last executing test programs:

3m26.792841708s ago: executing program 4 (id=5):
r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d00010000000909040004010300000009210400040122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x7, {[@main=@item_012={0x2, 0x0, 0xa, '\t\t'}, @main=@item_012={0x2, 0x0, 0xa, '\f\b'}, @global=@item_012={0x0, 0x1, 0x2}]}}, 0x0}, 0x0)

3m26.172711885s ago: executing program 4 (id=13):
syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f0000000100)='./file1\x00', 0x201048c, &(0x7f0000000000)=ANY=[], 0xfd, 0x655, &(0x7f0000000400)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000004840)={0x2020}, 0x2020)

3m25.645895171s ago: executing program 4 (id=19):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
fcntl$setstatus(r0, 0x4, 0x42400)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xf)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0x1, 0xc41, &(0x7f0000001b80)="$eJzs3U9sHNd9B/DfG5Hi0m4rxnYUJ42LTVuksmK5+hdTsQp3VdNsA8gyEYq5BeCKpNSFKZIgqUY20oLupYceAhRFDzkRaI0CKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAOQUMZvatuKRJmzb/iLI+H5v67s68N/PezHJGIvjmBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ8QcvXTl7Lt3vVgAAh+na6NfOnnf/B4CHynX//gcAAAAAAAAAAAAAgKMuRRGPR4q5a2tpvHrfVrva6r1zd2xoePtq/amqeawqX37Vzp2/cPHLzw1e6uTV1swH1N9vn4tXRq9fqb84e3tufmphYWqyPjbTmpidnNr1FvZaf6vT1QGo3371zuTNmwv1889e2LT67sB7fY+eHLg8+PSZpzplx4aGh0c3itS6y/d87Ia07TTC43gUcSZSPPO9n6ZmRBSx92NRO9xzv1V/1YnTVSfGhoarjky3mjOL5cqRzoEoIupdlRqdY7T9uYie3kPtw84aEUtl88sGny67NzrXnG/emJ6qjzTnF1uLrdmZkdRubdmfehRxKUUsR8Rq3/s31xtF9ESK75xYSzci4ljnOHypGhi8czuKA+zjLpTtrPdGLBcPwDk7wvqiiJcjxc/ePhUT+TpTXWu+GPFymT+IeLPMFyJS+cG4GPHuNp8jHkw9UcRfluf/8lqarK4HnevK1a/Xvzpzc7arbOe68hHvD++7Utyn+0P/ljwcR/zaVIsimtUVfy19/L/sAAAAAAAAAAAAAAAAALDf+qOIz0aKl/7jT6pxxVGNSz9xefAPB361e8z4kx+ynbLssxGxVOxuTO7xPDBwJI2kdJ/HEj/MalHEn+bxf2/c78YAAAAAAAAAAAAAAAAAAAA81Ir4SaR4/p1TaTm65xRvzdyqX2/emG7PCtuZ+7czZ/r6+vp6PbWzkXM851LO5ZwrOVdzRpHr52zkHM+5lHM550rO1ZxxLNfP2cg5nnMp53LOlZyrOaMn18/ZyDmecynncs6VnKs544jM3QsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ElSRBG/iBTf/uZaihQRjYjxaOdK3/1uHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ6ktFfD9S1P+ocW9ZT0Sk6v+2U+UfF6NxvMzHojFY5gvRuJKzWWVP44370H72pjcV8eNI0Vd7K1JPe1k+/73td/c+BvHmtzbefS6XPdZZOfBe36MnT1weHP6NJ3d6nbZrwOmrrZk7d+tjQ8PDo12Le/LeH+taNpD3W+xT34lYeO31V5vT01PzH/9F+RHYQ/UH6EX5DXIEmuHFYb2IniPRjPvTdx4C5f3/3Ujxu+/8Z+eG377/1+JX2u/u3eHj53+2cf9/fuuGdnn/79laL9//y3v6dvf/x7uWPZ//NtLbE1FbvD3XezKitvDa62dat5u3pm5NzVw8e/Yrg4NfuXC293hE7WZreqrr1b4cLgAAAAAAAAAAAAAAAIDDk4r4/UjR/PFaqkfE3Wq81sDlwafPPHUsjlXjrTaN235l9PqV+ouzt+fmpxYWpibrYzOtidnJqd3urlYN9xobGj6Qznyo/gNuf3/txdm51+Zbt/54cdv1j9Su3FhYnG9ObL86+qOIaHQvOV01eGxouGr0dKs5U1Ud2XYw/UfXm4r4r0gxcbGevpCX5fH/W0f4bxr/v7R1Qwc0/v9TXcvKfaZUxM8jxe/81ZPxhaqdj8T7jlku93eR4vSlz+dycbws12nDY9VDBNojA8uy/xcp/ukXm8t2xkO2xyBWZc/t/sg+GMrzfyJSfP8vvhu/mZdtfv7D9uf/ka0bOqDz/0TXskc2Pa9gz10nn/8zkeKFx9+K38rLPuj5H51nb5zKhe89n+OAzv+nu5YN5P3+9v50HQAAAAAAAAAA4IHWm4r4+0jxw+Ge9Fxetpvf/5vcuqED+v2vz3Qtm9yf+Yo+9MWeDyoAAAAAHBG9qYifRIpbi2/dG0O9efx31/jP39sY/zmUtqytfs73a9VzA/bz53/dBvJ+x/febQAAAAAAAAAAAAAAAAAAADhSUiriuTyf+ng1nn9yx/nUVyLFS//zTC6XTpblOvPAD1R/1q7Nzpy5Mj09O9FcbN6YnqqPzjUnpsq6T0SKtb/9fK5bVPOrd+abb8/xvjEX+3ykGP6HTtn2XOyducmf2Ch7riz7qUjx3/+Yy66vV2U781h/eqPs+bLs30SKb/zL5u12yp7cKHuhLPvdSPGjb9Q7ZR8py3aej/qZjbLPTswWB3BWAAAAAAAAAAAAAAAAAAAAeNj0piL+PFL87+3le2P58/z/vV1vK29+q2u+/y3uVvP8D1Tz/+/0+uPM/189V2Bpp70CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAnU4oiXo8Uc9fW0kpf+b6tdrU1c+fu2NDw9tX6U1XzWFW+/KqdO3/h4pefG7zUyQ+uv98+G6+MXr9Sf3H29tz81MLC1GR9bKY1MTs5test7LX+VqerA1C//eqdyZs3F+rnn72wafXdgff6Hj05cHnw6TNPdcqODQ0Pj3aV6en9qDt9Y8c1aYflx6OIv44Uz3zvp+mHfRFF7P1YbPvZ6dt9L/aov+rE6aoTY0PDVUemW82ZxXLlSOdAFBH1rkqNzjHat3NxQBoRS2XzywafLrs3Otecb96YnqqPNOcXW4ut2ZmR1G5t2Z96FHEpRSxHxOo256A3ing1UnznxFr6176IY53j8KVro187e37ndhQH2MddKNtZ741YLh6Ac3aE9UUR/xwpfvb2qfi3voieaH/FFyNeLvMHEW9G+3yn8oNxMeLdw/te5oD1RBH/X57/y2vp7b7yetC5rlz9ev2rMzdnu8p2risHcn84PP2Hurcjfm2qRRE/qq74a+nffV8DAAAAAAAAAAAAAAAAHCFF/HqkeP6dU6kaH3xvTHFr5lb9evPGdHtYX2fsX2fM9Pr6+no9tbORczznUs7lnCs5V3NGkevnbJRZW18fz++Xci7nXMm5mjOO5fo5GznHcy7lXM65knM1Z/Tk+jkbOcdzLuVczrmSczVnHJGxewAAAAAAAAAAAAAAAAAAwCdLUf2X4tvfXEvrfe35pcejnSvmA/3E+2UAAAD//xtt+zc=")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
fdatasync(r1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r1, 0xa75)

3m23.556724895s ago: executing program 1 (id=54):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)

3m23.518918195s ago: executing program 1 (id=56):
bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0)
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(r0, 0x0, 0x44800)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000100)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @private2, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}, 0x0)

3m23.404669617s ago: executing program 1 (id=59):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4)
recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRES32, @ANYRES16=0x0], 0x1, 0x1b1, &(0x7f0000000300)="$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")

3m22.905254752s ago: executing program 1 (id=61):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000380)={[{@nombcache}, {@delalloc}, {@data_err_ignore}, {@nojournal_checksum}, {@noauto_da_alloc}, {@bsdgroups}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=")
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x185042, 0x189)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x61)
mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x800000, 0x3, &(0x7f00007fd000/0x800000)=nil)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f00000004c0), &(0x7f0000000540)}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x24004000)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x34}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
io_setup(0x7, &(0x7f00000000c0))

3m22.829605343s ago: executing program 1 (id=63):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r5, 0x6, 0xd, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0)
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, 0x0, &(0x7f0000001480))
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000000)="adbcc72ca6d732549f13db1a0206c458", 0x10)

3m22.183003s ago: executing program 4 (id=74):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x181240, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, 0x0, 0x0)
epoll_create1(0x0)
inotify_init1(0x80000)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x12}}}}}}}, 0x0)

3m22.13639984s ago: executing program 32 (id=74):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x181240, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, 0x0, 0x0)
epoll_create1(0x0)
inotify_init1(0x80000)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x12}}}}}}}, 0x0)

3m21.971031762s ago: executing program 1 (id=79):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x43b, &(0x7f0000000300)="$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")
unshare(0x8000400)
r0 = eventfd2(0x9e, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000040)={0x0, r0})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, 0x0)

3m21.895837523s ago: executing program 33 (id=79):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x43b, &(0x7f0000000300)="$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")
unshare(0x8000400)
r0 = eventfd2(0x9e, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000040)={0x0, r0})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, 0x0)

2m43.784791063s ago: executing program 5 (id=267):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
personality(0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x80003, 0x5)
r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000080))
r4 = fsmount(r3, 0x0, 0x80)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x108)
getxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0})

2m42.761188714s ago: executing program 5 (id=277):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x19)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c)
getpriority(0x2, 0x0)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)
syz_usb_connect(0x0, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="12011400c7f36d088d0e0020c621000000010902290001000000000904000000db02ef00052406"], 0x0)

2m39.522922619s ago: executing program 5 (id=299):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x200, 0x100000002, 0x7ab2, 0xfff})

2m38.5841325s ago: executing program 5 (id=302):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x208008, &(0x7f0000000200)={[{@nomblk_io_submit}, {@nojournal_checksum}, {@nombcache}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@data_err_abort}, {@sb={'sb', 0x3d, 0x80}}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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")
openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000480)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@i_version}, {@minixdf}, {@errors_continue}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}]}, 0xd, 0x5e1, &(0x7f0000001200)="$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")
getgroups(0x753a175, 0xfffffffffffffffe)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
recvfrom$unix(r0, 0x0, 0x0, 0x40012023, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020)
lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x2)

2m38.481918561s ago: executing program 5 (id=303):
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r1 = socket(0x2, 0x3, 0xff)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020)

2m33.660695594s ago: executing program 5 (id=310):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000040, &(0x7f00000004c0)={[{@nojournal_checksum}, {@test_dummy_encryption}, {@oldalloc}, {@nobarrier}, {@auto_da_alloc}, {@nouser_xattr}]}, 0x41, 0x5b3, &(0x7f0000000780)="$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")
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB="21042abd7000fedbdf251a0000"], 0xd8}, 0x1, 0x0, 0x0, 0x2080098}, 0x54)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x0, 0xffffffff, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}}, 0x0)

2m33.575436345s ago: executing program 34 (id=310):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000040, &(0x7f00000004c0)={[{@nojournal_checksum}, {@test_dummy_encryption}, {@oldalloc}, {@nobarrier}, {@auto_da_alloc}, {@nouser_xattr}]}, 0x41, 0x5b3, &(0x7f0000000780)="$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")
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB="21042abd7000fedbdf251a0000"], 0xd8}, 0x1, 0x0, 0x0, 0x2080098}, 0x54)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x0, 0xffffffff, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}}, 0x0)

7.333110299s ago: executing program 3 (id=1503):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
ptrace(0x10, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000100)={0x0})
socket$inet(0x2, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000280)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000380)=r0, 0x12)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

6.168626583s ago: executing program 3 (id=1513):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r0, 0x0)
write$binfmt_register(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e)

5.688914288s ago: executing program 7 (id=1515):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$inet6(0xa, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001e80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000400000001000084010000e004000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e"], 0x0, 0x60}, 0x28)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9)
r3 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key(0x0, 0x0, 0x0, 0x0, r3)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1)

5.616651389s ago: executing program 2 (id=1516):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
setxattr$incfs_metadata(&(0x7f0000000300)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0)
getxattr(0x0, &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3)
r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r4)
keyctl$invalidate(0x15, r5)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}})

5.091743184s ago: executing program 3 (id=1519):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x37}}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x38}}, 0x0)

4.998501455s ago: executing program 0 (id=1520):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000440)={0x5, 0x1fffff, 0x0, 0x0, 0x0, 0xffffffff})
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x4000)
ioctl$BLKDISCARD(r1, 0x1277, 0x0)
ioctl$BLKRAGET(r1, 0x1263, 0x0)

4.998246375s ago: executing program 3 (id=1521):
socket$inet(0x2, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000002f4486"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f00000000c0)=0x7, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)

4.989448025s ago: executing program 0 (id=1522):
unshare(0x6020400)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe)

4.962504176s ago: executing program 0 (id=1523):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
ptrace(0x10, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000100)={0x0})
socket$inet(0x2, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000280)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000380)=r0, 0x12)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

4.124661785s ago: executing program 2 (id=1525):
syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000a80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x582, 0x159, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x5, 0x0, 0x69, {0x8, 0xb, 0x1, 0x1, 0x1, 0x3, 0x20, 0x94}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x5, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x3, 0x2, 0x0, 0x4, 0x1, 0x0, 0xf6}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x3, 0x6, {0x8, 0x25, 0x1, 0x0, 0x3f, 0xff, 0x9d21}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x0, 0x9, {0x8, 0x25, 0x1, 0x80, 0xc, 0x5, 0x1}}}}}}}}]}}, 0x0)

4.089692125s ago: executing program 7 (id=1526):
syz_usb_connect$uac1(0x5, 0x91, &(0x7f0000001380)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x582, 0x89, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x8, 0x10, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xfff3, 0x0, 0x2, "185a11af68b5"}, @as_header={0x7, 0x24, 0x1, 0x47, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0xff, 0xfc, 0xd4, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x0, 0x6, {0x7, 0x25, 0x1, 0x0, 0x8, 0xe186}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x1ff, 0x81, 0x2, 0xfa, {0x7, 0x25, 0x1, 0x8, 0x81, 0x2}}}}}}}}]}}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})

4.037094726s ago: executing program 6 (id=1527):
syz_mount_image$exfat(0x0, &(0x7f0000000200)='./file0\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000))
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file0/file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x275a, 0x0)
lseek(r0, 0xf800100000000000, 0x4)

3.826697538s ago: executing program 3 (id=1528):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0xc114)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840)
socket$inet_tcp(0x2, 0x1, 0x0)

3.803648399s ago: executing program 6 (id=1529):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0)

3.334723784s ago: executing program 2 (id=1530):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
connect$inet6(r0, &(0x7f0000005c00)={0xa, 0x4e20, 0x7, @local, 0x2}, 0x1c)

3.136655386s ago: executing program 7 (id=1531):
r0 = socket$packet(0x11, 0x2, 0x300)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10)

3.136391656s ago: executing program 2 (id=1532):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
eventfd2(0x7fffffff, 0x801)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffeb6}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="656e633d6f61657031686173683d626c616b653242bfdd3eba50b619c7b01faa11f9eb77732d3232342d67656e6572696300"/94], 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r5 = dup(r4)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x404004}, 0x1c)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x106, 0x0, 0x0, 0x0, 0x0})

2.716456281s ago: executing program 6 (id=1533):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00')
read$hidraw(r0, &(0x7f0000000780)=""/252, 0xfc)

2.625245892s ago: executing program 6 (id=1534):
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
personality(0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x80003, 0x5)
r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000080))
r4 = fsmount(r2, 0x0, 0x80)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x108)
getxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0})

2.571799162s ago: executing program 0 (id=1535):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
setxattr$incfs_metadata(&(0x7f0000000300)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0)
getxattr(0x0, &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3)
r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r4)
keyctl$invalidate(0x15, r5)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}})

2.404677484s ago: executing program 7 (id=1536):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0xa8, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

2.115995747s ago: executing program 2 (id=1537):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20)
recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0)

2.104977407s ago: executing program 7 (id=1538):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$inet6(0xa, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001e80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000400000001000084010000e004000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e"], 0x0, 0x60}, 0x28)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9)
r2 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key(0x0, 0x0, 0x0, 0x0, r2)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1)

1.670372672s ago: executing program 6 (id=1539):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1f, 0x2}, [], {0x4, 0x2}}, 0x24, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
chdir(&(0x7f00000003c0)='./bus\x00')
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r5 = dup3(r4, r3, 0x0)
recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)=""/4088, 0xff8}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0)
write$binfmt_aout(r5, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x181000, 0x144)

1.027145459s ago: executing program 2 (id=1540):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getrusage(0xffffffffffffffff, &(0x7f0000000380))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010727bd7000feffffff2e0000000e0001"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x24048810)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1'])
chdir(&(0x7f0000000300)='./file0\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setresgid(0xee00, 0xee01, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
sendmmsg$unix(r6, &(0x7f0000002780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401c4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=[@rights={{0x10}}], 0x10}}], 0x2, 0x2001c055)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x48)
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x107, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0xb, 0xf9, 0x68, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010101, @private=0xa010101, {[@generic={0x0, 0xc, "94fc700a9fe66dd36e3f"}, @ra={0x94, 0x4, 0x1}]}}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x16, 0x40, 0x8, 0x0, 0xfff, {[@fastopen={0x22, 0xe, "b4a182e562c9abe06fffdae4"}, @window={0x3, 0x3, 0x1}, @mptcp=@add_addr={0x1e, 0x11, 0x0, 0x11, 0x4, @multicast1, 0x7ff, "afff25925da995"}, @exp_smc={0xfe, 0x6}, @nop, @generic={0x3, 0x10, "21dfc662fd5d90850de1db3fae88"}, @exp_fastopen={0xfe, 0x7, 0xf989, '%P('}, @sack={0x5, 0x2}]}}, {"6d78e4df0a873afa7fac543b17fd092cd51cc5f8c8c6b836c65a40bb24b748e75964e1c30f875ec5b93f36820bf3c01cd416a9875afd7a241c988012a7d792e6894437a12d318a0e575e4ab16f9330f9c74c6342216dda0948abac5ea6de2cffb6f1bd915af92cdbeb0154466349de5bb645b64bb04ba0d907288bc340"}}}}}}, 0x0)

1.026968089s ago: executing program 7 (id=1541):
socket$nl_route(0x10, 0x3, 0x0)
syz_clone3(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setregid(0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10)

1.025706569s ago: executing program 0 (id=1550):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20)
recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0)

570.672644ms ago: executing program 6 (id=1542):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
epoll_create1(0x80000)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000004})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x33)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r6, 0x25, 0x0, @val=@tcx}, 0x1c)
syz_emit_ethernet(0x10e80, &(0x7f00000000c0)=ANY=[], 0x0)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x194, &(0x7f0000000640)="$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")
sendmsg$nl_route_sched(r4, 0x0, 0x880)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
read$FUSE(r8, &(0x7f0000003f00)={0x2020}, 0x2020)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x580c6000)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x1f, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x10006}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x500}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x23, '\x00', r6}, 0x94)

516.930664ms ago: executing program 3 (id=1543):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
statx(0xffffffffffffff9c, 0x0, 0x100, 0x2, &(0x7f0000000300))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r3 = fsopen(&(0x7f0000000280)='ext4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c000000000010505000000000000000002000000240002801400018008000100ac1e01010800"], 0xc0}, 0x1, 0x0, 0x0, 0x240c8011}, 0x40)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2)
readv(r4, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)

0s ago: executing program 0 (id=1544):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0)

kernel console output (not intermixed with test programs):

ous mode
[   32.581980][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   32.583881][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   32.588205][ T4325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.589706][ T4325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.591105][ T4325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.595475][ T4325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.615755][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.617116][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.622094][ T4335] device veth0_macvtap entered promiscuous mode
[   32.630868][  T232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.632838][  T232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.635606][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   32.637519][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   32.638971][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   32.640518][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   32.642112][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   32.644241][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   32.661874][ T4335] device veth1_macvtap entered promiscuous mode
[   32.698743][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.700581][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.702154][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.706936][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.708697][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.710439][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.712058][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.714852][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.717428][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.725910][  T232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   32.731809][  T232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   32.738237][  T232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   32.753447][   T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.754834][   T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.755125][  T232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.756332][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   32.757798][  T232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.765441][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   32.778297][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.785952][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.787759][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.789547][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.790124][ T4415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'.
[   32.791184][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.794853][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.796779][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.798996][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.801753][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.806577][ T4335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.808130][ T4335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.809747][ T4335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.811172][ T4335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.817967][  T232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   32.819885][  T232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   32.861942][  T232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.865219][  T232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.866827][  T232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   32.880122][ T4418] loop2: detected capacity change from 0 to 4096
[   32.930515][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.931812][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.934082][ T4418] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   32.934387][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   32.959784][  T232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.961126][  T232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.966022][  T232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   33.005943][ T4427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.007574][ T4427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.036675][ T4418] EXT4-fs (loop2): shut down requested (2)
[   33.048019][ T4418] EXT4-fs (loop2): unmounting filesystem.
[   33.095264][ T4429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.097035][ T4429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.534967][ T4336] Bluetooth: hci0: command 0x041b tx timeout
[   33.604550][ T4439] loop4: detected capacity change from 0 to 1024
[   33.616278][ T4336] Bluetooth: hci1: command 0x041b tx timeout
[   33.616302][ T4343] Bluetooth: hci3: command 0x041b tx timeout
[   33.617393][ T4336] Bluetooth: hci4: command 0x041b tx timeout
[   33.618465][ T4343] Bluetooth: hci2: command 0x041b tx timeout
[   33.656598][ T4439] =======================================================
[   33.656598][ T4439] WARNING: The mand mount option has been deprecated and
[   33.656598][ T4439]          and is ignored by this kernel. Remove the mand
[   33.656598][ T4439]          option from the mount to silence this warning.
[   33.656598][ T4439] =======================================================
[   34.141900][ T4335] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[   34.152263][ T4335] hfsplus: xattr search failed
[   34.155375][ T4335] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[   34.156513][ T4335] hfsplus: xattr search failed
[   34.157629][ T4335] syz-executor: attempt to access beyond end of device
[   34.157629][ T4335] loop4: rw=0, sector=917504, nr_sectors = 2 limit=1024
[   34.173224][ T4335] Buffer I/O error on dev loop4, logical block 458752, async page read
[   34.179455][ T4335] hfsplus: unable to mark blocks free: error -5
[   34.181816][ T4335] hfsplus: can't free extent
[   34.184029][ T4335] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[   34.185229][ T4335] hfsplus: xattr search failed
[   34.186142][ T4335] syz-executor: attempt to access beyond end of device
[   34.186142][ T4335] loop4: rw=0, sector=917504, nr_sectors = 2 limit=1024
[   34.191974][ T4335] Buffer I/O error on dev loop4, logical block 458752, async page read
[   34.197980][ T4335] hfsplus: unable to mark blocks free: error -5
[   34.200159][ T4335] hfsplus: can't free extent
[   34.257948][ T4459] loop3: detected capacity change from 0 to 512
[   34.266723][ T4459] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   34.328464][ T4469] loop0: detected capacity change from 0 to 512
[   34.337741][ T4447] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[   34.339643][ T4447] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[   34.343191][ T4469] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   34.345509][ T4469] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   34.362948][ T4469] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[   34.364514][ T4469] System zones: 1-12
[   34.379034][ T4469] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   34.381374][ T4469] EXT4-fs (loop0): 1 truncate cleaned up
[   34.383030][ T4469] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   34.440331][ T4330] EXT4-fs (loop0): unmounting filesystem.
[   34.483579][ T4477] capability: warning: `syz.3.28' uses deprecated v2 capabilities in a way that may be insecure
[   34.500403][ T4477] loop3: detected capacity change from 0 to 512
[   34.518563][ T4479] netlink: 136 bytes leftover after parsing attributes in process `syz.0.29'.
[   34.564772][ T4477] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   34.571718][ T4483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.591566][ T4483] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.609168][ T4325] EXT4-fs (loop3): unmounting filesystem.
[   34.661737][ T4489] loop0: detected capacity change from 0 to 8
[   35.216995][ T4506] loop1: detected capacity change from 0 to 512
[   35.242072][ T4506] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   35.254833][ T4506] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[   35.256350][ T4506] System zones: 1-12
[   35.259772][ T4506] EXT4-fs (loop1): 1 truncate cleaned up
[   35.260844][ T4506] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   35.267351][ T4509] loop0: detected capacity change from 0 to 1024
[   35.273822][ T4511] fuse: Bad value for 'fd'
[   35.319888][ T4324] EXT4-fs (loop1): unmounting filesystem.
[   35.355792][   T11] hfsplus: b-tree write err: -5, ino 25
[   35.357166][   T11] hfsplus: b-tree write err: -5, ino 4
[   35.358239][   T11] hfsplus: b-tree write err: -5, ino 2
[   35.622365][ T4338] Bluetooth: hci0: command 0x040f tx timeout
[   35.692445][ T4343] Bluetooth: hci2: command 0x040f tx timeout
[   35.693911][ T4343] Bluetooth: hci3: command 0x040f tx timeout
[   35.695665][ T4338] Bluetooth: hci1: command 0x040f tx timeout
[   35.757243][ T4526] loop0: detected capacity change from 0 to 164
[   35.762944][ T4526] ISOFS: unable to read i-node block
[   35.765691][ T4526] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   35.819363][ T4527] loop1: detected capacity change from 0 to 8
[   35.835220][ T4527] SQUASHFS error: Failed to read block 0x71e: -5
[   35.836486][ T4527] SQUASHFS error: Unable to read metadata cache entry [71c]
[   35.837794][ T4527] SQUASHFS error: Unable to read inode 0x11f
[   35.894755][ T4318] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   35.959733][ T4529] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   35.967133][ T4529] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   35.995571][ T4529] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[   36.066687][ T4536] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   36.071432][ T4538] EXT4-fs: Ignoring removed orlov option
[   36.073559][ T4536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   36.090760][ T4538] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   36.122139][ T4330] EXT4-fs (loop0): unmounting filesystem.
[   36.198366][ T4545] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   36.211878][ T4545] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[   36.214813][ T4545] System zones: 1-12
[   36.227858][ T4545] EXT4-fs (loop0): 1 truncate cleaned up
[   36.229798][ T4549] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[   36.230519][ T4545] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   36.298407][ T4330] EXT4-fs (loop0): unmounting filesystem.
[   36.469677][ T4560] SQUASHFS error: Failed to read block 0x71e: -5
[   36.470738][ T4560] SQUASHFS error: Unable to read metadata cache entry [71c]
[   36.472020][ T4560] SQUASHFS error: Unable to read inode 0x11f
[   36.586391][ T4314] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   36.883509][  T111] cfg80211: failed to load regulatory.db
[   36.906833][ T4566] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.61: iget: bad i_size value: 38620345925642
[   36.909728][ T4566] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.61: couldn't read orphan inode 15 (err -117)
[   36.919429][ T4566] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   36.968247][ T4570] EXT4-fs (loop1): unmounting filesystem.
[   37.404269][ T4578] 9pnet_fd: Insufficient options for proto=fd
[   37.692639][ T4338] Bluetooth: hci0: command 0x0419 tx timeout
[   37.698461][ T4343] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   37.700346][ T4343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   37.702699][ T4343] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   37.704440][ T4343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   37.705911][ T4343] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   37.707745][ T4343] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   37.773751][ T4343] Bluetooth: hci3: command 0x0419 tx timeout
[   37.774796][ T4343] Bluetooth: hci2: command 0x0419 tx timeout
[   37.815797][ T4604] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   37.858314][ T4604] EXT4-fs (loop3): shut down requested (2)
[   37.897533][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.910225][ T4604] EXT4-fs (loop3): unmounting filesystem.
[   37.941035][ T4318] udevd[4318]: incorrect ext4 checksum on /dev/loop3
[   37.951298][ T4343] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   37.953843][ T4343] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   37.955508][ T4343] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   37.957170][ T4343] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   37.959081][ T4343] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   37.960464][ T4343] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   38.004243][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.096547][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.184917][ T4625] input: syz1 as /devices/virtual/input/input2
[   38.255403][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.263789][ T4599] chnl_net:caif_netlink_parms(): no params data found
[   38.335075][ T4599] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.336377][ T4599] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.337938][ T4599] device bridge_slave_0 entered promiscuous mode
[   38.369674][ T4599] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.370978][ T4599] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.372885][ T4599] device bridge_slave_1 entered promiscuous mode
[   38.397033][ T4599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.409281][ T4614] chnl_net:caif_netlink_parms(): no params data found
[   38.499648][ T4599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.845714][ T4599] team0: Port device team_slave_0 added
[   38.871052][ T4643] device syzkaller0 entered promiscuous mode
[   38.894449][ T4599] team0: Port device team_slave_1 added
[   38.994575][ T4614] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.995925][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.997784][ T4614] device bridge_slave_0 entered promiscuous mode
[   39.000561][ T4614] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.001859][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.004621][ T4614] device bridge_slave_1 entered promiscuous mode
[   39.006644][ T4651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   39.007952][ T4651] IPv6: NLM_F_CREATE should be set when creating new route
[   39.009114][ T4651] IPv6: NLM_F_CREATE should be set when creating new route
[   39.026956][ T4599] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.028179][ T4599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.035041][ T4599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.047646][ T4614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.049404][ T4599] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.050572][ T4599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.055416][ T4599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.069010][ T4614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.084860][ T4614] team0: Port device team_slave_0 added
[   39.129756][ T4661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.131137][ T4661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.134194][ T4599] device hsr_slave_0 entered promiscuous mode
[   39.141985][ T4374] kernel write not supported for file bpf-prog (pid: 4374 comm: kworker/1:5)
[   39.152640][ T4599] device hsr_slave_1 entered promiscuous mode
[   39.192429][ T4599] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   39.193757][ T4599] Cannot create hsr debugfs directory
[   39.376091][ T4614] team0: Port device team_slave_1 added
[   39.390320][ T4614] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.391571][ T4614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.395630][ T4614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.400578][ T4614] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.401949][ T4614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.406606][ T4614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.411892][ T4672] device syzkaller0 entered promiscuous mode
[   39.660981][ T4676] binder: 4675:4676 tried to acquire reference to desc 0, got 1 instead
[   39.663513][ T4676] binder: 4675:4676 ioctl c0306201 0 returned -14
[   39.665065][   T14] binder: release 4675:4676 transaction 6 out, still active
[   39.666409][   T14] binder: undelivered TRANSACTION_COMPLETE
[   39.677216][   T24] binder: send failed reply for transaction 6, target dead
[   39.685757][ T4614] device hsr_slave_0 entered promiscuous mode
[   39.716418][ T4678] set_capacity_and_notify: 9 callbacks suppressed
[   39.716427][ T4678] loop3: detected capacity change from 0 to 1024
[   39.735193][ T4614] device hsr_slave_1 entered promiscuous mode
[   39.741103][   T14] kernel write not supported for file [eventfd] (pid: 14 comm: kworker/0:1)
[   39.772912][ T4338] Bluetooth: hci1: command 0x0409 tx timeout
[   39.812394][ T4614] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   39.813673][ T4614] Cannot create hsr debugfs directory
[   40.072790][ T4343] Bluetooth: hci4: command 0x0409 tx timeout
[   40.173049][ T4699] loop3: detected capacity change from 0 to 512
[   40.188424][ T4699] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   40.210647][ T4699] EXT4-fs (loop3): 1 truncate cleaned up
[   40.211899][ T4699] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   40.268242][ T4325] EXT4-fs (loop3): unmounting filesystem.
[   40.307303][ T4709] binder: 4708:4709 tried to acquire reference to desc 0, got 1 instead
[   40.310987][   T24] binder: release 4708:4709 transaction 11 out, still active
[   40.312785][   T24] binder: undelivered TRANSACTION_COMPLETE
[   40.326725][   T24] binder: send failed reply for transaction 11, target dead
[   40.399060][ T4717] Illegal XDP return value 4294967294 on prog  (id 8) dev N/A, expect packet loss!
[   40.454463][ T4599] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   40.494450][ T4599] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   40.562077][ T4727] binder: 4726:4727 tried to acquire reference to desc 0, got 1 instead
[   40.564620][ T4727] binder: 4726:4727 got new transaction with bad transaction stack, transaction 16 has target 4726:0
[   40.566756][ T4727] binder: 4726:4727 transaction call to 4726:0 failed 17/29201/-71, size 0-0 line 3105
[   40.568851][ T4333] binder: release 4726:4727 transaction 16 out, still active
[   40.570781][ T4333] binder: undelivered TRANSACTION_COMPLETE
[   40.571894][ T4333] binder: undelivered TRANSACTION_ERROR: 29201
[   40.692379][ T4599] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   40.741768][ T4737] binder: 4736:4737 tried to acquire reference to desc 0, got 1 instead
[   40.783945][ T4599] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   41.012795][ T4614] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   41.075387][ T4614] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   41.174912][ T4745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   41.176319][ T4745] IPv6: NLM_F_CREATE should be set when creating new route
[   41.177526][ T4745] IPv6: NLM_F_CREATE should be set when creating new route
[   41.204870][ T4754] loop3: detected capacity change from 0 to 1024
[   41.225524][ T4614] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   41.285750][ T4614] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   41.289979][ T4748] hfsplus: b-tree write err: -5, ino 3
[   41.582642][ T4762] loop3: detected capacity change from 0 to 8
[   41.621760][ T4762] SQUASHFS error: Failed to read block 0x71e: -5
[   41.622916][ T4762] SQUASHFS error: Unable to read metadata cache entry [71c]
[   41.624197][ T4762] SQUASHFS error: Unable to read inode 0x11f
[   41.630246][ T4765] binder: 4764:4765 tried to acquire reference to desc 0, got 1 instead
[   41.632132][ T4765] binder: 4764:4765 got new transaction with bad transaction stack, transaction 27 has target 4764:0
[   41.653702][ T4318] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   41.724094][ T4771] binder: 4770:4771 tried to acquire reference to desc 0, got 1 instead
[   41.852448][ T4343] Bluetooth: hci1: command 0x041b tx timeout
[   41.860381][ T4773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   41.876255][ T4775] device syzkaller0 entered promiscuous mode
[   41.892151][ T4614] 8021q: adding VLAN 0 to HW filter on device bond0
[   41.904175][ T4614] 8021q: adding VLAN 0 to HW filter on device team0
[   42.092567][ T4338] Bluetooth: hci4: command 0x041b tx timeout
[   42.175086][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   42.176718][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   42.187041][ T4599] 8021q: adding VLAN 0 to HW filter on device bond0
[   42.614515][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   42.616245][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   42.617654][ T4450] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.618802][ T4450] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.620402][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   42.622001][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   42.624012][ T4450] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.625299][ T4450] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.626952][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   42.699499][ T4790] binder: 4789:4790 tried to acquire reference to desc 0, got 1 instead
[   42.718836][ T4790] binder: 4789:4790 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   43.232958][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   43.279052][ T4599] 8021q: adding VLAN 0 to HW filter on device team0
[   43.303471][   T11] device hsr_slave_0 left promiscuous mode
[   43.332465][   T11] device hsr_slave_1 left promiscuous mode
[   43.397042][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   43.398472][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[   43.401188][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   43.405112][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[   43.406779][   T11] device bridge_slave_1 left promiscuous mode
[   43.408556][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.433217][   T11] device bridge_slave_0 left promiscuous mode
[   43.434722][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.572583][   T11] device veth1_macvtap left promiscuous mode
[   43.573854][   T11] device veth0_macvtap left promiscuous mode
[   43.575005][   T11] device veth1_vlan left promiscuous mode
[   43.576057][   T11] device veth0_vlan left promiscuous mode
[   43.942318][ T4338] Bluetooth: hci1: command 0x040f tx timeout
[   44.172680][ T4338] Bluetooth: hci4: command 0x040f tx timeout
[   46.012257][ T4338] Bluetooth: hci1: command 0x0419 tx timeout
[   46.023974][   T11] team0 (unregistering): Port device team_slave_1 removed
[   46.195133][   T11] team0 (unregistering): Port device team_slave_0 removed
[   46.252345][ T4343] Bluetooth: hci4: command 0x0419 tx timeout
[   46.353271][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   46.552670][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   48.003842][   T11] bond0 (unregistering): Released all slaves
[   48.295312][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   48.297019][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   48.298520][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   48.300103][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   48.301519][ T4748] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.302692][ T4748] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.304141][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   48.305724][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   48.307149][ T4748] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.308395][ T4748] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.309902][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   48.311701][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   48.319877][ T4809] device syzkaller0 entered promiscuous mode
[   48.448953][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   48.450700][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   48.456267][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   48.462772][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   48.474120][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   48.475923][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   48.477550][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   48.479224][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   48.480824][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   48.484801][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   48.490941][ T4599] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   48.495832][ T4599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.507577][ T4614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.509742][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   48.522033][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   48.524472][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   48.525990][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   48.527736][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   48.529342][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   48.530825][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   48.543731][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   48.545487][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   48.547155][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   48.548726][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   48.553353][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   48.658096][ T4614] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.659705][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   48.661013][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   49.035157][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   49.037133][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   49.041402][ T4599] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.501640][ T4614] device veth0_vlan entered promiscuous mode
[   49.509113][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   49.510799][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   49.513543][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   49.515118][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   49.517844][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   49.519491][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   49.523093][ T4614] device veth1_vlan entered promiscuous mode
[   49.530996][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   49.534400][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   49.538370][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   49.543251][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   49.546213][ T4614] device veth0_macvtap entered promiscuous mode
[   49.557419][ T4614] device veth1_macvtap entered promiscuous mode
[   49.569213][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.573326][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.575485][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.578238][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.580841][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.584763][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.587566][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.589891][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.596768][ T4614] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.598263][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   49.599965][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   49.601508][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   49.606541][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   49.610519][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.613014][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.614734][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.617708][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.621538][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.629965][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.634673][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.636584][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.649476][ T4614] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.653568][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   49.655214][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   49.664353][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   49.666125][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   49.668448][ T4614] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.670051][ T4614] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.671582][ T4614] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.675616][ T4614] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.690709][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   49.692738][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   49.704520][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   49.706125][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   49.711433][ T4599] device veth0_vlan entered promiscuous mode
[   49.752981][ T4599] device veth1_vlan entered promiscuous mode
[   49.807971][ T4748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.809433][ T4748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.811015][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   49.813107][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   49.814757][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   49.831136][ T4599] device veth0_macvtap entered promiscuous mode
[   49.840274][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   49.841977][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   49.851386][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   49.855557][ T4599] device veth1_macvtap entered promiscuous mode
[   49.870719][ T4900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.873422][ T4900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.914807][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   49.916731][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   49.919719][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.921630][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.932736][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.934521][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.936205][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.937908][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.939523][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.941240][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.946332][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.948042][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.950427][ T4599] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.969522][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   49.971213][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   50.560048][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.562000][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.563861][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.565679][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.567302][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.569201][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.570860][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.573873][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.575477][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.577210][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.579603][ T4599] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.583636][ T4599] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.591155][ T4599] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.592923][ T4599] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.594502][ T4599] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.601428][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   50.605691][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   50.653821][ T4939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.655434][ T4939] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.666883][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.753852][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.757210][ T4520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.759506][ T4520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.769088][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   50.776906][ T4748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.778411][ T4748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.780025][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   50.840765][ T4954] loop6: detected capacity change from 0 to 16
[   50.854969][ T4954] erofs: (device loop6): mounted with root inode @ nid 36.
[   50.875255][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.940590][ T4960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.962086][ T4960] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.023886][ T4956] device wlan0 entered promiscuous mode
[   51.031310][ T4956] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   51.058118][ T4966] loop5: detected capacity change from 0 to 8
[   51.069811][ T4966] SQUASHFS error: Failed to read block 0x71e: -5
[   51.070868][ T4966] SQUASHFS error: Unable to read metadata cache entry [71c]
[   51.072173][ T4966] SQUASHFS error: Unable to read inode 0x11f
[   51.184482][ T4957] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   51.254269][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.397909][ T4407] kernel write not supported for file /diskstats (pid: 4407 comm: kworker/0:6)
[   51.854423][ T5019] binder_user_error: 8 callbacks suppressed
[   51.854434][ T5019] binder: 5015:5019 tried to acquire reference to desc 0, got 1 instead
[   51.857496][ T5019] binder: 5015:5019 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   51.859392][ T5021] loop0: detected capacity change from 0 to 164
[   51.859652][ T5019] binder: 5019 RLIMIT_NICE not set
[   51.867841][ T5021] Unable to read rock-ridge attributes
[   51.871571][ T5019] binder: 5015:5019 got new transaction with bad transaction stack, transaction 60 has target 5015:0
[   51.879750][ T5023] IPv6: NLM_F_CREATE should be specified when creating new route
[   51.895151][ T5019] binder_debug: 28 callbacks suppressed
[   51.895173][ T5019] binder: 5015:5019 transaction call to 5015:0 failed 61/29201/-71, size 0-0 line 3105
[   51.899973][ T5025] device syzkaller0 entered promiscuous mode
[   51.902728][   T22] binder: release 5015:5019 transaction 60 out, still active
[   51.904020][   T22] binder: undelivered TRANSACTION_COMPLETE
[   51.904863][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[   51.916478][ T4407] binder: send failed reply for transaction 60, target dead
[   51.966552][ T5029] device syzkaller0 entered promiscuous mode
[   51.997547][ T5033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.998939][ T5035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.999173][ T5033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.003141][ T5035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.547568][ T5040] loop5: detected capacity change from 0 to 512
[   52.566059][ T5040] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   52.570652][ T5040] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.224: bg 0: block 401: padding at end of block bitmap is not set
[   52.574784][ T5040] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem
[   52.576527][ T5040] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.224: attempt to clear invalid blocks 983260 len 1
[   52.579512][ T5040] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.224: Invalid inode table block 0 in block_group 0
[   52.582561][ T5040] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem
[   52.584570][ T5040] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[   52.586108][ T5040] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.224: Invalid inode table block 0 in block_group 0
[   52.588312][ T5040] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem
[   52.589936][ T5040] EXT4-fs error (device loop5): ext4_truncate:4325: inode #11: comm syz.5.224: mark_inode_dirty error
[   52.592044][ T5040] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[   52.595369][ T5040] EXT4-fs (loop5): 1 truncate cleaned up
[   52.596320][ T5040] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   52.676770][ T5048] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.224: Invalid inode table block 0 in block_group 0
[   52.680049][ T5048] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem
[   52.686024][ T5048] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.224: Invalid inode table block 0 in block_group 0
[   53.383347][ T4599] EXT4-fs (loop5): unmounting filesystem.
[   53.492540][ T5054] loop5: detected capacity change from 0 to 8
[   53.498762][ T5054] SQUASHFS error: Failed to read block 0x71e: -5
[   53.499925][ T5054] SQUASHFS error: Unable to read metadata cache entry [71c]
[   53.501173][ T5054] SQUASHFS error: Unable to read inode 0x11f
[   54.574533][ T5066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.576018][ T5066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.308637][ T5070] loop5: detected capacity change from 0 to 512
[   55.313064][ T5070] EXT4-fs: Ignoring removed oldalloc option
[   55.505499][ T5070] EXT4-fs (loop5): 1 truncate cleaned up
[   55.506515][ T5070] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   55.979758][ T4599] EXT4-fs (loop5): unmounting filesystem.
[   63.586893][ T5085] loop0: detected capacity change from 0 to 256
[   63.588262][ T5085] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   63.620660][ T5087] loop5: detected capacity change from 0 to 4096
[   63.680014][ T5091] loop3: detected capacity change from 0 to 8
[   63.683595][ T5091] SQUASHFS error: Failed to read block 0x71e: -5
[   63.684615][ T5091] SQUASHFS error: Unable to read metadata cache entry [71c]
[   63.685892][ T5091] SQUASHFS error: Unable to read inode 0x11f
[   63.699938][ T5087] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   63.732986][ T4599] EXT4-fs (loop5): unmounting filesystem.
[   63.802363][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.804052][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.828340][ T5102] device bridge_slave_1 left promiscuous mode
[   63.831681][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.251813][ T5102] device bridge_slave_0 left promiscuous mode
[   64.253591][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.494008][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[   64.495547][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[   64.856724][ T5112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.244'.
[   64.898361][ T5124] device syzkaller0 entered promiscuous mode
[   64.906646][ T5136] binder: 5135:5136 tried to acquire reference to desc 0, got 1 instead
[   64.908669][ T5136] binder: 5135:5136 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   64.910992][ T5136] binder: 5136 RLIMIT_NICE not set
[   64.911783][ T5136] binder: 5136 RLIMIT_NICE not set
[   64.916098][ T5136] binder: release 5135:5136 transaction 66 in, still active
[   64.917368][ T5136] binder: send failed reply for transaction 66 to 5135:5136
[   64.921652][ T5136] binder: 5135:5136 ioctl c0306201 0 returned -14
[   64.932544][ T4407] binder: undelivered TRANSACTION_COMPLETE
[   64.933677][ T4407] binder: undelivered TRANSACTION_ERROR: 29189
[   75.922388][ T5186] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   75.924853][ T5188] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.926178][ T5188] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.948551][ T5189] device bridge_slave_1 left promiscuous mode
[   75.949666][ T5189] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.973065][ T5189] device bridge_slave_0 left promiscuous mode
[   75.974171][ T5189] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.004573][ T5206] loop6: detected capacity change from 0 to 128
[   76.014369][ T5206] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   76.015694][ T5205] loop3: detected capacity change from 0 to 4096
[   76.031059][ T5206] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8)
[   76.033869][ T5206] FAT-fs (loop6): Filesystem has been set read-only
[   76.035312][ T5206] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522)
[   76.037048][ T5206] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522)
[   76.100156][ T5205] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   76.113634][ T5218] loop6: detected capacity change from 0 to 1024
[   76.462662][ T5205] EXT4-fs (loop3): unmounting filesystem.
[   76.467976][ T5196] udevd[5196]: incorrect ext4 checksum on /dev/loop3
[   76.491259][ T5218] EXT4-fs: Ignoring removed oldalloc option
[   76.492717][ T5218] ext4: Unknown parameter 'nouser_xattr'
[   76.989390][ T5235] loop6: detected capacity change from 0 to 2048
[   77.007139][ T5235] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   77.102715][ T5249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.463963][   T14] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   77.489138][ T5250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.490588][ T5250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.493243][ T5249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.667475][   T14] usb 1-1: config 0 has an invalid interface number: 11 but max is 0
[   77.668848][   T14] usb 1-1: config 0 has no interface number 0
[   77.669854][   T14] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[   77.671776][   T14] usb 1-1: config 0 interface 11 altsetting 253 has an invalid endpoint with address 0xFF, skipping
[   77.674282][   T14] usb 1-1: config 0 interface 11 has no altsetting 0
[   77.676045][   T14] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[   77.677634][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.684217][   T14] usb 1-1: config 0 descriptor??
[   77.687234][ T5238] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   77.688600][ T5238] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   77.693226][   T14] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected
[   77.694829][   T14] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 87
[   77.700638][   T14] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81
[   77.702140][   T14] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82
[   77.703459][   T14] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1
[   77.704835][   T14] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2
[   77.706169][   T14] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85
[   77.707570][   T14] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5
[   77.710189][   T14] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[   77.712366][   T14] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83
[   77.713749][   T14] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84
[   77.715127][   T14] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3
[   77.716365][   T14] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4
[   77.717577][   T14] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86
[   77.720599][   T14] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6
[   77.723209][   T14] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[   77.934773][ T4377] usb 1-1: USB disconnect, device number 2
[   77.941003][ T4377] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[   77.949470][ T4377] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[   77.952115][ T4377] keyspan 1-1:0.11: device disconnected
[   78.865521][ T5267] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.866967][ T5267] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.898444][ T5270] device bridge_slave_1 left promiscuous mode
[   78.903332][ T5270] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.958096][ T5270] device bridge_slave_0 left promiscuous mode
[   78.959317][ T5270] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.171011][ T5282] input: syz1 as /devices/virtual/input/input3
[   79.233291][   T11] device hsr_slave_0 left promiscuous mode
[   79.268065][   T11] device hsr_slave_1 left promiscuous mode
[   79.700931][ T5295] loop6: detected capacity change from 0 to 1024
[   79.706520][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.708437][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.710365][ T5295] EXT4-fs: Ignoring removed oldalloc option
[   79.716800][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.718497][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.719877][ T5295] ext4: Unknown parameter 'nouser_xattr'
[   79.720007][   T11] device bridge_slave_1 left promiscuous mode
[   79.721956][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.771621][   T11] device bridge_slave_0 left promiscuous mode
[   79.772929][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.898321][   T11] device veth1_macvtap left promiscuous mode
[   79.899477][   T11] device veth0_macvtap left promiscuous mode
[   79.900623][   T11] device veth1_vlan left promiscuous mode
[   79.901601][   T11] device veth0_vlan left promiscuous mode
[   81.214053][ T5331] loop5: detected capacity change from 0 to 1024
[   81.215738][ T5331] EXT4-fs: Ignoring removed nomblk_io_submit option
[   81.217070][ T5331] EXT4-fs: Ignoring removed orlov option
[   81.246728][ T5196] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   81.264229][ T5331] loop5: detected capacity change from 0 to 1024
[   81.264362][ T5196] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   81.268728][ T5331] EXT4-fs: Ignoring removed i_version option
[   81.269916][ T5331] EXT4-fs: inline encryption not supported
[   81.273814][ T5331] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   81.305466][ T4599] Quota error (device loop5): do_check_range: Getting block 262149 out of range 1-5
[   81.308151][ T4599] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[   81.318001][ T4599] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz-executor: Failed to acquire dquot type 0
[   82.827913][   T11] team0 (unregistering): Port device team_slave_1 removed
[   82.998174][   T11] team0 (unregistering): Port device team_slave_0 removed
[   83.168570][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.381838][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   85.038778][   T11] bond0 (unregistering): Released all slaves
[   85.370006][ T5328] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.371430][ T5328] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.383670][ T5329] device bridge_slave_1 left promiscuous mode
[   85.384890][ T5329] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.434331][ T5329] device bridge_slave_0 left promiscuous mode
[   85.435472][ T5329] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.756194][ T5347] loop0: detected capacity change from 0 to 512
[   85.778645][ T5347] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.309: corrupted inode contents
[   85.781916][ T5347] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   85.783947][ T5347] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.309: corrupted inode contents
[   85.987231][ T4599] EXT4-fs (loop5): unmounting filesystem.
[   86.043615][ T5347] EXT4-fs error (device loop0): ext4_evict_inode:329: inode #15: comm syz.0.309: mark_inode_dirty error
[   86.110196][ T5347] EXT4-fs (loop0): 1 orphan inode deleted
[   86.111194][ T5347] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   86.173156][ T4330] EXT4-fs (loop0): unmounting filesystem.
[   86.307673][ T4338] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.311958][ T4338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.314656][ T4338] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.316345][ T4338] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.317835][ T4338] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   86.319793][ T4338] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.538076][ T5365] Invalid option length (57448) for dns_resolver key
[   87.182783][ T5371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.317'.
[   87.184492][ T5371] netem: invalid attributes len -7
[   87.232909][ T5375] loop0: detected capacity change from 0 to 128
[   88.017592][ T5382] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.019033][ T5382] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.039271][ T5382] device bridge_slave_1 left promiscuous mode
[   88.040996][ T5382] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.099471][ T5382] device bridge_slave_0 left promiscuous mode
[   88.101854][ T5382] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.532725][ T4343] Bluetooth: hci1: command 0x0409 tx timeout
[   88.961003][ T5358] chnl_net:caif_netlink_parms(): no params data found
[   89.066987][ T5358] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.068369][ T5358] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.070025][ T5358] device bridge_slave_0 entered promiscuous mode
[   89.075093][ T5358] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.076648][ T5358] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.079943][ T5358] device bridge_slave_1 entered promiscuous mode
[   89.165731][ T5425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.168153][ T5425] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.411150][   T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.416083][ T5358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.423554][ T5358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.434013][ T5358] team0: Port device team_slave_0 added
[   89.436953][ T5358] team0: Port device team_slave_1 added
[   89.448475][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.449685][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.454260][ T5358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.456891][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.458241][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.467871][ T5358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.516735][   T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.580865][ T5358] device hsr_slave_0 entered promiscuous mode
[   89.622324][ T5358] device hsr_slave_1 entered promiscuous mode
[   89.664858][ T5358] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.666933][ T5358] Cannot create hsr debugfs directory
[   89.709605][   T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.826507][   T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.837136][ T5451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.347'.
[   89.839812][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'.
[   89.841440][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'.
[   89.854224][ T5358] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   90.285989][ T5358] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   90.307815][ T5358] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   90.724542][ T5460] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   90.725958][ T5460] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   90.754328][ T5463] loop6: detected capacity change from 0 to 2048
[   90.763790][ T5463] EXT4-fs: Ignoring removed mblk_io_submit option
[   90.765577][ T4343] Bluetooth: hci1: command 0x041b tx timeout
[   90.772021][ T5463] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   90.776332][ T5460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.778765][ T5358] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   90.836289][ T5463] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   90.916569][ T4614] EXT4-fs (loop6): unmounting filesystem.
[   90.980366][ T5482] netlink: 20 bytes leftover after parsing attributes in process `syz.6.357'.
[   90.982394][ T5358] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.027495][ T5358] 8021q: adding VLAN 0 to HW filter on device team0
[   91.036101][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   91.037828][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   91.059236][  T232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   91.066039][  T232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   91.068256][ T5487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.359'.
[   91.073539][  T232] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.074764][  T232] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.116551][  T232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   91.118771][  T232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   91.120472][  T232] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.121592][  T232] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.123166][  T232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   91.124897][  T232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   91.316771][  T232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   91.318473][  T232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   91.322944][  T232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   91.324716][  T232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   91.338727][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   91.340714][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   91.342403][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   91.351393][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   91.410394][ T5358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   91.413108][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   91.414708][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   91.416491][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   91.579027][ T5509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.581580][ T5509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.585282][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   91.587040][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   91.590567][ T5358] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.224705][  T232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   92.226529][  T232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   92.234744][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   92.236413][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   92.238055][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   92.239763][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   92.244019][ T5358] device veth0_vlan entered promiscuous mode
[   92.248779][ T5358] device veth1_vlan entered promiscuous mode
[   92.260685][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   92.262718][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   92.264282][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   92.265943][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   92.318652][ T5358] device veth0_macvtap entered promiscuous mode
[   92.321795][ T5358] device veth1_macvtap entered promiscuous mode
[   92.331201][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.333170][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.334854][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.337576][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.339251][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.340986][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.342638][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.344320][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.345811][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.351678][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.354326][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.355758][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   92.357216][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   92.360751][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   92.362776][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   92.427103][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.428966][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.430572][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.432240][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.437282][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.439179][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.441188][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.443025][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.446654][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.448653][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.451190][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.452921][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   92.455200][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   92.568898][ T5528] loop6: detected capacity change from 0 to 256
[   92.605980][ T5358] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.608539][ T5358] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.610167][ T5358] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.611487][ T5358] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.693269][   T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.694569][   T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.702730][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'.
[   92.705088][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   92.988379][ T4338] Bluetooth: hci1: command 0x040f tx timeout
[   93.620103][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.625887][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.627580][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   94.177714][ T5577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.390'.
[   94.392818][ T5589] loop7: detected capacity change from 0 to 2048
[   94.396025][   T11] device hsr_slave_0 left promiscuous mode
[   94.405408][ T5589] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   94.445306][   T11] device hsr_slave_1 left promiscuous mode
[   94.582506][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.584810][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.590402][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.595459][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.072321][   T11] device veth1_macvtap left promiscuous mode
[   95.074161][   T11] device veth0_macvtap left promiscuous mode
[   95.075397][   T11] device veth1_vlan left promiscuous mode
[   95.076558][   T11] device veth0_vlan left promiscuous mode
[   95.388953][ T4343] Bluetooth: hci1: command 0x0419 tx timeout
[   95.507973][ T5611] netlink: 4 bytes leftover after parsing attributes in process `syz.7.402'.
[   96.183386][ T5630] loop7: detected capacity change from 0 to 512
[   96.276799][ T5630] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   96.286997][ T5630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.292075][ T5630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.333481][ T5630] EXT4-fs error (device loop7): ext4_lookup:1858: inode #12: comm syz.7.408: iget: bad i_size value: 2533274857506816
[   96.351587][ T4339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   96.370808][ T4339] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   96.430630][ T5630] EXT4-fs error (device loop7): ext4_lookup:1858: inode #12: comm syz.7.408: iget: bad i_size value: 2533274857506816
[   96.864437][ T5647] binder: BINDER_SET_CONTEXT_MGR already set
[   96.866498][ T5647] binder: 5646:5647 ioctl 4018620d 20004a80 returned -16
[   98.431350][   T11] team0 (unregistering): Port device team_slave_1 removed
[   98.610646][   T11] team0 (unregistering): Port device team_slave_0 removed
[   98.780995][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.005417][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.375700][ T5358] EXT4-fs (loop7): unmounting filesystem.
[   99.451559][ T5677] netlink: 24 bytes leftover after parsing attributes in process `syz.7.427'.
[  100.694000][   T11] bond0 (unregistering): Released all slaves
[  100.823149][ T5683] loop7: detected capacity change from 0 to 2048
[  100.830039][ T5668] device bridge_slave_0 entered promiscuous mode
[  100.831870][ T5668] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  100.834585][ T5672] netlink: 'syz.2.425': attribute type 4 has an invalid length.
[  100.856381][ T5683] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  101.542644][ T5707] loop7: detected capacity change from 0 to 8
[  101.566419][ T5707] SQUASHFS error: Failed to read block 0x71e: -5
[  101.575219][ T5707] SQUASHFS error: Unable to read metadata cache entry [71c]
[  101.585678][ T5707] SQUASHFS error: Unable to read inode 0x11f
[  102.069304][ T5721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.087040][ T5721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.457625][ T5735] input: syz1 as /devices/virtual/input/input4
[  102.584433][   T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  102.843157][   T14] usb 1-1: unable to get BOS descriptor or descriptor too short
[  102.845467][ T4406] kernel write not supported for file /137/loginuid (pid: 4406 comm: kworker/1:9)
[  102.845623][   T14] usb 1-1: config 63 has an invalid interface number: 66 but max is 0
[  102.848835][   T14] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  102.850548][   T14] usb 1-1: config 63 has no interface number 0
[  102.863906][   T14] usb 1-1: config 63 interface 66 has no altsetting 0
[  102.868675][   T14] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  102.870089][   T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.871609][   T14] usb 1-1: Product: syz
[  102.872331][   T14] usb 1-1: Manufacturer: syz
[  102.882394][   T14] usb 1-1: SerialNumber: syz
[  102.892767][ T5743] loop6: detected capacity change from 0 to 8
[  102.914058][ T5743] SQUASHFS error: Failed to read block 0x6e6: -5
[  102.915195][ T5743] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  102.927757][ T5743] SQUASHFS error: Unable to read directory block [631:26]
[  103.119127][   T14] usb 1-1: Found UVC 0.07 device syz (174f:8acf)
[  103.120365][   T14] usb 1-1: No valid video chain found.
[  103.125119][   T14] usb 1-1: USB disconnect, device number 3
[  103.961527][ T5763] loop7: detected capacity change from 0 to 16
[  103.984585][ T5763] erofs: (device loop7): mounted with root inode @ nid 36.
[  104.015223][ T5763] syz.7.461: attempt to access beyond end of device
[  104.015223][ T5763] loop7: rw=524288, sector=88, nr_sectors = 48 limit=16
[  104.020734][ T5763] syz.7.461: attempt to access beyond end of device
[  104.020734][ T5763] loop7: rw=524288, sector=8, nr_sectors = 80 limit=16
[  104.023653][ T5763] syz.7.461: attempt to access beyond end of device
[  104.023653][ T5763] loop7: rw=0, sector=8, nr_sectors = 16 limit=16
[  104.026068][ T5763] syz.7.461: attempt to access beyond end of device
[  104.026068][ T5763] loop7: rw=0, sector=8, nr_sectors = 16 limit=16
[  104.131929][ T5771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.133617][ T5771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.151955][ T5773] loop6: detected capacity change from 0 to 2048
[  104.171376][ T5773] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  104.419356][ T5787] loop6: detected capacity change from 0 to 4096
[  104.480939][ T5787] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  104.526758][ T5791] netlink: 64 bytes leftover after parsing attributes in process `syz.3.471'.
[  104.534792][ T4614] EXT4-fs (loop6): unmounting filesystem.
[  104.692110][ T5804] loop6: detected capacity change from 0 to 512
[  104.724525][ T5804] syz.6.477: attempt to access beyond end of device
[  104.724525][ T5804] loop6: rw=0, sector=1022032, nr_sectors = 8 limit=512
[  104.761013][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  104.818244][ T5804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.822829][ T5809] device syzkaller0 entered promiscuous mode
[  105.034742][ T5817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.037381][ T5817] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.674067][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.676211][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.699454][ T5831] device bridge_slave_1 left promiscuous mode
[  105.700646][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.750773][ T5831] device bridge_slave_0 left promiscuous mode
[  105.751888][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.977168][ T5840] device syzkaller0 entered promiscuous mode
[  106.331081][ T5863] loop7: detected capacity change from 0 to 4096
[  106.371235][ T5863] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  106.415983][ T5358] EXT4-fs (loop7): unmounting filesystem.
[  107.168571][ T4338] Bluetooth: hci1: command 0x0405 tx timeout
[  107.358022][ T5883] device syzkaller0 entered promiscuous mode
[  107.410590][ T5885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.413862][ T5885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.543570][ T5892] loop6: detected capacity change from 0 to 512
[  107.551814][ T5892] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.508: inode has both inline data and extents flags
[  107.554936][ T5892] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.508: couldn't read orphan inode 15 (err -117)
[  107.557008][ T5892] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  107.636715][ T5901] binder: 5899:5901 IncRefs 0 refcount change on invalid ref 0 ret -22
[  108.230338][ T5916] loop7: detected capacity change from 0 to 256
[  108.231921][ T5916] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  108.235389][ T5916] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  108.552807][ T4614] EXT4-fs (loop6): unmounting filesystem.
[  109.033224][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.520'.
[  109.034959][ T5929] netlink: 'syz.2.520': attribute type 2 has an invalid length.
[  109.090809][ T5931] device syzkaller0 entered promiscuous mode
[  111.508609][ T5997] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928
[  111.509873][ T5997] binder: 5995:5997 ioctl 4018620d 20000100 returned -1
[  111.513500][ T5997] binder: 5995:5997 IncRefs 0 refcount change on invalid ref 0 ret -22
[  111.518172][ T5997] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928
[  111.519452][ T5997] binder: 5995:5997 ioctl 4018620d 20004a80 returned -1
[  111.522988][ T5997] binder: 5995:5997 Acquire 1 refcount change on invalid ref 0 ret -22
[  111.525061][ T5997] binder: 5995:5997 got transaction to invalid handle, 1
[  111.529561][ T5997] binder: 5997:5995 cannot find target node
[  111.531776][ T5997] binder: 5995:5997 transaction call to 0:0 failed 71/29201/-22, size 72-24 line 3045
[  111.534176][ T4376] binder: undelivered TRANSACTION_ERROR: 29201
[  111.601599][ T6002] device syzkaller0 entered promiscuous mode
[  112.080700][   T27] audit: type=1326 audit(109.788:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.2.554" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb63789e8 code=0x0
[  112.193052][ T6017] loop6: detected capacity change from 0 to 4096
[  112.212023][ T6017] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  112.250194][ T4614] EXT4-fs (loop6): unmounting filesystem.
[  112.551541][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.557'.
[  112.627210][ T6045] binder: 6044:6045 tried to acquire reference to desc 0, got 1 instead
[  112.628839][ T6045] binder: tried to use weak ref as strong ref
[  112.630172][ T6045] binder: 6044:6045 got transaction with invalid handle, 0
[  112.631436][ T6045] binder: 6045:6044 translate handle failed
[  112.640356][ T6045] binder: 6044:6045 transaction call to 6044:0 failed 76/29201/-22, size 72-24 line 3393
[  112.642552][   T14] binder: undelivered TRANSACTION_ERROR: 29201
[  112.965155][ T6065] netlink: 164 bytes leftover after parsing attributes in process `syz.3.569'.
[  113.191710][ T6085] loop6: detected capacity change from 0 to 2048
[  113.194437][ T6085] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  113.201091][ T6085] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  113.203164][ T6085] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  113.204401][ T6085] UDF-fs: Scanning with blocksize 512 failed
[  113.208815][ T6085] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.348503][ T6093] loop6: detected capacity change from 0 to 1024
[  113.362415][ T6093] EXT4-fs: inline encryption not supported
[  113.366696][ T6093] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  113.372355][ T6093] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block
[  113.372355][ T6093] 
[  113.486740][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  113.524387][ T6099] loop6: detected capacity change from 0 to 128
[  113.526155][ T6097] loop7: detected capacity change from 0 to 4096
[  113.538393][ T6097] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  113.610550][ T6097] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.584: No space for directory leaf checksum. Please run e2fsck -D.
[  113.615897][ T6097] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #2: comm syz.7.584: checksumming directory block 0
[  113.617828][ T6105] loop6: detected capacity change from 0 to 256
[  113.621954][ T6097] EXT4-fs (loop7): unmounting filesystem.
[  113.626954][ T6105] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  113.686139][ T6107] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  113.832202][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.833893][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.420379][ T6190] loop6: detected capacity change from 0 to 1024
[  114.428111][ T6190] EXT4-fs: quotafile must be on filesystem root
[  114.696372][ T6213] device syzkaller0 entered promiscuous mode
[  115.420744][ T6240] loop6: detected capacity change from 0 to 128
[  115.431214][ T6240] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  115.456795][ T4614] EXT4-fs (loop6): unmounting filesystem.
[  115.462311][ T4376] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  115.595145][ T6256] loop6: detected capacity change from 0 to 1024
[  115.611803][ T6256] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  115.618326][ T6256] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  115.636730][ T4614] EXT4-fs (loop6): unmounting filesystem.
[  115.727619][ T4376] usb 1-1: unable to get BOS descriptor or descriptor too short
[  115.730747][ T4376] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1023
[  115.732448][ T4376] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  115.736330][ T4376] usb 1-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice= 0.40
[  115.737917][ T4376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.739432][ T4376] usb 1-1: Product: syz
[  115.740083][ T4376] usb 1-1: Manufacturer: syz
[  115.740800][ T4376] usb 1-1: SerialNumber: syz
[  115.747458][ T6236] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  115.993224][ T4376] usb 1-1: USB disconnect, device number 4
[  116.012096][ T6283] udevd[6283]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  116.610238][ T6298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.612597][ T6298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.618812][ T6298] netlink: 20 bytes leftover after parsing attributes in process `syz.6.643'.
[  117.448688][    T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  117.665859][    T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  117.667637][    T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  117.669360][    T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  117.699547][    T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  117.701300][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  117.703962][    T7] usb 1-1: Product: syz
[  117.704653][    T7] usb 1-1: Manufacturer: syz
[  117.708464][    T7] usb 1-1: SerialNumber: syz
[  118.096095][ T6361] fuse: Bad value for 'fd'
[  118.096940][    T7] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  118.104322][    T7] usb 1-1: USB disconnect, device number 5
[  118.110074][    T7] usblp0: removed
[  118.446907][ T6385] loop6: detected capacity change from 0 to 8
[  118.457046][ T6385] SQUASHFS error: Failed to read block 0x2d7: -5
[  118.458238][ T6385] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  118.804986][ T6399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.330043][ T6407] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928
[  119.332034][ T6407] binder: 6406:6407 ioctl 4018620d 20000100 returned -1
[  119.665104][ T6407] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928
[  119.667230][ T6407] binder: 6406:6407 ioctl 4018620d 20004a80 returned -1
[  119.668686][ T6407] binder: 6406:6407 Acquire 1 refcount change on invalid ref 0 ret -22
[  119.670250][ T6407] binder: 6406:6407 got transaction to invalid handle, 1
[  119.671838][ T6407] binder: 6407:6406 cannot find target node
[  119.673977][ T6407] binder: 6406:6407 transaction call to 0:0 failed 79/29201/-22, size 72-24 line 3045
[  119.676823][   T14] binder: undelivered TRANSACTION_ERROR: 29201
[  120.846153][ T6439] loop6: detected capacity change from 0 to 512
[  120.872517][ T6439] EXT4-fs (loop6): orphan cleanup on readonly fs
[  120.878334][ T6439] EXT4-fs warning (device loop6): ext4_xattr_inode_get:492: inode #11: comm syz.6.699: ea_inode file size=4 entry size=6
[  120.885820][ T6439] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  120.890432][ T6439] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.699: corrupted inode contents
[  120.896105][ T6439] EXT4-fs (loop6): Remounting filesystem read-only
[  120.897236][ T6439] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #15: comm syz.6.699: mark_inode_dirty error
[  120.902861][ T6439] EXT4-fs (loop6): Remounting filesystem read-only
[  120.906267][ T6439] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.699: corrupted inode contents
[  120.914298][ T6439] EXT4-fs (loop6): Remounting filesystem read-only
[  120.915866][ T6439] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2945: inode #15: comm syz.6.699: mark_inode_dirty error
[  120.921289][ T6439] EXT4-fs (loop6): Remounting filesystem read-only
[  120.925853][ T6439] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2948: inode #15: comm syz.6.699: mark inode dirty (error -117)
[  120.928375][ T6439] EXT4-fs (loop6): Remounting filesystem read-only
[  120.931583][ T6439] EXT4-fs warning (device loop6): ext4_evict_inode:301: xattr delete (err -117)
[  120.936253][ T6439] EXT4-fs (loop6): 1 orphan inode deleted
[  120.937981][ T6439] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  121.757572][ T4614] EXT4-fs (loop6): unmounting filesystem.
[  121.941719][ T6476] loop6: detected capacity change from 0 to 8
[  121.966620][ T6476] SQUASHFS error: Failed to read block 0x71e: -5
[  121.967890][ T6476] SQUASHFS error: Unable to read metadata cache entry [71c]
[  121.969951][ T6476] SQUASHFS error: Unable to read inode 0x11f
[  123.151453][ T6505] 9pnet_fd: Insufficient options for proto=fd
[  123.210122][ T6526] binder: 6523:6526 IncRefs 0 refcount change on invalid ref 0 ret -22
[  123.355811][ T6547] netlink: 20 bytes leftover after parsing attributes in process `syz.7.742'.
[  123.359396][ T6547] netlink: 20 bytes leftover after parsing attributes in process `syz.7.742'.
[  124.099516][ T6566] loop6: detected capacity change from 0 to 512
[  124.104546][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'.
[  124.108691][ T6566] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  124.138945][ T6566] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  124.175445][ T6566] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz.6.750: invalid size
[  124.246100][ T4614] EXT4-fs (loop6): unmounting filesystem.
[  124.271039][ T6581] binder: 6580:6581 ioctl 4018620d 0 returned -22
[  124.272534][ T6581] binder: 6580:6581 IncRefs 0 refcount change on invalid ref 0 ret -22
[  124.275272][ T6581] binder: 6580:6581 got transaction to invalid handle, 1
[  124.276468][ T6581] binder: 6581:6580 cannot find target node
[  124.279091][ T6581] binder: 6580:6581 transaction call to 0:0 failed 83/29201/-22, size 72-24 line 3045
[  124.286602][   T14] binder: undelivered TRANSACTION_ERROR: 29201
[  126.168334][    C1] sched: RT throttling activated
[  126.363068][ T4406] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  126.366252][ T6607] loop6: detected capacity change from 0 to 8
[  126.387189][ T6607] SQUASHFS error: Failed to read block 0x71e: -5
[  126.388225][ T6607] SQUASHFS error: Unable to read metadata cache entry [71c]
[  126.389603][ T6607] SQUASHFS error: Unable to read inode 0x11f
[  126.590166][ T4406] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  126.591970][ T4406] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  126.815836][ T4406] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  126.817513][ T4406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  126.818842][ T4406] usb 1-1: Product: syz
[  126.819486][ T4406] usb 1-1: Manufacturer: syz
[  126.820439][ T4406] usb 1-1: SerialNumber: syz
[  127.406291][ T6642] netlink: 56 bytes leftover after parsing attributes in process `syz.3.781'.
[  127.453070][ T6644] netlink: 'syz.6.782': attribute type 7 has an invalid length.
[  127.453714][ T6648] binder: Unknown parameter 'seclabel'
[  127.454551][ T6644] netlink: 'syz.6.782': attribute type 5 has an invalid length.
[  127.456718][ T6644] netlink: 17 bytes leftover after parsing attributes in process `syz.6.782'.
[  128.410242][ T6671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.412345][ T6671] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.834106][   T22] usb 1-1: USB disconnect, device number 6
[  128.938178][ T6676] binder: BINDER_SET_CONTEXT_MGR already set
[  128.939454][ T6676] binder: 6675:6676 ioctl 4018620d 20004a80 returned -16
[  128.994387][ T6681] loop6: detected capacity change from 0 to 1024
[  129.036701][ T6681] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  129.102000][ T6681] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.798: bg 0: block 385: padding at end of block bitmap is not set
[  129.193249][ T4614] EXT4-fs (loop6): unmounting filesystem.
[  129.200266][ T6699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.806'.
[  129.557030][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  129.558034][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  129.679152][ T6701] device wlan0 entered promiscuous mode
[  129.685664][ T6701] netlink: 16 bytes leftover after parsing attributes in process `syz.6.805'.
[  129.688332][ T6701] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  129.860704][ T6723] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  129.936176][ T6734] netlink: 138 bytes leftover after parsing attributes in process `syz.2.820'.
[  130.536777][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.538509][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.226444][ T6801] loop6: detected capacity change from 0 to 1024
[  131.541793][ T6801] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  131.558454][ T4614] EXT4-fs (loop6): unmounting filesystem.
[  132.273208][ T6813] netlink: 'syz.6.853': attribute type 16 has an invalid length.
[  132.274596][ T6813] netlink: 'syz.6.853': attribute type 17 has an invalid length.
[  132.295583][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  132.301627][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  132.307817][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  132.768480][ T6813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.823947][ T6832] loop6: detected capacity change from 0 to 256
[  132.828052][ T6832] exfat: Deprecated parameter 'utf8'
[  132.829803][ T6832] exfat: Deprecated parameter 'utf8'
[  132.859676][ T6832] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  132.883727][ T6824] xt_CT: No such helper "snmp_trap"
[  133.022694][ T6856] loop6: detected capacity change from 0 to 128
[  133.035037][ T6856] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  133.043609][ T5351] udevd[5351]: incorrect ext4 checksum on /dev/loop6
[  134.832634][ T6909] 9p: Unknown access argument : -22
[  140.512051][ T6994] syz.6.910 uses obsolete (PF_INET,SOCK_PACKET)
[  141.000726][ T4374] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  141.057671][ T7010] loop6: detected capacity change from 0 to 1024
[  141.061267][ T7010] EXT4-fs: Ignoring removed oldalloc option
[  141.064234][ T7010] EXT4-fs: Ignoring removed bh option
[  141.070172][ T7010] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  141.074268][ T7010] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block
[  141.074268][ T7010] 
[  141.217903][ T4374] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  141.219849][ T4374] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  141.221463][ T4374] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  141.225446][ T4374] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  141.227086][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  141.228467][ T4374] usb 1-1: Product: syz
[  141.229184][ T4374] usb 1-1: Manufacturer: syz
[  141.229963][ T4374] usb 1-1: SerialNumber: syz
[  141.451675][ T4374] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  141.456990][ T4374] usb 1-1: USB disconnect, device number 7
[  141.461653][ T4374] usblp0: removed
[  143.450939][ T7045] overlayfs: failed to clone upperpath
[  143.884613][ T7063] netlink: 'syz.0.931': attribute type 7 has an invalid length.
[  143.886251][ T7063] netlink: 'syz.0.931': attribute type 5 has an invalid length.
[  143.891879][ T7063] netlink: 17 bytes leftover after parsing attributes in process `syz.0.931'.
[  143.904137][ T7070] netlink: 24 bytes leftover after parsing attributes in process `syz.7.934'.
[  143.912277][ T7069] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  143.914923][ T7070] netlink: 67 bytes leftover after parsing attributes in process `syz.7.934'.
[  143.930683][   T27] audit: type=1326 audit(139.594:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.0.935" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb35789e8 code=0x7ffc0000
[  143.936661][   T27] audit: type=1326 audit(139.594:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.0.935" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb35789e8 code=0x7ffc0000
[  143.945407][   T27] audit: type=1326 audit(139.603:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.0.935" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb35789e8 code=0x7ffc0000
[  143.965584][   T27] audit: type=1326 audit(139.603:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.0.935" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb357a9d8 code=0x7ffc0000
[  143.991360][   T27] audit: type=1326 audit(139.603:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.0.935" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffb355b8ac code=0x7ffc0000
[  144.002161][   T27] audit: type=1326 audit(139.603:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.0.935" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffffb355b8ac code=0x7ffc0000
[  144.014725][   T27] audit: type=1326 audit(139.603:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.0.935" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffffb355b8ac code=0x7ffc0000
[  144.018599][   T27] audit: type=1326 audit(139.603:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.0.935" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffb355b8ac code=0x7ffc0000
[  144.024214][ T7069] Zero length message leads to an empty skb
[  144.027117][   T27] audit: type=1326 audit(139.603:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.0.935" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb35789e8 code=0x7ffc0000
[  144.905288][ T7098] overlayfs: failed to resolve './file0': -2
[  145.549617][ T7114] xt_policy: neither incoming nor outgoing policy selected
[  147.253536][ T7107] device syzkaller0 entered promiscuous mode
[  147.316220][ T7097] loop6: detected capacity change from 0 to 40427
[  147.354847][ T7097] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  147.356282][ T7097] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  147.436986][ T7097] F2FS-fs (loop6): invalid crc value
[  147.474536][ T7097] F2FS-fs (loop6): Found nat_bits in checkpoint
[  147.503055][ T7097] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  147.504543][ T7097] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  147.568795][   T55] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  147.571747][   T55] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  148.112399][ T7152] binder: 7151:7152 ioctl 4018620d 0 returned -22
[  148.115960][ T7152] binder: tried to use weak ref as strong ref
[  148.116928][ T7152] binder: 7151:7152 Acquire 1 refcount change on invalid ref 0 ret -22
[  148.195716][ T7152] binder: 7151:7152 got transaction to invalid handle, 1
[  148.201941][ T7152] binder: 7152:7151 cannot find target node
[  148.202899][ T7152] binder: 7151:7152 transaction call to 0:0 failed 87/29201/-22, size 72-24 line 3045
[  148.209356][ T4376] binder: undelivered TRANSACTION_ERROR: 29201
[  151.720546][   T27] audit: type=1326 audit(146.883:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.7.985" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabf789e8 code=0x7ffc0000
[  151.724960][   T27] audit: type=1326 audit(146.883:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.7.985" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabf789e8 code=0x7ffc0000
[  151.729177][   T27] audit: type=1326 audit(146.883:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.7.985" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffabf789e8 code=0x7ffc0000
[  151.746287][   T27] audit: type=1326 audit(146.883:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.7.985" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabf789e8 code=0x7ffc0000
[  151.750162][   T27] audit: type=1326 audit(146.883:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.7.985" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabf789e8 code=0x7ffc0000
[  151.754292][   T27] audit: type=1326 audit(146.883:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.7.985" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=233 compat=0 ip=0xffffabf789e8 code=0x7ffc0000
[  151.758567][   T27] audit: type=1326 audit(146.883:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.7.985" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabf789e8 code=0x7ffc0000
[  151.770309][   T27] audit: type=1326 audit(146.883:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.7.985" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabf789e8 code=0x7ffc0000
[  151.777837][   T27] audit: type=1326 audit(146.883:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.7.985" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffabf789e8 code=0x7ffc0000
[  151.786021][   T27] audit: type=1326 audit(146.883:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.7.985" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabf789e8 code=0x7ffc0000
[  152.419129][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.7.988'.
[  152.742127][ T7244] device gretap0 entered promiscuous mode
[  153.572947][ T7258] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  153.677722][ T7265] loop6: detected capacity change from 0 to 512
[  153.681462][ T7265] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  153.709388][ T7265] EXT4-fs (loop6): 1 truncate cleaned up
[  153.710421][ T7265] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  154.023158][ T4614] EXT4-fs (loop6): unmounting filesystem.
[  154.075001][ T7274] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928
[  154.076187][ T7274] binder: 7273:7274 ioctl 4018620d 20000100 returned -1
[  154.084210][ T7274] binder: 7273:7274 IncRefs 0 refcount change on invalid ref 0 ret -22
[  154.088715][ T7274] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928
[  154.089808][ T7274] binder: 7273:7274 ioctl 4018620d 20004a80 returned -1
[  154.093334][ T7274] binder: 7273:7274 ioctl c0306201 0 returned -14
[  154.094581][ T7274] binder: 7273:7274 got transaction to invalid handle, 1
[  154.095844][ T7274] binder: 7274:7273 cannot find target node
[  154.096725][ T7274] binder: 7273:7274 transaction call to 0:0 failed 88/29201/-22, size 72-24 line 3045
[  154.098665][ T4374] binder: undelivered TRANSACTION_ERROR: 29201
[  159.224360][ T4336] Bluetooth: hci2: command 0x0406 tx timeout
[  159.225425][ T4336] Bluetooth: hci0: command 0x0406 tx timeout
[  159.226392][ T4336] Bluetooth: hci3: command 0x0406 tx timeout
[  160.770002][ T7397] xt_policy: neither incoming nor outgoing policy selected
[  163.783751][ T7454] device syzkaller0 entered promiscuous mode
[  163.801310][ T7456] loop6: detected capacity change from 0 to 512
[  163.814891][ T7456] EXT4-fs: Ignoring removed oldalloc option
[  163.854624][ T7456] EXT4-fs (loop6): 1 truncate cleaned up
[  163.855564][ T7456] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  163.910829][ T4614] EXT4-fs (loop6): unmounting filesystem.
[  164.136557][ T7479] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1074'.
[  164.140331][ T7479] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1074'.
[  165.736407][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.741808][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.746539][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.748976][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.390520][ T7550] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928
[  166.391997][ T7550] binder: 7548:7550 ioctl 4018620d 20000100 returned -1
[  166.393617][ T7550] binder: 7548:7550 IncRefs 0 refcount change on invalid ref 0 ret -22
[  166.396433][ T7550] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928
[  166.397795][ T7550] binder: 7548:7550 ioctl 4018620d 20004a80 returned -1
[  166.399166][ T7550] binder: 7548:7550 got transaction to invalid handle, 1
[  166.400513][ T7550] binder: 7550:7548 cannot find target node
[  166.402183][ T7550] binder: 7548:7550 transaction call to 0:0 failed 89/29201/-22, size 72-24 line 3045
[  166.404103][  T111] binder: undelivered TRANSACTION_ERROR: 29201
[  166.427205][ T7554] loop6: detected capacity change from 0 to 512
[  166.489203][ T7554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2803c1ac, mo2=0003]
[  166.493637][ T7554] System zones: 1-12
[  166.495076][ T7554] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.1102: inode #1: comm syz.6.1102: iget: illegal inode #
[  166.497801][ T7554] EXT4-fs (loop6): Remounting filesystem read-only
[  166.498914][ T7554] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1102: error while reading EA inode 1 err=-117
[  166.501235][ T7554] EXT4-fs (loop6): Remounting filesystem read-only
[  166.502550][ T7554] EXT4-fs (loop6): 1 orphan inode deleted
[  166.503629][ T7554] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  166.516464][ T4614] EXT4-fs (loop6): unmounting filesystem.
[  167.377729][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1105'.
[  169.493555][ T7603] loop6: detected capacity change from 0 to 256
[  169.501417][ T7603] exfat: Deprecated parameter 'utf8'
[  169.502421][ T7603] exfat: Deprecated parameter 'utf8'
[  169.508016][ T7603] exfat: Deprecated parameter 'namecase'
[  169.515493][ T7603] exFAT-fs (loop6): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1019abd0)
[  169.517325][ T7603] exFAT-fs (loop6): invalid boot region
[  169.518177][ T7603] exFAT-fs (loop6): failed to recognize exfat type
[  170.117404][ T4336] Bluetooth: hci4: command 0x0406 tx timeout
[  170.560358][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1126'.
[  170.665003][ T7637] ipt_CLUSTERIP: Please specify destination IP
[  171.097496][ T7638] binfmt_misc: register: failed to install interpreter file ./file0
[  171.575743][ T7655] binder: 7653:7655 ioctl c400941b 0 returned -22
[  171.577619][ T7655] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928
[  171.578707][ T7655] binder: 7653:7655 ioctl 40046207 0 returned -1
[  171.959704][ T7658] loop6: detected capacity change from 0 to 128
[  171.989288][ T7658] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  171.994288][ T7658] ext4 filesystem being mounted at /178/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  172.924807][ T4614] EXT4-fs (loop6): unmounting filesystem.
[  174.093453][ T7703] loop6: detected capacity change from 0 to 8192
[  174.119222][ T7703] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  174.128383][ T7703] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1151'.
[  178.157925][ T7781] 9pnet_fd: Insufficient options for proto=fd
[  178.456342][ T7804] device syzkaller0 entered promiscuous mode
[  181.002955][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.008005][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.018583][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.021443][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.285323][   T27] kauditd_printk_skb: 14 callbacks suppressed
[  182.285333][   T27] audit: type=1326 audit(2000000014.663:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.2.1199" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb63789e8 code=0x0
[  182.613697][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1206'.
[  183.941228][ T7899] overlayfs: failed to clone upperpath
[  186.936640][ T7933] loop6: detected capacity change from 0 to 131072
[  186.954370][ T7933] F2FS-fs (loop6): Test dummy encryption mode enabled
[  186.958365][ T7933] F2FS-fs (loop6): invalid crc value
[  186.977142][ T7933] F2FS-fs (loop6): Found nat_bits in checkpoint
[  187.025807][ T7933] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  187.782890][ T7959] 9p: Unknown access argument : -22
[  187.924092][ T7962] overlayfs: failed to clone upperpath
[  188.617825][   T22] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  188.875882][   T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  188.877598][   T22] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  188.879160][   T22] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  188.882492][   T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  188.884004][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  188.885796][   T22] usb 1-1: Product: syz
[  188.886537][   T22] usb 1-1: Manufacturer: syz
[  188.887274][   T22] usb 1-1: SerialNumber: syz
[  189.150387][   T22] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  190.548905][ T8027] loop6: detected capacity change from 0 to 128
[  190.570866][ T8027] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  190.573495][ T8027] ext4 filesystem being mounted at /203/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  191.600786][ T4386] usb 1-1: USB disconnect, device number 8
[  191.604013][ T4386] usblp0: removed
[  192.323747][ T4614] EXT4-fs (loop6): unmounting filesystem.
[  193.079304][   T27] audit: type=1326 audit(2000000024.705:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.0.1258" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb35789e8 code=0x7ffc0000
[  193.129838][   T27] audit: type=1326 audit(2000000024.705:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.0.1258" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb35789e8 code=0x7ffc0000
[  193.134301][   T27] audit: type=1326 audit(2000000024.705:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.0.1258" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffb35789e8 code=0x7ffc0000
[  193.144291][   T27] audit: type=1326 audit(2000000024.705:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.0.1258" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb35789e8 code=0x7ffc0000
[  193.156320][   T27] audit: type=1326 audit(2000000024.705:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.0.1258" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb35789e8 code=0x7ffc0000
[  193.163540][   T27] audit: type=1326 audit(2000000024.705:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.0.1258" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffb35789e8 code=0x7ffc0000
[  193.171410][   T27] audit: type=1326 audit(2000000024.705:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.0.1258" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb35789e8 code=0x7ffc0000
[  193.180040][   T27] audit: type=1326 audit(2000000024.705:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.0.1258" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb35789e8 code=0x7ffc0000
[  193.189894][   T27] audit: type=1326 audit(2000000024.705:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.0.1258" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb35789e8 code=0x7ffc0000
[  193.197479][   T27] audit: type=1326 audit(2000000024.705:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.0.1258" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb35789e8 code=0x7ffc0000
[  193.514675][ T8075] loop6: detected capacity change from 0 to 256
[  193.525649][ T8075] FAT-fs (loop6): Directory bread(block 64) failed
[  193.527107][ T8075] FAT-fs (loop6): Directory bread(block 65) failed
[  193.528462][ T8075] FAT-fs (loop6): Directory bread(block 66) failed
[  193.529571][ T8075] FAT-fs (loop6): Directory bread(block 67) failed
[  193.530762][ T8075] FAT-fs (loop6): Directory bread(block 68) failed
[  193.531930][ T8075] FAT-fs (loop6): Directory bread(block 69) failed
[  193.533147][ T8075] FAT-fs (loop6): Directory bread(block 70) failed
[  193.536336][ T8075] FAT-fs (loop6): Directory bread(block 71) failed
[  193.539832][ T8075] FAT-fs (loop6): Directory bread(block 72) failed
[  193.541085][ T8075] FAT-fs (loop6): Directory bread(block 73) failed
[  194.668822][ T8098] loop6: detected capacity change from 0 to 8
[  194.690717][ T8098] SQUASHFS error: Failed to read block 0x71e: -5
[  194.691782][ T8098] SQUASHFS error: Unable to read metadata cache entry [71c]
[  194.692934][ T8098] SQUASHFS error: Unable to read inode 0x11f
[  194.716125][ T4333] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  194.994561][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  194.995732][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  195.546246][ T4333] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  195.548184][ T4333] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  195.550320][ T4333] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  195.557437][ T4333] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  195.560389][ T4333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  195.563920][ T4333] usb 1-1: Product: syz
[  195.566252][ T4333] usb 1-1: Manufacturer: syz
[  195.567121][ T4333] usb 1-1: SerialNumber: syz
[  196.157420][ T4333] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  197.325811][   T22] usb 1-1: USB disconnect, device number 9
[  197.330107][   T22] usblp0: removed
[  197.848279][ T8168] devpts: called with bogus options
[  198.784231][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1302'.
[  198.797333][ T8182] bridge0: port 1(veth9) entered blocking state
[  198.798439][ T8182] bridge0: port 1(veth9) entered disabled state
[  198.799996][ T8182] device veth9 entered promiscuous mode
[  198.815423][ T8182] bridge0: port 2(veth0_to_bond) entered blocking state
[  198.816816][ T8182] bridge0: port 2(veth0_to_bond) entered disabled state
[  198.818572][ T8182] device veth0_to_bond entered promiscuous mode
[  198.820458][ T8182] bridge0: port 2(veth0_to_bond) entered blocking state
[  198.821699][ T8182] bridge0: port 2(veth0_to_bond) entered forwarding state
[  198.940922][   T22] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  199.398523][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.401588][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.404239][   T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  199.455216][   T22] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  199.467406][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.589652][   T22] usb 1-1: config 0 descriptor??
[  201.159976][ T8219] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  201.161849][ T8219] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  201.204650][   T22] usbhid 1-1:0.0: can't add hid device: -71
[  201.205723][   T22] usbhid: probe of 1-1:0.0 failed with error -71
[  201.209464][   T22] usb 1-1: USB disconnect, device number 10
[  201.358377][ T8226] loop6: detected capacity change from 0 to 4096
[  201.381326][ T8226] EXT4-fs: inline encryption not supported
[  201.435271][ T8226] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  201.443312][ T8226] EXT4-fs (loop6): Test dummy encryption mode enabled
[  201.639255][ T8226] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a85ec028, mo2=0003]
[  201.640773][ T8226] System zones: 0-5
[  201.642241][ T8226] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  202.260340][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1324'.
[  202.644840][ T4614] EXT4-fs (loop6): unmounting filesystem.
[  206.544047][ T8301] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928
[  206.545248][ T8301] binder: 8300:8301 ioctl 4018620d 20000180 returned -1
[  206.554451][ T8301] binder: 8300:8301 IncRefs 0 refcount change on invalid ref 0 ret -22
[  206.697063][ T8307] loop6: detected capacity change from 0 to 4096
[  206.701522][ T8307] EXT4-fs: Ignoring removed bh option
[  206.807979][ T8307] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  207.174057][ T4614] EXT4-fs (loop6): unmounting filesystem.
[  209.007651][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1352'.
[  209.009242][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1352'.
[  209.523789][ T8358] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  211.555969][ T8404] loop6: detected capacity change from 0 to 16
[  211.887997][ T8404] erofs: (device loop6): mounted with root inode @ nid 36.
[  214.049543][ T8441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1384'.
[  215.851987][ T8469] process 'syz.2.1395' launched '/dev/fd/3' with NULL argv: empty string added
[  215.932300][ T8476] loop6: detected capacity change from 0 to 1024
[  215.956707][ T8476] EXT4-fs: Ignoring removed oldalloc option
[  215.957827][ T8476] EXT4-fs: Ignoring removed bh option
[  215.975705][ T8476] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  215.980620][ T8476] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block
[  215.980620][ T8476] 
[  217.399444][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1411'.
[  217.542903][ T8530] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928
[  217.544370][ T8530] binder: 8529:8530 ioctl 4018620d 20000100 returned -1
[  217.549898][ T8530] binder: 8529:8530 IncRefs 0 refcount change on invalid ref 0 ret -22
[  217.552991][ T8530] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928
[  217.554503][ T8530] binder: 8529:8530 ioctl 4018620d 20004a80 returned -1
[  217.557584][ T8530] binder: 8529:8530 Acquire 1 refcount change on invalid ref 0 ret -22
[  217.565324][ T8530] binder: 8529:8530 got transaction to invalid handle, 1
[  217.568691][ T8530] binder: 8530:8529 cannot find target node
[  217.569911][ T8530] binder: 8529:8530 transaction call to 0:0 failed 90/29201/-22, size 0-24 line 3045
[  217.572619][    T7] binder: undelivered TRANSACTION_ERROR: 29201
[  217.816833][ T8533] loop6: detected capacity change from 0 to 40427
[  217.835861][ T8533] F2FS-fs (loop6): invalid crc value
[  217.890544][ T8533] F2FS-fs (loop6): Found nat_bits in checkpoint
[  217.902069][ T8533] F2FS-fs (loop6): Start checkpoint disabled!
[  217.908047][ T8533] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  218.998710][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  219.000908][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  219.005203][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  219.033304][ T4357] kworker/u4:5: attempt to access beyond end of device
[  219.033304][ T4357] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  219.083777][ T8541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  220.922707][ T8584] loop6: detected capacity change from 0 to 256
[  220.945314][ T8584] FAT-fs (loop6): Directory bread(block 64) failed
[  220.946500][ T8584] FAT-fs (loop6): Directory bread(block 65) failed
[  220.947717][ T8584] FAT-fs (loop6): Directory bread(block 66) failed
[  220.948784][ T8584] FAT-fs (loop6): Directory bread(block 67) failed
[  220.949953][ T8584] FAT-fs (loop6): Directory bread(block 68) failed
[  220.951183][ T8584] FAT-fs (loop6): Directory bread(block 69) failed
[  220.996570][ T8584] FAT-fs (loop6): Directory bread(block 70) failed
[  220.997731][ T8584] FAT-fs (loop6): Directory bread(block 71) failed
[  220.998877][ T8584] FAT-fs (loop6): Directory bread(block 72) failed
[  221.000004][ T8584] FAT-fs (loop6): Directory bread(block 73) failed
[  221.092348][ T8597] loop6: detected capacity change from 0 to 256
[  221.099090][ T8597] exfat: Deprecated parameter 'namecase'
[  221.112783][ T8597] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[  221.815491][ T8608] overlayfs: failed to clone upperpath
[  223.078425][ T8633] input: syz1 as /devices/virtual/input/input6
[  223.238549][ T8643] binder: 8642:8643 ioctl 4018620d 0 returned -22
[  223.243263][ T8643] binder: 8642:8643 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  223.245815][ T8643] binder: 8643 RLIMIT_NICE not set
[  223.297867][ T8650] binder: 8642:8650 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  223.300788][ T8650] binder: 8650 RLIMIT_NICE not set
[  227.282165][ T8708] loop6: detected capacity change from 0 to 4096
[  227.285272][ T8708] EXT4-fs: Ignoring removed orlov option
[  227.296656][ T8708] EXT4-fs (loop6): Test dummy encryption mode enabled
[  227.314430][ T8708] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  228.080021][ T4614] EXT4-fs (loop6): unmounting filesystem.
[  228.141535][ T8722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.148195][ T8722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.420231][ T8741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1484'.
[  234.097969][ T8834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1514'.
[  235.778805][ T8868] loop6: detected capacity change from 0 to 512
[  235.877413][ T8868] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  235.878967][ T8868] ext4 filesystem being mounted at /254/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.969304][ T4614] EXT4-fs (loop6): unmounting filesystem.
[  236.006048][ T8877] loop6: detected capacity change from 0 to 128
[  236.024132][ T8877] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  236.025696][ T8877] ext4 filesystem being mounted at /255/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  236.951193][ T4614] EXT4-fs (loop6): unmounting filesystem.
[  237.215835][ T8886] device batadv_slave_1 entered promiscuous mode
[  237.220837][ T8885] device batadv_slave_1 left promiscuous mode
[  238.889458][ T8927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1540'.
[  239.770164][ T8934] loop6: detected capacity change from 0 to 16
[  239.781001][ T8934] erofs: (device loop6): mounted with root inode @ nid 36.
[  239.786241][ T8934] syz.6.1542: attempt to access beyond end of device
[  239.786241][ T8934] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  239.788580][ T8934] syz.6.1542: attempt to access beyond end of device
[  239.788580][ T8934] loop6: rw=524288, sector=8, nr_sectors = 16 limit=16
[  239.793129][ T8934] ==================================================================
[  239.794501][ T8934] BUG: KASAN: slab-out-of-bounds in z_erofs_transform_plain+0x3a4/0x490
[  239.795814][ T8934] Read of size 4096 at addr ffff0000d5e77000 by task syz.6.1542/8934
[  239.797179][ T8934] 
[  239.797629][ T8934] CPU: 1 PID: 8934 Comm: syz.6.1542 Not tainted syzkaller #0
[  239.798928][ T8934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  239.800512][ T8934] Call trace:
[  239.801078][ T8934]  dump_backtrace+0x1c0/0x1ec
[  239.801870][ T8934]  show_stack+0x2c/0x3c
[  239.802545][ T8934]  __dump_stack+0x30/0x40
[  239.803277][ T8934]  dump_stack_lvl+0xf4/0x15c
[  239.804072][ T8934]  print_address_description+0x88/0x218
[  239.805110][ T8934]  print_report+0x50/0x68
[  239.805807][ T8934]  kasan_report+0xa8/0xfc
[  239.806507][ T8934]  kasan_check_range+0x258/0x290
[  239.807369][ T8934]  memcpy+0x48/0x90
[  239.808047][ T8934]  z_erofs_transform_plain+0x3a4/0x490
[  239.808958][ T8934]  z_erofs_decompress+0x9c/0xd4
[  239.809700][ T8934]  z_erofs_decompress_queue+0x100c/0x1b40
[  239.810595][ T8934]  z_erofs_runqueue+0x152c/0x16cc
[  239.811418][ T8934]  z_erofs_read_folio+0x2d8/0x5c8
[  239.812270][ T8934]  filemap_read_folio+0x134/0x384
[  239.813184][ T8934]  filemap_read+0x12cc/0x2104
[  239.814070][ T8934]  generic_file_read_iter+0xf8/0x5c4
[  239.815025][ T8934]  vfs_read+0x3d4/0x7f0
[  239.815802][ T8934]  ksys_read+0x12c/0x224
[  239.816588][ T8934]  __arm64_sys_read+0x7c/0x90
[  239.817374][ T8934]  invoke_syscall+0x98/0x2b4
[  239.818172][ T8934]  el0_svc_common+0x138/0x258
[  239.818877][ T8934]  do_el0_svc+0x58/0x130
[  239.819568][ T8934]  el0_svc+0x58/0x128
[  239.820178][ T8934]  el0t_64_sync_handler+0x84/0xf0
[  239.821006][ T8934]  el0t_64_sync+0x18c/0x190
[  239.821699][ T8934] 
[  239.822104][ T8934] Allocated by task 8919:
[  239.822810][ T8934]  kasan_set_track+0x4c/0x80
[  239.823510][ T8934]  kasan_save_alloc_info+0x24/0x30
[  239.824432][ T8934]  __kasan_slab_alloc+0x70/0x88
[  239.825265][ T8934]  slab_post_alloc_hook+0x74/0x430
[  239.826101][ T8934]  kmem_cache_alloc_node+0x250/0x33c
[  239.827011][ T8934]  __alloc_skb+0x128/0x714
[  239.827761][ T8934]  alloc_skb_with_frags+0xa0/0x54c
[  239.828627][ T8934]  sock_alloc_send_pskb+0x73c/0x850
[  239.829442][ T8934]  unix_dgram_sendmsg+0x41c/0x1268
[  239.830303][ T8934]  ____sys_sendmsg+0x5c8/0x938
[  239.831033][ T8934]  __sys_sendmmsg+0x344/0x834
[  239.831788][ T8934]  __arm64_sys_sendmmsg+0xa0/0xbc
[  239.832554][ T8934]  invoke_syscall+0x98/0x2b4
[  239.833263][ T8934]  el0_svc_common+0x138/0x258
[  239.834014][ T8934]  do_el0_svc+0x58/0x130
[  239.834659][ T8934]  el0_svc+0x58/0x128
[  239.835287][ T8934]  el0t_64_sync_handler+0x84/0xf0
[  239.836026][ T8934]  el0t_64_sync+0x18c/0x190
[  239.836798][ T8934] 
[  239.837189][ T8934] The buggy address belongs to the object at ffff0000d5e77000
[  239.837189][ T8934]  which belongs to the cache skbuff_head_cache of size 240
[  239.839380][ T8934] The buggy address is located 0 bytes inside of
[  239.839380][ T8934]  240-byte region [ffff0000d5e77000, ffff0000d5e770f0)
[  239.841474][ T8934] 
[  239.841852][ T8934] The buggy address belongs to the physical page:
[  239.842854][ T8934] page:00000000b84ed360 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115e77
[  239.844399][ T8934] memcg:ffff0000f4adf701
[  239.844972][ T8934] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff)
[  239.846255][ T8934] raw: 05ffc00000000200 0000000000000000 dead000000000122 ffff0000c0860180
[  239.847571][ T8934] raw: 0000000000000000 00000000000c000c 00000001ffffffff ffff0000f4adf701
[  239.848939][ T8934] page dumped because: kasan: bad access detected
[  239.849886][ T8934] 
[  239.850240][ T8934] Memory state around the buggy address:
[  239.851123][ T8934]  ffff0000d5e76f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  239.852276][ T8934]  ffff0000d5e77000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  239.853529][ T8934] >ffff0000d5e77080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc
[  239.854808][ T8934]                                                              ^
[  239.856028][ T8934]  ffff0000d5e77100: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00
[  239.857220][ T8934]  ffff0000d5e77180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  239.858474][ T8934] ==================================================================
[  239.870635][ T8934] Disabling lock debugging due to kernel taint
[  239.871821][ T8934] syz.6.1542: attempt to access beyond end of device
[  239.871821][ T8934] loop6: rw=0, sector=1056, nr_sectors = 8 limit=16