last executing test programs:

49.611930027s ago: executing program 0 (id=165):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x810)

49.404553372s ago: executing program 0 (id=167):
r0 = socket$inet(0x2, 0xa, 0x6)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0)

49.240006126s ago: executing program 0 (id=168):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc34000000000010902"], 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x50008000)

49.04452411s ago: executing program 3 (id=171):
openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x2)
write(r0, &(0x7f0000000000)='3', 0x4e)
pipe(0x0)

48.671860069s ago: executing program 3 (id=172):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000000)=0xd, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}}], 0x1, 0x20080058)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpuidle/current_driver\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
userfaultfd(0x1)
write$P9_RVERSION(r1, 0x0, 0x15)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000"], 0x48)
openat$kvm(0x0, 0x0, 0x0, 0x0)
r2 = msgget$private(0x0, 0x68d)
msgrcv(r2, 0x0, 0x0, 0x3, 0x3000)
msgsnd(r2, &(0x7f0000000100)={0x3}, 0x8, 0x800)
r3 = openat(0xffffffffffffff9c, 0x0, 0xc042, 0x0)
write$P9_RXATTRCREATE(r3, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
syz_usb_connect$midi(0x5, 0x88, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r5, &(0x7f0000000000)='3', 0x4e)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000440)={'\x00', 0x9, 0x6, 0x5, 0x0, 0x0, 0xffffffffffffffff})

47.992461304s ago: executing program 1 (id=177):
syz_read_part_table(0x5c2, &(0x7f0000000000)="$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")
syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010100020000102505a1a440000000010109024a00010100000009040000160202ff00052406000005240000040d240f"], 0x0)

47.3226479s ago: executing program 0 (id=178):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0)
mount(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

47.070099976s ago: executing program 0 (id=182):
syz_mount_image$udf(&(0x7f0000000f40), &(0x7f0000000f80)='./file1\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0xc58, &(0x7f0000000fc0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0xe0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0)
r0 = open(0x0, 0x107000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
read$msr(r0, &(0x7f0000000600)=""/175, 0xfffffe51)

46.719932184s ago: executing program 0 (id=184):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

46.567884908s ago: executing program 32 (id=184):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

45.862354554s ago: executing program 1 (id=188):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0), 0x1, 0x44f, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r1, 0x0, 0x0)

45.57721041s ago: executing program 3 (id=190):
r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x3f, 0x0, 0x0, 0x0})
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x22, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0x4ac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x2, 0x1000, 0x0, 0x0, 0x1, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x1, 0xd, 0x0, "00090001", "c9c24ba1"}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

45.168383289s ago: executing program 1 (id=192):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f00000083c0)=[{&(0x7f0000006200)="9ab62641196a4e5ec9a6b5a5f67ad75493f7895dd6fee1240b7a09972c1c262f9046e672c702fb711e8758c7ab1632b9bc2eef947eab6c9b", 0x38}, {&(0x7f0000006280)="823323b5e085a546f9", 0x9}], 0x2, 0x0, 0x0, 0x40804}}], 0x1, 0x4000)

44.919058315s ago: executing program 1 (id=194):
syz_mount_image$udf(&(0x7f0000000f40), &(0x7f0000000f80)='./file1\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0xc58, &(0x7f0000000fc0)="$eJzs3UFsHNd9B+D/G+2KSxutmDhRnTQuNm2RyorlypJiKlbhrmqabQBZFkIxtwBciZS6NUUSJNXIRtoyvfTQQ4Ci6CEnAq1RIEUDowmCHpnWBZKLD0WAAj0RLWwERQ9sESCngMHMvqWWNGnToihR0vfZ1G939r2Z9+atZ2RBb14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG/9/L5k8+l+90KAOBeujj25ZOn3P8B4JFy2f//AwAAAAAAAAAAAADAQZeiiCcixdzFtTRRve9qXOjUb94aHxndvtpgqmoeqsqXP43nTp0+84Xnh8/28kJn5gPq322fjlfHLp9vvjR7Y25+amFharI5PtO5Ojs5tes97LX+VserE9C88drNyWvXFpqnnj296eNbQ+8NPH506Nzw0yee6pUdHxkdHbtdpNFfvnbHDenaaYbH4SjiRKR45js/Se2IKGLv56Jxb8d+q8GqE8erToyPjFYdme60ZxbLDy/1TkQR0eyr1Oqdo+3HImr1e9qHnbUilsrmlw0+XnZvbK49374yPdW81J5f7Cx2ZmcupW5ry/40o4izKWI5IlYH3r+7ehRRixTfOrKWrkTEod55+Hw1MXjndhT72MddKNvZrEcsFw/AmB1gA1HEK5Hip28fi6v5OlNdaz4X8UqZ3494s8wXI1L5xTgT8e423yMeTLUo4i/L8T+3liar60HvunLhK80vzVyb7Svbu658xPvD+64U9+n+MLgl740Dfm1qRBHt6oq/lu78NzsAAAAAAAAAAAAAAAAA3G2DUcSnIsXL//7H1bziqOalHzk3/PtDv9Q/Z/zJD9lPWfbZiFgqdjcn93CeGHgpXUrpPs8lfpQ1oog/yfP/vnG/GwMAAAAAAAAAAAAAAAAAAPBIK+LHkeKFd46l5ehfU7wzc715uX1lursqbG/t396a6evr6+vN1M1WzomcSzmXc67kXO1mNe+/ql/k+jknci7lXM65knM1ZxzK9XO2ck7kXMq5nHMl52rOqOX6OVs5J3Iu5VzOuZJzNWcckLV7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeJkUU8fNI8c2vraVIEdGKmIhurgzc79YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKWBVMR3I0XzD1ob22oRkap/u46Vv5yJ1uEyPx6t4TJfjNb5nO0qa61v3If2szf1VMSPIsVA462NAc/jX+++2/gaxJtfv/3u07VuHup9OPTewONHj5wbHv21J3d6nbZrwPELnZmbt5rjI6OjY32ba/noH+/bNpSPW9ydrhMRC6+/8Vp7enpq/s5flF+BHT5aX1//s/Ioez3EAXmRajv29JF8UQ7tAWjGPnawtqvC9QPQ1H0ZXB525f3/3Ujx2+/8Z++GX93/axslNu7w8bM/vX3/f2HrjnZ5/69trZfv/+U9fbv7/xN9217Ivxup1yIaizfm6kcjGguvv3Gic6N9fer61MyZkye/ODz8xdMn64cjGtc601N9r/Z+rgAAAAAAAAAAAAAAAADuqVTE70aK9o/WUjMiblXztYbODT994qlDcaiab7Vp3varY5fPN1+avTE3P7WwMDXZHJ/pXJ2dnNrt4RrVdK/xkdF96cyHGtzn9g82Xpqde32+c/0PF7f9/LHG+SsLi/Ptq9t/HINRRLT6txyvGjw+Mlo1errTnqmqXtp2Mv1HV09F/FekuHqmmT6bt+X5/1tn+G+a/7+0dUf7NP//Y33bymOmVMTPIsVv/dWT8dmqnY/F+85ZLvd3keL42c/kcnG4LNdrQ/e5At2ZgWXZ/4sU//TzzWV78yGfuF32uV2f2AdEOf5HIsV3/+Lb8et52+bnP2w//o9t3dE+jf8n+rY9tul5BXvuOnn8T0SKF594K34jb/ug53/0nr1xLBfeeD7HPo3/J/u2DeXj/ubd6ToAAAAAAAAAAMADrZ6K+PtI8YPRWno+b9vN3/+b3Lqjffr7X7/St23y7qxX9KEv9nxSAQAAAOCAqKcifhwpri++tTGHevP87775n79ze/7nSNryafXnfL9cPTfgbv75X7+hfNyJvXcbAAAAAAAAAAAAAAAAAAAADpSUing+r6c+Uc3nn9xxPfWVSPHy/zyTy6WjZbneOvBD1a+Ni7MzJ85PT89ebS+2r0xPNcfm2lenyrqfiBRrf/uZXLeo1lfvrTffXeO9UYuIai32+Ugx+g+9st212Htrk3fXA++uxV6W/Vik+O9/3Fy2t471J2+XPVWW/ZtI8dV/3r7s0dtlT5dlvx0pfvjVZq/sY2XZ3vNRu88kbfxRRDx7dbbYh1EBAAAAAAAAAAAAAAAAAADgUVNPRfx5pPjfG8sbc/nz+v/1vreVN7/et97/Freqdf6HqvX/d3p9J+v/V88VWNrpqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HBKUcQbkWLu4lpaGSjfdzUudGZu3hofGd2+2mCqah6qypc/jedOnT7zheeHz/byg+vfbZ+KV8cun2++NHtjbn5qYWFqsjk+07k6Ozm16z3sXL9xRy06Xp2A5o3Xbk5eu7bQPPXs6U0f3xp6b+Dxo0Pnhp8+8VSv7PjI6OhYX5la/Y6OvK20w/bDUcRfR4pnvvOT9IOBiCI+8Fzsyod8d/bbYNWJ41UnxkdGq45Md9ozi+WHl3onooho9lVq9c7RPRiLPWlFLJXNLxt8vOze2Fx7vn1leqp5qT2/2FnszM5cSt3Wlv1pRhFnU8RyRKwOvH939SjitUjxrSNr6V8GIg71zsPnL459+eSpndtR7GMfd6FsZ7MesVw8AGN2gA1EEd+LFD99+1j860BELbo/8bmIV8r8fsSb0R3vVH4xzkS8u833iAdTLYr4/3L8z62ltwfK60HvunLhK80vzVyb7Svbu64cqPvD9/7jo9YYvBuH3bUDfm1qRBE/rK74a+nf/HcNAAAAAAAAAAAAAAAAcIAU8auR4oV3jqVqfvDGnOLOzPXm5faV6e60vt7cv96c6fX19fVm6mYr50TOpZzLOVdyruaMItfP2Sqzsb4+kd8v5VzOuZJzNWccyvVztnJO5FzKuZxzJedqzqjl+jlbOSdyLuVczrmSczVnHJC5ewAAAAAAAAAAAAAAAAAAwMOlqP5J8c2vraX1ge760hPRzRXrgT70fhEAAP//cjv0Pg==")
creat(&(0x7f0000000040)='./bus\x00', 0xe0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x107000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
read$msr(r0, 0x0, 0x0)

44.569138434s ago: executing program 1 (id=196):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x2c, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0xb, 0x10, 0x7, 0x0, 0x3, {[@sack={0x5, 0x16, [0x7, 0x1, 0x7f, 0x6, 0x1]}]}}}}}}}}, 0x0)

43.85419517s ago: executing program 1 (id=202):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3)

42.824756143s ago: executing program 33 (id=202):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3)

42.809789694s ago: executing program 3 (id=205):
syz_mount_image$udf(&(0x7f0000000f40), &(0x7f0000000f80)='./file1\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0xc58, &(0x7f0000000fc0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0xe0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x107000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
read$msr(r0, 0x0, 0x0)

42.458861922s ago: executing program 3 (id=209):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x2f, 0x6)

41.848577426s ago: executing program 2 (id=210):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xd27, 0x4)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
shutdown(r1, 0x0)
sendto(r0, &(0x7f0000000380)="50fbdf12a30d7a48b2c51cb3bf52a6b2cdb77ef9af01603a3e68adff5949f1a05ad2fbb22bae1b24430193d8533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1ebeeafb3b9c984e706165f40ce186881f478339b8932380347120b327f3ea27c07e28e8b0c063013d797231dcd24fbb4eab58234f90e5301df6139d990980000088aabbdce8733c7738e96970380fbdd930e0a44e8cd1cb8bcabcce30059c2ee4b77c9be6600795ab307c6a560439f58627d94273", 0xc4, 0x44, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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")
r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r2, 0x0, 0x0, 0x5a00, 0x0, 0x3)
socket$key(0xf, 0x3, 0x2)
write$binfmt_misc(r0, &(0x7f0000000000)='}', 0x1)
sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0)

41.267785669s ago: executing program 3 (id=211):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080), 0x4, 0x526, &(0x7f0000000700)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe)
pwrite64(0xffffffffffffffff, &(0x7f0000000180)="95", 0xffaf, 0x10001)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x1, 0x7, 0x4, 0xffffffffffff})

41.142725013s ago: executing program 34 (id=211):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080), 0x4, 0x526, &(0x7f0000000700)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe)
pwrite64(0xffffffffffffffff, &(0x7f0000000180)="95", 0xffaf, 0x10001)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x1, 0x7, 0x4, 0xffffffffffff})

40.876990049s ago: executing program 2 (id=214):
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x20, @empty}, 0x142, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x3a, 0x0, 0x2}, {0xd7fa70973218df40, 0x0, 0x8}]})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil})
r3 = socket$inet(0x2, 0x3, 0x6)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000400)="890704", 0x3)
r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x56, {"b80000c0fe3acb80"}}], 0xffffffffffffff35})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

40.067933047s ago: executing program 2 (id=215):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r0, 0x5421, &(0x7f0000000440)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/../file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x4)
r5 = semget(0x2, 0x4, 0x200)
semop(r5, &(0x7f00000000c0)=[{0x3, 0x8, 0x1800}, {0x0, 0x4, 0x1000}, {0x2, 0x1, 0x800}, {0x2, 0xec, 0x1800}], 0x4)
close(r0)

39.165965058s ago: executing program 2 (id=217):
syz_mount_image$udf(&(0x7f0000000f40), &(0x7f0000000f80)='./file1\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0xc58, &(0x7f0000000fc0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0xe0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x107000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
read$msr(r0, 0x0, 0x0)

38.735932628s ago: executing program 2 (id=218):
unshare(0x60000600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
lseek(r0, 0x595e, 0x3)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, 0x0)

37.842652088s ago: executing program 2 (id=219):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000100)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="0063c9", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042)

37.601821234s ago: executing program 35 (id=219):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000100)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="0063c9", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042)

18.123116153s ago: executing program 4 (id=263):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xa}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'trans=fd,'}}], [], 0x6b}})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
getdents64(r3, 0x0, 0x0)
stat(&(0x7f000000aa40)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000002140)='./file0/file0/file0\x00', 0x0, 0x200000, 0x0)

17.870640598s ago: executing program 4 (id=265):
r0 = socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x6000000}, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x6e24, 0xdc, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

16.832089232s ago: executing program 4 (id=267):
openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}]}, 0x24}, 0x1, 0x0, 0x0, 0x1840}, 0x408c0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x2275, 0xffffffffffffffff)
r4 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80)
sendfile(r4, r4, 0x0, 0x1000000201005)

14.700105791s ago: executing program 4 (id=273):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0)
umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x0)
mount$bind(0x0, 0x0, 0xfffffffffffffffc, 0x1e5c08, 0x0)

14.484074996s ago: executing program 4 (id=275):
r0 = socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x6000000}, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x6e24, 0xdc, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

13.634647916s ago: executing program 4 (id=280):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x0, 0x6, 0x2, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x14, 0x31, 0xffff, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4000, 0x0, 0x8004, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@private2, {0x327, 0x9, 0x0, 0x4, 0x20000000000000, 0x0, 0x1, 0x7}, {0x0, 0x0, 0x2}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x3502, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0)
recvmmsg(r0, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400})

13.383411082s ago: executing program 36 (id=280):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x0, 0x6, 0x2, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x14, 0x31, 0xffff, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4000, 0x0, 0x8004, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@private2, {0x327, 0x9, 0x0, 0x4, 0x20000000000000, 0x0, 0x1, 0x7}, {0x0, 0x0, 0x2}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x3502, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0)
recvmmsg(r0, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400})

7.750148432s ago: executing program 7 (id=301):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000300)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESOCT, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a85035eb86c32a59f1f3acdb98c", @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRESHEX, @ANYRES8=0x0], 0x2, 0x6eb, &(0x7f0000000dc0)="$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")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0)

6.678408867s ago: executing program 7 (id=303):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@debug}]}, 0xfd, 0x272, &(0x7f0000000c80)="$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")
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x191b800, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

6.423951902s ago: executing program 5 (id=304):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0xffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x88)

6.332228734s ago: executing program 7 (id=305):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xfffffdfe)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

6.276420586s ago: executing program 5 (id=306):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x1, 0x0, [{0x1, 0x80000008, 0x0, 0x20000000, 0xfffffffe, 0x2, 0xffff}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x486, 0x0, 0x6}]})

6.067375721s ago: executing program 5 (id=308):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

5.377370547s ago: executing program 7 (id=309):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000003580)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0x8, 0x2}]}}}}}}}}, 0x0)

3.951255229s ago: executing program 8 (id=312):
r0 = fanotify_init(0x1a, 0x800)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
fanotify_mark(r0, 0x641, 0x1028, r1, 0x0)
fanotify_mark(r0, 0x1, 0x40000038, r1, 0x0)

3.855919452s ago: executing program 7 (id=313):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0x29, 0x1, [0xa, 0x42, 0x20000000000, 0x1d, 0x10], [0x1, 0xffffffe, 0x4, 0x2, 0x4, 0xfffffffffffffffa, 0x5, 0x7fffffff, 0xa, 0x5, 0x10007, 0x7, 0x8000000000000001, 0xa, 0xf, 0x80, 0x10009, 0x4565, 0x6, 0x8, 0x6, 0x2, 0x80000000, 0x80000000, 0x26ee, 0x400000000003, 0x2, 0x3, 0x2, 0x400000000000008, 0x9, 0x9, 0x93, 0xa, 0x0, 0x4, 0xf5, 0x6, 0x1, 0x4, 0x3, 0xa, 0x2, 0x7, 0x3, 0x1, 0x47, 0x3, 0x1, 0x20000000fc4, 0x10000000075, 0x4, 0x4005, 0x96ce00, 0x8000000000000001, 0x40000000000756, 0xc, 0x0, 0x4, 0x3ff, 0x20000008, 0x642, 0xfffffffffffffff8, 0xa, 0xf, 0x7f, 0xb, 0x4, 0xf0, 0x6, 0x400000000000, 0x9, 0xfff, 0xffffdffffffffffe, 0x9, 0xffffffffffffffff, 0x100, 0x8, 0x635, 0x7, 0x3, 0x8000000000000000, 0xfffffffffffffff9, 0x9, 0x1000, 0x0, 0x7, 0x2, 0xdb, 0x0, 0x4, 0x3e, 0x9, 0x200, 0x145, 0x7, 0x8000000000e51a, 0x6, 0x7, 0x80, 0x0, 0x3, 0x8, 0x3, 0x5, 0x4, 0xffffffffffffffff, 0x7fff, 0x10001, 0x2, 0x100000000, 0x6a, 0x7, 0x2, 0x0, 0x34d8, 0x100ffef, 0x4, 0xa, 0x100000000000b1, 0x407fff]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1032})
r2 = socket$inet(0x2, 0x2, 0x0)
unshare(0x2040400)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000010000000000020800450000560000000040117c957f0000017f000001"], 0x64)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0)
syz_open_dev$sndpcmp(0x0, 0xeda, 0xe2040)
syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x100)

3.837976452s ago: executing program 8 (id=314):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@debug}]}, 0xfd, 0x272, &(0x7f0000000c80)="$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")
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x191b800, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3.823478142s ago: executing program 6 (id=315):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

3.374500403s ago: executing program 6 (id=316):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
landlock_create_ruleset(0x0, 0x0, 0x0)
open$dir(0x0, 0x8000, 0xec)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5b6, &(0x7f0000001340)="$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")
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa)

3.184315897s ago: executing program 8 (id=317):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket(0x2, 0x80805, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001680))
execveat(r2, &(0x7f0000000340)='./file1\x00', &(0x7f0000000480)={[&(0x7f00000003c0)='B*\x00', &(0x7f0000000400)='ceph\x00', &(0x7f0000000440)='%:-.@]{\x00']}, &(0x7f0000000700)={[&(0x7f0000000500)='\x00', &(0x7f0000000540)='/+[[!\x00', &(0x7f0000000580)=']\x93*\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='+{,]\xa2[%\x00', 0x0, &(0x7f0000000680)='\x00', &(0x7f00000006c0)='/dev/sequencer2\x00']}, 0x400)
r4 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x0, r4})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1)
syz_ublk_setup_io_uring(0x60c5, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x246}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140))
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x120)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r5 = gettid()
pwrite64(r2, &(0x7f0000000180)="ab9d84171daf3427e35898479724b99665f907a19dc391ad8d595b116e940b336245006b5ce2697864dcb4abf4994eb6ea9fbae980bcaf5a71f6c037680133259193bbe5f8141199c41cae81713a9a118cfb6be6d0ac3a13b4a247110878411906d4bc55e71dc52dcf7da92da8a6f180fabfdcb24a4c0779a231378b1dbfe2db2de09512a6fed0368175d38c711915d5d5a04bfb09a2878f4a48c6dcc805f730e5d454", 0xa3, 0x3)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
tkill(r5, 0xb)
socket$nl_route(0x10, 0x3, 0x0)

3.079273379s ago: executing program 7 (id=318):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x280482, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x203, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x88d}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.059949403s ago: executing program 6 (id=319):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x27580a, &(0x7f0000000a80)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYRES64, @ANYRES16, @ANYRES64, @ANYBLOB="f47d9d"], 0x1, 0x65c, &(0x7f0000002280)="$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")
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff01000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002'], 0x104}, 0x1, 0x0, 0x0, 0xc1}, 0x0)

2.057239943s ago: executing program 5 (id=320):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0xffffff16, 0xfe7e)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

1.850329668s ago: executing program 8 (id=321):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810)

1.684222371s ago: executing program 6 (id=322):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0xfd8)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000140)={0x1, 0x7, 0x1, 0x200000000000005, 0x401, 0x0, 0x200000003, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x4})
ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000001000)={[{@sb={'sb', 0x3d, 0x8}}, {}, {@grpquota}, {@noacl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0)

736.611504ms ago: executing program 8 (id=323):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21001e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x501, &(0x7f0000002880)="$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")
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

664.047075ms ago: executing program 6 (id=324):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000640)='./file7\x00', 0x3000000, &(0x7f00000004c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0x4, 0x521, &(0x7f0000000d80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file7/file0\x00', 0x0, 0x212869, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x5)

550.821808ms ago: executing program 5 (id=325):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x200, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x25, 0x0, 0x1f, 0x8, 0x0, r0, 0x0, 0x0, 0x4, 0x0, 0x2}])

252.449805ms ago: executing program 5 (id=326):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@debug}]}, 0xfd, 0x272, &(0x7f0000000c80)="$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")
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$fuse(0x0, 0x0, 0x191b800, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

199.926076ms ago: executing program 8 (id=327):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r0, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050)
r1 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
read$FUSE(r0, &(0x7f0000002700)={0x2020}, 0x2020)
clock_gettime(0x0, &(0x7f0000001bc0))
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x2004000)

0s ago: executing program 6 (id=328):
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x280400b, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES8, @ANYRES16], 0x1, 0x252, &(0x7f0000000680)="$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")
setresuid(0xee00, 0xee01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ef)

kernel console output (not intermixed with test programs):

2-1: new high-speed USB device number 2 using dummy_hcd
[   87.921319][ T4462] loop2: detected capacity change from 0 to 1024
[   88.009751][ T1108] usb 5-1: USB disconnect, device number 3
[   88.075726][ T4230] usb 2-1: Using ep0 maxpacket: 32
[   88.099832][ T4352] hfsplus: bad catalog file entry
[   88.179706][ T4462] hfsplus: bad catalog file entry
[   88.207332][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9
[   88.237583][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17600, setting to 1024
[   88.253304][ T4230] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   88.266627][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   88.283207][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.311374][ T4230] usb 2-1: config 0 descriptor??
[   88.335842][ T4459] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   88.377925][ T4230] hub 2-1:0.0: USB hub found
[   88.390929][ T4421] hfsplus: bad catalog file entry
[   88.925503][ T4467] loop2: detected capacity change from 0 to 1024
[   88.925808][ T4230] hub 2-1:0.0: 26 ports detected
[   88.970310][ T4230] hub 2-1:0.0: insufficient power available to use all downstream ports
[   89.098407][ T4467] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   89.126878][ T4230] hub 2-1:0.0: hub_hub_status failed (err = -71)
[   89.133835][ T4230] hub 2-1:0.0: config failed, can't get hub status (err -71)
[   89.145675][ T4467] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.263322][ T4467] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.59: lblock 3 mapped to illegal pblock 3 (length 3)
[   89.288243][ T4467] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   89.321843][ T4467] EXT4-fs (loop2): This should not happen!! Data will be lost
[   89.321843][ T4467] 
[   89.355760][ T4230] usbhid 2-1:0.0: can't add hid device: -71
[   89.362777][ T4230] usbhid: probe of 2-1:0.0 failed with error -71
[   89.373598][ T4474] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.59: lblock 3 mapped to illegal pblock 3 (length 1)
[   89.426744][ T4230] usb 2-1: USB disconnect, device number 2
[   89.460928][ T4466] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.59: lblock 3 mapped to illegal pblock 3 (length 1)
[   89.504676][ T4474] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.59: lblock 3 mapped to illegal pblock 3 (length 1)
[   89.531113][ T4474] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.59: lblock 3 mapped to illegal pblock 3 (length 1)
[   89.638056][ T4481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'.
[   89.675625][ T4474] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.59: lblock 3 mapped to illegal pblock 3 (length 1)
[   89.689111][ T4483] loop3: detected capacity change from 0 to 512
[   89.747122][ T4466] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.59: lblock 3 mapped to illegal pblock 3 (length 1)
[   89.810231][ T4483] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   89.811231][ T4474] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.59: lblock 3 mapped to illegal pblock 3 (length 1)
[   89.836658][ T4483] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   89.836862][ T4474] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.59: lblock 3 mapped to illegal pblock 3 (length 1)
[   89.895293][ T4483] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.63: corrupted inode contents
[   89.935360][ T4466] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.59: lblock 3 mapped to illegal pblock 3 (length 1)
[   89.960348][ T4483] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #2: comm syz.3.63: mark_inode_dirty error
[   90.083947][ T4483] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.63: corrupted inode contents
[   90.123240][ T4483] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.63: mark_inode_dirty error
[   90.158970][ T4493] EXT4-fs error (device loop3): ext4_get_first_dir_block:3608: inode #19: comm syz.3.63: directory missing '.'
[   90.467718][ T4467] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[   90.503042][ T4500] loop3: detected capacity change from 0 to 2048
[   90.513690][ T4467] EXT4-fs (loop2): This should not happen!! Data will be lost
[   90.513690][ T4467] 
[   90.572915][ T4467] EXT4-fs (loop2): Total free blocks count 0
[   90.593248][ T4500] EXT4-fs (loop3): failed to initialize system zone (-117)
[   90.607481][ T4467] EXT4-fs (loop2): Free/Dirty block details
[   90.613730][ T4500] EXT4-fs (loop3): mount failed
[   90.654133][ T4467] EXT4-fs (loop2): free_blocks=0
[   90.666415][ T4467] EXT4-fs (loop2): dirty_blocks=64
[   90.672235][ T4467] EXT4-fs (loop2): Block reservation details
[   90.747755][ T4467] EXT4-fs (loop2): i_reserved_data_blocks=4
[   90.808931][ T4504] loop1: detected capacity change from 0 to 2048
[   91.011493][ T4504] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   91.349861][ T4504] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   91.449840][ T4504] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28
[   91.494662][ T4504] EXT4-fs (loop1): This should not happen!! Data will be lost
[   91.494662][ T4504] 
[   91.533852][ T4504] EXT4-fs (loop1): Total free blocks count 0
[   91.561528][ T4504] EXT4-fs (loop1): Free/Dirty block details
[   91.583119][ T4504] EXT4-fs (loop1): free_blocks=2415919504
[   91.681061][ T4504] EXT4-fs (loop1): dirty_blocks=16
[   91.696407][ T4504] EXT4-fs (loop1): Block reservation details
[   91.741441][ T4504] EXT4-fs (loop1): i_reserved_data_blocks=1
[   91.945758][   T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   91.957710][ T4519] loop1: detected capacity change from 0 to 512
[   92.043051][ T4519] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   92.083221][ T4519] EXT4-fs (loop1): 1 truncate cleaned up
[   92.116860][ T4519] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none.
[   92.335871][   T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.515857][   T21] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   92.541890][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.560499][ T4530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'.
[   92.595802][   T21] usb 4-1: Product: syz
[   92.600101][   T21] usb 4-1: Manufacturer: syz
[   92.609575][   T21] usb 4-1: SerialNumber: syz
[   92.612765][ T4532] loop4: detected capacity change from 0 to 1024
[   92.755687][ T4532] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   92.776596][ T4534] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer.
[   92.814247][ T4532] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.372789][ T4511] Zero length message leads to an empty skb
[   93.954616][ T4550] loop0: detected capacity change from 0 to 2048
[   94.036996][ T4550] UDF-fs: bad mount option "mode=0000000000000000000Ë¿/¶" or missing value
[   94.038331][ T4556] loop4: detected capacity change from 0 to 256
[   94.085711][   T21] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[   94.093261][   T21] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[   94.125628][   T21] cdc_ncm 4-1:1.0: setting rx_max = 2048
[   94.150572][ T4556] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   94.274223][ T4562] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   94.305729][   T21] cdc_ncm 4-1:1.0: setting tx_max = 88
[   94.359791][   T21] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42
[   94.389990][ T4564] loop0: detected capacity change from 0 to 512
[   94.466346][   T21] usb 4-1: USB disconnect, device number 2
[   94.482646][ T4564] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.86: missing EA_INODE flag
[   94.506368][   T21] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM
[   94.508044][ T4564] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.86: error while reading EA inode 2 err=-117
[   94.609765][ T4564] EXT4-fs (loop0): 1 orphan inode deleted
[   94.639287][ T4564] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[   94.762103][ T4575] loop1: detected capacity change from 0 to 256
[   94.873294][ T4580] FAULT_INJECTION: forcing a failure.
[   94.873294][ T4580] name failslab, interval 1, probability 0, space 0, times 1
[   94.913270][ T4582] loop2: detected capacity change from 0 to 512
[   94.939232][ T4580] CPU: 1 PID: 4580 Comm: syz.0.86 Not tainted syzkaller #0
[   94.946581][ T4580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   94.956999][ T4580] Call Trace:
[   94.960307][ T4580]  <TASK>
[   94.963257][ T4580]  dump_stack_lvl+0x188/0x250
[   94.968076][ T4580]  ? show_regs_print_info+0x20/0x20
[   94.973403][ T4580]  ? load_image+0x410/0x410
[   94.978174][ T4580]  ? __might_sleep+0xf0/0xf0
[   94.983067][ T4580]  ? __lock_acquire+0x7b50/0x7b50
[   94.988307][ T4580]  ? vmap_pages_range_noflush+0x6cd/0x750
[   94.994077][ T4580]  should_fail+0x383/0x4b0
[   94.998831][ T4580]  should_failslab+0x5/0x20
[   95.003670][ T4580]  slab_pre_alloc_hook+0x51/0xc0
[   95.008790][ T4580]  kmem_cache_alloc_trace+0x47/0x290
[   95.014835][ T4580]  ? relay_open_buf+0x555/0xda0
[   95.019822][ T4580]  relay_open_buf+0x555/0xda0
[   95.024634][ T4580]  relay_open+0x377/0x8e0
[   95.029004][ T4580]  do_blk_trace_setup+0x56c/0xa40
[   95.034699][ T4580]  blk_trace_ioctl+0x40b/0x5a0
[   95.039864][ T4580]  ? __blk_trace_startstop+0x630/0x630
[   95.045450][ T4580]  ? tomoyo_path_number_perm+0x5f7/0x6b0
[   95.051210][ T4580]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[   95.056792][ T4580]  blkdev_ioctl+0x150/0x6f0
[   95.061519][ T4580]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[   95.067389][ T4580]  ? blkdev_iopoll+0x100/0x100
[   95.072468][ T4580]  block_ioctl+0xac/0xf0
[   95.076963][ T4580]  __se_sys_ioctl+0xfa/0x170
[   95.081678][ T4580]  do_syscall_64+0x4c/0xa0
[   95.086141][ T4580]  ? clear_bhb_loop+0x30/0x80
[   95.090938][ T4580]  ? clear_bhb_loop+0x30/0x80
[   95.095658][ T4580]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   95.101587][ T4580] RIP: 0033:0x7f54753b9159
[   95.106126][ T4580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.125956][ T4580] RSP: 002b:00007f54735cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   95.134498][ T4580] RAX: ffffffffffffffda RBX: 00007f5475641180 RCX: 00007f54753b9159
[   95.142649][ T4580] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000008
[   95.151043][ T4580] RBP: 00007f547545003b R08: 0000000000000000 R09: 0000000000000000
[   95.159311][ T4580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.168170][ T4580] R13: 00007f5475641218 R14: 00007f5475641180 R15: 00007fffb9db0e08
[   95.176371][ T4580]  </TASK>
[   95.263735][ T4582] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   95.378911][ T4582] EXT4-fs (loop2): 1 truncate cleaned up
[   95.384835][ T4582] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,errors=remount-ro,. Quota mode: none.
[   96.019266][ T4602] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.2.91: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   96.225938][ T4602] EXT4-fs (loop2): Remounting filesystem read-only
[   96.313248][ T4602] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem
[   96.405862][ T4602] EXT4-fs (loop2): Remounting filesystem read-only
[   98.189962][    T7] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   98.577888][    T7] usb 3-1: not running at top speed; connect to a high speed hub
[   98.601178][ T4636] FAULT_INJECTION: forcing a failure.
[   98.601178][ T4636] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   98.672007][ T4636] CPU: 0 PID: 4636 Comm: syz.0.101 Not tainted syzkaller #0
[   98.679567][ T4636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   98.690806][ T4636] Call Trace:
[   98.694119][ T4636]  <TASK>
[   98.697416][ T4636]  dump_stack_lvl+0x188/0x250
[   98.702607][ T4636]  ? show_regs_print_info+0x20/0x20
[   98.708094][ T4636]  ? load_image+0x410/0x410
[   98.712783][ T4636]  ? __lock_acquire+0x7b50/0x7b50
[   98.718236][ T4636]  ? __lock_acquire+0x7b50/0x7b50
[   98.723781][ T4636]  should_fail+0x383/0x4b0
[   98.729026][ T4636]  _copy_to_user+0x2e/0x130
[   98.733622][ T4636]  put_user_ifreq+0x74/0xb0
[   98.738332][ T4636]  sock_do_ioctl+0x272/0x320
[   98.743613][ T4636]  ? sock_show_fdinfo+0xb0/0xb0
[   98.748956][ T4636]  sock_ioctl+0x48a/0x700
[   98.753802][ T4636]  ? sock_poll+0x420/0x420
[   98.758331][ T4636]  ? bpf_lsm_file_ioctl+0x5/0x10
[   98.763423][ T4636]  ? security_file_ioctl+0x7c/0xa0
[   98.769240][ T4636]  ? sock_poll+0x420/0x420
[   98.773769][ T4636]  __se_sys_ioctl+0xfa/0x170
[   98.778363][ T4636]  do_syscall_64+0x4c/0xa0
[   98.782985][ T4636]  ? clear_bhb_loop+0x30/0x80
[   98.788005][ T4636]  ? clear_bhb_loop+0x30/0x80
[   98.792821][ T4636]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   98.798953][ T4636] RIP: 0033:0x7f54753b9159
[   98.804424][ T4636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.825196][ T4636] RSP: 002b:00007f5473611028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   98.834465][ T4636] RAX: ffffffffffffffda RBX: 00007f5475640fa0 RCX: 00007f54753b9159
[   98.842647][ T4636] RDX: 0000200000000480 RSI: 0000000000008933 RDI: 0000000000000004
[   98.850979][ T4636] RBP: 00007f547545003b R08: 0000000000000000 R09: 0000000000000000
[   98.859591][ T4636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.868004][ T4636] R13: 00007f5475641038 R14: 00007f5475640fa0 R15: 00007fffb9db0e08
[   98.877369][ T4636]  </TASK>
[   98.884381][    T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.905156][    T7] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   98.932062][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.999870][    T7] usb 3-1: Found UVC 1.00 device <unnamed> (046d:0825)
[   99.249214][ T4647] process 'syz.0.103' launched './file0' with NULL argv: empty string added
[   99.376521][ T4651] loop0: detected capacity change from 0 to 1024
[   99.435838][    T7] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[   99.505743][    T7] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[   99.525437][    T7] uvcvideo 3-1:1.1: Failed to initialize the device (-5).
[   99.569978][ T4651] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 64
[   99.655775][    T7] usb 3-1: USB disconnect, device number 2
[  100.129699][ T4666] loop2: detected capacity change from 0 to 2048
[  100.249373][ T4670] loop0: detected capacity change from 0 to 512
[  100.312033][ T4672] loop4: detected capacity change from 0 to 512
[  100.406973][ T4670] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.111: missing EA_INODE flag
[  100.448977][ T4666] EXT4-fs (loop2): failed to initialize system zone (-117)
[  100.465830][ T4666] EXT4-fs (loop2): mount failed
[  100.478874][ T4670] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.111: error while reading EA inode 2 err=-117
[  100.530699][ T4670] EXT4-fs (loop0): 1 orphan inode deleted
[  100.652259][ T4670] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  100.699923][ T4672] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  100.714394][ T4672] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.123396][ T4670] debugfs: File 'trace0' in directory 'loop1' already present!
[  101.128914][ T4681] device syzkaller0 entered promiscuous mode
[  101.249248][ T4685] loop3: detected capacity change from 0 to 2048
[  101.367924][ T4685] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  101.375116][ T4689] loop2: detected capacity change from 0 to 2048
[  101.535037][ T4697] loop4: detected capacity change from 0 to 256
[  101.562563][ T4330]  loop2: p1 < > p3
[  101.594269][ T4330] loop2: p3 size 134217728 extends beyond EOD, truncated
[  101.693689][ T4689]  loop2: p1 < > p3
[  101.890500][ T4689] loop2: p3 size 134217728 extends beyond EOD, truncated
[  102.401193][ T4697] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  102.449312][ T4705] loop3: detected capacity change from 0 to 2048
[  102.521783][ T4330] udevd[4330]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  102.549677][ T4705] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  102.561174][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  102.581974][ T4705] EXT4-fs (loop3): inline encryption not supported
[  102.612034][ T4708] loop1: detected capacity change from 0 to 256
[  102.616350][ T4710] netlink: 'syz.0.122': attribute type 4 has an invalid length.
[  102.636472][ T4705] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,inlinecrypt,max_batch_time=0x000000000000186b,,errors=continue. Quota mode: writeback.
[  102.807640][ T4708] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d)
[  102.818403][ T4330] udevd[4330]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  103.063779][    T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  103.069237][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  103.333350][ T4720] loop0: detected capacity change from 0 to 2048
[  103.342703][    T7] usb 3-1: Using ep0 maxpacket: 32
[  104.495692][    T7] usb 3-1: config 0 has no interfaces?
[  104.501488][    T7] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  104.509813][ T4734] loop4: detected capacity change from 0 to 256
[  104.526928][ T4720] EXT4-fs (loop0): failed to initialize system zone (-117)
[  104.534470][ T4720] EXT4-fs (loop0): mount failed
[  104.576950][ T4734] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  104.633820][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.701994][    T7] usb 3-1: config 0 descriptor??
[  105.303283][ T4191] usb 3-1: USB disconnect, device number 3
[  105.960548][ T4748] loop1: detected capacity change from 0 to 512
[  106.028325][ T4748] EXT4-fs (loop1): inline encryption not supported
[  106.211286][ T4743] loop4: detected capacity change from 0 to 1024
[  106.248595][ T4743] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  106.349283][ T4743] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,dioread_lock,barrier=0x0000000000000007,nolazytime,quota,lazytime,errors=remount-ro,mblk_io_submit,noblock_validity,errors=remount-ro,. Quota mode: writeback.
[  106.400863][ T4762] loop0: detected capacity change from 0 to 256
[  106.424301][ T4748] EXT4-fs (loop1): Test dummy encryption mode enabled
[  106.435652][ T4748] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  106.490249][ T4762] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  106.497815][ T4748] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  106.512980][ T4748] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.133: invalid indirect mapped block 2683928664 (level 1)
[  106.532426][ T4748] EXT4-fs (loop1): Remounting filesystem read-only
[  106.575361][ T4748] EXT4-fs (loop1): 1 truncate cleaned up
[  106.587922][ T4766] loop3: detected capacity change from 0 to 2048
[  106.606603][ T4748] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,init_itable,resuid=0x0000000000000000,nodiscard,inlinecrypt,usrjquota=.grpjquota=,jqfmt=vfsold,data_err=abort,dioread_nolock,test_dummy_encryption,errors=remount-ro,,. Quota mode: writeback.
[  107.150267][ T4766] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  107.435751][ T4766] EXT4-fs (loop3): inline encryption not supported
[  107.556094][ T4781] loop4: detected capacity change from 0 to 512
[  107.702632][ T4766] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,inlinecrypt,max_batch_time=0x000000000000186b,,errors=continue. Quota mode: writeback.
[  107.775588][ T4789] ODEBUG: Out of memory. ODEBUG disabled
[  108.530266][ T4781] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  108.553979][ T4797] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  108.591808][ T4781] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.600342][ T4799] loop0: detected capacity change from 0 to 1024
[  108.646506][ T4781] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.138: Invalid inode table block 0 in block_group 0
[  108.765498][ T4781] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  108.809992][ T4781] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #15: comm syz.4.138: mark_inode_dirty error
[  108.828196][ T4799] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noquota,min_batch_time=0x0000000000000007,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,journal_ioprio=0x0000000000000006,max_batch_time=0,errors=continue. Quota mode: none.
[  108.985027][ T4509] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm kworker/u4:11: Invalid inode table block 0 in block_group 0
[  109.030675][ T4191] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  109.043376][ T4509] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm kworker/u4:11: Invalid inode table block 0 in block_group 0
[  109.119624][ T4811] loop2: detected capacity change from 0 to 512
[  109.137684][ T4813] loop1: detected capacity change from 0 to 256
[  109.167601][ T4813] exfat: Unknown parameter 'ÿÿÿÿ01777777777777777777777"'
[  109.240480][ T4811] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,nobarrier,,errors=continue. Quota mode: writeback.
[  109.276562][ T4811] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #2: block 18: comm syz.2.149: lblock 23 mapped to illegal pblock 18 (length 1)
[  109.305652][ T4191] usb 4-1: Using ep0 maxpacket: 32
[  109.365903][ T4822] loop4: detected capacity change from 0 to 256
[  109.439418][ T4822] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  109.459391][ T4191] usb 4-1: config 0 has no interfaces?
[  109.475621][ T4191] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  109.504343][ T4191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.546673][ T4191] usb 4-1: config 0 descriptor??
[  109.735652][ T1108] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  109.771726][ T4827] loop2: detected capacity change from 0 to 2048
[  109.804605][   T21] usb 4-1: USB disconnect, device number 3
[  109.835372][ T4827] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  109.867007][ T4827] EXT4-fs (loop2): inline encryption not supported
[  109.923583][ T4827] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,inlinecrypt,max_batch_time=0x000000000000186b,,errors=continue. Quota mode: writeback.
[  110.015641][ T1108] usb 2-1: Using ep0 maxpacket: 32
[  110.570332][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11
[  110.791676][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  111.335080][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  111.409660][ T4840] netlink: 72 bytes leftover after parsing attributes in process `syz.2.159'.
[  111.415349][ T4842] loop3: detected capacity change from 0 to 256
[  111.474773][ T4842] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  111.554313][ T4844] loop2: detected capacity change from 0 to 512
[  111.596029][ T1108] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  111.610918][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.656286][ T1108] usb 2-1: Product: syz
[  111.660813][ T1108] usb 2-1: Manufacturer: syz
[  111.679551][ T1108] usb 2-1: SerialNumber: syz
[  111.687278][ T1108] usb 2-1: config 0 descriptor??
[  111.710219][ T4844] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  111.739655][ T1108] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5
[  111.761801][ T3543] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  111.767590][ T4844] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.848319][ T3543] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  111.925404][ T3543] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  112.016984][ T4813] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  112.057196][ T4330] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  112.083108][ T1108] usb 2-1: USB disconnect, device number 3
[  112.095612][    C1] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19
[  112.292392][   T26] audit: type=1800 audit(1788906995.148:2): pid=4842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.158" name="file1" dev="loop3" ino=1048611 res=0 errno=0
[  112.542008][ T4863] syz.0.167 uses obsolete (PF_INET,SOCK_PACKET)
[  112.565555][   T13] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  112.612029][ T4865] loop3: detected capacity change from 0 to 1024
[  112.716747][ T4865] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 64
[  112.871602][ T4873] FAULT_INJECTION: forcing a failure.
[  112.871602][ T4873] name failslab, interval 1, probability 0, space 0, times 0
[  112.886443][ T4873] CPU: 0 PID: 4873 Comm: syz.3.171 Not tainted syzkaller #0
[  112.893944][ T4873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  112.904557][ T4873] Call Trace:
[  112.907955][ T4873]  <TASK>
[  112.910900][ T4873]  dump_stack_lvl+0x188/0x250
[  112.915699][ T4873]  ? show_regs_print_info+0x20/0x20
[  112.921291][ T4873]  ? load_image+0x410/0x410
[  112.926117][ T4873]  ? __lock_acquire+0x7b50/0x7b50
[  112.931277][ T4873]  should_fail+0x383/0x4b0
[  112.935814][ T4873]  should_failslab+0x5/0x20
[  112.940343][ T4873]  slab_pre_alloc_hook+0x51/0xc0
[  112.945765][ T4873]  ? new_inode_pseudo+0x77/0x210
[  112.951478][ T4873]  kmem_cache_alloc+0x3d/0x280
[  112.956293][ T4873]  new_inode_pseudo+0x77/0x210
[  112.961116][ T4873]  create_pipe_files+0x4c/0x6b0
[  112.967081][ T4873]  ? __context_tracking_exit+0x4c/0x80
[  112.972773][ T4873]  __do_pipe_flags+0x46/0x1f0
[  112.977664][ T4873]  do_pipe2+0xa7/0x190
[  112.981776][ T4873]  ? pipe_fcntl+0x530/0x530
[  112.986316][ T4873]  ? lock_chain_count+0x20/0x20
[  112.991656][ T4873]  ? syscall_enter_from_user_mode+0x21/0x70
[  112.997859][ T4873]  __x64_sys_pipe+0x36/0x40
[  113.003226][ T4873]  do_syscall_64+0x4c/0xa0
[  113.008132][ T4873]  ? clear_bhb_loop+0x30/0x80
[  113.013347][ T4873]  ? clear_bhb_loop+0x30/0x80
[  113.018238][ T4873]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  113.024271][ T4873] RIP: 0033:0x7f9bcb857159
[  113.028820][ T4873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.049067][ T4873] RSP: 002b:00007f9bc9aaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016
[  113.058799][ T4873] RAX: ffffffffffffffda RBX: 00007f9bcbadefa0 RCX: 00007f9bcb857159
[  113.068437][ T4873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  113.076799][ T4873] RBP: 00007f9bcb8ee03b R08: 0000000000000000 R09: 0000000000000000
[  113.085640][ T4873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  113.093956][ T4873] R13: 00007f9bcbadf038 R14: 00007f9bcbadefa0 R15: 00007fff2b0a52e8
[  113.102368][ T4873]  </TASK>
[  113.110416][ T4265] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  113.155896][   T13] usb 3-1: not running at top speed; connect to a high speed hub
[  113.221488][ T4876] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  113.255025][ T4876] loop3: detected capacity change from 0 to 512
[  113.266185][   T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.279421][   T13] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  113.291936][   T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.344221][ T4876] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.172: missing EA_INODE flag
[  113.391335][   T13] usb 3-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  113.401817][ T4876] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.172: error while reading EA inode 2 err=-117
[  113.415601][ T4265] usb 1-1: Using ep0 maxpacket: 32
[  113.441792][ T4876] EXT4-fs (loop3): 1 orphan inode deleted
[  113.448731][ T4876] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  113.556575][ T4265] usb 1-1: config 0 has no interfaces?
[  113.567133][ T4886] loop4: detected capacity change from 0 to 1024
[  113.568619][ T4887] FAULT_INJECTION: forcing a failure.
[  113.568619][ T4887] name failslab, interval 1, probability 0, space 0, times 0
[  113.594305][ T4887] CPU: 1 PID: 4887 Comm: syz.3.172 Not tainted syzkaller #0
[  113.601739][ T4887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  113.601765][ T4265] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  113.612025][ T4887] Call Trace:
[  113.612041][ T4887]  <TASK>
[  113.612050][ T4887]  dump_stack_lvl+0x188/0x250
[  113.612084][ T4887]  ? show_regs_print_info+0x20/0x20
[  113.612107][ T4887]  ? load_image+0x410/0x410
[  113.612132][ T4887]  ? __might_sleep+0xf0/0xf0
[  113.612151][ T4887]  ? __lock_acquire+0x7b50/0x7b50
[  113.653125][ T4887]  ? vmap_pages_range_noflush+0x6cd/0x750
[  113.659160][ T4887]  should_fail+0x383/0x4b0
[  113.663817][ T4887]  should_failslab+0x5/0x20
[  113.664396][ T4265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.668390][ T4887]  slab_pre_alloc_hook+0x51/0xc0
[  113.668422][ T4887]  kmem_cache_alloc_trace+0x47/0x290
[  113.668440][ T4887]  ? relay_open_buf+0x555/0xda0
[  113.668466][ T4887]  relay_open_buf+0x555/0xda0
[  113.668494][ T4887]  relay_open+0x377/0x8e0
[  113.696200][ T4265] usb 1-1: config 0 descriptor??
[  113.697796][ T4887]  do_blk_trace_setup+0x56c/0xa40
[  113.712943][ T4887]  blk_trace_ioctl+0x40b/0x5a0
[  113.717854][ T4887]  ? __blk_trace_startstop+0x630/0x630
[  113.723442][ T4887]  ? tomoyo_path_number_perm+0x5f7/0x6b0
[  113.729162][ T4887]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  113.734723][ T4887]  blkdev_ioctl+0x150/0x6f0
[  113.739384][ T4887]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  113.745510][ T4887]  ? blkdev_iopoll+0x100/0x100
[  113.751812][ T4887]  block_ioctl+0xac/0xf0
[  113.756639][ T4887]  __se_sys_ioctl+0xfa/0x170
[  113.761455][ T4887]  do_syscall_64+0x4c/0xa0
[  113.766312][ T4887]  ? clear_bhb_loop+0x30/0x80
[  113.771032][ T4887]  ? clear_bhb_loop+0x30/0x80
[  113.775986][ T4887]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  113.782143][ T4887] RIP: 0033:0x7f9bcb857159
[  113.786654][ T4887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.807011][ T4887] RSP: 002b:00007f9bc9a8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  113.815620][ T4887] RAX: ffffffffffffffda RBX: 00007f9bcbadf090 RCX: 00007f9bcb857159
[  113.823694][ T4887] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000008
[  113.831792][ T4887] RBP: 00007f9bcb8ee03b R08: 0000000000000000 R09: 0000000000000000
[  113.839855][ T4887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  113.847939][ T4887] R13: 00007f9bcbadf128 R14: 00007f9bcbadf090 R15: 00007fff2b0a52e8
[  113.856015][ T4887]  </TASK>
[  113.865919][   T13] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  113.935079][ T4889] loop1: detected capacity change from 0 to 2048
[  113.980261][ T4891] netlink: 52 bytes leftover after parsing attributes in process `syz.4.176'.
[  114.010885][ T4179] Alternate GPT is invalid, using primary GPT.
[  114.026506][ T4191] usb 1-1: USB disconnect, device number 4
[  114.030480][ T4179]  loop1: p1 p2 p3
[  114.038587][ T4179] loop1: partition table partially beyond EOD, truncated
[  114.039414][ T4891] netlink: 52 bytes leftover after parsing attributes in process `syz.4.176'.
[  114.081623][ T4889] Alternate GPT is invalid, using primary GPT.
[  114.093293][ T4889]  loop1: p1 p2 p3
[  114.095745][   T13] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[  114.098185][ T4889] loop1: partition table partially beyond EOD, 
[  114.107307][   T13] uvcvideo 3-1:1.1: Failed to initialize the device (-5).
[  114.111922][ T4889] truncated
[  114.120897][   T13] usb 3-1: USB disconnect, device number 4
[  114.415737][ T4265] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  114.435994][ T1108] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  114.577589][ T4894] loop0: detected capacity change from 0 to 512
[  114.638673][ T4894] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #11: comm syz.0.178: unexpected EA_INODE flag
[  114.668244][ T4894] EXT4-fs (loop0): Remounting filesystem read-only
[  114.681905][ T4894] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.178: couldn't read orphan inode 11 (err -117)
[  114.695243][ T4894] EXT4-fs (loop0): Remounting filesystem read-only
[  114.704105][ T4894] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none.
[  114.756195][ T4901] loop2: detected capacity change from 0 to 512
[  114.800543][ T4185] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  114.804411][ T4901] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  114.831183][ T4185] EXT4-fs (loop0): Remounting filesystem read-only
[  114.841973][ T4265] usb 5-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  114.855780][ T4185] EXT4-fs error (device loop0): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[  114.867968][ T1108] usb 2-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config
[  114.879172][ T1108] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  114.882387][ T4901] EXT4-fs (loop2): 1 truncate cleaned up
[  114.894161][ T4265] usb 5-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23
[  114.906641][ T4901] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none.
[  114.915197][ T4265] usb 5-1: config 1 interface 0 has no altsetting 0
[  114.956177][ T4185] EXT4-fs (loop0): Remounting filesystem read-only
[  114.963474][ T4185] EXT4-fs error (device loop0): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[  114.976283][ T4185] EXT4-fs (loop0): Remounting filesystem read-only
[  115.016447][ T1108] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  115.032396][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  115.049790][ T1108] usb 2-1: SerialNumber: syz
[  115.065936][ T4265] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  115.083042][ T4265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  115.098290][ T4185] syz-executor (4185) used greatest stack depth: 20464 bytes left
[  115.120440][ T4265] usb 5-1: SerialNumber: syz
[  115.129921][ T1108] rndis_wlan: probe of 2-1:1.0 failed with error -22
[  115.142044][ T1108] rndis_host: probe of 2-1:1.0 failed with error -22
[  115.201048][ T4265] hub 5-1:1.0: bad descriptor, ignoring hub
[  115.215686][ T4265] hub: probe of 5-1:1.0 failed with error -5
[  115.223846][ T4265] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  115.310082][ T4509] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.387314][ T4509] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.417445][ T4265] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[  115.423621][ T2282] usb 2-1: USB disconnect, device number 4
[  115.479111][ T4265] usb 5-1: USB disconnect, device number 4
[  115.518995][ T4509] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.660785][ T4509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.663700][ T4910] loop2: detected capacity change from 0 to 1024
[  116.011267][ T4911] chnl_net:caif_netlink_parms(): no params data found
[  116.040378][ T4920] loop2: detected capacity change from 0 to 512
[  116.118242][ T4920] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  116.214635][ T4920] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  116.242540][ T4924] loop1: detected capacity change from 0 to 512
[  116.300022][ T4920] EXT4-fs (loop2): mount failed
[  116.345403][ T4924] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  116.405332][ T4924] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.446568][   T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  116.501691][ T4924] EXT4-fs (loop1): shut down requested (1)
[  116.518740][ T4920] devpts: called with bogus options
[  116.534299][ T4911] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.542230][ T4911] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.552603][ T4911] device bridge_slave_0 entered promiscuous mode
[  116.571391][ T4911] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.611305][ T4911] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.635819][ T4924] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.188: No space for directory leaf checksum. Please run e2fsck -D.
[  116.663619][ T4911] device bridge_slave_1 entered promiscuous mode
[  116.685698][   T21] usb 5-1: Using ep0 maxpacket: 32
[  116.759097][ T4946] loop2: detected capacity change from 0 to 512
[  116.764865][ T4911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.795666][ T1111] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  116.805678][   T21] usb 5-1: config 0 has no interfaces?
[  116.815258][   T21] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  116.815424][ T4946] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  116.826179][   T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.876213][   T21] usb 5-1: config 0 descriptor??
[  116.894551][ T4911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.912676][ T4946] EXT4-fs (loop2): 1 truncate cleaned up
[  116.925802][ T4946] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none.
[  116.958431][ T4951] loop1: detected capacity change from 0 to 2048
[  117.014964][ T4911] team0: Port device team_slave_0 added
[  117.036246][ T4911] team0: Port device team_slave_1 added
[  117.086184][ T4951] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.155749][ T1111] usb 4-1: not running at top speed; connect to a high speed hub
[  117.175930][ T4911] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.176015][ T4232] usb 5-1: USB disconnect, device number 5
[  117.183092][ T4911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.183127][ T4911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.195208][ T4911] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.265662][ T1111] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.285884][ T1111] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  117.315546][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.338592][ T4911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.351744][ T4186] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  117.387959][ T1111] usb 4-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  117.389956][ T4186] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  117.404078][ T4911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.470711][ T4964] loop2: detected capacity change from 0 to 1024
[  117.524653][ T4911] device hsr_slave_0 entered promiscuous mode
[  117.532331][ T4911] device hsr_slave_1 entered promiscuous mode
[  117.549769][ T4964] hfsplus: invalid length 32517 has been corrected to 255
[  117.575422][ T4911] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  117.604810][ T4911] Cannot create hsr debugfs directory
[  117.625807][   T26] audit: type=1800 audit(1788907000.488:3): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.198" name="file1" dev="loop2" ino=20 res=0 errno=0
[  117.665883][   T21] Bluetooth: hci0: command 0x0409 tx timeout
[  117.825934][ T1111] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  118.045606][ T1111] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[  118.089154][ T1111] uvcvideo 4-1:1.1: Failed to initialize the device (-5).
[  118.121982][ T1111] usb 4-1: USB disconnect, device number 4
[  119.062573][ T4509] device hsr_slave_0 left promiscuous mode
[  119.106609][ T4509] device hsr_slave_1 left promiscuous mode
[  119.127888][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.130872][ T4988] hfsplus: invalid length 32517 has been corrected to 255
[  119.149055][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.185305][ T4987] loop3: detected capacity change from 0 to 2048
[  119.197783][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.213041][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.259027][ T4509] device bridge_slave_1 left promiscuous mode
[  119.273213][ T4987] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  119.306994][ T4509] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.378796][ T4509] device bridge_slave_0 left promiscuous mode
[  119.403427][ T4509] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.431773][ T4187] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  119.445973][ T4187] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  119.539103][ T4509] device veth1_macvtap left promiscuous mode
[  119.555328][ T4509] device veth0_macvtap left promiscuous mode
[  119.562113][ T4509] device veth1_vlan left promiscuous mode
[  119.576363][ T4509] device veth0_vlan left promiscuous mode
[  119.605592][ T4231] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  119.765860][ T4232] Bluetooth: hci0: command 0x041b tx timeout
[  119.855714][ T4231] usb 5-1: Using ep0 maxpacket: 32
[  119.910207][ T4509] team0 (unregistering): Port device team_slave_1 removed
[  119.929701][ T4509] team0 (unregistering): Port device team_slave_0 removed
[  119.947755][ T4509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.965967][ T4509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.975913][ T4231] usb 5-1: config 0 has no interfaces?
[  119.981538][ T4231] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  120.012306][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.031987][ T4231] usb 5-1: config 0 descriptor??
[  120.111895][ T4509] bond0 (unregistering): Released all slaves
[  120.169499][ T4996] loop2: detected capacity change from 0 to 2048
[  120.263612][ T4996] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none.
[  120.283865][   T26] audit: type=1800 audit(1788907003.138:4): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.210" name="file1" dev="loop2" ino=15 res=0 errno=0
[  120.312300][ T4287] usb 5-1: USB disconnect, device number 6
[  120.375243][ T4911] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  120.433672][ T4911] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  120.503466][ T4911] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  120.523856][ T4911] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  120.684413][ T4993] chnl_net:caif_netlink_parms(): no params data found
[  120.803716][ T4911] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.866977][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  120.881906][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  120.951232][ T4911] 8021q: adding VLAN 0 to HW filter on device team0
[  121.043454][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  121.064117][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  121.150464][ T4352] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.158169][ T4352] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.385233][ T4993] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.401556][ T4993] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.412222][ T4993] device bridge_slave_0 entered promiscuous mode
[  121.422333][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  121.499348][ T4287] libceph: connect (1)[c::]:6789 error -101
[  121.524285][ T4993] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.552883][ T5025] ceph: No mds server is up or the cluster is laggy
[  121.562286][ T4993] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.570760][ T4287] libceph: mon0 (1)[c::]:6789 connect error
[  121.578972][ T4993] device bridge_slave_1 entered promiscuous mode
[  121.590498][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  121.601295][ T4287] Bluetooth: hci1: command 0x0409 tx timeout
[  121.616201][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  121.635143][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.642640][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.737012][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  121.784426][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  121.799179][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  121.913579][   T21] Bluetooth: hci0: command 0x040f tx timeout
[  121.925105][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  122.764163][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  122.766660][ T5041] loop4: detected capacity change from 0 to 512
[  122.779166][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  122.779881][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  122.812305][ T5041] EXT4-fs (loop4): Ignoring removed nobh option
[  122.813346][ T5043] loop2: detected capacity change from 0 to 2048
[  122.836408][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  122.847207][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  122.857478][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  122.867171][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  122.908021][ T5043] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.928382][ T5041] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #3: comm syz.4.216: corrupted inode contents
[  122.960621][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  122.964165][ T5041] EXT4-fs (loop4): Remounting filesystem read-only
[  122.982715][ T4993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.995070][ T4993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.004639][ T5041] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #3: comm syz.4.216: mark_inode_dirty error
[  123.043451][ T5041] EXT4-fs (loop4): Remounting filesystem read-only
[  123.063722][ T5041] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #3: comm syz.4.216: corrupted inode contents
[  123.092558][ T5041] EXT4-fs (loop4): Remounting filesystem read-only
[  123.115843][ T4195] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  123.138012][ T4195] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  123.155732][ T5041] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.216: mark_inode_dirty error
[  123.159247][ T4993] team0: Port device team_slave_0 added
[  123.180510][ T5041] EXT4-fs (loop4): Remounting filesystem read-only
[  123.219739][ T5041] Quota error (device loop4): write_blk: dquota write failed
[  123.226864][ T4993] team0: Port device team_slave_1 added
[  123.239566][ T5041] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  123.265676][ T2282] Bluetooth: hci2: command 0x0409 tx timeout
[  123.286189][ T5041] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.216: Failed to acquire dquot type 0
[  123.342828][ T5041] EXT4-fs (loop4): Remounting filesystem read-only
[  123.379228][ T4993] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.404535][ T4993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.445765][ T5041] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.216: corrupted inode contents
[  123.492227][ T5041] EXT4-fs (loop4): Remounting filesystem read-only
[  123.519196][ T5041] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #16: comm syz.4.216: mark_inode_dirty error
[  123.555619][ T4993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.574877][ T5041] EXT4-fs (loop4): Remounting filesystem read-only
[  123.594348][ T5041] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.216: corrupted inode contents
[  123.617546][ T5041] EXT4-fs (loop4): Remounting filesystem read-only
[  123.624299][ T5041] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.216: mark_inode_dirty error
[  123.643731][ T5041] EXT4-fs (loop4): Remounting filesystem read-only
[  123.651035][ T5041] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.216: corrupted inode contents
[  123.674062][ T1111] Bluetooth: hci1: command 0x041b tx timeout
[  123.683854][ T4993] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.698077][ T4993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.702846][ T5041] EXT4-fs (loop4): Remounting filesystem read-only
[  123.765708][ T4993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.784084][ T5041] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  123.815861][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  123.824084][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  123.834000][ T5041] EXT4-fs (loop4): Remounting filesystem read-only
[  123.843088][ T5041] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.216: corrupted inode contents
[  123.861572][ T4911] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.876007][ T5041] EXT4-fs (loop4): Remounting filesystem read-only
[  123.883163][ T5041] EXT4-fs error (device loop4): ext4_truncate:4286: inode #16: comm syz.4.216: mark_inode_dirty error
[  123.902673][ T5041] EXT4-fs (loop4): Remounting filesystem read-only
[  123.910648][ T5041] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  123.921108][ T5020] chnl_net:caif_netlink_parms(): no params data found
[  123.926572][ T5041] EXT4-fs (loop4): Remounting filesystem read-only
[  123.963994][ T5041] EXT4-fs (loop4): 1 truncate cleaned up
[  123.973652][ T5041] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback.
[  123.986791][ T1111] Bluetooth: hci0: command 0x0419 tx timeout
[  124.033413][ T4993] device hsr_slave_0 entered promiscuous mode
[  124.054315][ T5041] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.102863][ T4993] device hsr_slave_1 entered promiscuous mode
[  124.376604][ T5020] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.453862][ T5020] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.513791][ T5020] device bridge_slave_0 entered promiscuous mode
[  124.628895][ T5020] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.645793][ T5020] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.673706][ T5020] device bridge_slave_1 entered promiscuous mode
[  124.823010][ T5020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.846394][ T5081] device syzkaller0 entered promiscuous mode
[  124.912062][ T5020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.033103][ T5020] team0: Port device team_slave_0 added
[  125.319653][ T4288] libceph: connect (1)[c::]:6789 error -101
[  125.355347][ T4288] libceph: mon0 (1)[c::]:6789 connect error
[  125.377575][ T2282] Bluetooth: hci2: command 0x041b tx timeout
[  125.408893][ T5020] team0: Port device team_slave_1 added
[  125.451196][ T5091] ceph: No mds server is up or the cluster is laggy
[  125.499877][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  125.650741][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  125.745858][ T4265] Bluetooth: hci1: command 0x040f tx timeout
[  126.103411][ T5020] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.115570][ T5020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.152199][ T5020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.168611][ T5020] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.175929][ T5020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.352567][ T5020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.149976][   T21] Bluetooth: hci4: command 0x0409 tx timeout
[  127.195676][ T5107] loop4: detected capacity change from 0 to 1024
[  127.206567][ T4911] device veth0_vlan entered promiscuous mode
[  127.222657][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  127.259094][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  127.312593][ T4993] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  127.346421][ T4352] hfsplus: b-tree write err: -5, ino 25
[  127.357311][ T5020] device hsr_slave_0 entered promiscuous mode
[  127.364238][ T4352] hfsplus: b-tree write err: -5, ino 4
[  127.371294][ T5020] device hsr_slave_1 entered promiscuous mode
[  127.380640][ T4352] hfsplus: b-tree write err: -5, ino 2
[  127.393163][ T5020] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.401213][ T5020] Cannot create hsr debugfs directory
[  127.426869][ T4230] Bluetooth: hci2: command 0x040f tx timeout
[  127.435577][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  127.444318][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  127.482541][ T4993] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  127.565423][ T4993] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  127.607135][ T5116] loop4: detected capacity change from 0 to 1024
[  127.609492][ T4993] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  127.679316][ T4911] device veth1_vlan entered promiscuous mode
[  127.708587][ T5077] chnl_net:caif_netlink_parms(): no params data found
[  127.825868][ T4232] Bluetooth: hci1: command 0x0419 tx timeout
[  127.894579][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  127.908239][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  127.919570][ T4911] device veth0_macvtap entered promiscuous mode
[  127.957834][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.965107][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.974245][ T5077] device bridge_slave_0 entered promiscuous mode
[  128.034003][ T4421] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.042958][ T5124] loop4: detected capacity change from 0 to 1024
[  128.080767][ T4911] device veth1_macvtap entered promiscuous mode
[  128.090203][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.103723][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.113108][ T5077] device bridge_slave_1 entered promiscuous mode
[  128.133495][ T5124] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  128.151635][ T5124] hfsplus: xattr search failed
[  128.195163][ T5077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.221724][ T4244] hfsplus: b-tree write err: -5, ino 25
[  128.245251][ T4244] hfsplus: b-tree write err: -5, ino 4
[  128.248239][ T4421] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.255650][ T4244] hfsplus: b-tree write err: -5, ino 2
[  128.291154][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.291490][ T4244] hfsplus: b-tree write err: -5, ino 28
[  128.314558][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.335975][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.355505][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.374982][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.388613][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.399178][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.411330][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.439419][ T4911] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.491697][ T5077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.552334][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  128.583249][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  128.601756][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  128.626828][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  128.662797][ T4421] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.691398][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  128.703809][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.716938][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  128.727946][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.738400][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  128.751123][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.761651][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  128.772920][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.784548][ T4911] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.815959][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  128.825034][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  128.843437][ T4421] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.860247][ T4911] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.878100][ T4911] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.888871][ T4911] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.899153][ T4911] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.915830][ T5077] team0: Port device team_slave_0 added
[  128.924798][ T5077] team0: Port device team_slave_1 added
[  128.992232][ T4993] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.001307][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.009794][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.036942][ T5077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.050685][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.058131][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.085970][ T5077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.137251][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  129.152542][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  129.197662][    T7] Bluetooth: hci4: command 0x041b tx timeout
[  129.219993][ T4993] 8021q: adding VLAN 0 to HW filter on device team0
[  129.270947][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  129.309860][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  129.323285][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.330552][ T4275] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.339942][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  129.370984][ T5077] device hsr_slave_0 entered promiscuous mode
[  129.484868][ T5077] device hsr_slave_1 entered promiscuous mode
[  129.493469][ T5077] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  129.503607][ T5077] Cannot create hsr debugfs directory
[  129.511119][ T2282] Bluetooth: hci2: command 0x0419 tx timeout
[  129.520177][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.262967][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.298672][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  130.307955][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  130.318184][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  130.327508][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.335127][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.369139][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  130.372216][ T5155] loop4: detected capacity change from 0 to 1024
[  130.389487][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  130.433849][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.445113][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.480626][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  130.489248][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  130.501780][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  130.510481][ T4275] hfsplus: b-tree write err: -5, ino 25
[  130.511138][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  130.523394][ T4275] hfsplus: b-tree write err: -5, ino 4
[  130.526075][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  130.533704][ T4275] hfsplus: b-tree write err: -5, ino 2
[  130.539726][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  130.580837][ T4421] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.654084][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  130.698265][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  130.743595][ T4421] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.912344][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  131.894779][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  131.935712][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  132.132249][ T4232] Bluetooth: hci4: command 0x040f tx timeout
[  132.174901][ T4421] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.255304][ T4421] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.255647][ T4249] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  132.442013][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  132.458582][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  132.490877][ T5189] loop4: detected capacity change from 0 to 2048
[  132.498406][ T4993] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.551583][ T5189] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.578732][ T4421] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.645901][ T4249] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  132.667238][ T4249] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  132.702010][ T4421] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.791934][ T4421] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.845789][ T4249] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  132.862894][ T4249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.873016][ T4249] usb 6-1: Product: syz
[  132.878321][ T4249] usb 6-1: Manufacturer: syz
[  132.884538][ T4249] usb 6-1: SerialNumber: syz
[  132.910053][ T4421] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.082557][ T5020] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  133.093485][ T5209] loop4: detected capacity change from 0 to 4096
[  133.111075][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  133.126467][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  133.176170][ T5020] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  133.195294][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  133.203108][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  133.243146][ T4249] usb 6-1: 0:2 : does not exist
[  133.251471][ T4249] usb 6-1: unit 9 not found!
[  133.313506][ T4993] device veth0_vlan entered promiscuous mode
[  133.336370][ T5020] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  133.348331][ T5020] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  133.380882][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  133.420366][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  133.622806][ T5077] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  133.859070][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  133.918253][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  134.146617][ T4265] Bluetooth: hci4: command 0x0419 tx timeout
[  134.325980][ T4249] usb 6-1: 4:0: cannot get min/max values for control 1 (id 4)
[  134.337096][ T5226] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  134.364626][ T4249] usb 6-1: USB disconnect, device number 2
[  134.370507][ T5227] loop5: detected capacity change from 0 to 512
[  134.398318][ T5226] loop4: detected capacity change from 0 to 512
[  134.417807][ T4993] device veth1_vlan entered promiscuous mode
[  134.434556][ T5077] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  134.453381][ T5227] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback.
[  134.463332][ T5077] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  134.478099][ T5227] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.508356][ T5226] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.242: missing EA_INODE flag
[  134.548893][ T5077] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  134.573284][ T5226] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.242: error while reading EA inode 2 err=-117
[  134.656594][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  134.666676][ T5226] EXT4-fs (loop4): 1 orphan inode deleted
[  134.713255][ T5227] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  134.737468][ T5226] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  134.740468][ T4993] device veth0_macvtap entered promiscuous mode
[  134.774589][ T5227] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  134.798164][ T5227] EXT4-fs (loop5): This should not happen!! Data will be lost
[  134.798164][ T5227] 
[  134.808205][ T5227] EXT4-fs (loop5): Total free blocks count 0
[  134.814487][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  134.814733][ T5227] EXT4-fs (loop5): Free/Dirty block details
[  134.830277][ T5227] EXT4-fs (loop5): free_blocks=65280
[  134.831130][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  134.835782][ T5227] EXT4-fs (loop5): dirty_blocks=1
[  134.835804][ T5227] EXT4-fs (loop5): Block reservation details
[  134.835817][ T5227] EXT4-fs (loop5): i_reserved_data_blocks=1
[  134.871576][ T5233] FAULT_INJECTION: forcing a failure.
[  134.871576][ T5233] name failslab, interval 1, probability 0, space 0, times 0
[  134.873380][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  134.906736][ T5233] CPU: 1 PID: 5233 Comm: syz.4.242 Not tainted syzkaller #0
[  134.908484][ T4993] device veth1_macvtap entered promiscuous mode
[  134.915056][ T5233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  134.931747][ T5233] Call Trace:
[  134.935064][ T5233]  <TASK>
[  134.938033][ T5233]  dump_stack_lvl+0x188/0x250
[  134.942884][ T5233]  ? show_regs_print_info+0x20/0x20
[  134.945733][ T4993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.948211][ T5233]  ? load_image+0x410/0x410
[  134.948247][ T5233]  ? __might_sleep+0xf0/0xf0
[  134.959784][ T4993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.963708][ T5233]  ? __lock_acquire+0x7b50/0x7b50
[  134.963739][ T5233]  ? vmap_pages_range_noflush+0x6cd/0x750
[  134.970338][ T4993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.978621][ T5233]  should_fail+0x383/0x4b0
[  134.978661][ T5233]  should_failslab+0x5/0x20
[  134.983883][ T4993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.989688][ T5233]  slab_pre_alloc_hook+0x51/0xc0
[  134.989715][ T5233]  kmem_cache_alloc_trace+0x47/0x290
[  134.989732][ T5233]  ? relay_open_buf+0x555/0xda0
[  134.989759][ T5233]  relay_open_buf+0x555/0xda0
[  135.000762][ T4993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.005293][ T5233]  relay_open+0x377/0x8e0
[  135.010054][ T4993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.020224][ T5233]  do_blk_trace_setup+0x56c/0xa40
[  135.020273][ T5233]  blk_trace_ioctl+0x40b/0x5a0
[  135.020297][ T5233]  ? __blk_trace_startstop+0x630/0x630
[  135.020317][ T5233]  ? tomoyo_path_number_perm+0x5f7/0x6b0
[  135.020341][ T5233]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  135.020398][ T5233]  blkdev_ioctl+0x150/0x6f0
[  135.020421][ T5233]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  135.020447][ T5233]  ? blkdev_iopoll+0x100/0x100
[  135.020470][ T5233]  block_ioctl+0xac/0xf0
[  135.020495][ T5233]  __se_sys_ioctl+0xfa/0x170
[  135.020519][ T5233]  do_syscall_64+0x4c/0xa0
[  135.020537][ T5233]  ? clear_bhb_loop+0x30/0x80
[  135.020557][ T5233]  ? clear_bhb_loop+0x30/0x80
[  135.020578][ T5233]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  135.020599][ T5233] RIP: 0033:0x7f3244181159
[  135.020621][ T5233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.020638][ T5233] RSP: 002b:00007f32423b8028 EFLAGS: 00000246
[  135.026860][ T4993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.031407][ T5233]  ORIG_RAX: 0000000000000010
[  135.031422][ T5233] RAX: ffffffffffffffda RBX: 00007f3244409090 RCX: 00007f3244181159
[  135.031437][ T5233] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000008
[  135.031449][ T5233] RBP: 00007f324421803b R08: 0000000000000000 R09: 0000000000000000
[  135.036406][ T4993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.041300][ T5233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.041317][ T5233] R13: 00007f3244409128 R14: 00007f3244409090 R15: 00007ffec8be1338
[  135.041348][ T5233]  </TASK>
[  135.052034][ T4993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.259317][    T9] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  135.259728][ T4993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.283637][    T9] EXT4-fs (loop5): This should not happen!! Data will be lost
[  135.283637][    T9] 
[  135.287239][ T4993] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.348368][ T5020] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.358432][ T4993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.372889][ T4993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.383437][ T4993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.396100][ T4993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.406533][ T4993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.417547][ T4993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.435584][ T4993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.449101][ T4993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.459553][ T4993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.470636][ T4993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.484519][ T4993] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.493951][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  135.503073][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  135.512581][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  135.522113][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  135.531532][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  135.591059][ T5077] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.608617][ T4993] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.619032][ T4993] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.635944][ T4993] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.655141][ T4993] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.671239][ T5020] 8021q: adding VLAN 0 to HW filter on device team0
[  135.688814][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  135.709316][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  135.756103][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  135.774576][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  135.812331][ T5077] 8021q: adding VLAN 0 to HW filter on device team0
[  135.954690][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  135.969595][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  135.989701][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.997101][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.008246][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  136.018249][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  136.027233][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.034330][ T4509] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.054913][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  136.101729][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  136.147105][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  136.206948][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  136.220178][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  136.231145][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.239184][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.250330][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  136.261023][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  136.271120][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  136.281584][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  136.292370][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.299923][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.309405][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  136.318944][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  136.331346][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  136.340331][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  136.403589][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  136.412951][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  136.422367][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  136.441058][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  136.451161][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  136.463769][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  136.516577][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  136.539930][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  136.551751][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  136.552282][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.561411][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  136.578515][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  136.581637][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.629016][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  136.670734][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  136.692497][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  136.720103][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  136.760530][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  136.770448][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  136.835475][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  136.843959][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.854021][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.874250][ T5262] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  136.885110][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  137.132685][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  137.145088][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  137.183239][ T5020] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.381423][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  137.432224][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  137.478991][ T5077] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.497449][ T5284] xt_TPROXY: Can be used only with -p tcp or -p udp
[  137.690548][ T5291] loop4: detected capacity change from 0 to 1024
[  137.807158][ T5291] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  137.880977][ T4421] device hsr_slave_0 left promiscuous mode
[  137.896033][ T4421] device hsr_slave_1 left promiscuous mode
[  137.916746][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.925047][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.937807][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.945953][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.957186][ T4421] device bridge_slave_1 left promiscuous mode
[  137.963654][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.972574][ T4421] device bridge_slave_0 left promiscuous mode
[  137.981041][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.981353][   T26] audit: type=1326 audit(1788907020.848:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.6.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676591e159 code=0x7fc00000
[  138.035052][   T26] audit: type=1326 audit(1788907020.868:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.6.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f676591e159 code=0x7fc00000
[  138.064379][   T26] audit: type=1326 audit(1788907020.868:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.6.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676591e159 code=0x7fc00000
[  138.069670][ T5301] loop4: detected capacity change from 0 to 256
[  138.090701][   T26] audit: type=1326 audit(1788907020.868:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.6.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676591e159 code=0x7fc00000
[  138.111079][ T5301] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  138.136300][   T26] audit: type=1326 audit(1788907020.868:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.6.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676591e159 code=0x7fc00000
[  138.161556][ T4421] device hsr_slave_0 left promiscuous mode
[  138.161921][   T26] audit: type=1326 audit(1788907020.868:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.6.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676591e159 code=0x7fc00000
[  138.194439][   T26] audit: type=1326 audit(1788907020.878:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.6.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676591e159 code=0x7fc00000
[  138.209172][ T4421] device hsr_slave_1 left promiscuous mode
[  138.234580][   T26] audit: type=1326 audit(1788907020.878:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.6.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676591e159 code=0x7fc00000
[  138.265066][   T26] audit: type=1326 audit(1788907020.878:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.6.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676591e159 code=0x7fc00000
[  138.291350][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.303767][   T26] audit: type=1326 audit(1788907020.878:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.6.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676591e159 code=0x7fc00000
[  138.304018][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.348547][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.372449][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.458249][ T4421] device bridge_slave_1 left promiscuous mode
[  138.492069][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.529715][ T4421] device bridge_slave_0 left promiscuous mode
[  138.561483][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.592169][ T4421] device hsr_slave_0 left promiscuous mode
[  138.611226][ T4421] device hsr_slave_1 left promiscuous mode
[  138.761523][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.818731][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.972228][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.053460][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.198840][ T4421] device bridge_slave_1 left promiscuous mode
[  139.341004][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.372807][ T4421] device bridge_slave_0 left promiscuous mode
[  139.400371][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.434167][ T5314] loop6: detected capacity change from 0 to 2048
[  139.463253][ T4421] device veth1_macvtap left promiscuous mode
[  140.423155][ T4421] device veth0_macvtap left promiscuous mode
[  140.451447][ T4421] device veth1_vlan left promiscuous mode
[  140.474706][ T4421] device veth0_vlan left promiscuous mode
[  140.492198][ T4421] device veth1_macvtap left promiscuous mode
[  140.492713][ T5319] loop5: detected capacity change from 0 to 256
[  140.513525][ T4421] device veth0_macvtap left promiscuous mode
[  140.520100][ T4421] device veth1_vlan left promiscuous mode
[  140.526104][ T4421] device veth0_vlan left promiscuous mode
[  140.534771][ T4421] device veth1_macvtap left promiscuous mode
[  140.541472][ T4421] device veth0_macvtap left promiscuous mode
[  140.548053][ T4421] device veth1_vlan left promiscuous mode
[  140.554345][ T4421] device veth0_vlan left promiscuous mode
[  140.584760][ T5319] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  140.629178][ T5314] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,noload,norecovery,stripe=0x000000000004ffff,norecovery,errors=remount-ro,resgid=0x000000000000ee01,. Quota mode: none.
[  140.954785][ T5314] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.254: bg 0: block 2: invalid block bitmap
[  141.029338][ T5314] EXT4-fs (loop6): Remounting filesystem read-only
[  141.120271][ T5314] syz.6.254 (5314) used greatest stack depth: 20320 bytes left
[  141.299991][ T5326] loop6: detected capacity change from 0 to 1024
[  141.434527][    T9] hfsplus: b-tree write err: -5, ino 25
[  141.440869][    T9] hfsplus: b-tree write err: -5, ino 4
[  141.450828][    T9] hfsplus: b-tree write err: -5, ino 2
[  141.683577][ T4421] team0 (unregistering): Port device team_slave_1 removed
[  141.703519][ T4421] team0 (unregistering): Port device team_slave_0 removed
[  141.721472][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.742177][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.839221][ T4421] bond0 (unregistering): Released all slaves
[  142.112325][ T4421] team0 (unregistering): Port device team_slave_1 removed
[  142.128586][ T4421] team0 (unregistering): Port device team_slave_0 removed
[  142.142312][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.161927][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.236446][ T4421] bond0 (unregistering): Released all slaves
[  142.385250][ T4421] team0 (unregistering): Port device team_slave_1 removed
[  142.403599][ T4421] team0 (unregistering): Port device team_slave_0 removed
[  142.418753][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.436054][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.513032][ T4421] bond0 (unregistering): Released all slaves
[  142.676109][ T5328] netlink: 8 bytes leftover after parsing attributes in process `syz.6.257'.
[  142.691300][ T5336] loop4: detected capacity change from 0 to 512
[  142.694540][ T5328] bridge1: the hash_elasticity option has been deprecated and is always 16
[  142.791202][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  142.805302][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  142.863054][ T5336] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  142.886428][ T5339] loop6: detected capacity change from 0 to 16
[  142.926191][ T5336] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.962036][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  142.980761][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  142.993280][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  143.006001][ T5339] erofs: (device loop6): mounted with root inode @ nid 36.
[  143.026603][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  143.070783][ T5339] erofs: (device loop6): z_erofs_readahead: readahead error at page 2 @ nid 89
[  143.099350][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  143.101212][ T5339] erofs: (device loop6): z_erofs_readahead: readahead error at page 1 @ nid 89
[  143.130143][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  143.137787][ T5339] erofs: (device loop6): z_erofs_readahead: readahead error at page 0 @ nid 89
[  143.161911][ T5339] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117]
[  143.193388][ T5020] device veth0_vlan entered promiscuous mode
[  143.211885][   T26] kauditd_printk_skb: 58 callbacks suppressed
[  143.211902][   T26] audit: type=1800 audit(1788907026.068:73): pid=5339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.261" name="file2" dev="loop6" ino=89 res=0 errno=0
[  143.269997][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  143.302565][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  143.333753][ T5020] device veth1_vlan entered promiscuous mode
[  143.362020][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  143.374550][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  143.396008][ T5349] loop4: detected capacity change from 0 to 2048
[  143.403239][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  143.431807][ T5077] device veth0_vlan entered promiscuous mode
[  143.492236][ T5077] device veth1_vlan entered promiscuous mode
[  143.505952][ T5349] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.571628][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  143.590687][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  143.626569][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  143.655284][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  143.688674][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  143.816336][ T5020] device veth0_macvtap entered promiscuous mode
[  143.859038][ T5020] device veth1_macvtap entered promiscuous mode
[  143.903686][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  143.926624][ T5363] loop6: detected capacity change from 0 to 256
[  143.945071][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  143.988582][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  144.002998][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  144.027890][ T5077] device veth0_macvtap entered promiscuous mode
[  144.047081][ T5363] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd50, chksum : 0x0a9163f8, utbl_chksum : 0xe619d30d)
[  144.071969][ T5020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.115500][ T5020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.142767][ T5020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.172166][ T5020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.189906][ T5020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.201363][ T5020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.213333][ T5020] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.246387][ T5077] device veth1_macvtap entered promiscuous mode
[  144.280493][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  144.315009][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  144.331727][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  144.378732][ T5020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.455537][ T5020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.486017][ T5020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.509578][ T5020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.528156][ T5020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.559935][ T5020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.583087][ T5020] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.626853][ T5020] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.646809][ T5020] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.674046][ T5020] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.683250][ T5020] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.721383][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  144.735374][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  144.743927][ T2282] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  144.784785][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.811073][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.833115][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.844169][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.860846][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.874112][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.891682][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.905399][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.918962][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.930201][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  144.942120][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  144.961015][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.992048][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.043007][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.054254][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.064666][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.075728][ T2282] usb 7-1: not running at top speed; connect to a high speed hub
[  145.076119][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.094171][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.106046][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.118425][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.152296][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  145.160828][ T2282] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  145.194722][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  145.209278][ T2282] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  145.241966][ T5077] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.252070][ T2282] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.256078][ T5077] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.299619][ T5077] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.317102][ T5077] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.317890][ T2282] usb 7-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  145.447081][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.455150][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.515805][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  145.540013][ T4509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.575753][ T4509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.583737][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.602675][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.658211][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  145.686713][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  145.718266][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.765651][ T2282] usb 7-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  145.794083][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.839940][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  145.904623][ T5388] loop7: detected capacity change from 0 to 1024
[  145.987341][ T2282] uvcvideo 7-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[  146.025119][ T5388] EXT4-fs warning (device loop7): read_mmp_block:115: Error -117 while reading MMP block 64
[  146.035943][ T2282] uvcvideo 7-1:1.1: Failed to initialize the device (-5).
[  146.073037][ T2282] usb 7-1: USB disconnect, device number 2
[  146.252444][ T5395] loop5: detected capacity change from 0 to 7
[  146.282975][ T4330]  loop5:
[  146.286432][ T4330] loop5: partition table partially beyond EOD, truncated
[  146.306277][ T4232] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  146.335511][ T5395]  loop5:
[  146.339434][ T5395] loop5: partition table partially beyond EOD, truncated
[  146.601980][ T4232] usb 9-1: Using ep0 maxpacket: 32
[  146.709515][ T5399] loop7: detected capacity change from 0 to 4096
[  146.745623][ T4232] usb 9-1: config 0 has no interfaces?
[  146.751603][ T4232] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  146.783674][ T5406] loop6: detected capacity change from 0 to 512
[  146.795584][ T4232] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.845313][ T4232] usb 9-1: config 0 descriptor??
[  146.957333][ T5406] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #15: comm syz.6.271: iget: bad i_size value: 38620345925642
[  147.051689][ T5406] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.271: couldn't read orphan inode 15 (err -117)
[  147.135283][ T5406] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  147.163581][ T4232] usb 9-1: USB disconnect, device number 2
[  147.703983][ T4509] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm kworker/u4:11: bg 0: block 5: invalid block bitmap
[  147.797107][ T4509] EXT4-fs (loop6): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 5 with error 28
[  147.847135][ T4509] EXT4-fs (loop6): This should not happen!! Data will be lost
[  147.847135][ T4509] 
[  147.896232][ T4509] EXT4-fs (loop6): Total free blocks count 0
[  147.902752][ T4509] EXT4-fs (loop6): Free/Dirty block details
[  147.955740][ T4509] EXT4-fs (loop6): free_blocks=0
[  147.960757][ T4509] EXT4-fs (loop6): dirty_blocks=16002
[  147.982380][ T4509] EXT4-fs (loop6): Block reservation details
[  148.008853][ T4509] EXT4-fs (loop6): i_reserved_data_blocks=16001
[  148.060788][ T4509] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28
[  148.122176][ T4509] EXT4-fs (loop6): This should not happen!! Data will be lost
[  148.122176][ T4509] 
[  148.473261][ T5438] loop7: detected capacity change from 0 to 4096
[  148.565726][ T2282] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  148.925909][ T2282] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  148.994330][ T2282] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  149.045885][ T2282] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.955668][ T2282] usbhid 9-1:1.0: can't add hid device: -71
[  149.962627][ T2282] usbhid: probe of 9-1:1.0 failed with error -71
[  149.974441][ T5463] loop6: detected capacity change from 0 to 1024
[  149.995980][ T2282] usb 9-1: USB disconnect, device number 3
[  150.037710][ T5463] hfsplus: bad catalog entry used to create inode
[  150.106305][ T5463] hfsplus: failed to load root directory
[  150.462704][ T5454] chnl_net:caif_netlink_parms(): no params data found
[  150.470265][ T2282] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  150.682566][ T5454] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.777282][ T5454] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.816221][ T5454] device bridge_slave_0 entered promiscuous mode
[  150.855783][ T2282] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.867712][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.915616][ T5454] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.924241][ T5454] device bridge_slave_1 entered promiscuous mode
[  151.566279][ T2282] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  151.685918][ T2282] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.866194][ T2282] usb 8-1: Product: syz
[  151.870998][ T2282] usb 8-1: Manufacturer: syz
[  151.939429][ T5454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.948948][ T2282] usb 8-1: SerialNumber: syz
[  152.149844][ T4249] Bluetooth: hci3: command 0x0409 tx timeout
[  152.174275][ T5454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.285668][   T21] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  152.401758][ T5454] team0: Port device team_slave_0 added
[  152.444734][ T5454] team0: Port device team_slave_1 added
[  152.535552][   T21] usb 7-1: Using ep0 maxpacket: 32
[  152.570256][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.602092][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.665792][   T21] usb 7-1: config 0 has no interfaces?
[  152.673201][   T21] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  152.705887][   T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.709337][ T5509] loop5: detected capacity change from 0 to 2048
[  152.735526][ T5454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.757300][   T21] usb 7-1: config 0 descriptor??
[  152.811209][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.814548][ T5509] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  152.833803][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.844015][ T5509] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  152.880907][ T5454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.895644][ T2282] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS
[  152.902089][ T2282] cdc_ncm 8-1:1.0: bind() failure
[  152.902882][ T5509] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  152.911224][ T2282] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[  152.975638][ T2282] cdc_ncm 8-1:1.1: bind() failure
[  153.037009][   T21] usb 7-1: USB disconnect, device number 3
[  153.064582][ T5454] device hsr_slave_0 entered promiscuous mode
[  153.074028][ T5454] device hsr_slave_1 entered promiscuous mode
[  153.096356][ T5454] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  153.104368][ T5454] Cannot create hsr debugfs directory
[  153.181241][ T2282] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  153.439434][ T5454] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  153.479800][ T5454] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  153.506697][ T5454] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  153.525782][ T2282] usb 9-1: not running at top speed; connect to a high speed hub
[  153.597072][ T5454] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  153.617978][ T5524] kernel profiling enabled (shift: 4)
[  153.716795][ T4421] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.765783][ T2282] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  153.775065][ T2282] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.791711][ T2282] usb 9-1: Product: syz
[  153.796662][ T2282] usb 9-1: Manufacturer: syz
[  153.802724][ T2282] usb 9-1: SerialNumber: syz
[  153.873919][ T4421] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.896853][ T2282] keyspan 9-1:1.0: Keyspan 4 port adapter converter detected
[  153.940418][ T2282] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  153.956476][    T7] usb 8-1: USB disconnect, device number 2
[  153.965310][ T2282] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  154.040119][ T2282] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  154.071460][ T2282] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  154.156030][    C1] usb 9-1: malformed indat packet
[  154.175628][    C1] usb 9-1: malformed indat packet
[  154.195598][    C1] usb 9-1: malformed indat packet
[  154.216875][    C1] usb 9-1: malformed indat packet
[  154.226456][ T4230] Bluetooth: hci3: command 0x041b tx timeout
[  154.235619][    C1] usb 9-1: malformed indat packet
[  154.235946][ T5540] loop7: detected capacity change from 0 to 1024
[  154.255629][    C1] usb 9-1: malformed indat packet
[  154.275613][    C1] usb 9-1: malformed indat packet
[  155.089402][ T5454] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.128099][ T4421] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.195286][ T4232] usb 9-1: USB disconnect, device number 4
[  155.201757][ T5544] hfsplus: b-tree write err: -5, ino 25
[  155.215985][ T5544] hfsplus: b-tree write err: -5, ino 4
[  155.243680][ T5544] hfsplus: b-tree write err: -5, ino 2
[  155.258467][ T4232] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  155.286182][ T5454] 8021q: adding VLAN 0 to HW filter on device team0
[  155.302793][ T5546] loop5: detected capacity change from 0 to 4096
[  155.321745][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  155.332774][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  155.333883][ T4232] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  155.383072][ T4421] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.383604][ T4232] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  155.424773][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  155.427024][ T4232] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  155.476263][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  155.505907][ T4352] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.513520][ T4352] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.556549][ T4232] keyspan 9-1:1.0: device disconnected
[  155.572158][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  155.634687][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  155.700760][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.707942][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.738044][ T5553] loop7: detected capacity change from 0 to 1024
[  155.820104][ T5560] loop8: detected capacity change from 0 to 128
[  155.820420][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  155.835415][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  155.857731][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  155.877255][ T5553] EXT4-fs (loop7): Ignoring removed bh option
[  155.889680][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  155.916792][ T5560] FAT-fs (loop8): Directory bread(block 32) failed
[  155.948883][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  155.960927][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  155.963832][ T5560] FAT-fs (loop8): Directory bread(block 33) failed
[  155.970932][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  155.996182][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  156.004805][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  156.014273][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  156.026414][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  156.035997][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  156.047460][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  156.052335][ T5553] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  156.064528][ T5560] FAT-fs (loop8): Directory bread(block 34) failed
[  156.102557][ T5560] FAT-fs (loop8): Directory bread(block 35) failed
[  156.110516][ T5560] FAT-fs (loop8): Directory bread(block 36) failed
[  156.117811][ T5560] FAT-fs (loop8): Directory bread(block 37) failed
[  156.127708][ T5560] FAT-fs (loop8): Directory bread(block 38) failed
[  156.134356][ T5560] FAT-fs (loop8): Directory bread(block 39) failed
[  156.145818][ T1324] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  156.152066][ T5560] FAT-fs (loop8): Directory bread(block 40) failed
[  156.198808][ T5560] FAT-fs (loop8): Directory bread(block 41) failed
[  156.314168][   T21] Bluetooth: hci3: command 0x040f tx timeout
[  156.545941][ T1324] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.607975][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  156.644501][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  156.734397][ T5454] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.761980][ T1324] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  156.775419][ T5586] loop6: detected capacity change from 0 to 1024
[  156.782522][ T1324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.800403][ T1324] usb 6-1: Product: syz
[  156.804879][ T1324] usb 6-1: Manufacturer: syz
[  156.825744][ T1324] usb 6-1: SerialNumber: syz
[  156.857730][ T5586] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  156.909778][ T5586] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.968105][   T26] audit: type=1800 audit(1788907039.828:74): pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.310" name="file1" dev="loop6" ino=15 res=0 errno=0
[  156.995183][ T5586] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: comm syz.6.310: lblock 0 mapped to illegal pblock 0 (length 6)
[  157.273141][ T5586] EXT4-fs error (device loop6): ext4_ext_remove_space:2944: inode #15: comm syz.6.310: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  157.985688][ T5567] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  158.076570][ T1324] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS
[  158.082659][ T1324] cdc_ncm 6-1:1.0: bind() failure
[  158.096975][ T5608] loop8: detected capacity change from 0 to 128
[  158.121324][ T1324] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  158.131313][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  158.154007][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  158.174221][ T1324] cdc_ncm 6-1:1.1: bind() failure
[  158.207494][ T5608] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[  158.259695][ T5608] System zones: 1-3, 19-19, 35-36
[  158.370938][ T5454] device veth0_vlan entered promiscuous mode
[  158.391260][   T21] Bluetooth: hci3: command 0x0419 tx timeout
[  158.399920][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  158.416340][ T5608] EXT4-fs (loop8): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,debug,,errors=continue. Quota mode: none.
[  158.435856][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  158.455653][ T5608] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  158.469272][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  158.525882][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  158.591622][ T5454] device veth1_vlan entered promiscuous mode
[  158.671376][ T5619] loop6: detected capacity change from 0 to 1024
[  158.795693][ T5619] EXT4-fs warning (device loop6): read_mmp_block:115: Error -117 while reading MMP block 64
[  158.860309][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  158.992094][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  159.146211][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  159.203241][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  159.399210][ T5627] ceph: No mds server is up or the cluster is laggy
[  159.409271][ T2282] libceph: connect (1)[c::]:6789 error -101
[  159.503358][ T2282] libceph: mon0 (1)[c::]:6789 connect error
[  159.685742][ T5454] device veth0_macvtap entered promiscuous mode
[  159.765028][ T4249] usb 6-1: USB disconnect, device number 3
[  159.787174][ T5642] loop6: detected capacity change from 0 to 164
[  159.889238][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  159.904148][ T5643] device syzkaller0 entered promiscuous mode
[  159.931640][ T5454] device veth1_macvtap entered promiscuous mode
[  159.941506][ T5171] libceph: connect (1)[c::]:6789 error -101
[  159.955952][ T5171] libceph: mon0 (1)[c::]:6789 connect error
[  160.063212][ T5642] netlink: 12 bytes leftover after parsing attributes in process `syz.6.319'.
[  160.164302][ T4421] device hsr_slave_0 left promiscuous mode
[  160.177772][ T4421] device hsr_slave_1 left promiscuous mode
[  160.207444][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.228708][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.261221][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.277314][ T5654] loop6: detected capacity change from 0 to 1024
[  160.284910][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.465700][ T5654] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[  160.534264][ T4421] device bridge_slave_1 left promiscuous mode
[  160.690639][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.005411][ T4421] device bridge_slave_0 left promiscuous mode
[  161.152447][ T5659] loop8: detected capacity change from 0 to 512
[  161.159462][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.212947][ T4421] device veth1_macvtap left promiscuous mode
[  161.224779][ T5659] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  161.265533][ T4421] device veth0_macvtap left promiscuous mode
[  161.272221][ T4421] device veth1_vlan left promiscuous mode
[  161.287508][ T5665] loop6: detected capacity change from 0 to 512
[  161.319349][ T5659] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.367780][ T4421] device veth0_vlan left promiscuous mode
[  161.389268][ T5667] loop5: detected capacity change from 0 to 512
[  161.423064][ T5659] Quota error (device loop8): find_block_dqentry: Quota for id 0 referenced but not present
[  161.439009][ T5667] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  161.461779][ T5659] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  161.475064][ T5659] EXT4-fs error (device loop8): ext4_acquire_dquot:6236: comm syz.8.323: Failed to acquire dquot type 1
[  161.494168][ T5667] EXT4-fs (loop5): 1 truncate cleaned up
[  161.497671][ T5665] EXT4-fs (loop6): 1 orphan inode deleted
[  161.500717][ T5667] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none.
[  161.535554][ T5665] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  161.619312][ T5665] ext4 filesystem being mounted at /18/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.855134][ T5679] loop5: detected capacity change from 0 to 128
[  161.914006][ T5677] 
[  161.916462][ T5677] ======================================================
[  161.923588][ T5677] WARNING: possible circular locking dependency detected
[  161.930714][ T5677] syzkaller #0 Not tainted
[  161.935243][ T5677] ------------------------------------------------------
[  161.942469][ T5677] syz.8.327/5677 is trying to acquire lock:
[  161.948405][ T5677] ffff88802caf6170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2ce/0x390
[  161.959430][ T5677] 
[  161.959430][ T5677] but task is already holding lock:
[  161.966933][ T5677] ffff88802caf4c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x186/0x710
[  161.978479][ T5677] 
[  161.978479][ T5677] which lock already depends on the new lock.
[  161.978479][ T5677] 
[  161.989248][ T5677] 
[  161.989248][ T5677] the existing dependency chain (in reverse order) is:
[  161.998258][ T5677] 
[  161.998258][ T5677] -> #3 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  162.007041][ T5677]        percpu_down_write+0x52/0x2f0
[  162.013063][ T5677]        ext4_ind_migrate+0x247/0x8e0
[  162.018875][ T5677]        ext4_fileattr_set+0xf53/0x1750
[  162.024548][ T5677]        vfs_fileattr_set+0x859/0xb10
[  162.030093][ T5677]        do_vfs_ioctl+0x1881/0x1f40
[  162.035390][ T5677]        __se_sys_ioctl+0x83/0x170
[  162.040765][ T5677]        do_syscall_64+0x4c/0xa0
[  162.046012][ T5677]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  162.052779][ T5677] 
[  162.052779][ T5677] -> #2 (&sb->s_type->i_mutex_key#9){++++}-{3:3}:
[  162.062297][ T5677]        down_read+0x44/0x2e0
[  162.066990][ T5677]        ext4_bmap+0x4f/0x3f0
[  162.071695][ T5677]        bmap+0xa2/0xd0
[  162.076059][ T5677]        jbd2_journal_flush+0x7e0/0xcd0
[  162.081687][ T5677]        ext4_ioctl+0x31f7/0x3840
[  162.086903][ T5677]        __se_sys_ioctl+0xfa/0x170
[  162.092049][ T5677]        do_syscall_64+0x4c/0xa0
[  162.097247][ T5677]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  162.103672][ T5677] 
[  162.103672][ T5677] -> #1 (&journal->j_checkpoint_mutex){+.+.}-{3:3}:
[  162.113157][ T5677]        __mutex_lock_common+0x1e5/0x2400
[  162.119639][ T5677]        mutex_lock_io_nested+0x43/0x60
[  162.125212][ T5677]        jbd2_journal_flush+0x285/0xcd0
[  162.131027][ T5677]        ext4_ioctl+0x31f7/0x3840
[  162.136149][ T5677]        __se_sys_ioctl+0xfa/0x170
[  162.141304][ T5677]        do_syscall_64+0x4c/0xa0
[  162.146589][ T5677]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  162.153241][ T5677] 
[  162.153241][ T5677] -> #0 (&journal->j_barrier){+.+.}-{3:3}:
[  162.161452][ T5677]        __lock_acquire+0x2c66/0x7b50
[  162.166986][ T5677]        lock_acquire+0x19e/0x400
[  162.172142][ T5677]        __mutex_lock_common+0x1e5/0x2400
[  162.178057][ T5677]        mutex_lock_nested+0x17/0x20
[  162.183337][ T5677]        jbd2_journal_lock_updates+0x2ce/0x390
[  162.189879][ T5677]        ext4_change_inode_journal_flag+0x18e/0x710
[  162.196686][ T5677]        ext4_fileattr_set+0xe61/0x1750
[  162.202788][ T5677]        vfs_fileattr_set+0x859/0xb10
[  162.208303][ T5677]        do_vfs_ioctl+0x1881/0x1f40
[  162.213498][ T5677]        __se_sys_ioctl+0x83/0x170
[  162.218685][ T5677]        do_syscall_64+0x4c/0xa0
[  162.223644][ T5677]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  162.230057][ T5677] 
[  162.230057][ T5677] other info that might help us debug this:
[  162.230057][ T5677] 
[  162.241346][ T5677] Chain exists of:
[  162.241346][ T5677]   &journal->j_barrier --> &sb->s_type->i_mutex_key#9 --> &sbi->s_writepages_rwsem
[  162.241346][ T5677] 
[  162.256967][ T5677]  Possible unsafe locking scenario:
[  162.256967][ T5677] 
[  162.264534][ T5677]        CPU0                    CPU1
[  162.269893][ T5677]        ----                    ----
[  162.275272][ T5677]   lock(&sbi->s_writepages_rwsem);
[  162.280549][ T5677]                                lock(&sb->s_type->i_mutex_key#9);
[  162.288648][ T5677]                                lock(&sbi->s_writepages_rwsem);
[  162.296743][ T5677]   lock(&journal->j_barrier);
[  162.301783][ T5677] 
[  162.301783][ T5677]  *** DEADLOCK ***
[  162.301783][ T5677] 
[  162.310314][ T5677] 4 locks held by syz.8.327/5677:
[  162.315341][ T5677]  #0: ffff88802caf2460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200
[  162.325294][ T5677]  #1: ffff88805fb6a1d8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: vfs_fileattr_set+0x150/0xb10
[  162.336249][ T5677]  #2: ffff88805fb6a378 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_change_inode_journal_flag+0x107/0x710
[  162.347996][ T5677]  #3: ffff88802caf4c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x186/0x710
[  162.360123][ T5677] 
[  162.360123][ T5677] stack backtrace:
[  162.366729][ T5677] CPU: 0 PID: 5677 Comm: syz.8.327 Not tainted syzkaller #0
[  162.374653][ T5677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  162.385340][ T5677] Call Trace:
[  162.388828][ T5677]  <TASK>
[  162.391868][ T5677]  dump_stack_lvl+0x188/0x250
[  162.396649][ T5677]  ? load_image+0x410/0x410
[  162.401262][ T5677]  ? show_regs_print_info+0x20/0x20
[  162.406487][ T5677]  ? print_circular_bug+0x12b/0x1a0
[  162.411908][ T5677]  check_noncircular+0x296/0x330
[  162.416929][ T5677]  ? add_chain_block+0x9b0/0x9b0
[  162.421964][ T5677]  ? add_chain_block+0x9b0/0x9b0
[  162.427001][ T5677]  ? lockdep_lock+0xf1/0x1f0
[  162.431635][ T5677]  ? mark_lock+0x94/0x320
[  162.436479][ T5677]  ? _find_first_zero_bit+0xd1/0xf0
[  162.441675][ T5677]  __lock_acquire+0x2c66/0x7b50
[  162.446963][ T5677]  ? stack_trace_snprint+0xe0/0xe0
[  162.452800][ T5677]  ? verify_lock_unused+0x140/0x140
[  162.458105][ T5677]  ? lockdep_lock+0xf1/0x1f0
[  162.462704][ T5677]  ? verify_lock_unused+0x140/0x140
[  162.467999][ T5677]  ? verify_lock_unused+0x140/0x140
[  162.473751][ T5677]  ? lockdep_unlock+0x143/0x2e0
[  162.478611][ T5677]  ? lockdep_lock+0x1f0/0x1f0
[  162.483477][ T5677]  ? __lock_acquire+0x2844/0x7b50
[  162.489000][ T5677]  lock_acquire+0x19e/0x400
[  162.493601][ T5677]  ? jbd2_journal_lock_updates+0x2ce/0x390
[  162.499727][ T5677]  ? __might_sleep+0xf0/0xf0
[  162.504429][ T5677]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  162.510818][ T5677]  ? read_lock_is_recursive+0x10/0x10
[  162.516879][ T5677]  ? lock_chain_count+0x20/0x20
[  162.522096][ T5677]  ? _raw_spin_lock_irqsave+0x8b/0x100
[  162.528173][ T5677]  ? lockdep_hardirqs_off+0x70/0x100
[  162.533848][ T5677]  __mutex_lock_common+0x1e5/0x2400
[  162.539767][ T5677]  ? jbd2_journal_lock_updates+0x2ce/0x390
[  162.545861][ T5677]  ? jbd2_journal_lock_updates+0x2ce/0x390
[  162.551787][ T5677]  ? jbd2_journal_lock_updates+0x2bd/0x390
[  162.557712][ T5677]  ? mutex_lock_io_nested+0x60/0x60
[  162.563139][ T5677]  ? init_wait_entry+0xd0/0xd0
[  162.568082][ T5677]  ? do_raw_read_unlock+0x70/0x70
[  162.573839][ T5677]  ? rcu_sync_enter+0x22f/0x350
[  162.578912][ T5677]  mutex_lock_nested+0x17/0x20
[  162.584654][ T5677]  jbd2_journal_lock_updates+0x2ce/0x390
[  162.590703][ T5677]  ? xas_next_entry+0x3e0/0x3e0
[  162.595954][ T5677]  ? jbd2_journal_wait_updates+0x270/0x270
[  162.602341][ T5677]  ? rwsem_write_trylock+0x135/0x1c0
[  162.607647][ T5677]  ? clear_nonspinnable+0x60/0x60
[  162.612784][ T5677]  ? cpumask_next+0xb3/0xd0
[  162.617616][ T5677]  ? percpu_down_write+0x20e/0x2f0
[  162.623280][ T5677]  ext4_change_inode_journal_flag+0x18e/0x710
[  162.630825][ T5677]  ext4_fileattr_set+0xe61/0x1750
[  162.636128][ T5677]  ? verify_lock_unused+0x140/0x140
[  162.641872][ T5677]  ? ext4_fileattr_get+0x200/0x200
[  162.647460][ T5677]  ? rwsem_write_trylock+0x135/0x1c0
[  162.653155][ T5677]  ? memset+0x1e/0x40
[  162.657543][ T5677]  ? fileattr_fill_flags+0x1cc/0x300
[  162.663652][ T5677]  ? fscrypt_prepare_setflags+0x5e/0x210
[  162.669285][ T5677]  vfs_fileattr_set+0x859/0xb10
[  162.674922][ T5677]  ? copy_fsxattr_to_user+0x230/0x230
[  162.681516][ T5677]  ? sb_start_write+0x112/0x1c0
[  162.686755][ T5677]  do_vfs_ioctl+0x1881/0x1f40
[  162.692046][ T5677]  ? __ia32_compat_sys_ioctl+0x910/0x910
[  162.698316][ T5677]  ? rcu_lock_release+0x5/0x20
[  162.705100][ T5677]  ? __lock_acquire+0x7b50/0x7b50
[  162.710620][ T5677]  ? kfree+0xef/0x2a0
[  162.714630][ T5677]  ? tomoyo_path_number_perm+0x5f7/0x6b0
[  162.720618][ T5677]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  162.726453][ T5677]  ? bpf_lsm_file_ioctl+0x5/0x10
[  162.732069][ T5677]  ? security_file_ioctl+0x7c/0xa0
[  162.737675][ T5677]  __se_sys_ioctl+0x83/0x170
[  162.742853][ T5677]  do_syscall_64+0x4c/0xa0
[  162.747485][ T5677]  ? clear_bhb_loop+0x30/0x80
[  162.752188][ T5677]  ? clear_bhb_loop+0x30/0x80
[  162.757726][ T5677]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  162.764733][ T5677] RIP: 0033:0x7ffaf585b159
[  162.769505][ T5677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  162.790198][ T5677] RSP: 002b:00007ffaf3ab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  162.798900][ T5677] RAX: ffffffffffffffda RBX: 00007ffaf5ae2fa0 RCX: 00007ffaf585b159
[  162.806882][ T5677] RDX: 0000200000000000 RSI: 0000000040086602 RDI: 0000000000000006
[  162.815428][ T5677] RBP: 00007ffaf58f203b R08: 0000000000000000 R09: 0000000000000000
[  162.823615][ T5677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.831825][ T5677] R13: 00007ffaf5ae3038 R14: 00007ffaf5ae2fa0 R15: 00007ffc2800e818
[  162.839813][ T5677]  </TASK>
[  162.878241][ T5679] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[  162.883848][ T5686] loop6: detected capacity change from 0 to 16
[  162.928405][ T5679] System zones: 1-3, 19-19, 35-36
[  162.939935][ T5679] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,debug,,errors=continue. Quota mode: none.
[  162.967981][ T5686] erofs: (device loop6): mounted with root inode @ nid 36.
[  163.007198][ T5679] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  163.095744][ T4421] team0 (unregistering): Port device team_slave_1 removed
[  163.122444][ T4421] team0 (unregistering): Port device team_slave_0 removed
[  163.133423][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.154324][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.197290][ T4421] bond0 (unregistering): Released all slaves
[  163.251780][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.265342][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.276457][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.287370][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.298337][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.309144][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.319424][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.331089][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.342749][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.357539][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  163.370976][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  163.394371][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.408361][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.418613][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.430748][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.440957][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.453107][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.463579][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.474820][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.488519][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.499863][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  163.510211][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  163.523664][ T5454] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.534749][ T5454] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.544604][ T5454] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.554917][ T5454] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.580965][ T5454] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht'
[  163.614075][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.618320][ T5454] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht'
[  163.624291][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.666502][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  163.699963][ T4234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.710471][ T4234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.731571][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready