last executing test programs:

2m9.173570342s ago: executing program 0 (id=65):
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@x86={0x80, 0xe, 0x3, 0x0, 0x0, 0x8, 0x3d, 0x77, 0x7, 0xf, 0x1, 0x7, 0x0, 0x59, 0x5, 0x7f, 0xff, 0x3, 0x45, '\x00', 0xb, 0x4})
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

2m8.29325613s ago: executing program 0 (id=66):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_AIE_ON(r0, 0x7001)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x32, 0x33, 0x16, 0xa, 0x7, 0x100, 0x0, 0x44, 0xffffffffffffffff})

2m7.917640457s ago: executing program 0 (id=68):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)

2m6.922210936s ago: executing program 1 (id=70):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x210, 0x0, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x130, 0xa, 0xd0e0000, 0x130, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x4}}, @common=@unspec=@mac={{0x30}, {@random="16f9a936c886"}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)

2m6.797591988s ago: executing program 0 (id=72):
socketpair(0x25, 0xa, 0xc2, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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")
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x40201, 0x0)
connect$unix(r3, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setns(r1, 0x24020000)
syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58)

2m6.110762771s ago: executing program 1 (id=75):
getpid()
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x1e, 0x805, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10)
connect$tipc(r2, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10)
close(r2)

2m5.929333155s ago: executing program 1 (id=76):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000004c000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x2, {{0x2}, 0x3}}, 0x10, 0x0}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r7 = socket(0x10, 0x803, 0x0)
recvmmsg(r7, 0x0, 0x0, 0x42042000, 0x0)
socket$inet6(0xa, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c)

2m5.848870236s ago: executing program 0 (id=77):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$incfs(0xffffffffffffffff, 0x0, 0x80040, 0x130)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000002d40)="$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")
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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")
syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbc34caaaaaaaabb08004500003000f5000000019078ac1e0001ac1414aa03019078036100004500000009004000002f0009ac141410ac1414bb"], 0x0)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x3, 0x5001)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)
mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file0\x00', 0x8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
unshare(0x42000000)

2m4.969531703s ago: executing program 0 (id=80):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x2, 0x1)
syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80)
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0)

2m3.509918811s ago: executing program 32 (id=80):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x2, 0x1)
syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80)
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0)

2m2.123041638s ago: executing program 1 (id=86):
socketpair(0x25, 0xa, 0xc2, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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")
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x40201, 0x0)
connect$unix(r3, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setns(r1, 0x24020000)
syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58)

2m0.856857532s ago: executing program 1 (id=90):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(0x0, 0xc1)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x88}}, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={0x0, 0x80}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12)
sendfile(r0, r2, 0x0, 0x401)

1m59.43347322s ago: executing program 1 (id=91):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300))
setfsgid(0x0)
mount(0x0, 0x0, &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_pressure(r3, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write(r4, &(0x7f0000000000)="4d2e95a079d76acb4f95f7", 0xb)
r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r5}, 0x18)
r6 = syz_open_procfs(0x0, &(0x7f0000000300)='schedstat\x00')
pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg$inet(r7, &(0x7f00000065c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000006a40)=ANY=[], 0xc0}}], 0x1, 0x4000000)
sendmmsg$inet6(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11)
bind$packet(r1, &(0x7f00000001c0)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @random="cb9d6f0abd21"}, 0x14)

1m58.793075692s ago: executing program 33 (id=91):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300))
setfsgid(0x0)
mount(0x0, 0x0, &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_pressure(r3, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write(r4, &(0x7f0000000000)="4d2e95a079d76acb4f95f7", 0xb)
r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r5}, 0x18)
r6 = syz_open_procfs(0x0, &(0x7f0000000300)='schedstat\x00')
pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg$inet(r7, &(0x7f00000065c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000006a40)=ANY=[], 0xc0}}], 0x1, 0x4000000)
sendmmsg$inet6(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11)
bind$packet(r1, &(0x7f00000001c0)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @random="cb9d6f0abd21"}, 0x14)

1m34.474347411s ago: executing program 3 (id=127):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000000100)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setrlimit(0xf, &(0x7f0000000140)={0xfffbffffdfffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc)

1m34.254289985s ago: executing program 3 (id=128):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
socket$inet6(0xa, 0x2, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r2, &(0x7f00000002c0), 0x0}, 0x20)

1m32.132198576s ago: executing program 3 (id=132):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000f50000000004000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x5, 0x2003)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400), 0x45, 0x7bf, &(0x7f0000000e00)="$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")
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @remote}, 0x4, 0x3, 0x1, 0x4}}, 0x26)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x1000, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c1002, 0x0)
write(r7, &(0x7f0000000000)="c8b52a6f", 0x4)
sendfile(r7, r6, 0x0, 0x40001)

1m28.649604073s ago: executing program 3 (id=137):
socketpair(0x25, 0xa, 0xc2, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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")
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x40201, 0x0)
connect$unix(r3, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setns(r1, 0x24020000)
syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1m28.541067365s ago: executing program 2 (id=138):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0")
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x3f00, 0x0, &(0x7f0000000080)="c0"})

1m27.725448011s ago: executing program 2 (id=141):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070"], 0x40}}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
readlinkat(r5, &(0x7f0000000380)='./mnt\x00', &(0x7f0000000180)=""/1, 0x1)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {0x1}, 0xd})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x18}, 0x18)
sendto$inet6(r6, &(0x7f0000000640), 0x0, 0x20000045, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x2301)
read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024)

1m27.305408549s ago: executing program 3 (id=142):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x210, 0x0, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x130, 0xa, 0xd0e0000, 0x130, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x4}}, @common=@unspec=@mac={{0x30}, {@random="16f9a936c886"}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20)

1m26.093083012s ago: executing program 3 (id=144):
r0 = socket$inet6(0xa, 0x80003, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
sched_getattr(0x0, 0x0, 0x0, 0x0)
ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0)
ioctl$sock_bt_hci(r4, 0x400448c9, 0x0)
unshare(0x40020000)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xc8}}, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xc800)

1m25.350453096s ago: executing program 34 (id=144):
r0 = socket$inet6(0xa, 0x80003, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
sched_getattr(0x0, 0x0, 0x0, 0x0)
ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0)
ioctl$sock_bt_hci(r4, 0x400448c9, 0x0)
unshare(0x40020000)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xc8}}, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xc800)

1m24.066766691s ago: executing program 2 (id=149):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
syz_clone3(&(0x7f0000000380)={0x4104080, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0xfffffffffffffd6a, 0x0, 0x0}, 0x58)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x2}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
getpeername$inet6(r5, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="298cf162c482f8645c0135abbea8a1b1e93d948a96d5a1701bd6e5df2efc544b40ccd1e52881a7dfd2ceba4658249178a9a9c13d1020bdddf25460978da2dad2612ac3f45adf0474fffc81acae282072279b03c6c877e5643b1a9605a59255f3998e881fe74d5dd1e1772142c2849a9044a5", @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m22.57747492s ago: executing program 2 (id=151):
socketpair(0x25, 0xa, 0xc2, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$eJzs3M1vFOUfAPDv7G7hx2v3h/gCoqJoJL60tKBy8KKJiQdNTPSAx1oKQRZqaE2ENLYYghcTJeFuTLyY+Bd48kTUk4lXvBsSYriAelkz3dllu91tt91tt3U/n2To83Sf3ef7nZln55kZpgH0rYPpP0nEzoi4GRGDEZGrb7CtsqTt7t2ZGf/rzsx4EuXyu38m6dvi7p2Z8WrTJPu5o1IppB+Uu5JEsUm/UxcvnR0rlSYuZPXh6XMfDU9dvPTimXNjpydOT5wfPX782NGRV14efakreaYx3d3/6eSBfW++f+3t8RPXPvj5+0q85fL1G0cW5NEdAxExU1snjZ7pbmc9t6uunBR6GAgrsjUiCtneejMGI39ld+21wXjjs54GB6ypcrlcHm398lwZ+A9LotcRAL1RPdCn57/VpX4C8M/aTj967vZrlROgNO972VJ5pRCXszYDDee33XQwIk7M/f11ukTD9RQAgLXwYzr/eaHJ/K8Y8VBdu93ZvaFiRPw/IvZExAMRsTciHoxK24cj4pEV9n+wob54/pO7tbrM2pPO/17N7m0tnP/V7oIV81lt13z+A8mpM6WJI9k6ORwDW9P6SNNPTyLm0p+/fdmq//r5X7qk/VfnglkctwpbF77n5Nj0WMeJZ25fjthfaJZ/EoX7WcS+iNi/yj7OPPfdgYW/yddKy+e/hC7cZyp/E/FsZfvPRUP+VcnS9yeH/xeliSPD1b1isV9+vfpOq/47yr8L0u2/ven+X8u/mNTfr51a9BFbluvj6u+ftzynWe3+vyV5b0Hnn4xNT18YidiSvLX493UXuKv1avs0/8OHmo//PXF/TTwaEelO/FhEPB4RT2SxPxkRT0XEoSXy/+n1pz9cff5rK81/dkXbf+WF/NkbP7Tqv73tf6xamQ+qne+/dgPsZN0BAADAZpGLiJ2R5IZq5VxuaKjy/+X3xvZcaXJq+vlTkx+fP1l5RqAYA7nqla7BuuuhI9m14Wp9NKvPZvWj2XXj6/lt8/Wh8cnSyV4nD31uR4vxn/oj3+vogDXneS3oX8Y/9K/Vj3/fHLDZLTOKc+sVB7D+HMWhfzUb/7M9iANYf47/0L9q4/+rNhrXPe7V+PAmsPk4/kP/Mv6hL3XyXP+GKMS3EUu3STZKqCsqfNHJ2wvrEGHkNsaKWsfCaD6ih2EU2v2rFnGxPNtxp73+ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiOfwMAAP//Oyno9g==")
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x40201, 0x0)
connect$unix(r3, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setns(r1, 0x24020000)
syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1m21.497655661s ago: executing program 2 (id=153):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000}, 0x48)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, r3, 0x0, 0x4, 0x0)
syz_pidfd_open(r3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

1m20.116994647s ago: executing program 2 (id=156):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0)

1m19.619343587s ago: executing program 35 (id=156):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0)

1m17.015619307s ago: executing program 4 (id=160):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50)
futex(&(0x7f0000000000), 0x0, 0xfffffffe, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
mkdir(0x0, 0xc1)
sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r7, 0x0, 0x2, 0x0)
sendfile(r0, r2, 0x0, 0x401)

1m15.965707657s ago: executing program 4 (id=162):
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000a00)=""/4096, 0x1000)

1m15.939635297s ago: executing program 4 (id=163):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff"], 0x50}}, 0x0)
syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4a7c0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x801, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880e)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m15.2975323s ago: executing program 4 (id=165):
socketpair(0x25, 0xa, 0xc2, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$eJzs3M1vFOUfAPDv7G7hx2v3h/gCoqJoJL60tKBy8KKJiQdNTPSAx1oKQRZqaE2ENLYYghcTJeFuTLyY+Bd48kTUk4lXvBsSYriAelkz3dllu91tt91tt3U/n2To83Sf3ef7nZln55kZpgH0rYPpP0nEzoi4GRGDEZGrb7CtsqTt7t2ZGf/rzsx4EuXyu38m6dvi7p2Z8WrTJPu5o1IppB+Uu5JEsUm/UxcvnR0rlSYuZPXh6XMfDU9dvPTimXNjpydOT5wfPX782NGRV14efakreaYx3d3/6eSBfW++f+3t8RPXPvj5+0q85fL1G0cW5NEdAxExU1snjZ7pbmc9t6uunBR6GAgrsjUiCtneejMGI39ld+21wXjjs54GB6ypcrlcHm398lwZ+A9LotcRAL1RPdCn57/VpX4C8M/aTj967vZrlROgNO972VJ5pRCXszYDDee33XQwIk7M/f11ukTD9RQAgLXwYzr/eaHJ/K8Y8VBdu93ZvaFiRPw/IvZExAMRsTciHoxK24cj4pEV9n+wob54/pO7tbrM2pPO/17N7m0tnP/V7oIV81lt13z+A8mpM6WJI9k6ORwDW9P6SNNPTyLm0p+/fdmq//r5X7qk/VfnglkctwpbF77n5Nj0WMeJZ25fjthfaJZ/EoX7WcS+iNi/yj7OPPfdgYW/yddKy+e/hC7cZyp/E/FsZfvPRUP+VcnS9yeH/xeliSPD1b1isV9+vfpOq/47yr8L0u2/ven+X8u/mNTfr51a9BFbluvj6u+ftzynWe3+vyV5b0Hnn4xNT18YidiSvLX493UXuKv1avs0/8OHmo//PXF/TTwaEelO/FhEPB4RT2SxPxkRT0XEoSXy/+n1pz9cff5rK81/dkXbf+WF/NkbP7Tqv73tf6xamQ+qne+/dgPsZN0BAADAZpGLiJ2R5IZq5VxuaKjy/+X3xvZcaXJq+vlTkx+fP1l5RqAYA7nqla7BuuuhI9m14Wp9NKvPZvWj2XXj6/lt8/Wh8cnSyV4nD31uR4vxn/oj3+vogDXneS3oX8Y/9K/Vj3/fHLDZLTOKc+sVB7D+HMWhfzUb/7M9iANYf47/0L9q4/+rNhrXPe7V+PAmsPk4/kP/Mv6hL3XyXP+GKMS3EUu3STZKqCsqfNHJ2wvrEGHkNsaKWsfCaD6ih2EU2v2rFnGxPNtxp73+ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiOfwMAAP//Oyno9g==")
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x40201, 0x0)
connect$unix(r3, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setns(r1, 0x24020000)
syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1m14.22713053s ago: executing program 4 (id=166):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3}, 0xe)

1m12.373574936s ago: executing program 4 (id=168):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x5, 0x2, 0x7}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10)
r3 = socket$inet(0x2, 0x1, 0x0)
listen(r3, 0x0)

1m12.063192642s ago: executing program 36 (id=168):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x5, 0x2, 0x7}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10)
r3 = socket$inet(0x2, 0x1, 0x0)
listen(r3, 0x0)

1m10.695597068s ago: executing program 5 (id=170):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0))

1m10.578129661s ago: executing program 5 (id=171):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1b)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)

1m10.409625514s ago: executing program 5 (id=172):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="89d28c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94)
sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="020310", 0x3, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
truncate(&(0x7f0000002100)='./file1\x00', 0x63fc)
truncate(&(0x7f0000000140)='./file2\x00', 0x6400)

1m7.719420726s ago: executing program 5 (id=173):
socketpair(0x25, 0xa, 0xc2, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$eJzs3M1vFOUfAPDv7G7hx2v3h/gCoqJoJL60tKBy8KKJiQdNTPSAx1oKQRZqaE2ENLYYghcTJeFuTLyY+Bd48kTUk4lXvBsSYriAelkz3dllu91tt91tt3U/n2To83Sf3ef7nZln55kZpgH0rYPpP0nEzoi4GRGDEZGrb7CtsqTt7t2ZGf/rzsx4EuXyu38m6dvi7p2Z8WrTJPu5o1IppB+Uu5JEsUm/UxcvnR0rlSYuZPXh6XMfDU9dvPTimXNjpydOT5wfPX782NGRV14efakreaYx3d3/6eSBfW++f+3t8RPXPvj5+0q85fL1G0cW5NEdAxExU1snjZ7pbmc9t6uunBR6GAgrsjUiCtneejMGI39ld+21wXjjs54GB6ypcrlcHm398lwZ+A9LotcRAL1RPdCn57/VpX4C8M/aTj967vZrlROgNO972VJ5pRCXszYDDee33XQwIk7M/f11ukTD9RQAgLXwYzr/eaHJ/K8Y8VBdu93ZvaFiRPw/IvZExAMRsTciHoxK24cj4pEV9n+wob54/pO7tbrM2pPO/17N7m0tnP/V7oIV81lt13z+A8mpM6WJI9k6ORwDW9P6SNNPTyLm0p+/fdmq//r5X7qk/VfnglkctwpbF77n5Nj0WMeJZ25fjthfaJZ/EoX7WcS+iNi/yj7OPPfdgYW/yddKy+e/hC7cZyp/E/FsZfvPRUP+VcnS9yeH/xeliSPD1b1isV9+vfpOq/47yr8L0u2/ven+X8u/mNTfr51a9BFbluvj6u+ftzynWe3+vyV5b0Hnn4xNT18YidiSvLX493UXuKv1avs0/8OHmo//PXF/TTwaEelO/FhEPB4RT2SxPxkRT0XEoSXy/+n1pz9cff5rK81/dkXbf+WF/NkbP7Tqv73tf6xamQ+qne+/dgPsZN0BAADAZpGLiJ2R5IZq5VxuaKjy/+X3xvZcaXJq+vlTkx+fP1l5RqAYA7nqla7BuuuhI9m14Wp9NKvPZvWj2XXj6/lt8/Wh8cnSyV4nD31uR4vxn/oj3+vogDXneS3oX8Y/9K/Vj3/fHLDZLTOKc+sVB7D+HMWhfzUb/7M9iANYf47/0L9q4/+rNhrXPe7V+PAmsPk4/kP/Mv6hL3XyXP+GKMS3EUu3STZKqCsqfNHJ2wvrEGHkNsaKWsfCaD6ih2EU2v2rFnGxPNtxp73+ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiOfwMAAP//Oyno9g==")
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x40201, 0x0)
connect$unix(r3, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setns(r1, 0x24020000)
syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1m6.662575436s ago: executing program 5 (id=174):
mount$9p_rdma(&(0x7f0000000000), 0x0, 0x0, 0x10, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000300)={[{@fat=@quiet}, {@fat=@nocase}, {@nodots}, {}, {@fat=@nfs}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@dots}, {@fat=@errors_continue}, {@dots}, {@dots}, {@nodots}, {@fat=@check_strict}, {@fat=@dos1xfloppy}]}, 0xfd, 0x23d, &(0x7f0000000040)="$eJzs3cFqE0EcBvB/27Td9mLP4mHBi6eivkGQCOKCENmDnlyoXloR0svqKY/hM/hIPkZPva3YXZq6UQ+yySbu7wdhP/IxMHPJ5DCTvHvw8fzs0+WH6vvXSJI0RhHzuI44id3Yi9pO89y9yQdx1zwAgG0znRbjvudAh3aW3jmKiGI/Ig6XqvzbmmYFAAAAAAAAAABAx5z/B4Dhcf7//zebjYvj5vvbr5z/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPpzXVX3qr+8+p4fANA9+z8ADI/9HwCGx/4PAMPz+s3bl+Msm0zTNIm4mpd5mdfPun/+Ips8Tm+cLEZdlWW+3+Rs8qTu03Z/3Ix/+tv+IB49rPuf3bNXWas/jLNVLx4AAAAAAAAAAAAAAAAAAAA2xGl6q3W/f6/uT//U1+nO7wO07u+P4v5obcsAAAAAAAAAAAAAAAAAAACArXb5+ct5cXHxfiYIt+Eo/mFUEpsxeaGT0PcnEwAAAAAAAAAAAAAAAAAADM/i0m/fMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/iz+/391oe81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMPwIwAA//++jJCI")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

1m5.689492545s ago: executing program 5 (id=175):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x4)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x33)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)

1m5.107294166s ago: executing program 37 (id=175):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x4)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x33)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)

38.181339954s ago: executing program 6 (id=212):
r0 = inotify_init1(0x0)
r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0)
r2 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
inotify_rm_watch(r2, r1)

36.250459732s ago: executing program 6 (id=217):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {0x1}, 0xd})

34.898857438s ago: executing program 6 (id=219):
syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x1a5000, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
pipe2$9p(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}})

34.344388839s ago: executing program 6 (id=222):
socketpair(0x25, 0xa, 0xc2, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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")
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x40201, 0x0)
connect$unix(r3, 0x0, 0x0)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setns(r1, 0x24020000)
syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58)

30.950439414s ago: executing program 6 (id=226):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x1c4d, 0x5, 0x7, 0x2bd3, 0x1, "cdc100"})

24.92779994s ago: executing program 6 (id=237):
r0 = inotify_init1(0x0)
r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0)
r2 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
inotify_rm_watch(r2, r1)

23.564678116s ago: executing program 38 (id=237):
r0 = inotify_init1(0x0)
r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0)
r2 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
inotify_rm_watch(r2, r1)

8.571063955s ago: executing program 8 (id=263):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x4)

8.165612693s ago: executing program 8 (id=266):
connect$inet(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa04710, &(0x7f0000000040)={[{@user_xattr}, {@errors_remount}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@nogrpid}, {@nodelalloc}, {@delalloc}, {@prjquota}]}, 0x0, 0x448, &(0x7f0000000bc0)="$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")
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @any, 0x48}, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0xa, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0)

5.429956895s ago: executing program 7 (id=272):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)

5.121607372s ago: executing program 9 (id=273):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x50000b50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', <r4=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)

5.100490492s ago: executing program 7 (id=274):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x29, 0x1, 0x800, 0xbe2, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
r3 = syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone3(&(0x7f0000000680)={0x103100100, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x23}, &(0x7f00000004c0)=""/179, 0xb3, &(0x7f0000000580)=""/101, &(0x7f0000000200)=[r3, r2, r3, r3, r2, r2, r2], 0x7}, 0x58)

4.574706062s ago: executing program 9 (id=275):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
pwrite64(r1, &(0x7f0000000040)="43572654b114b1a9e187499a3907", 0xe, 0x6)

4.18239736s ago: executing program 7 (id=276):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000300)=0x8)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0xc, 0x10000000000000, 0x7fffffff80000000, 0x0, 0x4, 0x0, 0x9, 0x6, 0xfffffffffffffffa, 0x1, 0x2, 0x6, 0xffffffffbffffffd], 0x3000, 0x200100})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.18160868s ago: executing program 8 (id=277):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000340)=[{0x2, 0x4, 0x1, 0x7}, {0x2, 0x5, 0xe, 0x2}, {0x3, 0x4, 0x9, 0x2}, {0x1, 0x3, 0x1, 0x9}, {0x2, 0x4, 0xb, 0x8}], 0x10, 0x1200}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x66, &(0x7f00000007c0)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x12, 0x58, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}, @loopback}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {}, {0x8, 0x88be, 0x0, {{0x6, 0x1, 0x7f, 0x0, 0x1, 0x2, 0x5, 0x4}, 0x1, {0xfffffffe}}}, {0x8, 0x22eb, 0x2, {{0x7, 0x2, 0x4, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x2, {0x10001, 0x1000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0)

3.949794374s ago: executing program 7 (id=278):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af60, &(0x7f0000000680))

3.822559467s ago: executing program 7 (id=279):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)

3.787410447s ago: executing program 9 (id=280):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000000)={[{@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x10}}, {@fat=@usefree}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@fat=@nfs_stale_rw}, {@fat=@debug}, {@nodots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x4}}, {@nodots}, {@fat=@quiet}, {@fat=@showexec}, {@fat=@gid}, {@fat=@fmask={'fmask', 0x3d, 0x7fffffff}}]}, 0x1, 0x249, &(0x7f0000000500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fstatfs(r0, &(0x7f0000000200)=""/174)

3.713572169s ago: executing program 8 (id=281):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$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")
r0 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x0, [0x10001, 0x81f, 0x2]}, &(0x7f0000000000)=0x44)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="14004010936777f8acfa8702a6f51e88f3ca63204939f0b2bd67b9d82a58354bed52ea95dc7d91582f81abb6ef9043a2b53478e60696fc2838611bf5b48d92a578b0233f7660d9b50cd32c3a166dacdf7b", @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x116}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0)

3.265990297s ago: executing program 9 (id=282):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbf8}, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x301}, 0x14}}, 0x200448c0)

2.500945312s ago: executing program 8 (id=283):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'})
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x801)

2.405598184s ago: executing program 7 (id=284):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="971000ff0000", @ANYRES32=0x0, @ANYBLOB="973401002120000008000500", @ANYRES32=r8, @ANYBLOB="4400128009000100766c616e00000000340002800600010001000000280004800c000100f7ffffff090000000c00010006000000060000000c0001000600000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

2.325239535s ago: executing program 9 (id=285):
socketpair(0x25, 0xa, 0xc2, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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")
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setns(r1, 0x24020000)
syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1.270222865s ago: executing program 8 (id=286):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socket(0x2, 0xa, 0x300)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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")

0s ago: executing program 9 (id=287):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f00000005c0)={0x0, 0x2710}, 0x10)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x18c00, 0x170)
recvfrom$unix(r2, &(0x7f0000000600)=""/4096, 0x1000, 0x0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
fsopen(&(0x7f0000000000)='pipefs\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)

kernel console output (not intermixed with test programs):

T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.199270][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.212877][ T5785] team0: Port device team_slave_1 added
[   87.229052][ T5802] Bluetooth: hci2: command tx timeout
[   87.229070][ T5790] Bluetooth: hci3: command tx timeout
[   87.229352][ T5790] Bluetooth: hci0: command tx timeout
[   87.270856][ T5792] hsr_slave_0: entered promiscuous mode
[   87.277448][ T5792] hsr_slave_1: entered promiscuous mode
[   87.284433][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.292350][ T5792] Cannot create hsr debugfs directory
[   87.298935][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.305934][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.308357][ T5790] Bluetooth: hci1: command tx timeout
[   87.338535][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.391858][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.399031][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.425341][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.475948][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.486288][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.512801][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.617566][ T5793] hsr_slave_0: entered promiscuous mode
[   87.625234][ T5793] hsr_slave_1: entered promiscuous mode
[   87.632110][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.640839][ T5793] Cannot create hsr debugfs directory
[   87.683363][ T5785] hsr_slave_0: entered promiscuous mode
[   87.690193][ T5785] hsr_slave_1: entered promiscuous mode
[   87.696496][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.704176][ T5785] Cannot create hsr debugfs directory
[   87.970465][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   87.984718][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.022321][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.033780][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.134146][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.152333][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.164936][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.175778][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.291375][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.329324][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.340597][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.370777][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.416338][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.431825][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.442857][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.454706][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   88.509520][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.563068][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   88.584919][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.592480][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.613910][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.636903][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.644155][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.714181][ T5792] 8021q: adding VLAN 0 to HW filter on device team0
[   88.747401][ T5786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   88.757932][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.782104][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.789373][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.840573][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.849337][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.953133][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.980847][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.044092][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[   89.074177][ T5793] 8021q: adding VLAN 0 to HW filter on device team0
[   89.094942][  T991] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.102220][  T991] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.127851][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.135099][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.177073][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.184307][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.210910][  T991] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.218323][  T991] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.271404][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.309593][ T5790] Bluetooth: hci2: command tx timeout
[   89.309774][ T5102] Bluetooth: hci0: command tx timeout
[   89.315533][ T5790] Bluetooth: hci3: command tx timeout
[   89.356959][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.390491][ T5790] Bluetooth: hci1: command tx timeout
[   89.511712][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.551079][ T5786] veth0_vlan: entered promiscuous mode
[   89.607284][ T5786] veth1_vlan: entered promiscuous mode
[   89.670398][ T5792] veth0_vlan: entered promiscuous mode
[   89.706952][ T5792] veth1_vlan: entered promiscuous mode
[   89.734309][ T5786] veth0_macvtap: entered promiscuous mode
[   89.745727][ T5786] veth1_macvtap: entered promiscuous mode
[   89.842223][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.873930][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.900531][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.911511][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.920673][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.929722][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.943329][ T5792] veth0_macvtap: entered promiscuous mode
[   89.954476][ T5792] veth1_macvtap: entered promiscuous mode
[   89.980979][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.063965][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.075135][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.087185][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.124184][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.135949][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.146823][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.161427][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.198629][ T5792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.207621][ T5792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.216614][ T5792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.225742][ T5792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.249383][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.257840][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.345006][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.356178][ T5785] veth0_vlan: entered promiscuous mode
[   90.356514][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.393943][ T5793] veth0_vlan: entered promiscuous mode
[   90.443104][ T5785] veth1_vlan: entered promiscuous mode
[   90.459784][ T5793] veth1_vlan: entered promiscuous mode
[   90.487428][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.512334][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.591459][  T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.619730][ T5785] veth0_macvtap: entered promiscuous mode
[   90.633301][  T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.643499][ T5793] veth0_macvtap: entered promiscuous mode
[   90.693338][ T5785] veth1_macvtap: entered promiscuous mode
[   90.706624][ T5793] veth1_macvtap: entered promiscuous mode
[   90.823049][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.836213][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.851677][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.862841][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.877326][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.889678][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.901471][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.912724][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.923320][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.933594][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.944734][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.956591][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.988515][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.018267][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.029677][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.055823][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.091540][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.111554][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.119526][ T5884] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   91.124550][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.147267][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.159700][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.181795][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.200497][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.215198][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.226123][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.241232][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.253506][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.271061][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.287434][ T5793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.302702][ T5793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.315008][ T5793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.328927][ T5793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.388788][ T5790] Bluetooth: hci3: command tx timeout
[   91.389402][ T5802] Bluetooth: hci0: command tx timeout
[   91.394239][ T5790] Bluetooth: hci2: command tx timeout
[   91.468810][ T5790] Bluetooth: hci1: command tx timeout
[   91.615686][  T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.643835][  T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.082282][   T54] cfg80211: failed to load regulatory.db
[   92.953952][  T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.990594][  T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.058296][ T1313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.101366][ T1313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.229110][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.237015][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.528586][ T5790] Bluetooth: hci2: command tx timeout
[   93.534209][ T5802] Bluetooth: hci0: command tx timeout
[   93.541630][ T5102] Bluetooth: hci3: command tx timeout
[   93.549917][ T5790] Bluetooth: hci1: command tx timeout
[   93.560148][ T5894] fuse: Bad value for 'fd'
[   93.588096][    C1] sched: RT throttling activated
[   93.598614][ T5894] syz.3.4[5894]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   93.725849][ T5894] loop3: detected capacity change from 0 to 1024
[   94.110166][ T5800] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   97.097825][ T5910] loop2: detected capacity change from 0 to 512
[   97.259028][ T5910] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.10: casefold flag without casefold feature
[   97.349158][ T5910] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.10: couldn't read orphan inode 15 (err -117)
[   97.394411][ T5910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.354593][ T5926] overlayfs: failed to resolve './file1': -2
[   98.619035][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.814117][ T5937] xt_l2tp: invalid flags combination: 4
[   98.862773][ T5936] xt_hashlimit: max too large, truncated to 1048576
[   99.470071][ T5939] loop2: detected capacity change from 0 to 256
[   99.480066][ T5939] =======================================================
[   99.480066][ T5939] WARNING: The mand mount option has been deprecated and
[   99.480066][ T5939]          and is ignored by this kernel. Remove the mand
[   99.480066][ T5939]          option from the mount to silence this warning.
[   99.480066][ T5939] =======================================================
[   99.662611][ T5939] FAT-fs (loop2): Directory bread(block 64) failed
[   99.676080][ T5939] FAT-fs (loop2): Directory bread(block 65) failed
[   99.706318][ T5939] FAT-fs (loop2): Directory bread(block 66) failed
[  100.007166][ T5946] input: syz1 as /devices/virtual/input/input5
[  101.286359][ T5939] FAT-fs (loop2): Directory bread(block 67) failed
[  101.711190][ T5939] FAT-fs (loop2): Directory bread(block 68) failed
[  101.873586][ T5939] FAT-fs (loop2): Directory bread(block 69) failed
[  101.997171][ T5939] FAT-fs (loop2): Directory bread(block 70) failed
[  102.105082][ T5939] FAT-fs (loop2): Directory bread(block 71) failed
[  102.220773][ T5939] FAT-fs (loop2): Directory bread(block 72) failed
[  102.340490][ T5939] FAT-fs (loop2): Directory bread(block 73) failed
[  102.467854][ T5949] binder: 5944:5949 ioctl c0306201 200000000080 returned -14
[  103.451236][ T5952] netlink: 10 bytes leftover after parsing attributes in process `syz.1.21'.
[  103.888591][ T5958] GUP no longer grows the stack in syz.0.23 (5958): 200000004000-20000000a000 (200000002000)
[  103.938401][ T5958] CPU: 1 PID: 5958 Comm: syz.0.23 Not tainted syzkaller #0
[  103.945677][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  103.955762][ T5958] Call Trace:
[  103.959063][ T5958]  <TASK>
[  103.962016][ T5958]  dump_stack_lvl+0x16c/0x230
[  103.966764][ T5958]  ? show_regs_print_info+0x20/0x20
[  103.971994][ T5958]  ? load_image+0x3b0/0x3b0
[  103.976617][ T5958]  ? find_vma+0x12e/0x1b0
[  103.980982][ T5958]  __get_user_pages+0xfb9/0x1470
[  103.986047][ T5958]  ? populate_vma_page_range+0x370/0x370
[  103.991804][ T5958]  get_user_pages_remote+0x3de/0xc10
[  103.997126][ T5958]  ? get_dump_page+0x200/0x200
[  104.001923][ T5958]  __access_remote_vm+0x1ff/0x570
[  104.006970][ T5958]  ? generic_access_phys+0x650/0x650
[  104.012469][ T5958]  ? alloc_pages+0x4dc/0x740
[  104.017115][ T5958]  ? do_raw_spin_unlock+0x121/0x230
[  104.022444][ T5958]  proc_pid_cmdline_read+0x551/0x830
[  104.027881][ T5958]  ? schedule+0xc7/0x170
[  104.032179][ T5958]  ? comm_show+0x150/0x150
[  104.036621][ T5958]  ? common_file_perm+0x160/0x1f0
[  104.042206][ T5958]  ? fsnotify_perm+0x271/0x5e0
[  104.047582][ T5958]  do_iter_read+0x506/0xc80
[  104.052224][ T5958]  ? comm_show+0x150/0x150
[  104.056696][ T5958]  ? vfs_iter_read+0xa0/0xa0
[  104.061369][ T5958]  ? __import_iovec+0x5f2/0x860
[  104.066316][ T5958]  ? import_iovec+0x73/0xa0
[  104.071471][ T5958]  do_preadv+0x1fa/0x330
[  104.075750][ T5958]  ? lockdep_hardirqs_on+0x98/0x150
[  104.081081][ T5958]  ? do_writev+0x410/0x410
[  104.085579][ T5958]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  104.091595][ T5958]  ? lock_chain_count+0x20/0x20
[  104.096566][ T5958]  ? lockdep_hardirqs_on+0x98/0x150
[  104.101805][ T5958]  do_syscall_64+0x55/0xb0
[  104.106709][ T5958]  ? clear_bhb_loop+0x40/0x90
[  104.111913][ T5958]  ? clear_bhb_loop+0x40/0x90
[  104.116693][ T5958]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  104.123273][ T5958] RIP: 0033:0x7f621218eba9
[  104.127768][ T5958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.148205][ T5958] RSP: 002b:00007f62103b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  104.156995][ T5958] RAX: ffffffffffffffda RBX: 00007f62123d6180 RCX: 00007f621218eba9
[  104.165553][ T5958] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006
[  104.173587][ T5958] RBP: 00007f6212211e19 R08: 0000000000000000 R09: 0000000000000000
[  104.181586][ T5958] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[  104.189682][ T5958] R13: 00007f62123d6218 R14: 00007f62123d6180 R15: 00007ffef8b3c6e8
[  104.197713][ T5958]  </TASK>
[  104.223714][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'.
[  104.232612][ T5964] bridge_slave_1: left allmulticast mode
[  104.238345][ T5964] bridge_slave_1: left promiscuous mode
[  104.244564][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.287692][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  104.522500][ T5964] bridge_slave_0: left allmulticast mode
[  104.528471][ T5964] bridge_slave_0: left promiscuous mode
[  104.534355][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.683535][ T5956] loop2: detected capacity change from 0 to 40427
[  105.730588][ T5956] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  105.764504][ T5956] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  105.777698][ T5971] xt_l2tp: invalid flags combination: 4
[  106.035681][ T5956] F2FS-fs (loop2): invalid crc value
[  106.104307][ T5956] F2FS-fs (loop2): Found nat_bits in checkpoint
[  106.573972][ T5979] loop3: detected capacity change from 0 to 512
[  107.047916][ T5979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.080121][ T5979] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  107.118795][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  107.224340][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.274808][ T5986] loop1: detected capacity change from 0 to 1024
[  107.282147][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  107.325393][ T5986] EXT4-fs: Ignoring removed i_version option
[  107.389066][ T5986] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  107.534037][ T5986] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.30: Invalid block bitmap block 0 in block_group 0
[  107.823441][ T5986] Quota error (device loop1): write_blk: dquota write failed
[  111.582273][ T5995] input: syz1 as /devices/virtual/input/input6
[  111.608578][ T5986] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  112.467425][ T5986] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.30: Failed to acquire dquot type 0
[  112.620959][ T5986] EXT4-fs error (device loop1): ext4_free_blocks:6676: comm syz.1.30: Freeing blocks not in datazone - block = 0, count = 4096
[  112.792160][ T5986] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.30: Invalid inode bitmap blk 0 in block_group 0
[  112.806996][ T5986] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem
[  112.817632][ T1313] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8
[  112.848640][ T5986] EXT4-fs (loop1): 1 orphan inode deleted
[  112.888955][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[  112.898716][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  113.204783][ T5986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.212181][ T1313] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:6: Failed to release dquot type 0
[  113.547519][ T6000] netlink: 10 bytes leftover after parsing attributes in process `syz.3.34'.
[  113.595988][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.562148][ T6007] xt_l2tp: invalid flags combination: 4
[  114.576735][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'.
[  114.586510][ T6008] bridge_slave_1: left allmulticast mode
[  114.592485][ T6008] bridge_slave_1: left promiscuous mode
[  114.598338][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.619182][ T6008] bridge_slave_0: left allmulticast mode
[  114.624961][ T6008] bridge_slave_0: left promiscuous mode
[  114.631309][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.805780][ T6013] xt_hashlimit: max too large, truncated to 1048576
[  116.053913][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'.
[  116.163007][ T6022] loop0: detected capacity change from 0 to 16
[  116.237369][ T6022] erofs: (device loop0): mounted with root inode @ nid 36.
[  117.501570][ T6034] input: syz1 as /devices/virtual/input/input7
[  120.790575][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.44'.
[  120.801325][ T6043] tipc: Started in network mode
[  120.806261][ T6043] tipc: Node identity 7, cluster identity 4711
[  120.825049][ T6043] tipc: Node number set to 7
[  120.986380][ T6047] xt_l2tp: invalid flags combination: 4
[  121.972646][ T6051] syzkaller0: entered promiscuous mode
[  121.984735][ T6051] syzkaller0: entered allmulticast mode
[  123.480849][   T27] audit: type=1326 audit(1757737997.502:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621218eba9 code=0x7ffc0000
[  123.671773][ T6072] loop1: detected capacity change from 0 to 4096
[  123.679404][ T6072] EXT4-fs: Ignoring removed mblk_io_submit option
[  123.686029][ T6072] EXT4-fs: Ignoring removed bh option
[  123.779794][ T6072] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a003c09d, mo2=0002]
[  123.789513][ T6072] System zones: 0-5
[  123.839179][ T6072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.101431][   T27] audit: type=1326 audit(1757737997.502:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f621218eba9 code=0x7ffc0000
[  124.176322][   T27] audit: type=1326 audit(1757737997.502:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621218eba9 code=0x7ffc0000
[  124.687234][   T27] audit: type=1326 audit(1757737997.512:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f621218eba9 code=0x7ffc0000
[  124.794396][   T27] audit: type=1326 audit(1757737997.512:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621218eba9 code=0x7ffc0000
[  124.909886][   T27] audit: type=1326 audit(1757737997.522:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f621218eba9 code=0x7ffc0000
[  125.063533][   T27] audit: type=1326 audit(1757737997.522:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  125.250301][   T27] audit: type=1326 audit(1757737997.522:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621218eba9 code=0x7ffc0000
[  125.382709][   T27] audit: type=1326 audit(1757737997.522:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621218eba9 code=0x7ffc0000
[  126.096297][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.204588][ T6090] xt_l2tp: invalid flags combination: 4
[  127.329817][ T6098] syzkaller0: entered promiscuous mode
[  127.348012][ T6098] syzkaller0: entered allmulticast mode
[  127.995854][ T6100] syz.2.62 (6100) used greatest stack depth: 16616 bytes left
[  129.690336][ T6120] loop3: detected capacity change from 0 to 256
[  129.757882][ T6120] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119abd2)
[  129.792629][ T6123] loop0: detected capacity change from 0 to 512
[  129.799444][ T6120] exFAT-fs (loop3): invalid boot region
[  129.828231][ T6120] exFAT-fs (loop3): failed to recognize exfat type
[  129.835809][ T6123] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  129.885149][ T6123] EXT4-fs (loop0): orphan cleanup on readonly fs
[  129.897164][ T6123] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.72: Block bitmap for bg 0 marked uninitialized
[  129.986132][ T6123] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6637: Corrupt filesystem
[  130.042845][ T6123] EXT4-fs (loop0): 1 orphan inode deleted
[  130.083734][ T6123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  130.297583][ T6131] xt_l2tp: invalid flags combination: 4
[  130.721467][ T5792] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /16/file1: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0
[  130.751246][ T5792] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  130.795187][ T5792] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  131.005779][ T6144] syzkaller0: entered promiscuous mode
[  131.029679][ T6144] syzkaller0: entered allmulticast mode
[  131.373029][ T1321] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.500977][ T6137] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.661130][ T1321] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.691854][ T1321] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.882897][ T1321] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.995029][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  133.002861][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  133.852492][ T6169] xt_l2tp: invalid flags combination: 4
[  134.237858][   T27] audit: type=1326 audit(1757738008.292:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151158eba9 code=0x7ffc0000
[  134.508457][   T27] audit: type=1326 audit(1757738008.342:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151158eba9 code=0x7ffc0000
[  134.598328][   T27] audit: type=1326 audit(1757738008.472:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f151158eba9 code=0x7ffc0000
[  134.672652][   T27] audit: type=1326 audit(1757738008.472:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151158eba9 code=0x7ffc0000
[  134.719991][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  134.732122][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  134.748890][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  134.776480][   T27] audit: type=1326 audit(1757738008.472:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151158eba9 code=0x7ffc0000
[  134.780370][ T6177] loop1: detected capacity change from 0 to 512
[  134.806247][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  134.829364][ T6177] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  134.848304][ T5802] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  134.856854][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  134.864236][   T27] audit: type=1326 audit(1757738008.492:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f151158eba9 code=0x7ffc0000
[  134.870255][ T6177] EXT4-fs (loop1): orphan cleanup on readonly fs
[  134.887102][   T27] audit: type=1326 audit(1757738008.492:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151158eba9 code=0x7ffc0000
[  134.921888][ T6177] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:512: comm syz.1.86: Block bitmap for bg 0 marked uninitialized
[  134.951416][   T27] audit: type=1326 audit(1757738008.492:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f151158eba9 code=0x7ffc0000
[  134.974905][ T6177] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6637: Corrupt filesystem
[  134.992058][ T6177] EXT4-fs (loop1): 1 orphan inode deleted
[  135.029681][ T6177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  135.046667][ T6187] loop3: detected capacity change from 0 to 256
[  135.055300][   T27] audit: type=1326 audit(1757738008.492:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151158eba9 code=0x7ffc0000
[  135.137890][ T6187] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  135.170794][   T27] audit: type=1326 audit(1757738008.492:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151158eba9 code=0x7ffc0000
[  135.673163][ T5786] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /19/file1: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0
[  135.743235][ T6195] loop2: detected capacity change from 0 to 16
[  135.826401][ T6195] erofs: (device loop2): mounted with root inode @ nid 36.
[  135.898552][ T5786] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  136.002995][ T5786] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  136.869270][ T6174] chnl_net:caif_netlink_parms(): no params data found
[  136.989421][ T5802] Bluetooth: hci3: command tx timeout
[  137.041375][ T6194] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.986215][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.018268][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.041323][ T6174] bridge_slave_0: entered allmulticast mode
[  138.069195][ T6174] bridge_slave_0: entered promiscuous mode
[  138.214376][ T1321] hsr_slave_0: left promiscuous mode
[  138.242321][ T1321] hsr_slave_1: left promiscuous mode
[  138.274692][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.288302][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.319600][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.327066][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.431933][ T1321] veth1_macvtap: left promiscuous mode
[  138.437975][ T1321] veth0_macvtap: left promiscuous mode
[  138.474226][ T1321] veth1_vlan: left promiscuous mode
[  138.498520][ T1321] veth0_vlan: left promiscuous mode
[  138.661128][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  138.674249][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  138.688404][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  138.697182][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  138.707296][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  138.718480][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  138.804413][ T6225] process 'syz.2.93' launched '/dev/fd/4' with NULL argv: empty string added
[  139.068319][ T5790] Bluetooth: hci3: command tx timeout
[  139.500796][ T1321] team0 (unregistering): Port device team_slave_1 removed
[  139.562926][ T1321] team0 (unregistering): Port device team_slave_0 removed
[  139.625196][ T1321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.722047][ T1321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.787654][ T6227] loop2: detected capacity change from 0 to 512
[  139.804429][ T6227] EXT4-fs: Ignoring removed nobh option
[  139.811195][ T6227] EXT4-fs: Ignoring removed orlov option
[  139.899745][ T6227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.913434][ T6227] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.036911][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.409737][ T1321] bond0 (unregistering): Released all slaves
[  140.748910][ T5790] Bluetooth: hci0: command tx timeout
[  141.148214][ T5790] Bluetooth: hci3: command tx timeout
[  141.155116][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.162504][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.169820][ T6174] bridge_slave_1: entered allmulticast mode
[  141.196339][ T6174] bridge_slave_1: entered promiscuous mode
[  141.267846][ T6174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.286508][ T6174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.578612][ T6174] team0: Port device team_slave_0 added
[  141.617646][ T6174] team0: Port device team_slave_1 added
[  141.770440][ T6240] 9pnet_fd: Insufficient options for proto=fd
[  142.373852][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.416887][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.451147][ T6174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.519889][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.537268][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.594013][ T6174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.751996][ T6174] hsr_slave_0: entered promiscuous mode
[  142.776819][ T6174] hsr_slave_1: entered promiscuous mode
[  142.801033][ T6174] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  142.818386][ T6174] Cannot create hsr debugfs directory
[  142.828258][ T5790] Bluetooth: hci0: command tx timeout
[  143.233227][ T5790] Bluetooth: hci3: command tx timeout
[  143.272221][ T1321] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.532971][ T1321] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.654790][ T1321] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.104711][ T6269] loop3: detected capacity change from 0 to 4096
[  144.118631][ T6269] EXT4-fs: Ignoring removed mblk_io_submit option
[  144.126575][ T6269] EXT4-fs: Ignoring removed bh option
[  144.182809][ T6269] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a003c09d, mo2=0002]
[  144.191720][ T6269] System zones: 0-5
[  144.218485][ T6269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.098478][ T5790] Bluetooth: hci0: command tx timeout
[  145.810294][ T6273] loop2: detected capacity change from 0 to 256
[  145.870752][ T6273] FAT-fs (loop2): Directory bread(block 64) failed
[  145.877352][ T6273] FAT-fs (loop2): Directory bread(block 65) failed
[  145.911113][ T6273] FAT-fs (loop2): Directory bread(block 66) failed
[  145.932928][ T6273] FAT-fs (loop2): Directory bread(block 67) failed
[  145.943122][ T6273] FAT-fs (loop2): Directory bread(block 68) failed
[  145.965214][ T6273] FAT-fs (loop2): Directory bread(block 69) failed
[  145.984334][ T6273] FAT-fs (loop2): Directory bread(block 70) failed
[  146.004533][ T6273] FAT-fs (loop2): Directory bread(block 71) failed
[  146.018303][ T6273] FAT-fs (loop2): Directory bread(block 72) failed
[  146.035159][ T6273] FAT-fs (loop2): Directory bread(block 73) failed
[  146.595037][ T1321] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.597557][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.378365][ T5790] Bluetooth: hci0: command tx timeout
[  147.491184][ T6222] chnl_net:caif_netlink_parms(): no params data found
[  147.682789][ T6283] loop2: detected capacity change from 0 to 256
[  147.942539][ T6222] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.983969][ T6222] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.049147][ T6222] bridge_slave_0: entered allmulticast mode
[  148.078485][ T6222] bridge_slave_0: entered promiscuous mode
[  148.836919][ T6222] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.873423][ T6222] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.881867][ T6222] bridge_slave_1: entered allmulticast mode
[  148.907038][ T6222] bridge_slave_1: entered promiscuous mode
[  149.021217][ T6303] loop3: detected capacity change from 0 to 256
[  149.112203][ T6222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.151226][ T6303] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  149.165253][ T6174] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  149.217946][ T6174] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  149.254135][ T6222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.354301][ T6174] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  149.386517][ T6174] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  149.677462][ T6222] team0: Port device team_slave_0 added
[  149.687233][ T6222] team0: Port device team_slave_1 added
[  149.824655][   T27] audit: type=1326 audit(1757738023.892:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.2.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8d8eba9 code=0x7ffc0000
[  149.885432][   T27] audit: type=1326 audit(1757738023.892:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.2.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f2bb8d8eba9 code=0x7ffc0000
[  149.943577][   T27] audit: type=1326 audit(1757738023.892:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.2.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8d8eba9 code=0x7ffc0000
[  150.000255][   T27] audit: type=1326 audit(1757738023.892:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.2.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8d8eba9 code=0x7ffc0000
[  150.023403][ T6222] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.028962][   T27] audit: type=1326 audit(1757738023.902:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.2.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f2bb8d8eba9 code=0x7ffc0000
[  150.049059][ T6222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.073003][   T27] audit: type=1326 audit(1757738023.902:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.2.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8d8eba9 code=0x7ffc0000
[  150.118143][ T6222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.141837][   T27] audit: type=1326 audit(1757738023.902:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.2.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8d8eba9 code=0x7ffc0000
[  150.216151][ T6222] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.243952][ T6222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.308700][ T6222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.551510][ T6222] hsr_slave_0: entered promiscuous mode
[  150.568642][ T6222] hsr_slave_1: entered promiscuous mode
[  150.589791][ T6222] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  150.597419][ T6222] Cannot create hsr debugfs directory
[  151.319932][ T6174] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.490067][ T6222] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  151.531642][ T6222] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  151.562315][ T1321] hsr_slave_0: left promiscuous mode
[  151.580843][ T1321] hsr_slave_1: left promiscuous mode
[  151.603204][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.618135][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.636837][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.644431][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.718433][ T1321] veth1_macvtap: left promiscuous mode
[  151.728538][ T1321] veth0_macvtap: left promiscuous mode
[  151.744434][ T1321] veth1_vlan: left promiscuous mode
[  151.754709][ T1321] veth0_vlan: left promiscuous mode
[  153.636310][ T1321] team0 (unregistering): Port device team_slave_1 removed
[  153.717097][ T1321] team0 (unregistering): Port device team_slave_0 removed
[  153.782285][ T1321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.845218][ T1321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  154.045814][ T6337] loop3: detected capacity change from 0 to 512
[  154.054710][ T6337] EXT4-fs: Ignoring removed mblk_io_submit option
[  154.079040][ T6337] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  154.098645][ T6337] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  154.189805][ T6337] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  154.205300][ T6337] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102]
[  154.219417][ T6337] System zones: 0-2, 18-18, 34-34
[  154.235995][ T6337] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.109: iget: bad i_size value: 360287970189639680
[  154.257145][ T6337] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.109: couldn't read orphan inode 15 (err -117)
[  154.287087][ T6337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.640690][ T1321] bond0 (unregistering): Released all slaves
[  154.692464][ T6174] 8021q: adding VLAN 0 to HW filter on device team0
[  154.699937][ T6222] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  154.757976][ T6222] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  154.863996][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.871964][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.890990][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.898228][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.397762][ T6222] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.467322][ T6222] 8021q: adding VLAN 0 to HW filter on device team0
[  155.504976][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.512226][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.543639][  T991] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.550952][  T991] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.982655][ T6174] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.984712][ T6222] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.096288][ T6384] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  157.352080][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.733999][ T6174] veth0_vlan: entered promiscuous mode
[  157.791391][ T6174] veth1_vlan: entered promiscuous mode
[  157.931916][ T6174] veth0_macvtap: entered promiscuous mode
[  157.981875][ T6174] veth1_macvtap: entered promiscuous mode
[  157.999644][ T6222] veth0_vlan: entered promiscuous mode
[  158.075395][ T6222] veth1_vlan: entered promiscuous mode
[  158.091648][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.102948][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.123195][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.134953][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.160192][ T6174] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.205887][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.228691][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.249012][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.280227][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.307422][ T6174] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.381008][ T6174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.400928][ T6174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.404698][ T6384] loop2: detected capacity change from 0 to 40427
[  158.435872][ T6174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.457468][ T6384] F2FS-fs (loop2): Unrecognized mount option "whint_mode=user-based" or missing value
[  158.468531][ T6174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.558967][ T6222] veth0_macvtap: entered promiscuous mode
[  158.693546][ T6222] veth1_macvtap: entered promiscuous mode
[  158.803745][ T6414] syz.3.115[6414] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  158.803890][ T6414] syz.3.115[6414] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  158.805506][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.844313][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.854562][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.871218][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.918271][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.942674][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.971280][ T6222] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.033880][ T3527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.062909][ T3527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.134241][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.166112][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.182626][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.215973][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.226134][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.237281][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.249583][ T6222] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.303525][ T6222] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.315237][ T6222] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.324233][ T6222] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.333201][ T6222] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.372383][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.384495][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.767866][ T3511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.835812][ T3511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.943317][ T6424] syzkaller0: entered promiscuous mode
[  159.964001][ T6424] syzkaller0: entered allmulticast mode
[  160.063819][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.077907][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.402290][ T6438] xt_l2tp: invalid flags combination: 4
[  161.281697][ T6441] syzkaller0: entered promiscuous mode
[  161.292213][ T6446] loop5: detected capacity change from 0 to 4096
[  161.292290][ T6453] binfmt_misc: register: failed to install interpreter file ./file2
[  161.341056][ T6441] syzkaller0: entered allmulticast mode
[  161.355412][ T6446] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  161.476619][ T6446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  161.673138][ T6222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.217771][ T6476] loop3: detected capacity change from 0 to 128
[  162.267962][ T6473] loop5: detected capacity change from 0 to 4096
[  162.446465][ T6473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.877452][ T6473] fs-verity: sha256 using implementation "sha256-avx2"
[  162.937760][ T6473] fs-verity (loop5, inode 16): fs-verity keyring is empty, rejecting signed file!
[  163.106229][ T6222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.587597][ T6495] loop2: detected capacity change from 0 to 256
[  163.702799][ T6497] xt_l2tp: invalid flags combination: 4
[  163.908815][ T6495] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  164.618372][ T6503] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  164.797299][ T6507] loop3: detected capacity change from 0 to 2048
[  164.872437][ T6507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.161545][ T6507] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.132: bg 0: block 234: padding at end of block bitmap is not set
[  165.188729][ T6507] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117
[  165.201720][ T6507] EXT4-fs (loop3): This should not happen!! Data will be lost
[  165.201720][ T6507] 
[  165.536795][ T6503] syzkaller0: entered promiscuous mode
[  165.692565][ T6503] syzkaller0: entered allmulticast mode
[  165.712542][ T6512] loop2: detected capacity change from 0 to 256
[  165.845293][ T6512] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  167.688620][   T23] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  167.923024][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.992625][   T23] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  168.014298][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  168.047235][   T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  168.107297][   T23] usb 5-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00
[  168.134831][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.200272][   T23] usb 5-1: config 0 descriptor??
[  168.220027][ T6514] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  168.235128][ T6535] loop3: detected capacity change from 0 to 512
[  168.279986][ T6535] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  168.334247][ T6535] EXT4-fs (loop3): orphan cleanup on readonly fs
[  168.353920][ T6535] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.137: Block bitmap for bg 0 marked uninitialized
[  168.396082][ T6535] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6637: Corrupt filesystem
[  168.407926][ T6532] loop2: detected capacity change from 0 to 4096
[  168.422369][ T6535] EXT4-fs (loop3): 1 orphan inode deleted
[  168.438777][ T6535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  168.498354][ T6532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.665117][ T6532] fs-verity (loop2, inode 16): fs-verity keyring is empty, rejecting signed file!
[  168.854186][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.176621][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'.
[  169.221296][ T6550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'.
[  169.239840][ T5785] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /42/file1: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0
[  169.293462][ T6550] Zero length message leads to an empty skb
[  169.386582][ T5785] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  169.459045][ T5785] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  169.705820][   T23] wacom 0003:056A:0039.0001: item fetching failed at offset 3/7
[  169.759184][   T23] wacom 0003:056A:0039.0001: parse failed
[  169.765165][   T23] wacom: probe of 0003:056A:0039.0001 failed with error -22
[  169.816469][   T23] usb 5-1: USB disconnect, device number 2
[  170.238946][   T78] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.423333][ T6547] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.620239][   T78] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.901746][   T78] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.080869][   T78] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.285117][ T6556] loop4: detected capacity change from 0 to 40427
[  171.345780][ T6556] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  171.371892][ T6556] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  171.426876][ T6556] F2FS-fs (loop4): invalid crc value
[  171.523442][ T6556] F2FS-fs (loop4): Found nat_bits in checkpoint
[  171.590291][   T78] tipc: Left network mode
[  171.776139][ T6556] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  171.808722][ T6556] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  171.917213][ T6578] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  171.951674][ T6580] syzkaller0: entered promiscuous mode
[  171.968336][ T6580] syzkaller0: entered allmulticast mode
[  172.062077][   T27] audit: type=1804 audit(1757738046.132:28): pid=6583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.143" name="/newroot/4/bus/bus" dev="loop4" ino=10 res=1 errno=0
[  172.151678][   T27] audit: type=1804 audit(1757738046.182:29): pid=6556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.143" name="/newroot/4/bus/bus" dev="loop4" ino=10 res=1 errno=0
[  172.206755][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  172.217972][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  172.235948][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  172.296225][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  172.307845][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  172.318485][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  172.656788][ T6596] loop2: detected capacity change from 0 to 128
[  172.872574][ T6598] loop5: detected capacity change from 0 to 2048
[  173.709453][ T6605] syz.2.149: attempt to access beyond end of device
[  173.709453][ T6605] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128
[  173.810183][ T6598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.896025][ T6598] EXT4-fs error (device loop5): ext4_find_extent:936: inode #2: comm syz.5.150: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  173.959989][ T6598] EXT4-fs (loop5): Remounting filesystem read-only
[  174.121011][ T6222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.186734][ T6586] chnl_net:caif_netlink_parms(): no params data found
[  174.196779][ T6611] loop2: detected capacity change from 0 to 512
[  174.231252][ T6611] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  174.260529][ T6611] EXT4-fs (loop2): orphan cleanup on readonly fs
[  174.278415][ T6611] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.151: Block bitmap for bg 0 marked uninitialized
[  174.311078][ T6611] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6637: Corrupt filesystem
[  174.333114][ T6611] EXT4-fs (loop2): 1 orphan inode deleted
[  174.341282][ T6611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  174.354074][ T5802] Bluetooth: hci1: command tx timeout
[  175.043530][ T5793] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /47/file1: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0
[  175.160399][ T5793] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  175.254178][ T5793] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  175.273276][ T6586] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.309397][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.344165][ T6586] bridge_slave_0: entered allmulticast mode
[  175.393106][ T6586] bridge_slave_0: entered promiscuous mode
[  175.627826][ T6586] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.643870][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.657099][ T6586] bridge_slave_1: entered allmulticast mode
[  175.672493][ T6621] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  175.681195][ T6586] bridge_slave_1: entered promiscuous mode
[  175.713883][ T6627] xt_l2tp: invalid flags combination: 4
[  175.924703][   T78] hsr_slave_0: left promiscuous mode
[  175.945018][   T78] hsr_slave_1: left promiscuous mode
[  175.963082][   T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.992154][   T78] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.014119][   T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.032258][   T78] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.076536][   T78] bridge_slave_1: left allmulticast mode
[  176.098884][   T78] bridge_slave_1: left promiscuous mode
[  176.113298][   T78] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.189247][   T78] bridge_slave_0: left allmulticast mode
[  176.218085][   T78] bridge_slave_0: left promiscuous mode
[  176.238314][   T78] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.388266][   T78] veth1_macvtap: left promiscuous mode
[  176.403243][ T6617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.412115][   T78] veth0_macvtap: left promiscuous mode
[  176.432614][ T5802] Bluetooth: hci1: command tx timeout
[  176.439093][   T78] veth1_vlan: left promiscuous mode
[  176.449452][   T78] veth0_vlan: left promiscuous mode
[  177.725398][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  177.743509][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  177.830370][ T6658] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  178.172661][   T11] Bluetooth: hci4: Frame reassembly failed (-84)
[  178.186083][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  178.195446][   T11] Bluetooth: hci4: Frame reassembly failed (-84)
[  178.197359][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  178.215170][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  178.224153][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  178.413003][   T78] team0 (unregistering): Port device team_slave_1 removed
[  178.466068][   T78] team0 (unregistering): Port device team_slave_0 removed
[  178.513690][ T5802] Bluetooth: hci1: command tx timeout
[  178.521526][   T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.572567][   T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.104404][   T78] bond0 (unregistering): Released all slaves
[  179.208968][ T6586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  179.226678][ T6586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.352844][ T6586] team0: Port device team_slave_0 added
[  179.365208][ T6586] team0: Port device team_slave_1 added
[  179.480354][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.499475][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.528315][ T6586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.606033][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.620090][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.658179][ T6586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.868269][ T5102] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  180.033709][ T6586] hsr_slave_0: entered promiscuous mode
[  180.053556][ T6668] loop5: detected capacity change from 0 to 128
[  180.065519][ T6586] hsr_slave_1: entered promiscuous mode
[  180.349552][ T5102] Bluetooth: hci2: command tx timeout
[  180.588311][ T5102] Bluetooth: hci1: command tx timeout
[  180.711030][   T78] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.822380][ T6680] kvm: pic: non byte write
[  180.845399][ T6680] kvm: pic: non byte write
[  180.867510][ T6680] kvm: pic: non byte write
[  180.898460][ T6680] kvm: pic: non byte write
[  180.898968][   T78] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.925465][ T6680] kvm: pic: single mode not supported
[  180.925682][ T6680] kvm: pic: level sensitive irq not supported
[  180.951418][ T6680] kvm: pic: non byte write
[  181.095639][   T78] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.145278][ T6656] chnl_net:caif_netlink_parms(): no params data found
[  181.334670][ T6694] loop4: detected capacity change from 0 to 512
[  181.345040][   T78] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.360165][ T6694] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  181.385923][ T6691] loop5: detected capacity change from 0 to 4096
[  181.410229][ T6694] EXT4-fs (loop4): orphan cleanup on readonly fs
[  181.416899][ T6694] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.165: Block bitmap for bg 0 marked uninitialized
[  181.480824][ T6694] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6637: Corrupt filesystem
[  181.493443][ T6586] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  181.507971][ T6691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.554247][ T6694] EXT4-fs (loop4): 1 orphan inode deleted
[  181.577731][ T6586] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  181.642504][ T6586] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  181.659801][ T6586] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  181.710031][ T6694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  182.020180][   T54] kernel write not supported for file /44/net/rt_cache (pid: 54 comm: kworker/0:2)
[  182.297925][ T6656] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.328005][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.340782][ T6174] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /12/file1: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0
[  182.371683][ T6656] bridge_slave_0: entered allmulticast mode
[  182.390438][ T6222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.408279][ T6656] bridge_slave_0: entered promiscuous mode
[  182.426769][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.434586][ T5102] Bluetooth: hci2: command tx timeout
[  182.453384][ T6174] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  182.473012][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.486101][ T6174] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  182.505708][ T6656] bridge_slave_1: entered allmulticast mode
[  182.514844][ T6656] bridge_slave_1: entered promiscuous mode
[  182.807431][ T6656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.985960][ T6656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.329698][ T6724] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  183.683619][   T12] Bluetooth: hci3: Frame reassembly failed (-84)
[  183.723104][ T6656] team0: Port device team_slave_0 added
[  183.735888][ T6656] team0: Port device team_slave_1 added
[  183.928950][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.948212][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.042373][ T6656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.081654][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.084597][ T6709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.098497][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.156959][ T6656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.353774][ T6586] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.452275][ T6656] hsr_slave_0: entered promiscuous mode
[  184.460455][ T6656] hsr_slave_1: entered promiscuous mode
[  184.477453][ T6656] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.490657][ T6656] Cannot create hsr debugfs directory
[  184.510729][ T5802] Bluetooth: hci2: command tx timeout
[  184.673904][ T6586] 8021q: adding VLAN 0 to HW filter on device team0
[  184.743613][ T6510] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.751073][ T6510] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.793756][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.801005][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.893189][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  184.912568][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  184.931051][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  184.942124][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  184.951343][ T5790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  184.959507][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  185.114559][ T6586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  185.347213][   T78] hsr_slave_0: left promiscuous mode
[  185.361846][   T78] hsr_slave_1: left promiscuous mode
[  185.394103][   T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.412234][   T78] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.434664][   T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.458250][   T78] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.479270][   T78] bridge_slave_1: left allmulticast mode
[  185.484991][   T78] bridge_slave_1: left promiscuous mode
[  185.496650][   T78] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.507131][   T78] bridge_slave_0: left allmulticast mode
[  185.513278][   T78] bridge_slave_0: left promiscuous mode
[  185.526706][   T78] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.569730][   T78] veth1_macvtap: left promiscuous mode
[  185.575342][   T78] veth0_macvtap: left promiscuous mode
[  185.585971][   T78] veth1_vlan: left promiscuous mode
[  185.591748][   T78] veth0_vlan: left promiscuous mode
[  185.710200][ T5102] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  185.717856][ T5790] Bluetooth: hci3: command 0x1003 tx timeout
[  186.594109][ T6764] loop5: detected capacity change from 0 to 256
[  186.647975][ T5102] Bluetooth: hci2: command tx timeout
[  186.677610][ T6764] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  186.995173][ T5102] Bluetooth: hci4: command tx timeout
[  187.927650][   T78] team0 (unregistering): Port device team_slave_1 removed
[  188.008779][   T78] team0 (unregistering): Port device team_slave_0 removed
[  188.104609][   T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  188.190709][   T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  188.994546][ T6767] loop5: detected capacity change from 0 to 512
[  189.026295][ T6767] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  189.054504][ T6767] EXT4-fs (loop5): orphan cleanup on readonly fs
[  189.061347][ T6767] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:512: comm syz.5.173: Block bitmap for bg 0 marked uninitialized
[  189.076794][ T5102] Bluetooth: hci4: command tx timeout
[  189.083106][ T6767] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6637: Corrupt filesystem
[  189.094715][ T6767] EXT4-fs (loop5): 1 orphan inode deleted
[  189.101868][ T6767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  189.103412][   T78] bond0 (unregistering): Released all slaves
[  189.317219][ T6656] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  189.879912][ T6222] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /18/file1: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0
[  189.934961][ T6222] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  189.973695][ T6222] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  190.105683][ T6656] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  190.217238][ T6656] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  190.240862][ T6586] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.247989][ T6656] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  190.324718][   T78] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.582486][   T78] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.781655][ T6769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.927201][   T78] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.090773][   T78] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.156744][ T5102] Bluetooth: hci4: command tx timeout
[  191.252526][ T6737] chnl_net:caif_netlink_parms(): no params data found
[  191.505885][ T6586] veth0_vlan: entered promiscuous mode
[  191.712491][ T6656] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.804945][ T6586] veth1_vlan: entered promiscuous mode
[  191.875433][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.888349][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.895718][ T6737] bridge_slave_0: entered allmulticast mode
[  191.904948][ T6737] bridge_slave_0: entered promiscuous mode
[  191.925756][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.934593][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.943381][ T6737] bridge_slave_1: entered allmulticast mode
[  191.952418][ T6737] bridge_slave_1: entered promiscuous mode
[  192.010583][ T6656] 8021q: adding VLAN 0 to HW filter on device team0
[  192.069514][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.070949][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  192.076769][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.100641][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  192.113027][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  192.154204][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  192.171472][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  192.171872][ T6737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.201436][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  192.286887][ T6737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.304525][  T991] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.311854][  T991] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.403389][ T6737] team0: Port device team_slave_0 added
[  192.510632][ T6586] veth0_macvtap: entered promiscuous mode
[  192.520700][ T6737] team0: Port device team_slave_1 added
[  192.534973][ T6586] veth1_macvtap: entered promiscuous mode
[  192.681741][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.691071][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.717456][ T6737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  192.730859][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.737843][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.764262][ T6737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.950173][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.971403][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.986515][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  193.018213][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.040229][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.063885][ T6737] hsr_slave_0: entered promiscuous mode
[  193.072634][ T6737] hsr_slave_1: entered promiscuous mode
[  193.083461][ T6737] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  193.094912][ T6737] Cannot create hsr debugfs directory
[  193.179554][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.199398][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.219300][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.238225][ T5102] Bluetooth: hci4: command tx timeout
[  193.244843][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.257027][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.324531][   T78] hsr_slave_0: left promiscuous mode
[  193.340520][   T78] hsr_slave_1: left promiscuous mode
[  193.346752][   T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.365709][   T78] batman_adv: batadv0: Removing interface: batadv_slave_0
[  193.376596][   T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.390759][   T78] batman_adv: batadv0: Removing interface: batadv_slave_1
[  193.402387][   T78] bridge_slave_1: left allmulticast mode
[  193.410612][   T78] bridge_slave_1: left promiscuous mode
[  193.416409][   T78] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.432757][   T78] bridge_slave_0: left allmulticast mode
[  193.442043][   T78] bridge_slave_0: left promiscuous mode
[  193.448752][   T78] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.504058][   T78] veth1_macvtap: left promiscuous mode
[  193.511340][   T78] veth0_macvtap: left promiscuous mode
[  193.517043][   T78] veth1_vlan: left promiscuous mode
[  193.528741][   T78] veth0_vlan: left promiscuous mode
[  194.100824][   T78] team0 (unregistering): Port device team_slave_1 removed
[  194.145117][   T78] team0 (unregistering): Port device team_slave_0 removed
[  194.185956][   T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.232016][   T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.271145][ T5102] Bluetooth: hci0: command tx timeout
[  194.432815][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  194.448382][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  194.696971][   T78] bond0 (unregistering): Released all slaves
[  194.799307][ T6586] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.808616][ T6586] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.817378][ T6586] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.826920][ T6586] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.042497][ T6656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.203530][ T6813] chnl_net:caif_netlink_parms(): no params data found
[  195.273458][  T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.285052][  T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.467511][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.516684][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.650548][ T6813] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.657819][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.679232][ T6813] bridge_slave_0: entered allmulticast mode
[  195.687040][ T6813] bridge_slave_0: entered promiscuous mode
[  195.728013][ T6813] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.761126][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.769919][ T6813] bridge_slave_1: entered allmulticast mode
[  195.798875][ T6813] bridge_slave_1: entered promiscuous mode
[  195.941170][ T6813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.083948][   T78] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.103254][ T6813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.121559][ T6737] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  196.132610][ T6737] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  196.216319][   T78] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.232629][ T6737] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  196.243959][ T6737] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  196.255348][ T6871] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  196.279292][ T6813] team0: Port device team_slave_0 added
[  196.295238][ T6872] syzkaller0: entered promiscuous mode
[  196.301993][ T6872] syzkaller0: entered allmulticast mode
[  196.339010][   T78] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.350932][ T5102] Bluetooth: hci0: command tx timeout
[  196.361946][ T6813] team0: Port device team_slave_1 added
[  196.368022][ T6656] veth0_vlan: entered promiscuous mode
[  196.388726][ T6656] veth1_vlan: entered promiscuous mode
[  196.492192][   T78] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.600494][ T6813] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.624689][ T6813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.716585][ T6813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.756190][ T6813] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.765216][ T6813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.794902][ T6813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.913343][ T6813] hsr_slave_0: entered promiscuous mode
[  196.921496][ T6813] hsr_slave_1: entered promiscuous mode
[  196.927844][ T6813] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  196.937239][ T6813] Cannot create hsr debugfs directory
[  197.154747][ T6656] veth0_macvtap: entered promiscuous mode
[  197.259223][ T6656] veth1_macvtap: entered promiscuous mode
[  197.484859][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.501202][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.512271][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.523221][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.535498][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.656976][ T6737] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.672382][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.701189][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.716240][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.736637][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.758919][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.849769][ T6656] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.856401][ T6907] loop6: detected capacity change from 0 to 512
[  197.869150][ T6656] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.877882][ T6656] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.897963][ T6656] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.927438][ T6907] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  197.956366][ T6737] 8021q: adding VLAN 0 to HW filter on device team0
[  197.961972][ T6907] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  197.972540][ T6813] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  197.983640][ T6907] EXT4-fs (loop6): 1 truncate cleaned up
[  197.990962][ T6907] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.061312][ T6813] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  198.079830][ T6813] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  198.124488][ T6813] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  198.141504][ T6586] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.161927][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.169109][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.287284][ T6510] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.294574][ T6510] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.477159][ T6923] loop6: detected capacity change from 0 to 2048
[  198.549767][ T5102] Bluetooth: hci0: command tx timeout
[  198.573878][ T6923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.790605][ T6923] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.180: bg 0: block 234: padding at end of block bitmap is not set
[  198.810424][ T6923] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117
[  198.822964][ T6923] EXT4-fs (loop6): This should not happen!! Data will be lost
[  198.822964][ T6923] 
[  200.390973][  T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.420496][  T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.589417][ T5102] Bluetooth: hci0: command tx timeout
[  200.664530][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.697840][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.878819][   T78] hsr_slave_0: left promiscuous mode
[  200.898598][   T78] hsr_slave_1: left promiscuous mode
[  200.914689][   T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.927858][   T78] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.943930][   T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.955028][   T78] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.967980][   T78] bridge_slave_1: left allmulticast mode
[  200.987095][   T78] bridge_slave_1: left promiscuous mode
[  200.994913][   T78] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.012540][   T78] bridge_slave_0: left allmulticast mode
[  201.022494][   T78] bridge_slave_0: left promiscuous mode
[  201.031130][   T78] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.076430][   T78] veth1_macvtap: left promiscuous mode
[  201.087671][   T78] veth0_macvtap: left promiscuous mode
[  201.099559][   T78] veth1_vlan: left promiscuous mode
[  201.105036][   T78] veth0_vlan: left promiscuous mode
[  201.141132][ T6586] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.291666][ T6928] loop6: detected capacity change from 0 to 256
[  201.376952][ T6928] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  201.838331][    T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  201.885602][   T78] team0 (unregistering): Port device team_slave_1 removed
[  201.934550][   T78] team0 (unregistering): Port device team_slave_0 removed
[  201.981347][   T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.032469][   T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.089813][    T9] usb 7-1: config index 0 descriptor too short (expected 4114, got 18)
[  202.103436][    T9] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09
[  202.115769][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.125433][    T9] usb 7-1: Product: syz
[  202.130028][    T9] usb 7-1: Manufacturer: syz
[  202.134746][    T9] usb 7-1: SerialNumber: syz
[  202.154331][    T9] usb 7-1: config 0 descriptor??
[  202.392657][    T9] usb 7-1: USB disconnect, device number 2
[  202.718410][   T78] bond0 (unregistering): Released all slaves
[  203.007575][ T6813] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.116551][ T6813] 8021q: adding VLAN 0 to HW filter on device team0
[  203.194130][ T6510] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.201401][ T6510] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.252498][ T6510] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.259766][ T6510] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.344879][ T6940] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  203.365387][ T6942] syzkaller0: entered promiscuous mode
[  203.379574][ T6942] syzkaller0: entered allmulticast mode
[  203.523676][ T6737] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.845599][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.6.186'.
[  203.855646][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.6.186'.
[  203.898748][ T6862] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  204.088382][ T6862] usb 8-1: Using ep0 maxpacket: 32
[  204.124524][ T6862] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  204.153368][ T6862] usb 8-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  204.863103][ T6813] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.948548][ T6862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.959310][ T6862] usb 8-1: config 0 descriptor??
[  205.085099][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.187'.
[  205.099779][ T6962] loop6: detected capacity change from 0 to 16
[  205.139034][ T6962] erofs: (device loop6): mounted with root inode @ nid 36.
[  205.364395][ T6737] veth0_vlan: entered promiscuous mode
[  205.384590][ T6862] steelseries 0003:1038:1410.0002: not enough fields in HID_OUTPUT_REPORT 0
[  205.494230][ T6737] veth1_vlan: entered promiscuous mode
[  206.196865][ T6737] veth0_macvtap: entered promiscuous mode
[  206.281175][ T6737] veth1_macvtap: entered promiscuous mode
[  206.311951][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.342712][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.356734][ T6971] loop6: detected capacity change from 0 to 256
[  206.374743][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.400768][ T6862] usb 8-1: USB disconnect, device number 2
[  206.411206][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.457655][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.476791][ T6971] FAT-fs (loop6): Directory bread(block 64) failed
[  206.493347][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.504405][ T6971] FAT-fs (loop6): Directory bread(block 65) failed
[  206.516172][ T6971] FAT-fs (loop6): Directory bread(block 66) failed
[  206.523072][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.534441][ T6971] FAT-fs (loop6): Directory bread(block 67) failed
[  206.542018][ T6971] FAT-fs (loop6): Directory bread(block 68) failed
[  206.548997][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.559983][ T6971] FAT-fs (loop6): Directory bread(block 69) failed
[  206.566648][ T6971] FAT-fs (loop6): Directory bread(block 70) failed
[  206.573824][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.595324][ T6971] FAT-fs (loop6): Directory bread(block 71) failed
[  206.604128][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.611912][ T6971] FAT-fs (loop6): Directory bread(block 72) failed
[  206.641019][ T6971] FAT-fs (loop6): Directory bread(block 73) failed
[  206.657370][ T6737] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.676230][ T6737] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.703535][ T6737] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.723161][ T6737] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.401376][ T6813] veth0_vlan: entered promiscuous mode
[  208.453401][ T6813] veth1_vlan: entered promiscuous mode
[  208.462978][ T6926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.470967][ T6926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.585885][ T6813] veth0_macvtap: entered promiscuous mode
[  208.604277][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.643591][ T6813] veth1_macvtap: entered promiscuous mode
[  208.649873][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.692045][ T6981] loop7: detected capacity change from 0 to 512
[  208.747842][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.776337][ T6981] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  208.807688][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.818110][ T6981] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  208.842944][ T6981] EXT4-fs (loop7): 1 truncate cleaned up
[  208.858270][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.889768][ T6981] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.907162][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.938113][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.968987][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.987526][ T6813] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.026022][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.047096][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.068190][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.079015][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.090294][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.101098][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.113427][ T6813] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.143819][ T6813] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.179362][ T6813] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.201941][ T6813] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.212429][ T6813] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.245339][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.441341][ T3511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.462455][ T3511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.526520][ T6990] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  209.537369][ T6990] syzkaller0: entered promiscuous mode
[  209.543910][ T6990] syzkaller0: entered allmulticast mode
[  209.561708][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.8.193'.
[  209.573012][ T6992] netlink: 12 bytes leftover after parsing attributes in process `syz.8.193'.
[  209.588590][ T6510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.606690][ T6510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.947400][ T6997] loop6: detected capacity change from 0 to 256
[  209.977005][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.7.195'.
[  210.004537][ T6997] exFAT-fs (loop6): bogus number of FAT structure
[  210.013164][ T6999] loop7: detected capacity change from 0 to 16
[  210.016153][ T6997] exFAT-fs (loop6): failed to read boot sector
[  210.037744][ T6997] exFAT-fs (loop6): failed to recognize exfat type
[  210.051419][ T6999] erofs: (device loop7): mounted with root inode @ nid 36.
[  210.169238][ T6739] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  212.255057][ T6739] usb 10-1: config 67 has an invalid interface number: 37 but max is 0
[  212.312685][ T6739] usb 10-1: config 67 has no interface number 0
[  212.367629][ T6739] usb 10-1: config 67 interface 37 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  212.369905][ T7007] loop7: detected capacity change from 0 to 512
[  212.417994][ T6739] usb 10-1: config 67 interface 37 has no altsetting 0
[  212.432069][ T7009] loop8: detected capacity change from 0 to 128
[  212.441061][ T6739] usb 10-1: New USB device found, idVendor=0424, idProduct=9903, bcdDevice=f3.3b
[  212.462482][ T7007] EXT4-fs error (device loop7): ext4_quota_enable:7131: comm syz.7.197: inode #262144: comm syz.7.197: iget: illegal inode #
[  212.495841][ T6739] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.553303][ T7007] EXT4-fs (loop7): Remounting filesystem read-only
[  212.566665][ T7007] EXT4-fs warning (device loop7): ext4_enable_quotas:7175: Failed to enable quota tracking (type=2, err=-117, ino=262144). Please run e2fsck to fix.
[  212.583209][ T6739] smsc95xx v2.0.0
[  212.587163][ T6739] smsc95xx 10-1:67.37 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  212.623476][   T27] audit: type=1800 audit(1757738086.692:30): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.196" name="file1" dev="loop8" ino=1048632 res=0 errno=0
[  212.649895][ T7007] EXT4-fs (loop7): mount failed
[  212.697239][ T6739] smsc95xx: probe of 10-1:67.37 failed with error -22
[  215.005299][    T9] usb 10-1: USB disconnect, device number 2
[  215.248980][ T7025] loop7: detected capacity change from 0 to 512
[  215.272847][ T7025] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  215.477646][ T7025] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  215.515763][ T7025] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.632832][ T7034] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore
[  215.642661][ T7034] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  216.269049][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  216.562475][ T7039] syzkaller0: entered promiscuous mode
[  216.568013][ T7039] syzkaller0: entered allmulticast mode
[  216.810128][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.204'.
[  216.921376][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.6.204'.
[  217.343530][ T7054] loop9: detected capacity change from 0 to 256
[  217.545612][ T7054] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  217.919788][   T27] audit: type=1326 audit(1757738091.992:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.6.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6658eba9 code=0x7ffc0000
[  218.018105][   T27] audit: type=1326 audit(1757738091.992:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.6.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6658eba9 code=0x7ffc0000
[  218.088142][   T27] audit: type=1326 audit(1757738092.022:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.6.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb6658eba9 code=0x7ffc0000
[  218.165734][   T27] audit: type=1326 audit(1757738092.022:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.6.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6658eba9 code=0x7ffc0000
[  218.245307][   T27] audit: type=1326 audit(1757738092.022:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.6.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb6658eba9 code=0x7ffc0000
[  218.302568][   T27] audit: type=1326 audit(1757738092.022:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.6.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6658eba9 code=0x7ffc0000
[  218.398260][   T27] audit: type=1326 audit(1757738092.022:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.6.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb6658eba9 code=0x7ffc0000
[  218.515762][   T27] audit: type=1326 audit(1757738092.022:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.6.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6658eba9 code=0x7ffc0000
[  218.583697][   T27] audit: type=1326 audit(1757738092.032:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.6.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6658eba9 code=0x7ffc0000
[  218.673439][   T27] audit: type=1326 audit(1757738092.032:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.6.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feb6658d65f code=0x7ffc0000
[  218.911497][ T7057] loop8: detected capacity change from 0 to 40427
[  218.961394][ T7057] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x7ffff
[  219.012535][ T7057] F2FS-fs (loop8): invalid crc value
[  219.033327][ T7057] F2FS-fs (loop8): Found nat_bits in checkpoint
[  219.212956][ T7057] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  219.287577][ T7089] syzkaller0: entered promiscuous mode
[  219.299332][ T7057] overlayfs: failed to resolve './file0': -2
[  219.316523][ T7089] syzkaller0: entered allmulticast mode
[  219.329561][ T7057] overlayfs: missing 'lowerdir'
[  221.759753][ T6737] syz-executor: attempt to access beyond end of device
[  221.759753][ T6737] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  221.843777][ T6737] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  221.855616][ T6737] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  222.094295][ T7118] loop7: detected capacity change from 0 to 256
[  222.238161][ T7118] exFAT-fs (loop7): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[  222.688267][ T7122] loop6: detected capacity change from 0 to 512
[  223.042104][ T7122] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  223.162848][ T7122] EXT4-fs (loop6): orphan cleanup on readonly fs
[  223.225421][ T7122] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:512: comm syz.6.222: Block bitmap for bg 0 marked uninitialized
[  223.348292][ T7122] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6637: Corrupt filesystem
[  223.378890][ T7122] EXT4-fs (loop6): 1 orphan inode deleted
[  223.427798][ T7122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  225.360219][ T6586] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /20/file1: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0
[  226.745198][ T6586] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  226.838894][ T6586] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  228.333007][   T78] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.501987][   T78] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.790911][   T78] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.810818][ T7175] loop8: detected capacity change from 0 to 512
[  229.947949][ T7175] EXT4-fs warning (device loop8): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  230.040546][ T7175] EXT4-fs (loop8): mount failed
[  230.074977][   T78] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.556153][ T6586] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.920104][ T7191] loop8: detected capacity change from 0 to 4096
[  232.903570][ T7191] EXT4-fs (loop8): Test dummy encryption mode enabled
[  232.985470][ T7191] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.330712][ T7191] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  233.352055][ T7211] loop7: detected capacity change from 0 to 8192
[  233.382912][ T7211] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  233.396345][ T7213] loop9: detected capacity change from 0 to 4096
[  233.440980][ T7211] FAT-fs (loop7): error, clusters badly computed (1 != 0)
[  233.488435][   T27] kauditd_printk_skb: 2 callbacks suppressed
[  233.488449][   T27] audit: type=1800 audit(1757738107.552:43): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.235" name="file1" dev="loop8" ino=15 res=0 errno=0
[  233.517710][ T7211] FAT-fs (loop7): Filesystem has been set read-only
[  233.570078][ T7211] FAT-fs (loop7): error, clusters badly computed (2 != 1)
[  233.619818][ T7213] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.639260][ T7211] FAT-fs (loop7): error, clusters badly computed (3 != 2)
[  233.660855][ T7211] FAT-fs (loop7): error, clusters badly computed (4 != 3)
[  233.690803][ T7208] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  233.819652][ T7208] overlayfs: upper fs does not support tmpfile.
[  233.936825][ T7208] fscrypt (loop8): Error allocating 'xts(aes)' transform: -4
[  234.636472][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  234.646682][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  234.655264][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  234.666512][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  234.674658][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  234.680528][ T6813] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.682515][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  234.746956][ T6737] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.924719][ T7238] loop8: detected capacity change from 0 to 512
[  234.964529][ T7238] EXT4-fs: Ignoring removed mblk_io_submit option
[  235.044801][ T7238] EXT4-fs error (device loop8): ext4_orphan_get:1399: comm syz.8.243: inode #13: comm syz.8.243: iget: illegal inode #
[  235.227785][ T7238] EXT4-fs (loop8): Remounting filesystem read-only
[  235.478773][ T7238] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.045040][ T7252] loop7: detected capacity change from 0 to 256
[  236.203027][ T7252] FAT-fs (loop7): Directory bread(block 64) failed
[  236.242605][ T7252] FAT-fs (loop7): Directory bread(block 65) failed
[  236.286319][ T7252] FAT-fs (loop7): Directory bread(block 66) failed
[  236.298086][ T7252] FAT-fs (loop7): Directory bread(block 67) failed
[  236.304791][ T7252] FAT-fs (loop7): Directory bread(block 68) failed
[  236.361922][ T7252] FAT-fs (loop7): Directory bread(block 69) failed
[  236.378257][ T7260] syz.8.243[7260] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  236.378889][ T7260] syz.8.243[7260] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  236.635214][ T7252] FAT-fs (loop7): Directory bread(block 70) failed
[  236.748363][ T5790] Bluetooth: hci1: command tx timeout
[  236.774168][ T7252] FAT-fs (loop7): Directory bread(block 71) failed
[  236.827126][ T7252] FAT-fs (loop7): Directory bread(block 72) failed
[  236.857392][ T7252] FAT-fs (loop7): Directory bread(block 73) failed
[  237.339595][   T78] hsr_slave_0: left promiscuous mode
[  237.849000][   T78] hsr_slave_1: left promiscuous mode
[  238.003516][   T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.158977][   T78] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.197887][   T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.264187][   T78] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.339230][   T78] bridge_slave_1: left allmulticast mode
[  238.382630][   T78] bridge_slave_1: left promiscuous mode
[  238.432621][   T78] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.530014][   T78] bridge_slave_0: left allmulticast mode
[  238.640590][   T78] bridge_slave_0: left promiscuous mode
[  238.646537][   T78] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.670592][ T6737] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.798778][   T78] veth1_macvtap: left promiscuous mode
[  238.817598][   T78] veth0_macvtap: left promiscuous mode
[  238.889146][ T7276] xt_socket: unknown flags 0xc
[  238.917766][ T5102] Bluetooth: hci1: command tx timeout
[  239.066895][   T78] veth1_vlan: left promiscuous mode
[  239.207270][   T78] veth0_vlan: left promiscuous mode
[  239.918205][    T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  239.946863][ T7287] loop8: detected capacity change from 0 to 128
[  240.025274][ T6740] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  240.133481][    T9] usb 10-1: Using ep0 maxpacket: 8
[  240.159965][    T9] usb 10-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  240.204794][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.230990][    T9] usb 10-1: config 0 descriptor??
[  240.238694][ T6740] usb 8-1: Using ep0 maxpacket: 16
[  240.988772][ T5102] Bluetooth: hci1: command tx timeout
[  241.706817][   T78] team0 (unregistering): Port device team_slave_1 removed
[  241.793422][   T78] team0 (unregistering): Port device team_slave_0 removed
[  241.851297][ T6740] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  241.862265][ T6740] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  241.897310][   T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.995906][   T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.557814][    T9] logitech 0003:046D:C294.0003: unknown main item tag 0x0
[  242.565155][ T6740] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32
[  242.575037][    T9] logitech 0003:046D:C294.0003: item fetching failed at offset 3/5
[  242.584361][    T9] logitech 0003:046D:C294.0003: parse failed
[  242.591284][    T9] logitech: probe of 0003:046D:C294.0003 failed with error -22
[  242.604183][ T6740] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  242.616130][ T6740] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  242.626088][    T9] usb 10-1: USB disconnect, device number 3
[  242.632384][ T6740] usb 8-1: SerialNumber: syz
[  242.647265][ T7283] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  242.685211][ T6740] cdc_acm 8-1:1.0: skipping garbage
[  242.721307][ T6740] cdc_acm: probe of 8-1:1.0 failed with error -12
[  242.798641][ T6740] usb 8-1: USB disconnect, device number 3
[  242.949166][ T7299] loop9: detected capacity change from 0 to 512
[  242.954883][ T7300] loop7: detected capacity change from 0 to 256
[  242.963402][ T7299] EXT4-fs: Ignoring removed mblk_io_submit option
[  243.013081][ T7299] EXT4-fs error (device loop9): ext4_orphan_get:1399: comm syz.9.255: inode #13: comm syz.9.255: iget: illegal inode #
[  243.070121][ T7299] EXT4-fs (loop9): Remounting filesystem read-only
[  243.078518][ T5102] Bluetooth: hci1: command tx timeout
[  243.108518][ T7299] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.147330][ T7300] FAT-fs (loop7): Directory bread(block 64) failed
[  243.168461][ T7300] FAT-fs (loop7): Directory bread(block 65) failed
[  243.175181][ T7300] FAT-fs (loop7): Directory bread(block 66) failed
[  243.184921][ T7300] FAT-fs (loop7): Directory bread(block 67) failed
[  243.196976][ T7300] FAT-fs (loop7): Directory bread(block 68) failed
[  243.206170][ T7300] FAT-fs (loop7): Directory bread(block 69) failed
[  243.219718][ T7300] FAT-fs (loop7): Directory bread(block 70) failed
[  243.226295][ T7300] FAT-fs (loop7): Directory bread(block 71) failed
[  243.252282][ T7300] FAT-fs (loop7): Directory bread(block 72) failed
[  243.265087][ T7300] FAT-fs (loop7): Directory bread(block 73) failed
[  243.672783][ T7304] syz.9.255[7304] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  243.672927][ T7304] syz.9.255[7304] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  244.616079][   T78] bond0 (unregistering): Released all slaves
[  246.584501][ T6813] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.723637][ T7233] chnl_net:caif_netlink_parms(): no params data found
[  248.148289][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.180433][ T7349] syz.8.263[7349] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  248.180485][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.180578][ T7349] syz.8.263[7349] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  248.211582][ T7233] bridge_slave_0: entered allmulticast mode
[  248.253430][ T7233] bridge_slave_0: entered promiscuous mode
[  248.291409][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.308705][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.316034][ T7233] bridge_slave_1: entered allmulticast mode
[  248.349413][ T7233] bridge_slave_1: entered promiscuous mode
[  248.503539][ T7233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.512390][ T7355] loop8: detected capacity change from 0 to 512
[  248.533180][ T7233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.553196][ T7355] EXT4-fs: Ignoring removed mblk_io_submit option
[  248.615186][ T7355] EXT4-fs error (device loop8): ext4_orphan_get:1399: comm syz.8.266: inode #13: comm syz.8.266: iget: illegal inode #
[  248.693435][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.9.267'.
[  248.717817][ T7355] EXT4-fs (loop8): Remounting filesystem read-only
[  248.727449][ T7360] netlink: 24 bytes leftover after parsing attributes in process `syz.9.267'.
[  248.763499][ T7233] team0: Port device team_slave_0 added
[  248.784165][ T7355] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.824659][ T7233] team0: Port device team_slave_1 added
[  249.303579][ T7373] syz.8.266[7373] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  249.303717][ T7373] syz.8.266[7373] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  250.949453][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.060135][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.215975][ T7233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.295724][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.335002][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.518446][ T7233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.805085][ T7233] hsr_slave_0: entered promiscuous mode
[  251.918914][ T7233] hsr_slave_1: entered promiscuous mode
[  252.227978][   T27] audit: type=1326 audit(1757738126.292:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.9.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751978eba9 code=0x7ffc0000
[  252.352619][   T27] audit: type=1326 audit(1757738126.352:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.9.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f751978eba9 code=0x7ffc0000
[  252.383931][ T6737] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.414803][   T27] audit: type=1326 audit(1757738126.352:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.9.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751978eba9 code=0x7ffc0000
[  252.458760][   T27] audit: type=1326 audit(1757738126.352:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.9.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f751978eba9 code=0x7ffc0000
[  252.483431][   T27] audit: type=1326 audit(1757738126.472:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.9.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751978eba9 code=0x7ffc0000
[  252.506077][   T27] audit: type=1326 audit(1757738126.472:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.9.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751978eba9 code=0x7ffc0000
[  252.530743][ T7396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  252.922552][ T7411] loop9: detected capacity change from 0 to 512
[  252.941466][ T7413] loop8: detected capacity change from 0 to 128
[  252.995239][ T7411] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  253.032663][   T27] audit: type=1800 audit(1757738127.092:50): pid=7413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.281" name="file1" dev="loop8" ino=1048637 res=0 errno=0
[  253.310093][   T48] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  254.537582][ T7432] loop9: detected capacity change from 0 to 512
[  254.982445][ T7432] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  255.263824][ T7432] EXT4-fs (loop9): orphan cleanup on readonly fs
[  255.295225][ T7432] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:512: comm syz.9.285: Block bitmap for bg 0 marked uninitialized
[  255.311383][ T7432] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6637: Corrupt filesystem
[  255.328303][ T7432] EXT4-fs (loop9): 1 orphan inode deleted
[  255.335747][ T7432] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  255.585703][ T7438] syz.8.286 uses obsolete (PF_INET,SOCK_PACKET)
[  255.649852][ T7438] loop8: detected capacity change from 0 to 512
[  256.527720][ T6813] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /30/file1: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0
[  256.549313][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  256.557302][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  256.594291][ T6813] EXT4-fs error (device loop9): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  256.647417][ T7438] 
[  256.649816][ T7438] ======================================================
[  256.656861][ T7438] WARNING: possible circular locking dependency detected
[  256.663930][ T7438] syzkaller #0 Not tainted
[  256.668377][ T7438] ------------------------------------------------------
[  256.675425][ T7438] syz.8.286/7438 is trying to acquire lock:
[  256.681343][ T7438] ffff88805f4d8bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0
[  256.691475][ T7438] 
[  256.691475][ T7438] but task is already holding lock:
[  256.698880][ T7438] ffff8880775b32c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0
[  256.708987][ T7438] 
[  256.708987][ T7438] which lock already depends on the new lock.
[  256.708987][ T7438] 
[  256.720154][ T7438] 
[  256.720154][ T7438] the existing dependency chain (in reverse order) is:
[  256.730360][ T7438] 
[  256.730360][ T7438] -> #1 (&ei->xattr_sem){++++}-{3:3}:
[  256.738157][ T7438]        down_write+0x97/0x1f0
[  256.742981][ T7438]        ext4_destroy_inline_data+0x28/0xe0
[  256.748941][ T7438]        ext4_do_writepages+0x4c2/0x38d0
[  256.754621][ T7438]        ext4_writepages+0x1a8/0x2f0
[  256.759954][ T7438]        do_writepages+0x3a2/0x600
[  256.765113][ T7438]        filemap_fdatawrite_wbc+0x122/0x180
[  256.771150][ T7438]        file_write_and_wait_range+0x171/0x240
[  256.777416][ T7438]        generic_buffers_fsync_noflush+0x6f/0x160
[  256.783982][ T7438]        ext4_sync_file+0x454/0xc10
[  256.789743][ T7438]        ext4_buffered_write_iter+0x2c0/0x350
[  256.795848][ T7438]        ext4_file_write_iter+0x1d9/0x1870
[  256.801697][ T7438]        do_iter_write+0x79a/0xc70
[  256.806944][ T7438]        iter_file_splice_write+0x66f/0xc50
[  256.813000][ T7438]        direct_splice_actor+0xe8/0x130
[  256.818601][ T7438]        splice_direct_to_actor+0x2f0/0x870
[  256.824545][ T7438]        do_splice_direct+0x1b7/0x2c0
[  256.830049][ T7438]        do_sendfile+0x5dc/0xf70
[  256.835118][ T7438]        __se_sys_sendfile64+0x13f/0x190
[  256.840830][ T7438]        do_syscall_64+0x55/0xb0
[  256.845844][ T7438]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  256.852435][ T7438] 
[  256.852435][ T7438] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  256.860922][ T7438]        __lock_acquire+0x2ddb/0x7c80
[  256.860943][ T6813] EXT4-fs error (device loop9): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  256.866576][ T7438]        lock_acquire+0x197/0x410
[  256.866597][ T7438]        percpu_down_read+0x44/0x1a0
[  256.866625][ T7438]        ext4_writepages+0x170/0x2f0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  256.866651][ T7438]        do_writepages+0x3a2/0x600
[  256.866676][ T7438]        __writeback_single_inode+0x153/0xee0
[  256.866702][ T7438]        writeback_single_inode+0x211/0x720
[  256.866725][ T7438]        write_inode_now+0x161/0x1e0
[  256.866747][ T7438]        iput+0x5b2/0x920
[  256.866763][ T7438]        ext4_xattr_block_set+0x273a/0x32a0
[  256.866786][ T7438]        ext4_expand_extra_isize_ea+0x10ea/0x19e0
[  256.866812][ T7438]        __ext4_expand_extra_isize+0x306/0x400
[  256.866838][ T7438]        __ext4_mark_inode_dirty+0x45d/0x6e0
[  256.866861][ T7438]        ext4_evict_inode+0x7ed/0xea0
[  256.866889][ T7438]        evict+0x486/0x870
[  256.866908][ T7438]        ext4_orphan_cleanup+0xbd4/0x1400
[  256.866936][ T7438]        ext4_fill_super+0x5de7/0x66c0
[  256.866955][ T7438]        get_tree_bdev+0x3e4/0x510
[  256.866971][ T7438]        vfs_get_tree+0x8c/0x280
[  256.866987][ T7438]        do_new_mount+0x24b/0xa40
[  256.867002][ T7438]        __se_sys_mount+0x2da/0x3c0
[  256.867018][ T7438]        do_syscall_64+0x55/0xb0
[  256.867040][ T7438]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  256.867072][ T7438] 
[  256.867072][ T7438] other info that might help us debug this:
[  256.867072][ T7438] 
[  256.867079][ T7438]  Possible unsafe locking scenario:
[  256.867079][ T7438] 
[  256.867084][ T7438]        CPU0                    CPU1
[  256.867090][ T7438]        ----                    ----
[  256.867095][ T7438]   lock(&ei->xattr_sem);
[  256.867111][ T7438]                                lock(&sbi->s_writepages_rwsem);
[  256.867127][ T7438]                                lock(&ei->xattr_sem);
[  256.867142][ T7438]   rlock(&sbi->s_writepages_rwsem);
[  256.867157][ T7438] 
[  256.867157][ T7438]  *** DEADLOCK ***
[  256.867157][ T7438] 
[  256.867161][ T7438] 3 locks held by syz.8.286/7438:
[  256.867173][ T7438]  #0: ffff88805f4da0e0 (&type->s_umount_key#32){++++}-{3:3}, at: get_tree_bdev+0x344/0x510
[  256.867227][ T7438]  #1: ffff88805f4da608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0
[  256.867280][ T7438]  #2: ffff8880775b32c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0
[  256.867332][ T7438] 
[  256.867332][ T7438] stack backtrace:
[  256.867356][ T7438] CPU: 0 PID: 7438 Comm: syz.8.286 Not tainted syzkaller #0
[  256.867375][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  256.867396][ T7438] Call Trace:
[  256.867404][ T7438]  <TASK>
[  256.867416][ T7438]  dump_stack_lvl+0x16c/0x230
[  256.867440][ T7438]  ? load_image+0x3b0/0x3b0
[  256.867457][ T7438]  ? show_regs_print_info+0x20/0x20
[  256.867486][ T7438]  ? print_circular_bug+0x12b/0x1a0
[  256.867513][ T7438]  check_noncircular+0x2bd/0x3c0
[  256.867536][ T7438]  ? look_up_lock_class+0x75/0x140
[  257.155506][ T7438]  ? print_deadlock_bug+0x5d0/0x5d0
[  257.160818][ T7438]  ? lockdep_lock+0xe0/0x220
[  257.165531][ T7438]  ? _find_first_zero_bit+0xd3/0x100
[  257.170856][ T7438]  __lock_acquire+0x2ddb/0x7c80
[  257.175778][ T7438]  ? mark_lock+0x94/0x320
[  257.180239][ T7438]  ? verify_lock_unused+0x140/0x140
[  257.185814][ T7438]  ? __lock_acquire+0x1334/0x7c80
[  257.190857][ T7438]  ? verify_lock_unused+0x140/0x140
[  257.196259][ T7438]  lock_acquire+0x197/0x410
[  257.200871][ T7438]  ? ext4_writepages+0x170/0x2f0
[  257.205859][ T7438]  ? __might_sleep+0xe0/0xe0
[  257.210470][ T7438]  ? mark_lock+0x94/0x320
[  257.214814][ T7438]  ? read_lock_is_recursive+0x20/0x20
[  257.220201][ T7438]  ? __lock_acquire+0x1334/0x7c80
[  257.225231][ T7438]  percpu_down_read+0x44/0x1a0
[  257.230027][ T7438]  ? ext4_writepages+0x170/0x2f0
[  257.235066][ T7438]  ext4_writepages+0x170/0x2f0
[  257.240288][ T7438]  ? ext4_read_folio+0x2f0/0x2f0
[  257.245238][ T7438]  ? __rwlock_init+0x150/0x150
[  257.250025][ T7438]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  257.255957][ T7438]  ? do_raw_spin_unlock+0x121/0x230
[  257.261862][ T7438]  ? ext4_read_folio+0x2f0/0x2f0
[  257.266813][ T7438]  do_writepages+0x3a2/0x600
[  257.271508][ T7438]  ? folio_clear_dirty_for_io+0xc30/0xc30
[  257.277247][ T7438]  ? writeback_single_inode+0x206/0x720
[  257.282824][ T7438]  ? __lock_acquire+0x7c80/0x7c80
[  257.287855][ T7438]  ? do_raw_spin_lock+0x121/0x2c0
[  257.292902][ T7438]  ? get_tree_bdev+0x3e4/0x510
[  257.297684][ T7438]  __writeback_single_inode+0x153/0xee0
[  257.303274][ T7438]  writeback_single_inode+0x211/0x720
[  257.308688][ T7438]  ? write_inode_now+0x1e0/0x1e0
[  257.313681][ T7438]  write_inode_now+0x161/0x1e0
[  257.318474][ T7438]  ? bdi_split_work_to_wbs+0x890/0x890
[  257.323947][ T7438]  ? do_raw_spin_unlock+0x121/0x230
[  257.329159][ T7438]  iput+0x5b2/0x920
[  257.333005][ T7438]  ext4_xattr_block_set+0x273a/0x32a0
[  257.338413][ T7438]  ? __might_sleep+0xe0/0xe0
[  257.343557][ T7438]  ? xattr_find_entry+0x12b/0x2f0
[  257.348688][ T7438]  ? ext4_xattr_block_find+0x350/0x350
[  257.354178][ T7438]  ? ext4_xattr_block_find+0x2d4/0x350
[  257.359765][ T7438]  ext4_expand_extra_isize_ea+0x10ea/0x19e0
[  257.365741][ T7438]  __ext4_expand_extra_isize+0x306/0x400
[  257.371661][ T7438]  __ext4_mark_inode_dirty+0x45d/0x6e0
[  257.377167][ T7438]  ext4_evict_inode+0x7ed/0xea0
[  257.382135][ T7438]  ? _raw_spin_unlock+0x28/0x40
[  257.387283][ T7438]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  257.393194][ T7438]  ? do_raw_spin_unlock+0x121/0x230
[  257.398423][ T7438]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  257.404411][ T7438]  evict+0x486/0x870
[  257.408342][ T7438]  ? __lock_acquire+0x7c80/0x7c80
[  257.413401][ T7438]  ? proc_nr_inodes+0x230/0x230
[  257.418258][ T7438]  ? do_raw_spin_unlock+0x121/0x230
[  257.423466][ T7438]  ? _raw_spin_unlock+0x28/0x40
[  257.428331][ T7438]  ? iput+0x70a/0x920
[  257.432327][ T7438]  ext4_orphan_cleanup+0xbd4/0x1400
[  257.437579][ T7438]  ? ext4_orphan_del+0xba0/0xba0
[  257.442533][ T7438]  ? ext4_register_li_request+0x183/0x940
[  257.448275][ T7438]  ? errseq_check_and_advance+0x66/0x120
[  257.454041][ T7438]  ext4_fill_super+0x5de7/0x66c0
[  257.459031][ T7438]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  257.465303][ T7438]  ? vscnprintf+0x80/0x80
[  257.469650][ T7438]  ? down_read_killable+0x340/0x340
[  257.475149][ T7438]  ? setup_bdev_super+0x56b/0x660
[  257.480191][ T7438]  get_tree_bdev+0x3e4/0x510
[  257.484792][ T7438]  ? vfs_parse_fs_string+0x160/0x160
[  257.490086][ T7438]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  257.496355][ T7438]  ? setup_bdev_super+0x660/0x660
[  257.501381][ T7438]  ? apparmor_capable+0x137/0x1a0
[  257.506408][ T7438]  ? bpf_lsm_capable+0x9/0x10
[  257.511100][ T7438]  ? security_capable+0x89/0xb0
[  257.515956][ T7438]  vfs_get_tree+0x8c/0x280
[  257.520378][ T7438]  do_new_mount+0x24b/0xa40
[  257.524884][ T7438]  __se_sys_mount+0x2da/0x3c0
[  257.529582][ T7438]  ? __x64_sys_mount+0xc0/0xc0
[  257.534373][ T7438]  ? lockdep_hardirqs_on+0x98/0x150
[  257.539601][ T7438]  ? __x64_sys_mount+0x20/0xc0
[  257.544372][ T7438]  do_syscall_64+0x55/0xb0
[  257.548812][ T7438]  ? clear_bhb_loop+0x40/0x90
[  257.553491][ T7438]  ? clear_bhb_loop+0x40/0x90
[  257.558195][ T7438]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  257.564120][ T7438] RIP: 0033:0x7ff1b019034a
[  257.568564][ T7438] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  257.588286][ T7438] RSP: 002b:00007ff1ae3f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  257.598633][ T7438] RAX: ffffffffffffffda RBX: 00007ff1ae3f5ef0 RCX: 00007ff1b019034a
[  257.607329][ T7438] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ff1ae3f5eb0
[  257.615320][ T7438] RBP: 0000200000000180 R08: 00007ff1ae3f5ef0 R09: 0000000000800700
[  257.623321][ T7438] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[  257.632266][ T7438] R13: 00007ff1ae3f5eb0 R14: 0000000000000473 R15: 0000200000000680
[  257.640273][ T7438]  </TASK>
[  257.676177][ T7438] ------------[ cut here ]------------
[  257.683468][ T7438] EA inode 11 i_nlink=2
[  257.732870][ T7438] WARNING: CPU: 0 PID: 7438 at fs/ext4/xattr.c:1070 ext4_xattr_inode_update_ref+0x521/0x580
[  257.747263][ T7438] Modules linked in:
[  257.751264][ T7438] CPU: 0 PID: 7438 Comm: syz.8.286 Not tainted syzkaller #0
[  257.758615][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  257.768760][ T7438] RIP: 0010:ext4_xattr_inode_update_ref+0x521/0x580
[  257.775422][ T7438] Code: 24 50 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 31 43 9a ff 49 8b 37 48 c7 c7 00 d1 be 8a 44 89 f2 e8 cf 73 0d ff <0f> 0b 4c 8b 64 24 18 48 8b 5c 24 10 4c 8d 7c 24 60 e9 1f fe ff ff
[  257.796211][ T7438] RSP: 0018:ffffc90003997220 EFLAGS: 00010246
[  257.802772][ T7438] RAX: 1f41ecdc93a07a00 RBX: 0000000000000001 RCX: 0000000000080000
[  257.810967][ T7438] RDX: ffffc900123a9000 RSI: 000000000007ffff RDI: 0000000000080000
[  257.819491][ T7438] RBP: ffffc90003997318 R08: ffffc90003996e27 R09: 1ffff92000732dc4
[  257.827538][ T7438] R10: dffffc0000000000 R11: fffff52000732dc5 R12: ffff88805b61f0b0
[  257.835604][ T7438] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88805b61f100
[  257.844101][ T7438] FS:  00007ff1ae3f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  257.853157][ T7438] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  257.860010][ T7438] CR2: 00007fed303b9000 CR3: 000000002bfc2000 CR4: 00000000003506f0
[  257.868175][ T7438] Call Trace:
[  257.871503][ T7438]  <TASK>
[  257.874509][ T7438]  ? ext4_xattr_list_entries+0x3d0/0x3d0
[  257.880278][ T7438]  ? ext4_xattr_inode_iget+0x3df/0x600
[  257.885844][ T7438]  ext4_xattr_set_entry+0xcda/0x1e90
[  257.891770][ T7438]  ext4_xattr_ibody_set+0x254/0x6a0
[  257.897128][ T7438]  ext4_expand_extra_isize_ea+0x113a/0x19e0
[  257.903264][ T7438]  __ext4_expand_extra_isize+0x306/0x400
[  257.909008][ T7438]  __ext4_mark_inode_dirty+0x45d/0x6e0
[  257.914591][ T7438]  ext4_evict_inode+0x7ed/0xea0
[  257.919549][ T7438]  ? _raw_spin_unlock+0x28/0x40
[  257.924453][ T7438]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  257.930457][ T7438]  ? do_raw_spin_unlock+0x121/0x230
[  257.935796][ T7438]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  257.941812][ T7438]  evict+0x486/0x870
[  257.945757][ T7438]  ? __lock_acquire+0x7c80/0x7c80
[  257.951189][ T7438]  ? proc_nr_inodes+0x230/0x230
[  257.956093][ T7438]  ? do_raw_spin_unlock+0x121/0x230
[  257.961401][ T7438]  ? _raw_spin_unlock+0x28/0x40
[  257.966292][ T7438]  ? iput+0x70a/0x920
[  257.970379][ T7438]  ext4_orphan_cleanup+0xbd4/0x1400
[  257.975729][ T7438]  ? ext4_orphan_del+0xba0/0xba0
[  257.980839][ T7438]  ? ext4_register_li_request+0x183/0x940
[  257.986613][ T7438]  ? errseq_check_and_advance+0x66/0x120
[  257.992578][ T7438]  ext4_fill_super+0x5de7/0x66c0
[  257.997582][ T7438]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  258.003984][ T7438]  ? vscnprintf+0x80/0x80
[  258.008412][ T7438]  ? down_read_killable+0x340/0x340
[  258.013665][ T7438]  ? setup_bdev_super+0x56b/0x660
[  258.018794][ T7438]  get_tree_bdev+0x3e4/0x510
[  258.023424][ T7438]  ? vfs_parse_fs_string+0x160/0x160
[  258.028833][ T7438]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  258.035122][ T7438]  ? setup_bdev_super+0x660/0x660
[  258.040256][ T7438]  ? apparmor_capable+0x137/0x1a0
[  258.045327][ T7438]  ? bpf_lsm_capable+0x9/0x10
[  258.050116][ T7438]  ? security_capable+0x89/0xb0
[  258.055012][ T7438]  vfs_get_tree+0x8c/0x280
[  258.059519][ T7438]  do_new_mount+0x24b/0xa40
[  258.064071][ T7438]  __se_sys_mount+0x2da/0x3c0
[  258.068862][ T7438]  ? __x64_sys_mount+0xc0/0xc0
[  258.073669][ T7438]  ? lockdep_hardirqs_on+0x98/0x150
[  258.078969][ T7438]  ? __x64_sys_mount+0x20/0xc0
[  258.083783][ T7438]  do_syscall_64+0x55/0xb0
[  258.088285][ T7438]  ? clear_bhb_loop+0x40/0x90
[  258.093234][ T7438]  ? clear_bhb_loop+0x40/0x90
[  258.098210][ T7438]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  258.104243][ T7438] RIP: 0033:0x7ff1b019034a
[  258.108739][ T7438] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  258.128720][ T7438] RSP: 002b:00007ff1ae3f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  258.137190][ T7438] RAX: ffffffffffffffda RBX: 00007ff1ae3f5ef0 RCX: 00007ff1b019034a
[  258.145267][ T7438] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ff1ae3f5eb0
[  258.153317][ T7438] RBP: 0000200000000180 R08: 00007ff1ae3f5ef0 R09: 0000000000800700
[  258.161392][ T7438] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[  258.169441][ T7438] R13: 00007ff1ae3f5eb0 R14: 0000000000000473 R15: 0000200000000680
[  258.177491][ T7438]  </TASK>
[  258.180622][ T7438] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  258.187933][ T7438] CPU: 0 PID: 7438 Comm: syz.8.286 Not tainted syzkaller #0
[  258.195252][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  258.205348][ T7438] Call Trace:
[  258.208732][ T7438]  <TASK>
[  258.211764][ T7438]  dump_stack_lvl+0x16c/0x230
[  258.216462][ T7438]  ? show_regs_print_info+0x20/0x20
[  258.221682][ T7438]  ? load_image+0x3b0/0x3b0
[  258.226301][ T7438]  panic+0x2c0/0x710
[  258.230222][ T7438]  ? bpf_jit_dump+0xd0/0xd0
[  258.234766][ T7438]  __warn+0x2e0/0x470
[  258.238811][ T7438]  ? ext4_xattr_inode_update_ref+0x521/0x580
[  258.244812][ T7438]  ? ext4_xattr_inode_update_ref+0x521/0x580
[  258.250809][ T7438]  report_bug+0x2be/0x4f0
[  258.255163][ T7438]  ? ext4_xattr_inode_update_ref+0x521/0x580
[  258.261161][ T7438]  ? ext4_xattr_inode_update_ref+0x521/0x580
[  258.267185][ T7438]  ? ext4_xattr_inode_update_ref+0x523/0x580
[  258.273635][ T7438]  handle_bug+0xcf/0x120
[  258.277907][ T7438]  exc_invalid_op+0x1a/0x50
[  258.282434][ T7438]  asm_exc_invalid_op+0x1a/0x20
[  258.287317][ T7438] RIP: 0010:ext4_xattr_inode_update_ref+0x521/0x580
[  258.293982][ T7438] Code: 24 50 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 31 43 9a ff 49 8b 37 48 c7 c7 00 d1 be 8a 44 89 f2 e8 cf 73 0d ff <0f> 0b 4c 8b 64 24 18 48 8b 5c 24 10 4c 8d 7c 24 60 e9 1f fe ff ff
[  258.313984][ T7438] RSP: 0018:ffffc90003997220 EFLAGS: 00010246
[  258.320071][ T7438] RAX: 1f41ecdc93a07a00 RBX: 0000000000000001 RCX: 0000000000080000
[  258.328073][ T7438] RDX: ffffc900123a9000 RSI: 000000000007ffff RDI: 0000000000080000
[  258.336064][ T7438] RBP: ffffc90003997318 R08: ffffc90003996e27 R09: 1ffff92000732dc4
[  258.344138][ T7438] R10: dffffc0000000000 R11: fffff52000732dc5 R12: ffff88805b61f0b0
[  258.352125][ T7438] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88805b61f100
[  258.360119][ T7438]  ? ext4_xattr_list_entries+0x3d0/0x3d0
[  258.365779][ T7438]  ? ext4_xattr_inode_iget+0x3df/0x600
[  258.371261][ T7438]  ext4_xattr_set_entry+0xcda/0x1e90
[  258.376574][ T7438]  ext4_xattr_ibody_set+0x254/0x6a0
[  258.381802][ T7438]  ext4_expand_extra_isize_ea+0x113a/0x19e0
[  258.387745][ T7438]  __ext4_expand_extra_isize+0x306/0x400
[  258.393400][ T7438]  __ext4_mark_inode_dirty+0x45d/0x6e0
[  258.398899][ T7438]  ext4_evict_inode+0x7ed/0xea0
[  258.403785][ T7438]  ? _raw_spin_unlock+0x28/0x40
[  258.408654][ T7438]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  258.414564][ T7438]  ? do_raw_spin_unlock+0x121/0x230
[  258.419781][ T7438]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  258.425688][ T7438]  evict+0x486/0x870
[  258.429598][ T7438]  ? __lock_acquire+0x7c80/0x7c80
[  258.434636][ T7438]  ? proc_nr_inodes+0x230/0x230
[  258.439503][ T7438]  ? do_raw_spin_unlock+0x121/0x230
[  258.444717][ T7438]  ? _raw_spin_unlock+0x28/0x40
[  258.449578][ T7438]  ? iput+0x70a/0x920
[  258.453575][ T7438]  ext4_orphan_cleanup+0xbd4/0x1400
[  258.458796][ T7438]  ? ext4_orphan_del+0xba0/0xba0
[  258.463756][ T7438]  ? ext4_register_li_request+0x183/0x940
[  258.469493][ T7438]  ? errseq_check_and_advance+0x66/0x120
[  258.475141][ T7438]  ext4_fill_super+0x5de7/0x66c0
[  258.480100][ T7438]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  258.486352][ T7438]  ? vscnprintf+0x80/0x80
[  258.490692][ T7438]  ? down_read_killable+0x340/0x340
[  258.495913][ T7438]  ? setup_bdev_super+0x56b/0x660
[  258.500950][ T7438]  get_tree_bdev+0x3e4/0x510
[  258.505584][ T7438]  ? vfs_parse_fs_string+0x160/0x160
[  258.510881][ T7438]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  258.517138][ T7438]  ? setup_bdev_super+0x660/0x660
[  258.522170][ T7438]  ? apparmor_capable+0x137/0x1a0
[  258.527201][ T7438]  ? bpf_lsm_capable+0x9/0x10
[  258.531900][ T7438]  ? security_capable+0x89/0xb0
[  258.536761][ T7438]  vfs_get_tree+0x8c/0x280
[  258.541188][ T7438]  do_new_mount+0x24b/0xa40
[  258.545700][ T7438]  __se_sys_mount+0x2da/0x3c0
[  258.550386][ T7438]  ? __x64_sys_mount+0xc0/0xc0
[  258.555155][ T7438]  ? lockdep_hardirqs_on+0x98/0x150
[  258.560458][ T7438]  ? __x64_sys_mount+0x20/0xc0
[  258.565231][ T7438]  do_syscall_64+0x55/0xb0
[  258.569661][ T7438]  ? clear_bhb_loop+0x40/0x90
[  258.574348][ T7438]  ? clear_bhb_loop+0x40/0x90
[  258.579037][ T7438]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  258.584952][ T7438] RIP: 0033:0x7ff1b019034a
[  258.589401][ T7438] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  258.609129][ T7438] RSP: 002b:00007ff1ae3f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  258.617652][ T7438] RAX: ffffffffffffffda RBX: 00007ff1ae3f5ef0 RCX: 00007ff1b019034a
[  258.625640][ T7438] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ff1ae3f5eb0
[  258.633628][ T7438] RBP: 0000200000000180 R08: 00007ff1ae3f5ef0 R09: 0000000000800700
[  258.641696][ T7438] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[  258.649672][ T7438] R13: 00007ff1ae3f5eb0 R14: 0000000000000473 R15: 0000200000000680
[  258.657660][ T7438]  </TASK>
[  258.660958][ T7438] Kernel Offset: disabled
[  258.665306][ T7438] Rebooting in 86400 seconds..