][T10383] 
[  581.691445][T10383] -> (&new->fa_lock){....}-{2:2} {
[  581.696701][T10383]    INITIAL USE at:
[  581.700582][T10383]                    lock_acquire+0x19e/0x400
[  581.706646][T10383]                    _raw_write_lock_irq+0xab/0xf0
[  581.713219][T10383]                    fasync_remove_entry+0xf0/0x1c0
[  581.719805][T10383]                    lease_modify+0x1a2/0x390
[  581.725860][T10383]                    locks_remove_file+0x52f/0xec0
[  581.732344][T10383]                    __fput+0x18d/0x930
[  581.738009][T10383]                    task_work_run+0x125/0x1a0
[  581.744153][T10383]                    do_exit+0x626/0x20c0
[  581.749858][T10383]                    do_group_exit+0x12e/0x300
[  581.756164][T10383]                    get_signal+0x6ca/0x12c0
[  581.762132][T10383]                    arch_do_signal_or_restart+0xe7/0x12c0
[  581.769542][T10383]                    exit_to_user_mode_loop+0x9e/0x130
[  581.776382][T10383]                    exit_to_user_mode_prepare+0xee/0x180
[  581.783608][T10383]                    irqentry_exit_to_user_mode+0x5/0x30
[  581.790616][T10383]                    asm_sysvec_reschedule_ipi+0x16/0x20
[  581.797616][T10383]    INITIAL READ USE at:
[  581.801927][T10383]                         lock_acquire+0x19e/0x400
[  581.808515][T10383]                         _raw_read_lock_irqsave+0xb8/0x100
[  581.815998][T10383]                         kill_fasync+0x16d/0x490
[  581.822443][T10383]                         lease_break_callback+0x22/0x30
[  581.829459][T10383]                         __break_lease+0x4a1/0x12b0
[  581.836132][T10383]                         vfs_truncate+0x1fb/0x2f0
[  581.843231][T10383]                         do_sys_truncate+0xf2/0x1c0
[  581.850186][T10383]                         do_syscall_64+0x4c/0xa0
[  581.856596][T10383]                         entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  581.864475][T10383]  }
[  581.866958][T10383]  ... key      at: [<ffffffff96340780>] fasync_insert_entry.__key+0x0/0x20
[  581.875624][T10383]  ... acquired at:
[  581.879406][T10383]    _raw_read_lock_irqsave+0xb8/0x100
[  581.884851][T10383]    kill_fasync+0x16d/0x490
[  581.889432][T10383]    evdev_pass_values+0x54b/0xab0
[  581.894522][T10383]    evdev_events+0x1c0/0x2f0
[  581.899186][T10383]    input_pass_values+0x87e/0x1210
[  581.904367][T10383]    input_handle_event+0xb3f/0x1490
[  581.909748][T10383]    input_inject_event+0x1b9/0x2c0
[  581.915016][T10383]    evdev_write+0x35b/0x490
[  581.919715][T10383]    vfs_write+0x30b/0xd60
[  581.924276][T10383]    ksys_write+0x152/0x260
[  581.928883][T10383]    do_syscall_64+0x4c/0xa0
[  581.933450][T10383]    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  581.939499][T10383] 
[  581.941799][T10383] 
[  581.941799][T10383] stack backtrace:
[  581.947670][T10383] CPU: 1 PID: 10383 Comm: syz.5.1186 Not tainted syzkaller #0
[  581.955103][T10383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  581.965248][T10383] Call Trace:
[  581.968521][T10383]  <TASK>
[  581.971436][T10383]  dump_stack_lvl+0x188/0x250
[  581.976279][T10383]  ? load_image+0x400/0x400
[  581.980764][T10383]  ? show_regs_print_info+0x20/0x20
[  581.985946][T10383]  ? load_image+0x400/0x400
[  581.990431][T10383]  ? print_shortest_lock_dependencies+0xf0/0x160
[  581.996742][T10383]  __lock_acquire+0x6688/0x7d10
[  582.001573][T10383]  ? cpufreq_update_util+0x91/0x230
[  582.006757][T10383]  ? verify_lock_unused+0x140/0x140
[  582.011958][T10383]  ? verify_lock_unused+0x140/0x140
[  582.017135][T10383]  ? do_raw_spin_unlock+0x11d/0x230
[  582.022312][T10383]  lock_acquire+0x19e/0x400
[  582.026813][T10383]  ? kill_fasync+0x16d/0x490
[  582.031393][T10383]  ? read_lock_is_recursive+0x10/0x10
[  582.036749][T10383]  _raw_read_lock_irqsave+0xb8/0x100
[  582.042020][T10383]  ? kill_fasync+0x16d/0x490
[  582.046591][T10383]  ? _raw_read_lock+0x40/0x40
[  582.051378][T10383]  ? do_raw_spin_lock+0x128/0x2f0
[  582.056403][T10383]  kill_fasync+0x16d/0x490
[  582.060829][T10383]  evdev_pass_values+0x54b/0xab0
[  582.065749][T10383]  ? evdev_pass_values+0x521/0xab0
[  582.071016][T10383]  evdev_events+0x1c0/0x2f0
[  582.075498][T10383]  ? evdev_event+0xe0/0xe0
[  582.079896][T10383]  input_pass_values+0x87e/0x1210
[  582.084988][T10383]  ? read_lock_is_recursive+0x10/0x10
[  582.090358][T10383]  input_handle_event+0xb3f/0x1490
[  582.095573][T10383]  input_inject_event+0x1b9/0x2c0
[  582.100577][T10383]  evdev_write+0x35b/0x490
[  582.104970][T10383]  ? evdev_read+0xb90/0xb90
[  582.109443][T10383]  ? end_current_label_crit_section+0x14b/0x170
[  582.115757][T10383]  ? common_file_perm+0x171/0x1c0
[  582.120845][T10383]  ? fsnotify_perm+0x5d/0x560
[  582.125505][T10383]  ? security_file_permission+0x75/0xa0
[  582.131116][T10383]  ? evdev_read+0xb90/0xb90
[  582.135600][T10383]  vfs_write+0x30b/0xd60
[  582.139871][T10383]  ? file_end_write+0x250/0x250
[  582.144718][T10383]  ? __fget_files+0x40f/0x480
[  582.149530][T10383]  ? __fdget_pos+0x1e2/0x370
[  582.154098][T10383]  ? ksys_write+0x71/0x260
[  582.158586][T10383]  ksys_write+0x152/0x260
[  582.162892][T10383]  ? __ia32_sys_read+0x80/0x80
[  582.167645][T10383]  ? lockdep_hardirqs_on+0x94/0x140
[  582.172941][T10383]  do_syscall_64+0x4c/0xa0
[  582.177349][T10383]  ? clear_bhb_loop+0x30/0x80
[  582.182013][T10383]  ? clear_bhb_loop+0x30/0x80
[  582.186675][T10383]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  582.192560][T10383] RIP: 0033:0x7f79aecaef79
[  582.196957][T10383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  582.216642][T10383] RSP: 002b:00007f79acf09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  582.225065][T10383] RAX: ffffffffffffffda RBX: 00007f79aef28fa0 RCX: 00007f79aecaef79
[  582.233023][T10383] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000003
[  582.240981][T10383] RBP: 00007f79aed457e0 R08: 0000000000000000 R09: 0000000000000000
[  582.248941][T10383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  582.256909][T10383] R13: 00007f79aef29038 R14: 00007f79aef28fa0 R15: 00007fff42d8ccd8
[  582.265053][T10383]  </TASK>
[  582.433051][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  582.433867][ T5120] usbhid 9-1:0.0: can't add hid device: -71
[  582.439891][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  582.459581][ T5120] usbhid: probe of 9-1:0.0 failed with error -71
[  582.495473][ T5120] usb 9-1: USB disconnect, device number 4
[  582.512461][T10396] loop4: detected capacity change from 0 to 256
[  582.552432][T10396] FAT-fs (loop4): Unrecognized mount option "00000000000000000000�d��	�1����M~r�P���i�Y�s܂A.�b��\t��?���㞿1#[��.2F-B:5Y�8�QS��i�.���1Y_f��K���K��9�ɚ�f�{��E����"{�=J���s�W&�9p�30M��`߼v�$������H=�B�сl�F��U��{P200000000000000000000004" or missing value