last executing test programs:

7m33.809719917s ago: executing program 32 (id=38):
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x3a8)

7m17.400623125s ago: executing program 33 (id=271):
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0x1c, 0x64, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @remote}, {0x2, 0x4e21, 0x8}}}}}, 0x0)

6m54.916822437s ago: executing program 34 (id=399):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020)
r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

6m44.910446893s ago: executing program 35 (id=464):
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
splice(r1, 0x0, r0, 0x0, 0x7d, 0x8)

4m53.309576645s ago: executing program 36 (id=1171):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB    \x00'}, 0x20)
r2 = socket(0x1e, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x9, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b979ff03076003008cb89e08f086", 0x0, 0x20fe8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m49.192013296s ago: executing program 37 (id=1315):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x4)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="11020000000000000000010000002800018014000400000000000000000000000000000000010800060001000000060001000a"], 0x3c}}, 0x0)

4m10.056779857s ago: executing program 38 (id=1605):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfbfffffd, 0x0, 0x0, 0x0, 0x7fc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0xc, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x1e, &(0x7f0000000540)={@multicast, @link_local, @void, {@can={0xc, {{0x4}, 0x6, 0x0, 0x0, 0x0, "194a519dbecd5071"}}}}, 0x0)

4m4.800219934s ago: executing program 39 (id=1638):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x4, 0x0, [{0x40000010, 0x0, 0x8ff}, {0x256, 0x0, 0xa4}, {0xc0000101, 0x0, 0x7}, {0xa85, 0x0, 0x7}]})

3m45.217086787s ago: executing program 1 (id=1745):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

3m44.478331151s ago: executing program 1 (id=1749):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)

3m43.24118107s ago: executing program 1 (id=1755):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101095, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
unshare(0x22020600)
mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b1052, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020)

3m43.011994067s ago: executing program 1 (id=1757):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x10000, &(0x7f0000000700)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@dioread_nolock}, {@noblock_validity}, {@nouid32}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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")
creat(0x0, 0x14)
io_setup(0x6, 0x0)
io_submit(0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x3}}, 0x24, 0x1)

3m42.370235968s ago: executing program 1 (id=1765):
pipe2$watch_queue(&(0x7f0000002240)={<r0=>0xffffffffffffffff}, 0x80)
r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xe0)
pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x9f)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
socket(0x800000000000009, 0x2, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

3m41.898376613s ago: executing program 40 (id=1765):
pipe2$watch_queue(&(0x7f0000002240)={<r0=>0xffffffffffffffff}, 0x80)
r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xe0)
pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x9f)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
socket(0x800000000000009, 0x2, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

3m14.701366567s ago: executing program 9 (id=1943):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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")
open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000080)={[{@nouid32}, {@errors_remount}, {@grpjquota}, {@sysvgroups}, {@grpjquota}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000000)='3', 0x1, 0x4fed0)
r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9)
fallocate(r2, 0x8, 0x4000, 0x8000)

3m14.082243817s ago: executing program 9 (id=1948):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, r0, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)

3m13.755471958s ago: executing program 9 (id=1952):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffff9, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x101, 0x100000002], 0x4, 0x280384})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m12.593002594s ago: executing program 9 (id=1962):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x80000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

3m12.392704431s ago: executing program 9 (id=1965):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20)

3m11.892089227s ago: executing program 9 (id=1969):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4)
writev(r0, &(0x7f0000001a80)=[{&(0x7f0000000780)="0374b89b6b8dcbb4cb8a1771ee", 0xd}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0)

3m10.803375122s ago: executing program 41 (id=1969):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4)
writev(r0, &(0x7f0000001a80)=[{&(0x7f0000000780)="0374b89b6b8dcbb4cb8a1771ee", 0xd}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0)

2m57.003645681s ago: executing program 2 (id=2053):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)

2m56.764105088s ago: executing program 2 (id=2056):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m56.463796797s ago: executing program 2 (id=2058):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x237e, 0x8a)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r1, 0x4, 0x42000)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r2, 0x4, 0x42000)
close(0x3)

2m56.154060668s ago: executing program 2 (id=2060):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZzWSNMZHNyu1+Ps0++8zznfk9k4fsbJEnH748Obqfx8MnX/wSWZZEZxjDOEliEJ1ofBULht8EAPAsOymK+L2Y2SSXRES2vbIAgC1a7+9/d9786VLKAgC26N677729f3Bw550ssrg7+fp4VP5nX/6cHd9/GB/HOB7Ea9GP04jqQWE3qqeFsnm3KIppNy8N4uZkejwqk5MPntbn3/8tosrvRT8GVdfZ00aVf+vgzl4+08pPyzqer68/LPO3ox8vnoUX8reX5GOUxquvtOq/Ff34+aP4JMZxvypinv9yL8/fLL794/P3y/LKfDI9HvWqcXPFziW/NAAAAAAAAAAAAAAAAAAAAAAAXGG36r1zepHfiJuTsqvef2fnNNLy17wxWNyfZ5ZPmhO19wcqimJaxPetLQXzoh44z3fjpW57Y0EAAAAAAAAAAAAAAAAAAAC4vh5/+tnR4Xj84NGFNJrdALoR8ee9iP96nmGr50asHtyrr3k4Hnfq5sKYp2m7J3aaMUnEyjLKSVzQbfm3xnPna24aP/xYTnCTE2atnteXT3B3+/NqVtfRYbL8Wr1oerJ6kXyXRszHpLHmtdJ/OlTEJssvXXqov/Hc0xeqxnTFmEhWFfbGr7M7V/ck52eRVnd1aXy3brTi59bGWq97ZLP4398rkmq3jt723owAAAAAAAAAAAAAAAAAAOCam3/6d8nBJyujncJHgQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Iubf/79BY1qH1xicxqPH//MUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAb+CgAA//8HIVi7")
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x2020)

2m55.804776299s ago: executing program 2 (id=2061):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
close(r0)

2m55.085163831s ago: executing program 2 (id=2064):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x5818048, &(0x7f00000003c0)=ANY=[], 0x1, 0x153d, &(0x7f0000001880)="$eJzs3AucjdX6OPDnWWu9DEm7SS7DWut52WmwXJLkkiSXJEmOHMktITRJkoPEuEuahJDrJLkMIblMY9K43y+5J0nSJElIaJL1/0xH/zo5//qf36/fr3Oa5/v5vJ+9nv3uZ+21PPvyrtee94ueo+o2r1erKRHBfwv+/SYRAGIAYDgAXAMAAQBUiq0Um70/j8TE/96TsN/XAyl/9AjYH4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrIdc4tcy1vO3fj8/5+d+pX7+Pv/TySz7JRPNpW9vte/kML1z9m4/jkb1z9n4/rnbFz/nI3r/6ci/tUErn/OxvVnLCf7r5875v87+DNsf/TrjzHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZYznDB/0QBwI+3jDHGGGOMMcYY+/PwuX9qZ/k/ciSMMcYYY4wxxhj7n4MgQIKCAHJBboiBPJAXroJ8cDXkh2sgAtdCLFwHBeB6KAiFoDAUgTgoCsVAgwELBCEUhxIQhRugJNwI8VAKSkMZcFAWykF5qAA3QUW4GSrBLVAZboUqUBWqQXW4DWrA7VAT7oBacCfUhjpQF+rBXVAf7oYGcA80hHuhEdwHjeF+aAJ/gabwADSDv0JzeBBawEPQElpBa2gDbf9L+c9AX3gW+kF/SIQBMBAGwWAYAkNhGAyH52AEPA8j4QVIghdhFLwEo2EMjIWXYRyMhwnwCkyESTAZpsBUmAbJ8CpMh9dgBrwOM2EWzIY5kAJzYR68AfNhASyEN2ERvAWLYQkshWWQCm9DGiyHdHgHVsC7kAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXbYAe/BTtgFu2EP7IV9sB/ehwPwARyED+EQfHRFPv5q/vlf5PdCQECBAhUqzIW5MAZjMC/mxXyYD/NjfoxgBGMxFgtgASyIBbEwFsY4jMNiWAwNGiQkLI7FMYpRLIklMR7jsTSWRocOy2E5rIA3YUWsiJWwElbGylgFq2JVrI7VsQbWwJpYE2thLayNtbEu1sW78C68GxtgA2yIDbERNsLG2BibYBNsik2xGTbD5tgcW2ALbIktsTW2xrbYFtthO2yP7bEjdsRO2Am7YBdMwATsil2xG3bD7tgde2AP7Ik9sRf2xt74DD6Dz+Kz2B9riwE4EAfiYByMQ3EYDsPncAQ+j8/jC5iEL+IofAlfwjE4Fs/hOByPE3AC1hCTcDJOQRLTMBmTcTpOxxk4A2fiLJyFczAF5+I8nIfzcQEuwDdxEb6Fb+ESXILLMBVTMQ2XYzqm4wo8jxm4ElfhalyDa3ENrscNuB434WbchFtxK27H7fgevoe7cBfuwT24DxUAvo8f4AeYhIfwEB7Gw3gEj+BRPIqZmInH8Bgex+N4Ak/gSTyJp/A0nsHTeBbP4jk8jxfwAmZhFl7Ep+M+a7av1MYkEELEAIASuUQuESNiRF6RV+QT+UR+kV9ERETEilhRQBQQBUVBUVgUFnEiThQTxYQRRpAIRXFRXERFVJQUJUW8iBelRWnhhBPlRDlRQVQQFUVFUUncIiqLW0UVUVV0cNVFdVFDdHQ1xR2ilqglaos6oq6oJ+qJ+qK+aCAaiIaioWgkGonG4n7RRAzAofiAyK5M8+yhilHYUrQSrUUbMQYfFu3EWGwvOoiO4lExHsdhF9HOJYjHRVcxGbuJJ8UUfEr0ENOwp/ib6CV6iz7iGdFXtHf9RH8xEweIgWIODhZDxFAxTMzHOiK7YnXFCyJJvChGiZfEMhwjxoqXxTgxXkwQr4iJYpKYLKaIqWKaSBaviuniNTFDvC5millitpgjUsRcMU+8IeaLBWKheFMsEm+JxWKJWCqWiVTxtkgTy0W6eEesEO+KDLFSrBKrxRqxVqwT68UGsVFsEpvFFrFVbBPbxQ7xntgpdondYo/YK/aJ/eJ9cUB8IA6KD8Uh8ZE4LD4WR8Qn4qj4VGSKz8Qx8bk4Lr4QJ8SX4qT4SpwSp8UZ8bU4K74R58R5cUF8K7LEd+Ki+F5cEl6ARCmklEoGMpfMLWNkHplXXiXzyatlfnmNjMhrZay8ThaQ18uCspAsLIvIOFlUFpNaGmklyVAWlyVkVN4gSzZBAFlKlpZlpJNlZTlZXlaQN8mK8mZZSd4iK8tbZRVZVVaT1eVtsoa8XdaUd8ha8k5ZW9aRdWU9eZesL++WDeQ9sqG8VzaS98nG8n7ZRP5FNpUPyGbyr7K5fFC2CB6SLWUr2Vq2kW3lw7KdfES2lx1kR/mo7CQ7yy7yMZkgH5dd5ROym3xSdpdPyR7yadlT/k32kr1lH/m9vCS97Cf7y0Q5QA6Ug+RgOUQOlcPkcPmcHCGflyPlCzJJvihHyZfkaDlGjpUvy3FyvPT+FTlRTpKT5RQ5VU6TyfJVOV2+JmfI1+VMOUvOlnNkipwrh17uaeEv8ifIK/Nf+yf5I3949u1yh3xP7pS75G65R+6V++R+uV8ekAfkQXlQHpKH5GF5WB6RR+RReVRmykx5TB6Tx+VxeUKekCflSXlKnpbfyq/lWfmNPCfPy/PyW5kls+TFy/8GoFAJJZVSgcqlcqsYlUflVVepfOpqlV9doyLqWhWrrlMF1PWqoCqkCqsiKk4VVcWUVkZZRSpUxVUJFVU34OUDClValVFOlVXlVPl/JV+VVDeqeFXqH/J/a3xtVVvVTrVT7VV71VF1VJ1UJ9VFdVEJKkF1VV1VN9VNdVfdVQ/VQ/VUAQD0Un1UH9VX9VX9VD+VqBLVQDVIDVZD1FA1TA1Xz6kRaoQaqUaqJJWkRqlRarQarcaqsWqcGqcmqAlqopqoJqvJaqqaqpJVspqupqsZaoaaqWaq2Wq2SlEpap6ap+ar+WqhWqgWqUVqsVqslqqlKlWlqjSVptJVulqhVqgMtVKtVKvVarVWrVXr1Xq1UW1Um9VmtVVtVRlqh9qhdqqdarfarfaqvWq/2q8OqAPqoDqoDqlD6rA6rI6oI+qoOqoyVaY6po6p4+q4OqFOqJPqpDqlTqkz6ow6q86qc+qcuqAuqCyVpS6qi+qSupR92BeIQAQqUEGuIFcQE8QEeYO8Qb4gX5A/yB9EgkgQG8QGBYLrg4JBoaBwUCSIC4oGxQIdmMAGFIRB8aBEEA1uCEoGNwbxQamgdFAmcEHZoFxQPqgQ3BRUDG4OKgW3BJWDW4MqQdWgWlA9uC2oEdwe1AzuCGoFdwa1gzpB3aBecFdQP7g7aBDcEzQM7g0aBfcFjYP7gybBXy41+PtrK2gePBi0CB4KWgatgtZBm6Dt79N/0DR4IGgWeH+u0COun+6vE/UAPVAP0oP1ED1UD9PD9XN6hH5ej9Qv6CT9oh6lX9Kj9Rg9Vr+sx+nxeoJ+RU/Uk/RkPUVP1dN0sn5VT9ev6Rn6dT1Tz9Kz9RydoufqefoNPV8v0Av1m3qRfksv1kv0Ur1Mp+q3dZpertP1O3qFfldn6JV6lV6t1+i1ep1erzfojXqT3qy36K16m96ud+j39E69S+/We/RevU/v1+/rA/oDfVB/qA/pj/Rh/bE+oj/RR/WnOlN/po/pz/Vx/YU+ob/UJ/VX+pQ+rc/or/VZ/Y0+p8/rC/pbnaW/0xf19/qS9tkH99lf70YZZXKZXCbGxJi8Jq/JZ/KZ/Ca/iZiIiTWxpoApYAqagqawKWziTJwpZoqZbGTIFDfFTdRETUlT0sSbeFPalDbOOFPOlDMVTAVT0VQ0lUwlU9lUNlVMFVPNVDO3mdvM7eZ2c4e5w9xp7jR1TB1Tz9Qz9U1908A0MA1NQ9PINDKNTWPTxDQxTU1T08w0M81Nc9PCtDAtTUvT2rQ2bU1b0860M+1Ne9PRdDSdTCfTxXQxCSbBdDVdTTfTzXQ33U0P08P0ND1NL9PL9DF9TF/T1/Qz/UyiSTQDzUAz2Aw2Q81QM9wMNyPMCDPSjDRJJsmM8mBGm9FmrBlrxpnxZoJ5xUw0k8xkM8VMNdNMskk20810M8PMMDPNTDPbzDYpJsXMM/PMfDPfLDQLzSKzyCw2i81Ss9SkmlSTZtJMukk3K8wKk2EyzCqzyqwxa8w6s85sMBvMJrPJbDFbzDazzewwO8xOs9PsNrvNXrPX7Df7zQFzwBw0B80hc8gcNoc9Apij5qjJNJnmmDlmjpvj5oQ5YU6ak+aUOWXOmDPmrDlrzplz5oK5YLLMd+ai+d5cMt7E2Dw2r73K5rNX2/z2GvvLuLAtYuNsUVvMalvQFvqH2Fhr420pW/rHJaYtb+Ozj9tsGetsWVvOlrdVbFVbzVa3t9ka9nZb84q4vr3bNrD32IafelvP3vVTbO+NAXufbWwftE3sQ7apbWWb2Ta2uX3QtrAP2Za2lW1t29hOtrPtYh+zCfZx29U+cUWcZpfbDXaj3WQ32wP2A3vBfmuP2y9slv3O9rP97XD7nB1hn7cj7Qs2yb54RTzBvmIn2kl2sp1ip9ppV8Sz7RybYufaefYNO98uuCJOtW/bRTbdLrZL7FK77Ic4e0zp9h27wr5rM+xKu8qutmvsWrvOrv+/Y11tt9ptdrvdb9+3O+0uu9vusXvtvh/i7HkctB/aQ/Yje8x+bo/YT+xRe8Jm2s9+iLPnd8J+aU/ar+wpe9qesV/bs/Ybe86ez56/z5771/Z7e8l6C4QkSJKigHJRboqhPJSXrqJ8dDXlp2soQtdSLF1HBeh6KkiFqDAVoTgqSsVIkyFLRCEVpxIUpRuoJN1I8VSKSlMZclSWylF5qkA3UUW6mSrRLVSZbqUqVJWqUXW6jWrQ7VST7qBadCfVpjpUl+rRXVSf7qYGdA8lbriXGtF91Jjupyb0F2pKD1Az+is1pwepBT1ELakVtaY21JYepnb0CLWnDtSRHqVO1Jm60GOUQI9TV3qCutGT1J2eoh70NPWkv1Ev6k196BnqS89SP+pPiTSABtIgGkxDaCgNo+H0HI2g52kkvUBJ9CKNopdoNI0hgJdpHI2nCfQKTaRJNJmm0FSaRsn0Kk2n12gGvU4zaRbNpjmUQnNpHr1B82kBLaQ3aRG9RYtpCS2lZZRKb1MaLad0eodW0LuUQStpFa2mNbSW1tF62kAbaRNtpi20lbbRdtpB79FO2kW7aQ/tpX20n96nA5Tn8hvuIzpMH9MR+oSO0qeUSZ/RMfqcjtMXdIK+pJP0FZ2i03SGvqaz9A2do/N0gb6lLPqOLtL3dIk8QYihCGWowiDMFeYOY8I8Yd7wqjBfeHWYP7wmjITXhrHhdWGB8PqwYFgoLBwWCePComGxUIcmtCGFYVg8LBFGwxvCkuGNYXxYKiwdlgldWDYsF5YPK4Q3hRXDm8NK4S1h5fDWsEpYNXzw3urhbWGN8PawZnhHWCu8M6wd1gnrhvXCu8L64d1hg/CesGF4b1gxvC9sHN4fwuW/V2kW/jVsHj4YtggfCluGrcLWYZuwbfhw2C58JGwfdgg7ho+GncLOYZfwsTAhfDzsGj7xm/sTwwHhwHBQOCj0/h65NLosmhp9O5oWXR5Nj74TXRF9N5oRXRldFV0dXRNdG10XXR/dEN0Y3RTdHN0S3RrdFt0e9b5ebnDohJNOucDlcrldjMvj8rqrXD53tcvvrnERd62Ldde5Au56V9AVcoVdERfnirpiTjvjrCMXuuKuhAIAV9Ld6OJdKVfalXHOlXXlXBvX1rV17dwjrr3r4Dq6R92jrrPr7B5zj7nHXVf3hOvmnnTd3VOuh3vaPe3+5nq53q6Pe8b1dc+6fq6/S3SJbqAb6Aa7wW6oG+qGu+FuhBvhRrqRLskluVFulBvtRruxbqwb58a5CW6Cm+gmusluspvqprpkl+ymu+luhpvhso+tZ7vZLsWluHlunpvv5ruFbqFbFL/ILXaL3VK31KW6VJfm0ly6S3cr3AqX4TLcKrfKrXFr3Dq3zm1wG9wmt8ltcVvcNrfN7XA73E630+12u91et9ftd/vdAXfAHXQH3SF3yB12h90Rd8QddZ+6TPeZO+Y+d8fdF+6E+9KddF+5U+60O+O+dmfdN+6cO+8uuG9dlvvOXXTfu0vOu+TIq5HpkdciMyKvR2ZGZkVmR+ZEUiJzI/Mib0TmRxZEFkbejCyKvBVZHFkSWRpZFkmNvB1JiyyPpEfeiayIvBvJiKyMrIqsjqyJrFXgi+4MfXFfwkf9Db6kv9HH+1K+tC/jnS/ry/nyvoK/yVf0N/tK/hZf2d/qq/iqvpp/yLf0rXxr38a39Q/7dv4R39538B39o76T7+y7+Md8gn/cd/VP+G7+Sd/dP+V7+Kd/+KVWL9/b9/HP+L7+Wd/P9/eJfoAf6Af5wX6IH+qH+eH+OT/CP+9H+hd8kn/Rj/Iv+dF+jB/rX/bj/Hg/wb/iJ/pJfrKf4qf6aT7Zv+qn+9f8DP+6n+ln+dl+jk/xc/08/4af7xf4hf5Nv8i/5Rf7JX6pX+ZT/ds+zS/36f4dv8K/6zP8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/c7/Ht+p9/ld/s9fq/f5/f79/0B/4E/6D/0h/xH/rD/2B/xn/ij/lOf6T/zx/zn/rj/wp/wX/qT/it/yp/2Z/zX/qz/xp/z5/0F/63P8t/5i/57f8n7f+nXa3V+r9PnjDHGGGP/YQb9xv4B/+S+7OWIuNz+znt/9a4imT/fLwFgS8G/t4eIuE4RAHi8f88Hftxq105MTLz82AwJQYklABD5xRNcjldCR+gMCdABKlw5kCzvveidRb/Rf/QWgLw/S4uBn+Kf+v/4n85/iHj40QlplcMLsb/S/xKA+BI/5WSvwn+MV0LHHy6n0AEq/j/6L9TuN8af55NkgPY/y8kHAO3z/HL85caUB4CEf3gkY4wxxhhjjDH2d0NEte6/tX7OXp/H/eyigLnhp/hX1+eMMcYYY4wxxhj7t/BU7z6PPZyQ0KE7N/5TGwD/FsP4z2rEXH79/y4dXvWHT+efNLz/7Xd351/p5//r4wP/Rz+cGGOMMcYYY7+rny8jf5TnjxwQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWA/3vXKCOMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy9n+TwAAAP//xpExGA==")
getpid()
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0x40001a2)
r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000100)=0x4, 0x80000000)
socket$nl_generic(0x10, 0x3, 0x10)

2m53.612898189s ago: executing program 42 (id=2064):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x5818048, &(0x7f00000003c0)=ANY=[], 0x1, 0x153d, &(0x7f0000001880)="$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")
getpid()
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0x40001a2)
r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000100)=0x4, 0x80000000)
socket$nl_generic(0x10, 0x3, 0x10)

2m38.14223277s ago: executing program 3 (id=2159):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x10)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0xc, 0x1}]}]}]}}]}, 0x60}}, 0x0)

2m37.568606639s ago: executing program 3 (id=2168):
r0 = gettid()
timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8, 0x80000)
read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0x2020)
signalfd4(r1, &(0x7f0000000040)={[0xffffffffffff0150]}, 0x8, 0x80800)

2m37.254792578s ago: executing program 3 (id=2174):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x4)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x30)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r3, 0x402, 0x40000029)
close_range(r0, 0xffffffffffffffff, 0x2)

2m37.004646446s ago: executing program 3 (id=2177):
syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x1520, &(0x7f0000000440)="$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")
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80)
write$bt_hci(r1, &(0x7f0000000bc0)=ANY=[], 0xa)
sendfile(r1, r0, 0x0, 0x40001)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)

2m36.24744377s ago: executing program 3 (id=2182):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x13}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="f801000000000000fbffffffffffffff040000000000000001000000000000000400000000000000002000000000000006000000000100000100000000000000ffffff7f0000000000000000800200000400000000000000f8ffffffffffffff0500000000000000000f0000080000000400000000c0000000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="64fdffff020000000000000071550460ff12d0ad6902"], 0x0, 0x0, 0x0})
getdents64(r4, 0x0, 0x0)

2m35.709287838s ago: executing program 3 (id=2187):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c00000014"], 0x28}}, 0x0)

2m35.086419007s ago: executing program 43 (id=2187):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c00000014"], 0x28}}, 0x0)

2m20.413166944s ago: executing program 5 (id=2263):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

2m17.594411174s ago: executing program 5 (id=2267):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQbM7G5v1rL0xa2+8/nykybw3v77f5/iNZ3aeZgM4t56PiDci4sM0TV+KiNl8eSmfotWZsu3ef/jucjYlkaZv/S2JJF+WbZamado95uV8t+mI+NpXIr6Z7As4nc93dm8v1eu1zbxaba7fqW7t7F5fW19ara3WNhYW5l9dfG3xlcUbQ2nnlYh4/Ut/+v53fvrl13/52Xf+ePMv176VpTWTr++24xgmD1vZaXr5wnTPDpvHDPYkytpT/iCvXBxsn3snmRAAAH1l1/gfiYhPRcRLMRsTh1/OAgAAAGdQ+oWZ+CDpPL8rMNVnOQAAAHCGlNpjYJNSJR8LMBOlUqXSGcP7sbhUqje2mp+51djeWOmMlZ2LcunWWr12Ix8rPBflJKvPt8t79Zd76gsR8XREfG/2YrteWW7UV0b94QcAAACcE5d77v//Odu5/z9ccjrJAQAAAMMzN+oEAAAAgBPn/h8AAADGWnnUCQAAAAAn7qtvvplNaff7r1fe3tm+3Xj7+kpt63ZlfXu5stzYvFNZbTRW2+/sWz/qePVG487nYmP7brVZ22pWr+zs3lxvbG80b67F9Kk0CAAAADjg6U/e/30SEa3PX2xPmalRJwWcislHpe47PQt6/x+e6szfO6WkgFMxMcA2710oXu46Ac62yd4Fffo6MH6M/weO+kaPvoN3ftOZlYacDwAAMHxXP1H8/P/o6/mWS34443RiOL96nv+ns6NKBDh17ef/gw7kcbEAY6U80AhAYJz9v8//j5amj5UQAAAwdDPtKSlV8o/3ZqJUqlQirrS/FrCc3Fqr125ExFMR8bvZ8oWsPt/eMznyngEAAAAAAAAAAAAAAAAAAAAAAAAA6EjTJFIAAABgrEWU/pz8qvMu/6uzL870fj4wlfy7/ZXAUxHxzo/e+sHdpWZzcz5b/vdHy5s/zJe/PIpPMAAAAIBe3fv09vxfo84GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHHz/sN3l7vTAJtfHFbcv34xIuaK4k/GdHs+HeWIuPSPJCb37ZdExMQQ4rfuRcTHi+InWVqPQhbFH8YPoXUvaaVthfFjLv8pFMW/PIT4cJ7dz84/bxT1/1I8354X97/JiP+pH1f/8188Ov9N9On/VwaM8cyDn1f7xr8X8cxk8fmvGz/pE/+FgaKX4xtf393ttzb9ccTV7t+f9hlvf4S9UrW5fqe6tbN7fW19abW2WttYWJh/dfG1xVcWb1RvrdVr+b+FMb777C8+PKz9lwr//iV5Nv3b/2LB8SYK8v/Pg7sPP9qttA7Gv/ZCQfxf/yTf4mD8Uh7n03k5W3+1W251yvs997PfPndY+1f22l9+nP//a/0O2utAR3l2sF8dAOBEbO3s3l6q12ubY1vI7tKfgDSOU5iKJyKN8S18Oys8GNYB0zRNsz5VsOp+RAxynCSG3NJScT57hb5ngFGfmQAAgGHbu+gfdSYAAAAAAAAAAAAAAAAAAABwfp3GW9Z6Y+69AjkZxiu0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACG4r8BAAD//7gG3Ac=")
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x8f, &(0x7f0000000640)=ANY=[], 0x0)

2m16.261295046s ago: executing program 5 (id=2275):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000980), 0xfdef)
splice(r0, 0x0, r2, 0x0, 0x80, 0x4)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

2m14.916574179s ago: executing program 5 (id=2285):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x818884, &(0x7f0000000ac0)=ANY=[@ANYBLOB='keep_last_dots,sys_tz,uid=', @ANYRESHEX=0xee00, @ANYRES8=0x0, @ANYBLOB="59861d5733eba9907f51cad640ccee2a4e68e8128167d86f61f13ebbf2b4889c97d8108adb9d03efca102e6e47ca7c498790ad5349e87b9e441de85a81957e0af19147eda7850677f7756bacfe59022e862cd3566a3c3568f372fcecb9940da0ca65b2f8", @ANYRES16, @ANYRES8, @ANYBLOB=',\x00'], 0x81, 0x1534, &(0x7f0000000e40)="$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")
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, <r1=>0x0}, 0x2058)
write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18)
read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r2, {0x0, 0x0, 0x80003ff}}, 0x20)
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)

2m14.26009844s ago: executing program 5 (id=2286):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a480000000c0a010100000000000000000a0000090900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000011400000011000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2m13.461172826s ago: executing program 5 (id=2292):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0)
setresuid(0xee01, 0xee01, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3})

2m13.082659687s ago: executing program 44 (id=2292):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0)
setresuid(0xee01, 0xee01, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3})

16.510953785s ago: executing program 4 (id=3140):
r0 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x101801, 0x0)
epoll_create1(0x0)

14.951652064s ago: executing program 4 (id=3153):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x80002, 0x0, 0x0, 0x1, 0x31}, @ptr={0x66646185, 0x1, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

14.705135712s ago: executing program 4 (id=3156):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r0, 0x0, 0x0)

14.478967219s ago: executing program 4 (id=3158):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@grpquota}]}, 0xff, 0x485, &(0x7f0000001040)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7)
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1})

13.682209514s ago: executing program 4 (id=3166):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
r1 = socket(0x1, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0})
recvmsg(r1, &(0x7f0000000880)={0x0, 0xffffffffffffff3e, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/98, 0x62}], 0x1}, 0x0)

13.243129798s ago: executing program 4 (id=3167):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="f30f090f01df81c700000000652e0f221d0f01df67c13d000f09672ef30fc77100dbdbb8010000000f01c1", 0x2b}], 0x1, 0x52, 0x0, 0x0)

12.933395258s ago: executing program 45 (id=3167):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="f30f090f01df81c700000000652e0f221d0f01df67c13d000f09672ef30fc77100dbdbb8010000000f01c1", 0x2b}], 0x1, 0x52, 0x0, 0x0)

4.356989431s ago: executing program 7 (id=3227):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0xfffffffa)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x1402, 0x0, 0x1, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000480)='#', 0x1}], 0x1)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0)
recvfrom$unix(r2, &(0x7f0000001340)=""/239, 0xef, 0x10162, 0x0, 0xffffffffffffff76)

4.147219038s ago: executing program 7 (id=3228):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

3.852921787s ago: executing program 6 (id=3230):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b5, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xffffffff, 0x2, 0x6, 0x7, 0x81, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x3, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x6, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.662850843s ago: executing program 6 (id=3233):
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x5e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r2, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

3.662585883s ago: executing program 7 (id=3234):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r2)

3.291448305s ago: executing program 7 (id=3238):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
r5 = gettid()
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084)

3.234916756s ago: executing program 8 (id=3240):
r0 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d})
write$bt_hci(0xffffffffffffffff, 0x0, 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000016050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40814)
close_range(r0, 0xffffffffffffffff, 0x0)

3.031505893s ago: executing program 8 (id=3241):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

2.948651706s ago: executing program 6 (id=3242):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
unshare(0x62040200)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xfdff)

2.621239096s ago: executing program 0 (id=3244):
r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r2 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000a80)={'syz', 0x0}, 0x0, 0x0, r1)
r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2)
r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r3)
r5 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r4)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r5)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r6)
r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, r0, r7)

2.403930703s ago: executing program 0 (id=3245):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x400a8, 0x0, 0x5, 0x0, 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000002480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
unshare(0x20000400)
fstat(r3, 0x0)

2.217835679s ago: executing program 0 (id=3246):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x20000ac8)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x1, &(0x7f0000000600)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r2, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}])

1.951495608s ago: executing program 8 (id=3247):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c)
listen(r1, 0x80000003)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "650400", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0)

1.889013759s ago: executing program 6 (id=3248):
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
eventfd(0x5)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611881000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20)

1.87480404s ago: executing program 0 (id=3249):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

1.699523856s ago: executing program 8 (id=3250):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

1.57191804s ago: executing program 6 (id=3251):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
close(0x3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r0}, 0xc)

1.56755842s ago: executing program 0 (id=3252):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000002c0)='pvfs2\x00', 0x101c802, 0x0)
sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0)

1.458734933s ago: executing program 7 (id=3253):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0)

1.325348798s ago: executing program 6 (id=3254):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x12)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r9}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x2, 0x0, 0x146, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000"], 0x50)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), 0x14840, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

1.318574548s ago: executing program 8 (id=3255):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="1388000023b201002400128009000100626f6e6400000000140002800800070081000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094)
r2 = socket(0x400000000010, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
sendfile(r2, r4, 0x0, 0x9cba)

245.301812ms ago: executing program 7 (id=3256):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r1, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0)
sendto(r1, 0x0, 0x0, 0x8001, 0x0, 0x0)

108.966576ms ago: executing program 1 (id=3170):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

67.250168ms ago: executing program 8 (id=3257):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 0 (id=3258):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
unshare(0x62040200)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xfdff)

kernel console output (not intermixed with test programs):

6][T11937] loop4: detected capacity change from 0 to 4096
[  362.769161][T11642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.806167][T11642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  362.828810][T11937] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  362.873947][T11642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.896302][T11642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  362.908334][T11642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.918312][T11642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  362.929527][T11642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.940030][T11642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  362.950864][T11642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.962409][T11642] batman_adv: batadv0: Interface activated: batadv_slave_1
[  362.973866][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2041'.
[  363.026599][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  363.052523][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  363.111194][T11642] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.140897][T11642] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.185333][T11642] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.232070][T11642] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.299375][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2041'.
[  363.547948][ T7522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.570800][ T7522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.597206][T10362] EXT4-fs (loop4): unmounting filesystem.
[  363.632459][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  363.633024][ T7528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.732437][ T7528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.766740][ T6325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  364.575370][T11968] loop4: detected capacity change from 0 to 1024
[  364.638795][T11968] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  364.744302][T11968] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  364.804999][T11968] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  364.944341][T11968] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[  364.946191][T11980] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  365.044749][T11968] EXT4-fs (loop4): This should not happen!! Data will be lost
[  365.044749][T11968] 
[  365.219910][T11987] loop2: detected capacity change from 0 to 256
[  365.336142][T11980] EXT4-fs (loop4): This should not happen!! Data will be lost
[  365.336142][T11980] 
[  365.336235][T11968] EXT4-fs (loop4): Total free blocks count 0
[  365.386498][T11980] EXT4-fs (loop4): Total free blocks count 0
[  365.392555][T11980] EXT4-fs (loop4): Free/Dirty block details
[  365.481964][T11642] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  365.506028][T11980] EXT4-fs (loop4): free_blocks=20480
[  365.511533][T11980] EXT4-fs (loop4): dirty_blocks=32
[  365.533582][T11642] FAT-fs (loop2): Filesystem has been set read-only
[  365.593800][T11642] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  365.853253][T11995] loop3: detected capacity change from 0 to 128
[  365.970069][T11999] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.2062'.
[  365.995958][T11999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2062'.
[  366.318990][ T7528] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.401006][T12009] random: crng reseeded on system resumption
[  367.474753][ T7528] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.789671][ T7528] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.087825][ T7528] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.150765][T12038] loop5: detected capacity change from 0 to 128
[  368.269540][T12038] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  368.337145][T12038] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  368.723513][ T4293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  368.737396][ T4293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  368.746861][ T4291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  368.757299][T10226] EXT4-fs (loop5): unmounting filesystem.
[  368.759645][ T4293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  368.772147][ T4293] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  368.792071][ T4293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  369.246756][T12074] loop5: detected capacity change from 0 to 1024
[  369.388100][T12074] hfsplus: bad catalog entry type
[  369.465120][T12081] loop3: detected capacity change from 0 to 512
[  369.587431][T12081] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  369.747340][ T5118] hfsplus: b-tree write err: -5, ino 25
[  369.827892][T12056] chnl_net:caif_netlink_parms(): no params data found
[  369.856119][ T5118] hfsplus: b-tree write err: -5, ino 4
[  369.861717][ T5118] hfsplus: b-tree write err: -5, ino 2
[  369.890254][T10891] EXT4-fs (loop3): unmounting filesystem.
[  369.940129][ T5118] hfsplus: b-tree write err: -5, ino 20
[  370.156186][T12104] loop5: detected capacity change from 0 to 1024
[  370.277582][T12104] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  370.334772][T12104] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  370.356171][T12056] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.363384][T12056] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.404866][T12104] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.2089: lblock 0 mapped to illegal pblock 0 (length 1)
[  370.426168][T12056] device bridge_slave_0 entered promiscuous mode
[  370.477743][T12104] EXT4-fs (loop5): Remounting filesystem read-only
[  370.508795][T12114] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.2089: lblock 0 mapped to illegal pblock 0 (length 1)
[  370.550325][T12114] EXT4-fs (loop5): Remounting filesystem read-only
[  370.600856][T12103] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.2089: lblock 0 mapped to illegal pblock 0 (length 1)
[  370.628416][T12056] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.670249][T12103] EXT4-fs (loop5): Remounting filesystem read-only
[  370.703141][T12056] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.731010][T12103] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.2089: lblock 0 mapped to illegal pblock 0 (length 1)
[  370.754846][T12056] device bridge_slave_1 entered promiscuous mode
[  370.845811][ T4288] Bluetooth: hci1: command 0x0409 tx timeout
[  370.903368][T12103] EXT4-fs (loop5): Remounting filesystem read-only
[  370.941688][T12103] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.2089: lblock 0 mapped to illegal pblock 0 (length 1)
[  370.973075][T12103] EXT4-fs (loop5): Remounting filesystem read-only
[  370.984588][T12114] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.2089: lblock 0 mapped to illegal pblock 0 (length 1)
[  371.019186][T12114] EXT4-fs (loop5): Remounting filesystem read-only
[  371.035031][T12103] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.2089: lblock 0 mapped to illegal pblock 0 (length 1)
[  371.077048][T12103] EXT4-fs (loop5): Remounting filesystem read-only
[  371.089750][T12114] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.2089: lblock 0 mapped to illegal pblock 0 (length 1)
[  371.141452][T12114] EXT4-fs (loop5): Remounting filesystem read-only
[  371.171139][T12103] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.2089: lblock 0 mapped to illegal pblock 0 (length 1)
[  371.226438][T12103] EXT4-fs (loop5): Remounting filesystem read-only
[  371.236960][T12114] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.2089: lblock 0 mapped to illegal pblock 0 (length 1)
[  372.231324][T12056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  372.329585][T12056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  372.406009][ T7528] device hsr_slave_0 left promiscuous mode
[  372.416614][ T7528] device hsr_slave_1 left promiscuous mode
[  372.426604][ T7528] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  372.440032][ T7528] batman_adv: batadv0: Removing interface: batadv_slave_0
[  372.458535][ T7528] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  372.492048][ T7528] batman_adv: batadv0: Removing interface: batadv_slave_1
[  372.518891][ T7528] device bridge_slave_1 left promiscuous mode
[  372.540208][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.660486][ T7528] device bridge_slave_0 left promiscuous mode
[  372.669011][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.777779][ T7528] device veth1_macvtap left promiscuous mode
[  372.797497][ T7528] device veth0_macvtap left promiscuous mode
[  372.816967][ T7528] device veth1_vlan left promiscuous mode
[  372.832912][ T7528] device veth0_vlan left promiscuous mode
[  372.926733][ T4288] Bluetooth: hci1: command 0x041b tx timeout
[  374.195336][ T7528] team0 (unregistering): Port device team_slave_1 removed
[  374.266556][ T7528] team0 (unregistering): Port device team_slave_0 removed
[  374.355278][ T7528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  374.445329][ T7528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  374.901402][ T7528] bond0 (unregistering): Released all slaves
[  375.008735][ T4288] Bluetooth: hci1: command 0x040f tx timeout
[  375.507109][T12056] team0: Port device team_slave_0 added
[  375.545419][T12056] team0: Port device team_slave_1 added
[  375.595381][T12056] batman_adv: batadv0: Adding interface: batadv_slave_0
[  375.631477][T12056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.735756][T12056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  375.777411][T12183] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  375.827059][T12194] overlayfs: failed to clone upperpath
[  375.898878][T12056] batman_adv: batadv0: Adding interface: batadv_slave_1
[  375.906575][T12056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.932896][T12056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  376.099391][T12056] device hsr_slave_0 entered promiscuous mode
[  376.132897][T12056] device hsr_slave_1 entered promiscuous mode
[  376.345709][ T8827] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  376.534765][T12056] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.548101][ T8827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.562421][ T8827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  376.589264][ T8827] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  376.620405][ T8827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.653459][ T8827] usb 4-1: config 0 descriptor??
[  376.758051][T12056] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.871195][T12056] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.988138][T12056] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.086124][ T4288] Bluetooth: hci1: command 0x0419 tx timeout
[  377.090921][ T8827] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[  377.111752][ T8827] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[  377.141716][ T8827] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[  377.171614][ T8827] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[  377.195637][ T8827] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[  377.203881][ T8827] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[  377.214564][ T8827] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[  377.269232][ T8827] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  377.376829][ T8827] cp2112 0003:10C4:EA90.000B: Part Number: 0x00 Device Version: 0x00
[  377.404715][T12056] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  377.429098][T12056] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  377.469379][T12056] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  377.538364][T12056] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  377.746866][T12242] loop5: detected capacity change from 0 to 512
[  377.775364][T12056] 8021q: adding VLAN 0 to HW filter on device bond0
[  377.836796][ T6325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  377.867692][ T6325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  377.896805][T12056] 8021q: adding VLAN 0 to HW filter on device team0
[  377.916820][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  377.938222][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  377.947277][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.954391][ T7213] bridge0: port 1(bridge_slave_0) entered forwarding state
[  377.988361][T12201] cp2112 0003:10C4:EA90.000B: Error starting transaction: -38
[  378.002783][ T8827] cp2112 0003:10C4:EA90.000B: error reading lock byte: -32
[  378.028342][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  378.039026][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  378.113212][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  378.158450][ T4323] usb 4-1: USB disconnect, device number 7
[  378.181533][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.188711][ T7213] bridge0: port 2(bridge_slave_1) entered forwarding state
[  378.232198][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  378.247817][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  378.289458][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  378.310255][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  378.333757][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  378.363522][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  378.373155][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  378.379505][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  378.384668][T12246] fido_id[12246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  378.417425][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  378.457193][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  378.495009][T12056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  378.520319][T12056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  378.568567][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  378.578115][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  378.607008][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  378.950254][T12265] 0xfffffffffffffffd-0x000000010000 : ""
[  378.995940][T12265] mtd: partition "" is out of reach -- disabled
[  379.123319][T12265] ftl_cs: FTL header not found.
[  379.523515][T12285] loop3: detected capacity change from 0 to 256
[  379.553447][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  379.571499][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  379.633119][T12056] 8021q: adding VLAN 0 to HW filter on device batadv0
[  379.721794][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  379.741888][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  379.832212][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  379.857381][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  379.868342][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  379.886692][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  379.908145][T12056] device veth0_vlan entered promiscuous mode
[  379.933945][T12056] device veth1_vlan entered promiscuous mode
[  379.981682][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  380.016996][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  380.058048][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  380.110068][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  380.159460][T12056] device veth0_macvtap entered promiscuous mode
[  380.189661][T12056] device veth1_macvtap entered promiscuous mode
[  380.249448][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.313315][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.349664][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.387131][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.422456][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.465094][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.500129][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.535871][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.569573][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.584821][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.603336][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.624575][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.658570][T12056] batman_adv: batadv0: Interface activated: batadv_slave_0
[  380.696448][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  380.714338][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  380.753208][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  380.773065][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  380.809065][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  380.840881][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.882571][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  380.921823][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.954806][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  380.974406][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.005407][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  381.046444][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.075737][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  381.111324][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.143868][T12056] batman_adv: batadv0: Interface activated: batadv_slave_1
[  381.171149][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  381.197953][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  381.226593][T12056] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  381.256219][T12056] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  381.286793][T12056] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  381.304152][T12056] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.526451][ T7524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.534309][ T7524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.576421][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  381.639288][ T5118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.676617][ T5118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.701894][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  381.787369][T12336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2141'.
[  381.848618][T12336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2141'.
[  382.162113][T12352] tipc: Started in network mode
[  382.183812][T12352] tipc: Node identity ac14140f, cluster identity 4711
[  382.204162][T12354] vivid-000: disconnect
[  382.226872][T12352] tipc: New replicast peer: 255.255.255.255
[  382.248044][T12352] tipc: Enabled bearer <udp:syz2>, priority 10
[  382.406228][T12354] vivid-000: reconnect
[  383.050697][T12380] Bluetooth: MGMT ver 1.22
[  383.258950][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2159'.
[  383.342603][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2159'.
[  383.426296][ T4323] tipc: Node number set to 2886997007
[  384.045726][ T4293] Bluetooth: hci3: command 0x206e tx timeout
[  384.432351][T12440] loop3: detected capacity change from 0 to 256
[  384.495399][T12440] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  384.709013][T12446] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0x4fc9b72c)
[  384.775810][T12446] exFAT-fs (loop3): Filesystem has been set read-only
[  384.782959][T12445] loop5: detected capacity change from 0 to 1024
[  384.817359][T12450] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0x4fc9b72c)
[  384.858773][ T5665] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  385.009654][T10891] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0x4fc9b72c)
[  385.046057][T10891] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0x4fc9b72c)
[  385.842429][ T7527] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.095700][ T7527] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.269674][ T7527] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.379610][T12483] loop5: detected capacity change from 0 to 512
[  386.467693][ T7527] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.536478][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2190'.
[  387.346212][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2191'.
[  387.377741][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  387.404728][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  387.414909][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  387.422966][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  387.430869][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  387.439285][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  388.433602][T12533] loop5: detected capacity change from 0 to 256
[  388.483338][T12533] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  388.547886][T12505] chnl_net:caif_netlink_parms(): no params data found
[  389.098702][T12505] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.100540][T12521] loop4: detected capacity change from 0 to 32768
[  389.133848][T12521] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2198 (12521)
[  389.155257][T12505] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.163932][T12505] device bridge_slave_0 entered promiscuous mode
[  389.198313][T12521] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  389.225979][T12521] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  389.288977][T12521] BTRFS info (device loop4): turning on sync discard
[  389.315758][T12521] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  389.325271][T12521] BTRFS info (device loop4): use zstd compression, level 3
[  389.435603][T12521] BTRFS info (device loop4): turning on async discard
[  389.480589][T12521] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  389.486030][ T4288] Bluetooth: hci3: command 0x0409 tx timeout
[  389.553472][T12521] BTRFS info (device loop4): trying to use backup root at mount time
[  389.607786][T12521] BTRFS info (device loop4): enabling auto defrag
[  389.614359][T12521] BTRFS info (device loop4): using free space tree
[  389.825216][T12505] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.846012][T12505] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.854279][T12505] device bridge_slave_1 entered promiscuous mode
[  389.887619][ T8569] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  390.043419][T12521] BTRFS error (device loop4): failed to load root extent
[  390.056035][T12521] BTRFS warning (device loop4): try to load backup roots slot 1
[  390.092895][ T7524] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  390.219429][T12521] BTRFS warning (device loop4): couldn't read tree root
[  390.277079][T12521] BTRFS warning (device loop4): try to load backup roots slot 2
[  390.498279][T12521] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  390.826383][T12521] BTRFS warning (device loop4): couldn't read tree root
[  390.892501][T12521] BTRFS warning (device loop4): try to load backup roots slot 3
[  391.565832][ T4288] Bluetooth: hci3: command 0x041b tx timeout
[  391.719914][T12521] BTRFS error (device loop4): open_ctree failed: -22
[  391.721072][ T5662] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (5662)
[  391.754655][T12505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  391.878046][T12505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  392.037169][ T7527] device hsr_slave_0 left promiscuous mode
[  392.077881][ T7527] device hsr_slave_1 left promiscuous mode
[  392.084441][ T7527] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  392.115758][ T7527] batman_adv: batadv0: Removing interface: batadv_slave_0
[  392.132912][ T7527] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  392.145687][ T7527] batman_adv: batadv0: Removing interface: batadv_slave_1
[  392.193990][ T7527] device bridge_slave_1 left promiscuous mode
[  392.224861][ T7527] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.259222][ T7527] device bridge_slave_0 left promiscuous mode
[  392.289119][ T7527] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.339051][T12636] ceph: No mds server is up or the cluster is laggy
[  392.686268][ T7527] device veth1_macvtap left promiscuous mode
[  392.692369][ T7527] device veth0_macvtap left promiscuous mode
[  393.485781][ T7527] bond1 (unregistering): (slave geneve2): Releasing active interface
[  393.646075][ T4288] Bluetooth: hci3: command 0x040f tx timeout
[  393.673995][ T7527] bond1 (unregistering): Released all slaves
[  394.229046][T12657] loop0: detected capacity change from 0 to 2048
[  394.270952][T12657] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  394.308274][T12657] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  394.318454][ T7527] team0 (unregistering): Port device team_slave_1 removed
[  394.427138][ T7527] team0 (unregistering): Port device team_slave_0 removed
[  394.515093][ T7527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  394.580601][ T7527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  395.184558][ T7527] bond0 (unregistering): Released all slaves
[  395.337014][T12626] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  395.375944][T12505] team0: Port device team_slave_0 added
[  395.450808][T12505] team0: Port device team_slave_1 added
[  395.580775][T12505] batman_adv: batadv0: Adding interface: batadv_slave_0
[  395.635640][T12505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.675260][T12505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  395.686918][T12670] netlink: 'syz.0.2227': attribute type 2 has an invalid length.
[  395.708267][T12505] batman_adv: batadv0: Adding interface: batadv_slave_1
[  395.715239][T12505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.725761][ T4288] Bluetooth: hci3: command 0x0419 tx timeout
[  395.751214][T12505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.794386][T12505] device hsr_slave_0 entered promiscuous mode
[  395.815318][T12505] device hsr_slave_1 entered promiscuous mode
[  395.847988][T12505] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  395.855972][T12505] Cannot create hsr debugfs directory
[  396.299254][T12505] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  396.364739][T12505] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.575355][T12699] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  396.637330][T12699] net_ratelimit: 10 callbacks suppressed
[  396.637370][T12699] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  396.739170][T12505] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  396.778256][T12505] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.935400][T12505] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  397.008207][T12505] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.225250][T12505] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  397.286490][T12505] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.711455][T12505] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  397.721420][T12505] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  397.777923][T12505] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  397.844941][T12505] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  398.064431][T12741] tipc: Started in network mode
[  398.095678][T12741] tipc: Node identity 92e37fefad0e, cluster identity 4711
[  398.103066][T12741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  398.241869][T12505] 8021q: adding VLAN 0 to HW filter on device bond0
[  398.494936][T12750] device syzkaller0 entered promiscuous mode
[  398.533718][T12750] tipc: Resetting bearer <eth:syzkaller0>
[  398.552931][T12505] 8021q: adding VLAN 0 to HW filter on device team0
[  398.584374][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  398.622736][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  398.645715][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  398.654587][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  398.704407][ T7311] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.711613][ T7311] bridge0: port 1(bridge_slave_0) entered forwarding state
[  398.763166][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  398.784310][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  398.823153][ T7311] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.830333][ T7311] bridge0: port 2(bridge_slave_1) entered forwarding state
[  398.866382][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  398.894550][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  398.944005][T12740] tipc: Resetting bearer <eth:syzkaller0>
[  398.985668][ T8828] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  399.175635][ T8828] usb 5-1: Using ep0 maxpacket: 8
[  399.183504][ T8828] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  399.208512][ T8828] usb 5-1: config 0 has no interfaces?
[  399.257204][ T8828] usb 5-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00
[  399.275881][ T8828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.335315][ T8828] usb 5-1: config 0 descriptor??
[  399.821569][ T5122] usb 5-1: USB disconnect, device number 5
[  400.318461][T12786] loop5: detected capacity change from 0 to 32768
[  400.425351][T12786] XFS (loop5): Mounting V5 Filesystem
[  400.552900][T12786] XFS (loop5): Ending clean mount
[  400.632517][   T27] audit: type=1800 audit(1780944500.402:21): pid=12786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2259" name="file1" dev="loop5" ino=4427 res=0 errno=0
[  400.844437][T10226] XFS (loop5): Unmounting Filesystem
[  403.330080][T12740] tipc: Disabling bearer <eth:syzkaller0>
[  403.340289][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  403.348401][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  403.361242][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  403.370758][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  403.382535][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  403.391700][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  403.400534][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  403.415228][T12505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  403.428503][T12505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  403.436685][ T4320] tipc: Node number set to 1072529391
[  403.454095][T12811] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  403.498719][T12813] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2263'.
[  403.554411][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  403.566369][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  403.596670][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  403.814642][T12826] loop5: detected capacity change from 0 to 512
[  403.850335][T12826] EXT4-fs: Ignoring removed bh option
[  403.886367][T12826] EXT4-fs: inline encryption not supported
[  403.909261][T12826] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  404.429804][T12826] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  404.490609][T12826] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2267: bg 0: block 248: padding at end of block bitmap is not set
[  404.511659][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  404.542249][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  404.587503][T12826] Quota error (device loop5): write_blk: dquota write failed
[  404.591626][T12505] 8021q: adding VLAN 0 to HW filter on device batadv0
[  404.615878][T12826] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  404.637061][T12826] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.2267: Failed to acquire dquot type 1
[  404.717350][T12826] EXT4-fs (loop5): 1 truncate cleaned up
[  404.727007][T12826] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  405.003439][T10226] EXT4-fs (loop5): unmounting filesystem.
[  405.916320][T12893] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  405.923760][T12893] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  405.926093][ T8569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  405.951985][T12900] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6)
[  405.958538][T12900] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  405.973714][ T8569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  405.997520][T12893] vhci_hcd vhci_hcd.0: Device attached
[  406.026362][T12900] vhci_hcd vhci_hcd.0: Device attached
[  406.062977][T12505] device veth0_vlan entered promiscuous mode
[  406.065868][T12903] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9)
[  406.075595][T12903] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  406.097796][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  406.127094][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  406.127652][T12893] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(5)
[  406.141275][T12893] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  406.154435][T12505] device veth1_vlan entered promiscuous mode
[  406.181505][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  406.197200][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  406.209432][T12903] vhci_hcd vhci_hcd.0: Device attached
[  406.225384][T12900] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(8)
[  406.231934][T12900] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  406.243353][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  406.246205][ T8827] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[  406.257875][T12914] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  406.300685][T12900] vhci_hcd vhci_hcd.0: Device attached
[  406.314857][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  406.330247][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  406.349403][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  406.363040][T12903] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  406.372907][T12893] vhci_hcd vhci_hcd.0: Device attached
[  406.381724][T12505] device veth0_macvtap entered promiscuous mode
[  406.402711][T12505] device veth1_macvtap entered promiscuous mode
[  406.449562][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.466697][T12921] loop5: detected capacity change from 0 to 256
[  406.473164][T12893] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(13)
[  406.479783][T12893] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  406.489417][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.506577][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.533791][T12893] vhci_hcd vhci_hcd.0: Device attached
[  406.548754][T12921] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d)
[  406.569906][T12910] vhci_hcd: connection closed
[  406.577972][ T7211] vhci_hcd: stop threads
[  406.578230][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.583693][ T7211] vhci_hcd: release socket
[  406.602748][T12908] vhci_hcd: connection closed
[  406.603160][T12904] vhci_hcd: connection closed
[  406.609774][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.609794][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.609811][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.609824][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.609838][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.609851][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.609868][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.609880][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.611973][T12920] vhci_hcd: connection closed
[  406.615824][T12901] vhci_hcd: connection closed
[  406.638177][T12505] batman_adv: batadv0: Interface activated: batadv_slave_0
[  406.676746][T12898] vhci_hcd: connection reset by peer
[  406.765758][ T7211] vhci_hcd: disconnect device
[  406.786943][ T7211] vhci_hcd: stop threads
[  406.792011][ T7211] vhci_hcd: release socket
[  406.813279][ T7211] vhci_hcd: disconnect device
[  406.830400][ T7211] vhci_hcd: stop threads
[  406.834682][ T7211] vhci_hcd: release socket
[  406.849676][ T7211] vhci_hcd: disconnect device
[  406.865710][ T7211] vhci_hcd: stop threads
[  406.869998][ T7211] vhci_hcd: release socket
[  406.883635][ T7211] vhci_hcd: disconnect device
[  406.891219][ T7211] vhci_hcd: stop threads
[  406.891357][   T27] audit: type=1326 audit(1780944506.662:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.6.2280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd39d9ce59 code=0x0
[  406.897023][ T7211] vhci_hcd: release socket
[  406.926222][ T8569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  406.934473][ T8569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  406.951704][ T8569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  406.960237][ T7211] vhci_hcd: disconnect device
[  406.975873][ T7211] vhci_hcd: stop threads
[  406.980170][ T7211] vhci_hcd: release socket
[  406.984992][ T8569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  407.000494][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.022540][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.035725][ T7211] vhci_hcd: disconnect device
[  407.055648][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.086106][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.105853][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.138569][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.150467][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.161222][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.173278][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.184084][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.234001][T12505] batman_adv: batadv0: Interface activated: batadv_slave_1
[  407.271414][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  407.318754][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  407.385083][T12505] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.402435][T12505] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.435634][T12505] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.444369][T12505] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.691044][ T4847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.706445][ T4847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.714904][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  407.831691][ T7527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.867654][ T7527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.893153][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  408.796028][T12971] loop2: detected capacity change from 0 to 7
[  408.808339][T12971]  loop2:
[  408.820111][T12971] loop2: partition table partially beyond EOD, truncated
[  409.014865][ T7217] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.115226][T12975] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  409.156239][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  409.177242][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  409.194434][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  409.206015][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  409.213877][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  409.221222][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  409.277076][T12975] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.284697][T12975] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.513220][ T7217] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.741031][ T7217] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.907714][ T7217] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.010434][T12973] loop0: detected capacity change from 0 to 40427
[  410.029193][T12973] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  410.066354][T12973] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  410.223702][T12973] F2FS-fs (loop0): Found nat_bits in checkpoint
[  410.677065][T12979] chnl_net:caif_netlink_parms(): no params data found
[  410.795759][T12973] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  410.830129][T12973] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  410.951141][ T7217] tipc: Disabling bearer <udp:syz2>
[  411.035745][ T7217] tipc: Left network mode
[  411.049124][T12973] syz.0.2299: attempt to access beyond end of device
[  411.049124][T12973] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  411.100404][T12979] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.131740][T12979] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.156910][T12979] device bridge_slave_0 entered promiscuous mode
[  411.198181][T12979] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.205854][T12979] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.213643][T12979] device bridge_slave_1 entered promiscuous mode
[  411.245915][ T4293] Bluetooth: hci0: command 0x0409 tx timeout
[  411.428012][ T8827] vhci_hcd: vhci_device speed not set
[  411.719709][T12979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  411.828255][T12979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  411.973880][T12979] team0: Port device team_slave_0 added
[  412.066404][T12979] team0: Port device team_slave_1 added
[  412.094921][T12979] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.095588][T12612] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  412.148411][T12979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.254288][T12979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  412.345777][T12612] usb 5-1: Using ep0 maxpacket: 32
[  412.352663][T12612] usb 5-1: config 0 has no interfaces?
[  412.370537][T12612] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  412.384730][T12979] batman_adv: batadv0: Adding interface: batadv_slave_1
[  412.390165][T12612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.407018][T12979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.420195][T12612] usb 5-1: Product: syz
[  412.469994][T12979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  412.478760][T12612] usb 5-1: Manufacturer: syz
[  412.487681][T12612] usb 5-1: SerialNumber: syz
[  412.506582][T12612] usb 5-1: config 0 descriptor??
[  412.687597][T12979] device hsr_slave_0 entered promiscuous mode
[  412.758830][T12979] device hsr_slave_1 entered promiscuous mode
[  412.777137][T12979] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  412.800574][T12979] Cannot create hsr debugfs directory
[  413.230586][T13075] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  413.265788][T13075] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  413.325810][ T4293] Bluetooth: hci0: command 0x041b tx timeout
[  413.547410][T13081] loop8: detected capacity change from 0 to 512
[  413.619571][T13081] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  413.629058][T13081] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  414.083848][ T7217] device hsr_slave_0 left promiscuous mode
[  414.096778][ T7217] device hsr_slave_1 left promiscuous mode
[  414.110878][ T7217] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  414.151338][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_0
[  414.169735][ T7217] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  414.189406][T12505] EXT4-fs (loop8): unmounting filesystem.
[  414.197506][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_1
[  414.220992][ T7217] device bridge_slave_1 left promiscuous mode
[  414.234268][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.281138][ T7217] device bridge_slave_0 left promiscuous mode
[  414.306144][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.438400][ T7217] device veth1_macvtap left promiscuous mode
[  414.444488][ T7217] device veth0_macvtap left promiscuous mode
[  414.467751][ T7217] device veth1_vlan left promiscuous mode
[  414.494672][ T7217] device veth0_vlan left promiscuous mode
[  414.761896][ T8827] usb 5-1: USB disconnect, device number 6
[  415.184525][T13121] kvm: pic: non byte write
[  415.406029][ T4293] Bluetooth: hci0: command 0x040f tx timeout
[  416.513512][ T7217] team0 (unregistering): Port device team_slave_1 removed
[  416.600756][ T7217] team0 (unregistering): Port device team_slave_0 removed
[  416.709440][ T7217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  416.788141][ T7217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  417.221318][ T7217] bond0 (unregistering): Released all slaves
[  417.381678][T13111] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2326'.
[  417.403011][T13111] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.410211][T13111] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.449025][T13119] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2326'.
[  417.466043][T13119] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.473352][T13119] bridge0: port 2(bridge_slave_1) entered listening state
[  417.480701][T13119] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.487848][T13119] bridge0: port 1(bridge_slave_0) entered listening state
[  417.490387][ T4293] Bluetooth: hci0: command 0x0419 tx timeout
[  417.616311][T13119] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2326'.
[  417.627712][T13119] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.634968][T13119] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.134225][T12979] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  418.201753][T12979] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  418.221338][   T27] audit: type=1326 audit(1780944517.992:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.4.2349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e099ce59 code=0x7ffc0000
[  418.254791][T12979] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  418.305079][T12979] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  418.348143][   T27] audit: type=1326 audit(1780944518.042:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.4.2349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e099ce59 code=0x7ffc0000
[  418.516216][   T27] audit: type=1326 audit(1780944518.042:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.4.2349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e099ce59 code=0x7ffc0000
[  418.600682][T12979] 8021q: adding VLAN 0 to HW filter on device bond0
[  418.614636][   T27] audit: type=1326 audit(1780944518.042:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.4.2349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e099ce59 code=0x7ffc0000
[  418.664135][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  418.686731][   T27] audit: type=1326 audit(1780944518.042:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.4.2349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f51e099ce59 code=0x7ffc0000
[  418.693146][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  418.761518][   T27] audit: type=1326 audit(1780944518.042:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.4.2349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e099ce59 code=0x7ffc0000
[  418.826973][T12979] 8021q: adding VLAN 0 to HW filter on device team0
[  418.868004][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  418.885994][   T27] audit: type=1326 audit(1780944518.042:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.4.2349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e099ce59 code=0x7ffc0000
[  418.935138][   T27] audit: type=1326 audit(1780944518.042:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.4.2349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e099ce59 code=0x7ffc0000
[  418.941288][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  419.010867][   T27] audit: type=1326 audit(1780944518.042:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.4.2349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e099ce59 code=0x7ffc0000
[  419.036100][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.043328][ T7211] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.088431][   T27] audit: type=1326 audit(1780944518.042:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.4.2349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f51e099ce59 code=0x7ffc0000
[  419.112408][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  419.129845][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  419.153150][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  419.212765][ T7211] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.219933][ T7211] bridge0: port 2(bridge_slave_1) entered forwarding state
[  419.275271][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  419.312329][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  419.387335][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  419.418540][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  419.441190][T13212] overlayfs: failed to clone upperpath
[  419.447920][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  419.473264][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  419.496519][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  419.526469][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  419.538239][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  419.590858][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  419.609832][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  419.628528][T12979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  420.425391][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  420.441308][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  420.487383][T12979] 8021q: adding VLAN 0 to HW filter on device batadv0
[  421.405669][ T4288] Bluetooth: hci4: command 0x0406 tx timeout
[  421.672355][T13271] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  421.678912][T13271] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  421.717949][T13271] vhci_hcd vhci_hcd.0: Device attached
[  421.738274][T13275] vhci_hcd: connection closed
[  421.738474][ T7217] vhci_hcd: stop threads
[  421.777648][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  421.786001][ T7217] vhci_hcd: release socket
[  421.790518][ T7217] vhci_hcd: disconnect device
[  421.797283][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  421.823244][T13283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2371'.
[  421.849865][T13283] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  421.875799][T13283] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  421.888105][T13283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  421.895813][T13283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  421.935860][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  421.961817][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  421.971364][T13286] netlink: 'syz.6.2372': attribute type 1 has an invalid length.
[  422.009733][T13286] 8021q: adding VLAN 0 to HW filter on device bond2
[  422.018363][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  422.026379][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  422.060139][T13289] device veth0_virt_wifi entered promiscuous mode
[  422.089765][T13289] bond2: (slave veth0_virt_wifi): making interface the new active one
[  422.130394][T13289] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link
[  422.187742][T12979] device veth0_vlan entered promiscuous mode
[  422.201515][T13286] bond2: (slave veth0_virt_wifi): Releasing active interface
[  422.256027][T12979] device veth1_vlan entered promiscuous mode
[  422.304377][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  422.313879][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  422.345346][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  422.368774][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  422.414757][T12979] device veth0_macvtap entered promiscuous mode
[  422.448946][T12979] device veth1_macvtap entered promiscuous mode
[  422.497231][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.526265][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.557001][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.609666][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.635657][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.666446][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.677121][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.689141][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.699570][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.710493][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.720909][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.731925][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.749032][T12979] batman_adv: batadv0: Interface activated: batadv_slave_0
[  422.769165][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  422.784831][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  422.816643][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  422.832785][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  422.857141][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  422.908947][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.939318][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  422.958682][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.978131][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  422.993152][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.012435][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  423.027262][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.044560][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  423.057081][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.077698][T12979] batman_adv: batadv0: Interface activated: batadv_slave_1
[  423.092890][T13315] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2380'.
[  423.149517][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  423.159363][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  423.179506][T12979] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.196137][T12979] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.215105][T12979] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.231348][T12979] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.265095][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2380'.
[  423.459203][ T7527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.487500][ T7527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.506920][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  423.541385][ T7211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.568270][ T7211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.590964][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  423.811060][T13335] loop4: detected capacity change from 0 to 4096
[  423.871375][T13335] NILFS (loop4): invalid segment: Checksum error in segment payload
[  423.881589][T13335] NILFS (loop4): trying rollback from an earlier position
[  423.925075][T13335] NILFS (loop4): recovery complete
[  423.955577][T13346] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  424.113495][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2388'.
[  424.155902][T13352] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  424.174841][T13352] batman_adv: batadv0: Removing interface: batadv_slave_0
[  424.242756][T13352] batman_adv: batadv0: Removing interface: batadv_slave_1
[  424.268324][T13357] netlink: 'syz.4.2391': attribute type 11 has an invalid length.
[  424.390330][T13359] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2390'.
[  424.417569][T13359] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.424908][T13359] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.532861][T13361] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2390'.
[  424.565778][T13361] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.572963][T13361] bridge0: port 2(bridge_slave_1) entered forwarding state
[  424.580413][T13361] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.587578][T13361] bridge0: port 1(bridge_slave_0) entered forwarding state
[  424.660827][T13361] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2390'.
[  424.711180][T13361] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.718532][T13361] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.157886][   T27] kauditd_printk_skb: 394 callbacks suppressed
[  425.157971][   T27] audit: type=1326 audit(1780944524.932:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13382 comm="syz.4.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e099ce59 code=0x7fc00000
[  425.294852][   T27] audit: type=1326 audit(1780944524.962:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13382 comm="syz.4.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f51e099ce59 code=0x7fc00000
[  425.349366][T13394] netlink: 'syz.8.2401': attribute type 1 has an invalid length.
[  425.390229][   T27] audit: type=1326 audit(1780944524.962:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13382 comm="syz.4.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e099ce59 code=0x7fc00000
[  425.414574][T13394] 8021q: adding VLAN 0 to HW filter on device bond1
[  425.453411][   T27] audit: type=1326 audit(1780944524.962:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13382 comm="syz.4.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e099ce59 code=0x7fc00000
[  425.525365][T13394] bond1: (slave geneve2): making interface the new active one
[  425.618217][   T27] audit: type=1326 audit(1780944524.962:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13382 comm="syz.4.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e099ce59 code=0x7fc00000
[  425.646575][T13394] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  425.674289][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  425.715914][ T8827] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  425.736225][   T27] audit: type=1326 audit(1780944524.962:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13382 comm="syz.4.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e099ce59 code=0x7fc00000
[  425.845603][   T27] audit: type=1326 audit(1780944524.962:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13382 comm="syz.4.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e099ce59 code=0x7fc00000
[  425.915787][ T8827] usb 5-1: Using ep0 maxpacket: 8
[  425.923284][ T8827] usb 5-1: config 0 has an invalid interface number: 33 but max is 1
[  425.951161][ T8827] usb 5-1: config 0 has no interface number 1
[  425.967783][ T8827] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  425.989795][   T27] audit: type=1326 audit(1780944524.962:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13382 comm="syz.4.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e099ce59 code=0x7fc00000
[  426.044867][ T8827] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  426.069201][T13419] loop0: detected capacity change from 0 to 512
[  426.101086][ T8827] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[  426.111409][T13419] EXT4-fs: Ignoring removed oldalloc option
[  426.126100][   T27] audit: type=1326 audit(1780944524.962:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13382 comm="syz.4.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e099ce59 code=0x7fc00000
[  426.166130][ T8827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.191501][ T8827] usb 5-1: Product: syz
[  426.198461][T13419] EXT4-fs (loop0): Test dummy encryption mode enabled
[  426.205569][ T8827] usb 5-1: Manufacturer: syz
[  426.211082][ T8827] usb 5-1: SerialNumber: syz
[  426.219038][   T27] audit: type=1326 audit(1780944524.962:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13382 comm="syz.4.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e099ce59 code=0x7fc00000
[  426.264224][ T8827] usb 5-1: config 0 descriptor??
[  426.307789][ T8827] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  426.321670][T13419] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  426.453653][T13430] syz.0.2408: attempt to access beyond end of device
[  426.453653][T13430] loop0: rw=3, sector=3519982108, nr_sectors = 4 limit=512
[  426.512998][ T2311] pvrusb2: Invalid write control endpoint
[  426.514517][ T8827] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  426.577476][ T8827] usb 5-1: USB disconnect, device number 7
[  426.590545][T13430] syz.0.2408: attempt to access beyond end of device
[  426.590545][T13430] loop0: rw=2051, sector=3519982112, nr_sectors = 348 limit=512
[  426.636279][ T2311] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  426.682021][ T2311] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  426.716615][T13434] loop7: detected capacity change from 0 to 2048
[  426.761230][T13434] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  426.829282][T13434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  427.034902][ T4847] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm kworker/u4:13: Invalid inode table block 14677390 in block_group 0
[  427.148535][T12056] EXT4-fs (loop0): unmounting filesystem.
[  427.404356][T13452] loop0: detected capacity change from 0 to 2048
[  427.471731][T13452] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  428.264267][T12056] EXT4-fs (loop0): unmounting filesystem.
[  429.123641][T13500] loop4: detected capacity change from 0 to 2048
[  429.169601][T13500] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  429.242577][T13500] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  430.262759][T13515] netlink: 164 bytes leftover after parsing attributes in process `syz.8.2429'.
[  430.300142][ T7217] device hsr_slave_0 left promiscuous mode
[  430.355851][ T7217] device hsr_slave_1 left promiscuous mode
[  430.405607][ T7217] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  430.415873][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_0
[  430.441057][ T7217] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  430.485634][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_1
[  430.532741][ T7217] device bridge_slave_1 left promiscuous mode
[  430.565039][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.580122][T13532] loop7: detected capacity change from 0 to 2048
[  430.631703][T13532] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  430.757670][ T7217] device bridge_slave_0 left promiscuous mode
[  430.763948][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.882656][ T7217] device veth1_macvtap left promiscuous mode
[  430.889053][ T7217] device veth0_macvtap left promiscuous mode
[  430.895880][ T7217] device veth1_vlan left promiscuous mode
[  430.901719][ T7217] device veth0_vlan left promiscuous mode
[  431.129242][T13548] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2438'.
[  432.435140][T13563] loop0: detected capacity change from 0 to 2048
[  432.499200][T13563] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  432.551239][T13563] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  433.267549][ T7217] team0 (unregistering): Port device team_slave_1 removed
[  433.335259][T13576] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2446'.
[  433.810724][ T7217] team0 (unregistering): Port device team_slave_0 removed
[  433.938871][ T7217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  434.001197][ T7217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  434.215765][ T5128] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  434.407272][ T5128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  434.418611][ T5128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  434.429510][ T5128] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  434.443893][ T5128] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  434.453393][ T5128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.466185][ T5128] usb 1-1: config 0 descriptor??
[  434.476475][ T7217] bond0 (unregistering): Released all slaves
[  434.615071][T13566] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2444'.
[  434.648326][T13567] device syzkaller1 entered promiscuous mode
[  434.907405][ T5128] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  434.993061][ T5128] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  435.110567][T13593] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2452'.
[  435.158588][ T5128] usb 1-1: USB disconnect, device number 10
[  435.171086][T13593] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2452'.
[  435.254443][T13593] netlink: 'syz.6.2452': attribute type 6 has an invalid length.
[  435.286594][T13593] netlink: 'syz.6.2452': attribute type 5 has an invalid length.
[  435.311206][T13593] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2452'.
[  435.371573][T13595] fido_id[13595]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  436.462891][T13647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2464'.
[  436.562743][T13648] input: syz0 as /devices/virtual/input/input14
[  436.982260][T13661] loop7: detected capacity change from 0 to 8
[  437.111224][T13661] SQUASHFS error: zlib decompression failed, data probably corrupt
[  437.140516][T13661] SQUASHFS error: Failed to read block 0x9b: -5
[  437.162588][T13661] SQUASHFS error: Unable to read metadata cache entry [99]
[  437.171189][T13661] SQUASHFS error: Unable to read inode 0x127
[  437.626892][T13621] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  437.708646][T13621] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  437.723738][T13681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  438.031345][T13621] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.040559][T13621] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.049647][T13621] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.058748][T13621] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.441727][T13691] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  438.720942][T13704] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2483'.
[  438.779610][T13704] device bridge_slave_0 left promiscuous mode
[  438.801898][T13704] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.245417][T13729] loop5: detected capacity change from 0 to 7
[  439.275210][T13729]  loop5:
[  439.275266][T13729] loop5: partition table partially beyond EOD, truncated
[  439.807979][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  439.814362][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  439.925044][T13721] 9pnet_fd: p9_fd_create_tcp (13721): problem connecting socket to 127.0.0.1
[  441.186615][T13769] loop0: detected capacity change from 0 to 1024
[  441.633950][T13782] device bond1 entered promiscuous mode
[  441.805900][T13786] mmap: syz.6.2510 (13786): VmData 49348608 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  442.692404][T13826] fuse: Bad value for 'fd'
[  443.919549][T13858] overlayfs: failed to clone upperpath
[  444.993227][T13896] loop8: detected capacity change from 0 to 512
[  445.000924][T13896] ext2: Unknown parameter 'smackfsroot'
[  445.193205][T13867] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  445.287460][T13867] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  445.764981][T13867] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  445.776848][T13867] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  445.786358][T13867] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  445.795563][T13867] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  446.183558][T13911] device batadv_slave_1 entered promiscuous mode
[  446.321397][T13910] device batadv_slave_1 left promiscuous mode
[  446.573679][T13930] loop0: detected capacity change from 0 to 128
[  446.639352][T13930] EXT4-fs: inline encryption not supported
[  446.701855][T13930] EXT4-fs (loop0): Test dummy encryption mode enabled
[  446.740186][T13930] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  446.751586][T13930] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  446.936759][T12056] EXT4-fs (loop0): unmounting filesystem.
[  447.131857][T13950] device vlan2 entered promiscuous mode
[  447.204558][T13950] device syz_tun entered promiscuous mode
[  447.246037][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2557'.
[  447.659206][T13931] loop8: detected capacity change from 0 to 32768
[  448.127865][T13968] loop8: detected capacity change from 0 to 2048
[  448.169621][T13968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  448.185797][ T8828] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  448.395726][ T8828] usb 1-1: Using ep0 maxpacket: 32
[  448.405448][ T8828] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  448.438934][ T8828] usb 1-1: config 0 has no interface number 0
[  448.445077][ T8828] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  448.490948][ T8828] usb 1-1: config 0 interface 89 has no altsetting 0
[  448.511903][ T8828] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  448.526938][ T8828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.535104][ T8828] usb 1-1: Product: syz
[  448.539645][ T8828] usb 1-1: Manufacturer: syz
[  448.548489][ T8828] usb 1-1: SerialNumber: syz
[  448.558206][ T8828] usb 1-1: config 0 descriptor??
[  448.567823][ T8828] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  448.581453][ T8828] em28xx 1-1:0.89: Video interface 89 found:
[  448.991406][T13994] loop8: detected capacity change from 0 to 128
[  449.009963][T13994] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  449.054115][T13994] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  449.173698][ T8828] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[  449.817096][ T8828] em28xx 1-1:0.89: board has no eeprom
[  449.937786][T14023] overlayfs: failed to clone upperpath
[  450.085824][ T8828] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[  450.094328][ T8828] em28xx 1-1:0.89: analog set to bulk mode.
[  450.154812][ T8828] usb 1-1: USB disconnect, device number 11
[  450.202282][ T8828] em28xx 1-1:0.89: Disconnecting em28xx
[  450.222747][ T4369] em28xx 1-1:0.89: Registering V4L2 extension
[  450.435940][ T4369] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[  450.479188][ T4369] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[  450.496087][ T4369] em28xx 1-1:0.89: No AC97 audio processor
[  450.514379][ T4369] usb 1-1: Decoder not found
[  450.523551][ T4369] em28xx 1-1:0.89: failed to create media graph
[  450.574228][ T4369] em28xx 1-1:0.89: V4L2 device video103 deregistered
[  450.658178][ T4369] em28xx 1-1:0.89: Registering snapshot button...
[  450.709265][ T4369] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input15
[  450.761757][ T4369] em28xx 1-1:0.89: Remote control support is not available for this card.
[  451.599791][ T8828] em28xx 1-1:0.89: Closing input extension
[  451.608036][ T8828] em28xx 1-1:0.89: Deregistering snapshot button
[  451.952573][ T8828] em28xx 1-1:0.89: Freeing device
[  452.175932][T14074] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2587'.
[  454.617058][T14116] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.624554][T14116] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.945840][T14146] loop4: detected capacity change from 0 to 1024
[  454.967211][T14146] EXT4-fs: Ignoring removed bh option
[  455.012861][T14146] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  455.203765][T10362] EXT4-fs (loop4): unmounting filesystem.
[  455.425039][T14116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  455.477446][T14116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  456.056230][T14116] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  456.065814][T14116] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  456.083975][T14116] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  456.093563][T14116] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  456.242813][T14177] netlink: 'syz.6.2618': attribute type 1 has an invalid length.
[  456.389058][T14177] 8021q: adding VLAN 0 to HW filter on device bond3
[  456.433792][T14183] loop0: detected capacity change from 0 to 512
[  456.473986][T14189] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2620'.
[  456.579557][T14183] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  456.613452][T14190] netlink: 'syz.7.2621': attribute type 4 has an invalid length.
[  456.636086][T14183] ext4 filesystem being mounted at /86/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  456.648279][T14194] netlink: 'syz.7.2621': attribute type 4 has an invalid length.
[  456.854213][T14183] __quota_error: 15 callbacks suppressed
[  456.854230][T14183] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  456.998394][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2625'.
[  457.007633][T14183] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  457.031117][T14203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2623'.
[  457.046047][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2625'.
[  457.096451][T14183] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.2619: Failed to acquire dquot type 0
[  457.108035][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2625'.
[  457.292456][T14183] EXT4-fs (loop0): unmounting filesystem.
[  457.446101][T14212] fuse: Bad value for 'fd'
[  457.550682][T14218] device vlan2 entered promiscuous mode
[  457.595665][T14218] device syz_tun entered promiscuous mode
[  457.697691][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2628'.
[  458.095200][T14241] overlayfs: upper fs does not support file handles, falling back to index=off.
[  459.499976][T14276] device vlan3 entered promiscuous mode
[  459.505804][T14276] device syz_tun entered promiscuous mode
[  459.531751][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2648'.
[  460.059344][T14282] loop8: detected capacity change from 0 to 1024
[  460.669856][T14297] loop7: detected capacity change from 0 to 256
[  462.712970][T14345] loop7: detected capacity change from 0 to 512
[  462.911929][T14351] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2673'.
[  463.955649][T14375] loop8: detected capacity change from 0 to 256
[  464.022168][T14375] FAT-fs (loop8): Directory bread(block 64) failed
[  464.091396][T14375] FAT-fs (loop8): Directory bread(block 65) failed
[  464.116354][T14375] FAT-fs (loop8): Directory bread(block 66) failed
[  464.168392][T14375] FAT-fs (loop8): Directory bread(block 67) failed
[  464.175050][T14375] FAT-fs (loop8): Directory bread(block 68) failed
[  464.192311][T14375] FAT-fs (loop8): Directory bread(block 69) failed
[  464.202073][T14375] FAT-fs (loop8): Directory bread(block 70) failed
[  464.212061][T14375] FAT-fs (loop8): Directory bread(block 71) failed
[  464.221932][T14375] FAT-fs (loop8): Directory bread(block 72) failed
[  464.230564][T14375] FAT-fs (loop8): Directory bread(block 73) failed
[  464.309293][   T27] audit: type=1800 audit(1780944564.082:452): pid=14375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2682" name=4BBC9980 dev="loop8" ino=1048688 res=0 errno=0
[  465.542058][T14423] 0xfffffffffffffffd-0x000000020000 : ""
[  465.553658][T14423] mtd: partition "" is out of reach -- disabled
[  465.599389][T14423] ftl_cs: FTL header not found.
[  466.036758][T14443] netlink: 'syz.8.2699': attribute type 11 has an invalid length.
[  466.076421][T14443] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2699'.
[  466.519876][T14450] device syzkaller1 entered promiscuous mode
[  466.651858][ T5126] libceph: connect (1)[c::]:6789 error -101
[  466.675011][ T5126] libceph: mon0 (1)[c::]:6789 connect error
[  466.707611][T14456] ceph: No mds server is up or the cluster is laggy
[  467.046002][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2708'.
[  467.766007][T14501] overlayfs: failed to clone upperpath
[  468.790353][T14509] loop8: detected capacity change from 0 to 32768
[  468.839173][T14509] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.2719 (14509)
[  468.892234][T14509] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  468.958285][T14509] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[  468.964580][T14543] fuse: Bad value for 'fd'
[  469.006324][T14509] BTRFS info (device loop8): using free space tree
[  469.414774][T14509] BTRFS info (device loop8): enabling ssd optimizations
[  469.693319][T12505] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  470.756764][T14621] netlink: 'syz.6.2744': attribute type 1 has an invalid length.
[  470.844574][T14621] device bond4 entered promiscuous mode
[  470.858393][T14621] 8021q: adding VLAN 0 to HW filter on device bond4
[  470.872864][T14629] netlink: 'syz.4.2747': attribute type 1 has an invalid length.
[  470.900430][T14629] 8021q: adding VLAN 0 to HW filter on device bond2
[  471.007794][T14631] 8021q: adding VLAN 0 to HW filter on device bond4
[  471.014831][T14631] bond4: (slave vti0): The slave device specified does not support setting the MAC address
[  471.103832][T14631] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  471.164482][T14631] bond4: (slave vti0): making interface the new active one
[  471.182712][T14631] device vti0 entered promiscuous mode
[  471.198659][T14631] bond4: (slave vti0): Enslaving as an active interface with an up link
[  471.243276][T14633] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  471.258083][T14633] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  471.311587][T14633] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  471.348452][T14633] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  471.402418][T14633] bond2: (slave geneve2): making interface the new active one
[  471.446446][T14633] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  471.527183][ T7313] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  471.541670][ T7313] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  471.570874][T14639] netlink: 'syz.7.2749': attribute type 1 has an invalid length.
[  471.612006][T14639] device bond1 entered promiscuous mode
[  471.618039][T14639] 8021q: adding VLAN 0 to HW filter on device bond1
[  471.663531][T14644] 8021q: adding VLAN 0 to HW filter on device bond1
[  471.697021][T14644] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  471.747473][T14644] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  471.793540][T14644] bond1: (slave vti0): making interface the new active one
[  471.805754][T14644] device vti0 entered promiscuous mode
[  471.812624][T14644] bond1: (slave vti0): Enslaving as an active interface with an up link
[  471.845058][ T7313] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  472.503785][T14667] device syzkaller0 entered promiscuous mode
[  472.511232][T14667] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487
[  473.072715][T14692] 9pnet: p9_errstr2errno: server reported unknown error �@c0x0000000000000006
[  473.772405][T14712] tipc: Started in network mode
[  473.800568][T14712] tipc: Node identity 4, cluster identity 4711
[  473.818313][T14712] tipc: Node number set to 4
[  474.329973][T14734] loop8: detected capacity change from 0 to 256
[  474.347657][T14734] FAT-fs (loop8): Unrecognized mount option "shor=mixed" or missing value
[  476.447551][ T4293] Bluetooth: hci5: command 0x1003 tx timeout
[  476.505303][ T4288] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  478.962462][T14830] netlink: 'syz.8.2802': attribute type 12 has an invalid length.
[  479.023598][T14833] netlink: 'syz.0.2800': attribute type 1 has an invalid length.
[  479.032727][T14836] overlayfs: failed to clone upperpath
[  479.225396][T14838] device macvlan2 entered promiscuous mode
[  479.266522][T14846] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2805'.
[  479.297397][T14838] device bond1 entered promiscuous mode
[  479.332729][T14838] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  479.356183][T14847] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2805'.
[  479.372520][T14838] device bond1 left promiscuous mode
[  480.292744][T14873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2813'.
[  481.053017][T14892] netlink: 'syz.7.2818': attribute type 1 has an invalid length.
[  481.090323][T14892] device macvlan2 entered promiscuous mode
[  481.098765][T14892] device bond2 entered promiscuous mode
[  481.111193][T14892] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  481.144713][T14892] device bond2 left promiscuous mode
[  481.501947][T14897] tipc: Failed to remove unknown binding: 66,1,1/0:4132344148/4132344150
[  481.552074][T14897] tipc: Failed to remove unknown binding: 66,1,1/0:4132344148/4132344150
[  481.573643][T14897] tipc: Failed to remove unknown binding: 66,1,1/0:4132344148/4132344150
[  483.218440][T14910] loop8: detected capacity change from 0 to 128
[  483.352981][T14910] syz.8.2823: attempt to access beyond end of device
[  483.352981][T14910] loop8: rw=2049, sector=138, nr_sectors = 112 limit=128
[  483.496048][T14910] syz.8.2823: attempt to access beyond end of device
[  483.496048][T14910] loop8: rw=2049, sector=138, nr_sectors = 8 limit=128
[  483.550088][T14910] syz.8.2823: attempt to access beyond end of device
[  483.550088][T14910] loop8: rw=2049, sector=194, nr_sectors = 56 limit=128
[  484.601620][T14944] loop4: detected capacity change from 0 to 64
[  485.150984][T14958] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  485.194492][T14958] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  485.263033][T14958] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  485.315820][ T4322] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  485.340789][T14958] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  485.380417][T14958] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  485.470173][T14958] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  485.515171][T14958] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  485.527264][ T4322] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  485.562553][T14976] IPVS: length: 528 != 632
[  485.568784][ T4322] usb 9-1: config 0 interface 0 has no altsetting 0
[  485.581083][T14958] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  485.593137][ T4322] usb 9-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  485.633417][ T4322] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.672416][ T4322] usb 9-1: config 0 descriptor??
[  485.692244][T14958] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  485.750377][T14958] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  485.805085][T14958] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  485.865285][T14958] Bluetooth: hci0: Suspend notifier action (1) failed: -4
[  486.103359][ T4322] hid (null): unknown global tag 0xe
[  486.122765][ T4322] wacom 0003:056A:0023.000D: unknown main item tag 0x2
[  486.160286][ T4322] wacom 0003:056A:0023.000D: unknown main item tag 0x6
[  486.194951][ T4322] wacom 0003:056A:0023.000D: unknown global tag 0xe
[  486.223516][ T4322] wacom 0003:056A:0023.000D: item 0 4 1 14 parsing failed
[  486.254294][ T4322] wacom 0003:056A:0023.000D: parse failed
[  486.284432][ T4322] wacom: probe of 0003:056A:0023.000D failed with error -22
[  486.344343][ T4322] usb 9-1: USB disconnect, device number 4
[  487.166425][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout
[  487.405607][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout
[  487.565636][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout
[  487.806565][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout
[  488.971603][T15067] loop8: detected capacity change from 0 to 512
[  489.074919][T15067] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  489.098233][T15067] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  489.245764][ T4291] Bluetooth: hci4: command 0x0406 tx timeout
[  489.246222][T15067] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  489.354079][T15067] EXT4-fs error (device loop8): ext4_insert_range:5584: inode #15: comm syz.8.2859: mark_inode_dirty error
[  489.485713][ T4288] Bluetooth: hci1: command 0x0406 tx timeout
[  489.575824][T12505] EXT4-fs (loop8): unmounting filesystem.
[  489.582753][T15086] fuse: Bad value for 'fd'
[  489.645687][ T4291] Bluetooth: hci3: command 0x0406 tx timeout
[  489.851330][T15092] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2863'.
[  489.886841][ T4288] Bluetooth: hci0: command 0x0406 tx timeout
[  489.916766][T15095] overlayfs: failed to clone upperpath
[  490.154289][T15105] binder_alloc: 15104: pid 15104 spamming oneway? 1 buffers allocated for a total size of 4096
[  490.329226][T15113] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2873'.
[  491.014733][ T2311] pvrusb2: request_firmware fatal error with code=-110
[  491.109127][ T2311] pvrusb2: Failure uploading firmware1
[  491.114767][ T2311] pvrusb2: Device initialization was not successful.
[  491.126722][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  491.142971][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  491.162890][ T8827] pvrusb2: Device being rendered inoperable
[  491.170790][ T2311] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  491.195162][ T2311] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  491.552663][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2888'.
[  492.394019][T15199] IPv6: sit1: Disabled Multicast RS
[  492.615412][T15209] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2901'.
[  492.756137][T15214] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2902'.
[  492.996829][ T4288] Bluetooth: hci0: unexpected event for opcode 0x0000
[  493.041766][T15229] loop4: detected capacity change from 0 to 128
[  493.056642][T15227] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2907'.
[  493.072966][T15229] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  493.085765][ T4288] Bluetooth: hci1: command 0x0406 tx timeout
[  493.100785][T15229] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  493.112822][T15229] ext2 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  493.431783][T10362] EXT4-fs (loop4): unmounting filesystem.
[  494.683081][T15264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2917'.
[  495.381943][ T6328] bond0: (slave bond_slave_0): interface is now down
[  495.402716][T15294] 8021q: adding VLAN 0 to HW filter on device bond0
[  495.415002][ T6328] bond0: (slave bond_slave_1): interface is now down
[  495.482202][ T6328] bond0: now running without any active interface!
[  496.265671][ T4322] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  496.459120][ T4322] usb 9-1: Using ep0 maxpacket: 32
[  496.466457][ T4322] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  496.517473][ T4322] usb 9-1: config 0 has no interfaces?
[  496.523052][ T4322] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  496.584101][ T4322] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.623863][ T4322] usb 9-1: config 0 descriptor??
[  496.824468][T15344] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[  496.880008][ T4369] usb 9-1: USB disconnect, device number 5
[  497.006125][ T4288] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  497.015233][ T4288] Bluetooth: hci0: Injecting HCI hardware error event
[  497.038036][ T4291] Bluetooth: hci0: hardware error 0x00
[  497.673889][ T8825] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  497.795754][ T8825] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  499.051225][   T27] audit: type=1326 audit(1780944598.822:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15398 comm="syz.0.2951" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa34059ce59 code=0x0
[  499.168242][ T4291] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  500.204143][T15426] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2956'.
[  501.005860][ T4291] Bluetooth: hci5: command 0x1003 tx timeout
[  501.005942][ T4288] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  501.254770][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  501.261211][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  501.331125][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2961'.
[  501.522452][T15438] loop8: detected capacity change from 0 to 1024
[  501.562538][T15438] EXT4-fs: inline encryption not supported
[  501.588094][T15438] EXT4-fs: Ignoring removed bh option
[  501.604900][T15454] device gretap0 entered promiscuous mode
[  501.628578][T15438] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  501.664966][T15438] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block
[  501.664966][T15438] 
[  503.684155][T15492] bond3: (slave ip6gretap1): no link monitoring support
[  503.750914][T15492] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  504.104806][T15514] sctp: [Deprecated]: syz.0.2983 (pid 15514) Use of struct sctp_assoc_value in delayed_ack socket option.
[  504.104806][T15514] Use struct sctp_sack_info instead
[  506.455782][T15575] 
[  506.811377][ T8825] kernel read not supported for file inotify (pid: 8825 comm: kworker/1:10)
[  507.341890][T15596] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3001'.
[  507.737111][ T8825] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  507.785377][ T8825] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  507.862026][T15611] overlayfs: failed to clone upperpath
[  508.960858][T15645] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3016'.
[  509.135229][T15657] loop8: detected capacity change from 0 to 128
[  509.161092][T15657] EXT4-fs: Ignoring removed nobh option
[  509.193983][T15657] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  509.215926][T15657] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  509.975456][T15685] netlink: 'syz.4.3027': attribute type 12 has an invalid length.
[  510.044199][T12505] EXT4-fs (loop8): unmounting filesystem.
[  511.017596][T15708] loop4: detected capacity change from 0 to 512
[  511.043844][T15708] EXT4-fs (loop4): #blocks per group too big: 65535
[  512.512913][T15755] loop4: detected capacity change from 0 to 2048
[  512.581194][T15755] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  512.665245][T15755] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  513.565660][ T4288] Bluetooth: hci3: command 0x0406 tx timeout
[  516.135131][T15877] loop8: detected capacity change from 0 to 2048
[  516.209709][T15877] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  516.233692][T15877] UDF-fs: Scanning with blocksize 512 failed
[  516.284156][T15877] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  516.639761][T15894] netlink: 'syz.0.3077': attribute type 1 has an invalid length.
[  516.702102][T15876] UDF-fs: warning (device loop8): udf_truncate_tail_extent: Too long extent after EOF in inode 818: i_size: 134745186 lbcount: 134747136 extent 0+133856256
[  516.863548][T15894] 8021q: adding VLAN 0 to HW filter on device bond2
[  516.903680][T15562] kworker/u4:55: attempt to access beyond end of device
[  516.903680][T15562] loop8: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  517.038533][T15562] Buffer I/O error on dev loop8, logical block 1024, lost async page write
[  517.124140][T15562] kworker/u4:55: attempt to access beyond end of device
[  517.124140][T15562] loop8: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  517.208241][T15562] Buffer I/O error on dev loop8, logical block 1024, lost async page write
[  517.220051][T15904] bond2: (slave ip6gretap1): making interface the new active one
[  517.261912][T15562] kworker/u4:55: attempt to access beyond end of device
[  517.261912][T15562] loop8: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  517.329141][T15904] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  517.343948][T15562] Buffer I/O error on dev loop8, logical block 1024, lost async page write
[  517.376745][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  517.384189][T15562] kworker/u4:55: attempt to access beyond end of device
[  517.384189][T15562] loop8: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  517.384219][T15562] Buffer I/O error on dev loop8, logical block 1024, lost async page write
[  517.384250][T15562] kworker/u4:55: attempt to access beyond end of device
[  517.384250][T15562] loop8: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  517.384270][T15562] Buffer I/O error on dev loop8, logical block 1025, lost async page write
[  517.384329][T15562] kworker/u4:55: attempt to access beyond end of device
[  517.384329][T15562] loop8: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  517.384350][T15562] Buffer I/O error on dev loop8, logical block 1025, lost async page write
[  517.384378][T15562] kworker/u4:55: attempt to access beyond end of device
[  517.384378][T15562] loop8: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  517.384397][T15562] Buffer I/O error on dev loop8, logical block 1025, lost async page write
[  517.384423][T15562] kworker/u4:55: attempt to access beyond end of device
[  517.384423][T15562] loop8: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  517.766404][T15562] Buffer I/O error on dev loop8, logical block 1025, lost async page write
[  517.775200][T15562] kworker/u4:55: attempt to access beyond end of device
[  517.775200][T15562] loop8: rw=1, sector=2052, nr_sectors = 2 limit=2048
[  517.803822][T15562] Buffer I/O error on dev loop8, logical block 1026, lost async page write
[  519.496354][T15960] loop4: detected capacity change from 0 to 1024
[  519.543165][T15960] EXT4-fs: inline encryption not supported
[  519.640580][T15960] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  519.841386][T10362] EXT4-fs (loop4): unmounting filesystem.
[  519.974414][T15973] device syz_tun entered promiscuous mode
[  519.992150][T15973] device vlan0 entered promiscuous mode
[  520.113761][T15977] sch_tbf: burst 19872 is lower than device lo mtu (32783) !
[  521.342681][T16004] device bridge0 entered promiscuous mode
[  522.434501][T16039] netlink: 'syz.0.3116': attribute type 1 has an invalid length.
[  522.567899][T16039] 8021q: adding VLAN 0 to HW filter on device bond3
[  522.695095][T16053] bond3: (slave veth3): Enslaving as an active interface with a down link
[  522.740017][T16039] bond3: (slave dummy0): making interface the new active one
[  522.823424][T16039] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  522.855943][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  522.887184][T16062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3120'.
[  523.238190][T16079] netlink: 'syz.7.3125': attribute type 10 has an invalid length.
[  523.251594][T16079] bond0: (slave bridge0): Enslaving as an active interface with a down link
[  523.290979][T16079] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3125'.
[  523.317583][T16079] device bridge_slave_1 left promiscuous mode
[  523.340193][T16079] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.365244][T16079] device bridge_slave_0 left promiscuous mode
[  523.389385][T16079] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.528629][T16079] bond0: (slave bridge0): Releasing backup interface
[  523.712010][T16090] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  524.570833][T16133] loop4: detected capacity change from 0 to 256
[  524.632125][T16133] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  525.022964][T16147] loop8: detected capacity change from 0 to 4096
[  525.068316][T16147] ext3: Unknown parameter 'seclabel'
[  526.929468][T16218] loop4: detected capacity change from 0 to 512
[  527.059472][T16218] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.3158: inode has both inline data and extents flags
[  527.124106][T16218] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.3158: couldn't read orphan inode 15 (err -117)
[  527.207052][T16218] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  527.308010][T16218] loop4: detected capacity change from 512 to 0
[  527.323349][    C1] I/O error, dev loop4, sector 18 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 1
[  527.332977][    C1] I/O error, dev loop4, sector 20 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 1
[  527.333008][T16218] EXT4-fs error (device loop4): ext4_get_inode_loc:4658: inode #18: block 9: comm syz.4.3158: unable to read itable block
[  527.342615][    C1] I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 1
[  527.367793][T15940] lo_write_bvec: 14 callbacks suppressed
[  527.367864][T15940] loop: Write error at byte offset 9223372036854776827, length 1024.
[  527.398372][    C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 1
[  527.407975][    C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  527.416319][T16218] EXT4-fs (loop4): I/O error while writing superblock
[  527.423116][T16218] EXT4-fs error (device loop4): empty_inline_dir:1869: inode #18: comm syz.4.3158: error -5 getting inode 18 block
[  527.438068][T15940] loop: Write error at byte offset 9223372036854776827, length 1024.
[  527.446819][    C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 1
[  527.456403][    C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  527.465058][T16218] EXT4-fs (loop4): I/O error while writing superblock
[  527.564855][    C0] I/O error, dev loop4, sector 72 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  527.574476][T10362] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[  527.715397][T16245] device vlan2 entered promiscuous mode
[  527.730053][    C1] I/O error, dev loop4, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2
[  527.739776][    C1] I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  527.742256][T16245] device ip6gretap0 entered promiscuous mode
[  527.749829][T15940] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4643: inode #2: block 5: comm kworker/u4:56: unable to read itable block
[  527.801994][T15942] loop: Write error at byte offset 9223372036854776827, length 1024.
[  527.824580][    C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  527.834159][    C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  527.842512][T15940] EXT4-fs (loop4): I/O error while writing superblock
[  527.853097][T10362] EXT4-fs (loop4): unmounting filesystem.
[  527.878648][T15940] loop: Write error at byte offset 9223372036854776827, length 1024.
[  527.924374][    C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  527.933977][    C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  527.942381][T10362] EXT4-fs (loop4): I/O error while writing superblock
[  528.871446][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  528.884787][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  528.895833][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  528.921227][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  528.929037][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  528.936590][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  530.055243][ T5104] device hsr_slave_0 left promiscuous mode
[  530.062205][ T5104] device hsr_slave_1 left promiscuous mode
[  530.085807][ T5104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  530.110715][ T5104] batman_adv: batadv0: Removing interface: batadv_slave_0
[  530.141918][ T5104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  530.159958][ T5104] batman_adv: batadv0: Removing interface: batadv_slave_1
[  530.176599][ T5104] device bridge_slave_1 left promiscuous mode
[  530.191832][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.216033][ T5104] device bridge_slave_0 left promiscuous mode
[  530.227926][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.308389][ T5104] device veth1_macvtap left promiscuous mode
[  530.314551][ T5104] device veth0_macvtap left promiscuous mode
[  530.321491][ T5104] device veth1_vlan left promiscuous mode
[  531.015161][ T4288] Bluetooth: hci4: command 0x0409 tx timeout
[  531.404570][ T5104] team0 (unregistering): Port device team_slave_1 removed
[  531.461326][ T5104] team0 (unregistering): Port device team_slave_0 removed
[  531.520185][ T5104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  531.601521][   T27] audit: type=1804 audit(1780944631.372:454): pid=16348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3194" name="file0" dev="ramfs" ino=87218 res=1 errno=0
[  531.623288][ T5104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  532.221847][ T5104] bond0 (unregistering): Released all slaves
[  532.322055][T16335] netlink: 'syz.6.3191': attribute type 1 has an invalid length.
[  532.355598][T16352] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3195'.
[  532.643550][T16367] device ip6gretap0 entered promiscuous mode
[  532.695941][T16367] device vlan0 entered promiscuous mode
[  532.932533][T16275] chnl_net:caif_netlink_parms(): no params data found
[  533.085652][ T4288] Bluetooth: hci4: command 0x041b tx timeout
[  533.154622][T16275] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.162073][T16275] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.171769][T16275] device bridge_slave_0 entered promiscuous mode
[  533.181048][T16275] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.188633][T16275] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.206710][T16275] device bridge_slave_1 entered promiscuous mode
[  533.230926][T16275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  533.255986][T16275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  533.379940][T16275] team0: Port device team_slave_0 added
[  533.451927][T16275] team0: Port device team_slave_1 added
[  534.033919][T16275] batman_adv: batadv0: Adding interface: batadv_slave_0
[  534.041157][T16275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  534.067748][T16275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  534.080554][T16275] batman_adv: batadv0: Adding interface: batadv_slave_1
[  534.087571][T16275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  534.146807][T16275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  534.218090][T16275] device hsr_slave_0 entered promiscuous mode
[  534.227262][T16275] device hsr_slave_1 entered promiscuous mode
[  534.241798][T16275] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  534.290238][T16275] Cannot create hsr debugfs directory
[  535.124827][T16438] loop8: detected capacity change from 0 to 64
[  535.166366][ T4288] Bluetooth: hci4: command 0x040f tx timeout
[  535.218015][T16438] hfs: request for non-existent node 131072 in B*Tree
[  535.225188][T16438] hfs: request for non-existent node 131072 in B*Tree
[  535.294127][T16441] hfs: request for non-existent node 131072 in B*Tree
[  535.313851][T16441] hfs: request for non-existent node 131072 in B*Tree
[  535.379889][T16438] hfs: request for non-existent node 131072 in B*Tree
[  535.395632][T16438] hfs: request for non-existent node 131072 in B*Tree
[  535.404075][T16441] hfs: request for non-existent node 131072 in B*Tree
[  535.435722][T16441] hfs: request for non-existent node 131072 in B*Tree
[  535.450416][T16438] hfs: request for non-existent node 131072 in B*Tree
[  535.458375][T16438] hfs: request for non-existent node 131072 in B*Tree
[  535.529329][T16438] hfs: request for non-existent node 131072 in B*Tree
[  535.557783][T16438] hfs: request for non-existent node 131072 in B*Tree
[  535.564990][T16441] hfs: request for non-existent node 12 in B*Tree
[  535.586714][T16441] hfs: request for non-existent node 12 in B*Tree
[  535.901455][T16462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3221'.
[  536.056021][T16462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3221'.
[  536.213172][T16275] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  536.344592][T16275] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  536.361903][T16471] sctp: [Deprecated]: syz.8.3222 (pid 16471) Use of struct sctp_assoc_value in delayed_ack socket option.
[  536.361903][T16471] Use struct sctp_sack_info instead
[  536.446219][T16275] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  536.503224][T16275] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  536.755064][T16275] 8021q: adding VLAN 0 to HW filter on device bond0
[  536.777692][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  536.799614][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  536.840953][T16275] 8021q: adding VLAN 0 to HW filter on device team0
[  536.866080][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  536.879215][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  536.912365][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.919595][ T5091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  536.967946][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  536.977143][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  536.989072][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  536.999111][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.006354][ T5091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  537.022065][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  537.042350][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  537.060942][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  537.082402][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  537.124099][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  537.155358][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  537.161324][T16491] loop8: detected capacity change from 0 to 512
[  537.245621][ T4288] Bluetooth: hci4: command 0x0419 tx timeout
[  537.269957][T16491] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  537.283803][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  537.305718][T16491] ext4 filesystem being mounted at /190/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  537.456472][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  537.489016][   T27] audit: type=1800 audit(1780944637.262:455): pid=16491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3229" name="file1" dev="loop8" ino=15 res=0 errno=0
[  537.489146][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  537.564140][   T27] audit: type=1800 audit(1780944637.262:456): pid=16500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3229" name="file2" dev="loop8" ino=16 res=0 errno=0
[  537.588171][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  537.624751][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  537.661451][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3229'.
[  537.665980][T16275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  537.764918][T12505] EXT4-fs (loop8): unmounting filesystem.
[  538.435760][T16538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  538.526114][T16538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  538.612943][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  538.621732][T16532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  538.634518][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  538.699501][T16275] 8021q: adding VLAN 0 to HW filter on device batadv0
[  538.831461][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  538.852106][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  538.929214][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  538.952258][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  538.993114][T16275] device veth0_vlan entered promiscuous mode
[  539.019881][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  539.033044][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  539.073193][T16275] device veth1_vlan entered promiscuous mode
[  539.142456][T16275] device veth0_macvtap entered promiscuous mode
[  539.154616][T15942] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  539.181348][T15942] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  539.194615][T15942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  539.213964][T15942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  539.227981][T16275] device veth1_macvtap entered promiscuous mode
[  539.242250][T15942] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  539.268751][T15942] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  539.304314][T16275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  539.376894][T16275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.415807][T16275] batman_adv: batadv0: Interface activated: batadv_slave_0
[  539.444075][T15942] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  539.471715][T15942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  539.496596][T16275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  539.545673][T16275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.576004][T16275] batman_adv: batadv0: Interface activated: batadv_slave_1
[  539.583567][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  539.608558][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  539.647250][T16275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  539.689636][T16275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  539.705821][T16275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  539.733607][T16275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  540.036375][T15940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  540.057797][T15940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  540.072775][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  540.118531][ T5104] bond0: (slave bond_slave_0): interface is now down
[  540.915530][ T5104] bond0: (slave bond_slave_1): interface is now down
[  540.941422][T15940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  540.985989][T15940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  541.040978][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  541.295231][T15940] 
[  541.297595][T15940] ============================================
[  541.303729][T15940] WARNING: possible recursive locking detected
[  541.309869][T15940] syzkaller #0 Not tainted
[  541.314259][T15940] --------------------------------------------
[  541.320382][T15940] kworker/u4:56/15940 is trying to acquire lock:
[  541.326681][T15940] ffffe8ffffd3b6d8 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x62b/0xaa0
[  541.335908][T15940] 
[  541.335908][T15940] but task is already holding lock:
[  541.343250][T15940] ffffe8ffffd3c7c0 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4c2/0xaa0
[  541.352437][T15940] 
[  541.352437][T15940] other info that might help us debug this:
[  541.360471][T15940]  Possible unsafe locking scenario:
[  541.360471][T15940] 
[  541.367896][T15940]        CPU0
[  541.371149][T15940]        ----
[  541.374400][T15940]   lock(&pd_list->lock);
[  541.378707][T15940]   lock(&pd_list->lock);
[  541.383011][T15940] 
[  541.383011][T15940]  *** DEADLOCK ***
[  541.383011][T15940] 
[  541.391129][T15940]  May be due to missing lock nesting notation
[  541.391129][T15940] 
[  541.399426][T15940] 3 locks held by kworker/u4:56/15940:
[  541.404856][T15940]  #0: ffff888148a49938 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[  541.416142][T15940]  #1: ffffc9000499fd00 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[  541.427350][T15940]  #2: ffffe8ffffd3c7c0 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4c2/0xaa0
[  541.436980][T15940] 
[  541.436980][T15940] stack backtrace:
[  541.442857][T15940] CPU: 0 PID: 15940 Comm: kworker/u4:56 Not tainted syzkaller #0
[  541.450547][T15940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  541.460585][T15940] Workqueue: pencrypt_parallel padata_parallel_worker
[  541.467335][T15940] Call Trace:
[  541.470654][T15940]  <TASK>
[  541.473606][T15940]  dump_stack_lvl+0x188/0x24e
[  541.478324][T15940]  ? show_regs_print_info+0x12/0x12
[  541.483537][T15940]  ? load_image+0x400/0x400
[  541.488026][T15940]  __lock_acquire+0x123e/0x7d10
[  541.492879][T15940]  ? verify_lock_unused+0x140/0x140
[  541.498059][T15940]  ? __queue_work+0xbc1/0xfb0
[  541.502716][T15940]  ? .slowpath+0x9/0xe
[  541.506855][T15940]  ? mark_lock+0x94/0x320
[  541.511164][T15940]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  541.517128][T15940]  lock_acquire+0x1bb/0x4a0
[  541.521614][T15940]  ? padata_do_serial+0x62b/0xaa0
[  541.526618][T15940]  ? queue_work_on+0x196/0x1f0
[  541.531357][T15940]  ? read_lock_is_recursive+0x10/0x10
[  541.536710][T15940]  ? wq_worker_last_func+0x40/0x40
[  541.541797][T15940]  ? __rwlock_init+0x140/0x140
[  541.546538][T15940]  ? _find_next_bit+0x87/0x130
[  541.551279][T15940]  _raw_spin_lock+0x2a/0x40
[  541.555767][T15940]  ? padata_do_serial+0x62b/0xaa0
[  541.560772][T15940]  padata_do_serial+0x62b/0xaa0
[  541.565606][T15940]  ? padata_parallel_worker+0x40/0x1c0
[  541.571049][T15940]  padata_parallel_worker+0x6b/0x1c0
[  541.576308][T15940]  ? process_one_work+0x7b0/0x1160
[  541.581395][T15940]  process_one_work+0x8a2/0x1160
[  541.586312][T15940]  ? worker_detach_from_pool+0x240/0x240
[  541.591921][T15940]  ? _raw_spin_lock_irq+0xb7/0xf0
[  541.596932][T15940]  ? _raw_spin_lock_irqsave+0x100/0x100
[  541.602463][T15940]  ? kthread_data+0x4b/0xc0
[  541.606958][T15940]  worker_thread+0xaa2/0x1270
[  541.611623][T15940]  kthread+0x29d/0x330
[  541.615668][T15940]  ? worker_clr_flags+0x1a0/0x1a0
[  541.620694][T15940]  ? kthread_blkcg+0xd0/0xd0
[  541.626232][T15940]  ret_from_fork+0x1f/0x30
[  541.630640][T15940]  </TASK>
[  547.959098][ T3639] udevd[3639]: worker [5665] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time