last executing test programs:

4.137766996s ago: executing program 1 (id=22):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20, &(0x7f0000000100), 0x2, 0x50f, &(0x7f0000001100)="$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")
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a22301020400000057331900"/36], 0x0)
r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000a40)={{0x3, @default}, [@remote, @remote, @null, @null, @netrom, @rose, @remote, @default]}, &(0x7f0000000ac0)=0x48, 0x100000)
getsockname$netrom(r1, &(0x7f0000000b00)={{}, [@remote, @rose, @null, @netrom, @netrom, @default, @default, @netrom]}, &(0x7f0000000b80)=0x48)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="841806000000da441f73df3ea74650a8603cd0de194eb13bc8fdc8434eb63c91a16aee8433de487d5d41077fa171e527b0c491e8b4f302c60cb568dd99e13e44d7a17783795f74e9a3cdf34d1286cdd75d06289bdda3c8862c88c0b8ad0939a72a7335c8fa39a574374228ae3e274b4ad791a6a9fd5131240e00367a800758cd4481b34e6fe73b611cf034d19e0871f013ff92c2ba4e3e4bf44859557d8516a6ba08608aab527c802263"], 0x0, 0x0})
r2 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000640)={'TPROXY\x00'}, &(0x7f0000000680)=0x1e)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00')
write$uinput_user_dev(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b16900000000000000004ccdce177a97389ae7df65487e3996df64c35efa6e174bd2f1080", 0x25}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac141400000000001800000000000062a49729cac250d6009404000000020000c15a06bed83c4ffda1cdd1386d83883e7e327e007129f5a555118a985e73ba06ac8ba0c07721f969c4391955d996c3efa22b6b7464c96b096e9856c070331f0c869e76d6bf2d4584246643b51b88a682e66a2705c142db9ee73c4a382583cdd1fd202e7289eaf15f97db098db155b0d57fb26ceaee281cbb1886b361b893aba5"], 0x38}, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x7, @mcast1, 0xfffffffc, 0x1}, 0x20)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x173)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000300)='./bus\x00', 0x401, &(0x7f00000000c0)=ANY=[], 0x1e, 0x1b3, &(0x7f00000007c0)="$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")
r6 = inotify_init1(0x80000)
r7 = fsopen(&(0x7f000001fac0)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000540)='user\x00', &(0x7f0000000900)='\xc9 \xad;(U\xc3\x89\x81\x17\x98\xd5\xff\xd8\x9bO\x1dfQ\x02r\xd1\xb6\x16U\xb1\x97P\x9e\xb7D\x93.\xf3\x15\xd2\xb4\x11\x15\xa3^\x9eHm\x89\fU\xfc\xe8\x7f=\xf8j\xa5J\xb9\x87\x11\xdb\xa7\x94\xd3\xc7KZ\xc6z\xee\xd3+\xf8L\xf8>\x1f\x99FJ\x9a\x8b\xca\x0e\x9ah\xcf\x13\xa4;\xe0\x8d\x9e\x1bkR\x18+\xf7%(.\x13\xf07\x15_\x91\xa3\xeb\xd7\xef\x8bt\x93\xc1\x8b;\x15\\\xe2\xd6\xde\xf0\x9f\xf5\xaa\xf5\x14*\x1a\x14\x88p?\xa4u\xcb\xed\xf4P\xc3\x1d\x1f\xb3\xcc\xd6,\x8e%\x02\xb0\x8b\x9e\x90\xde\x17i\xbdMv\x8cW~4\x00[\xddD\x96\x96a\xd7\xa9\xad\xc7\x90Kp\x834\xaez\xd9\\#\x7f\x84_>\xde<r\x00'/214, 0x0)
inotify_add_watch(r6, &(0x7f0000000000)='./file1\x00', 0x10000015)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, r7, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100)
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="4021750000007531fee90664c753f87e02cf941c7bea4a92fb83eab2579ad81e0a6e3a2fcb6cc0ea6aceb9d1d29202790000a0940e048068cde7f4332c11574ea32a01000000fd2b5937cb7c8937caff1da5f6ab9664a694bd92b5dc828b074574c4a455fec3fad0f798ce34610c0f5254996143b28f08e3618da5"], &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="0009187c000088ebd8fbabfe2b8216042e16611aa4783cfe79664f34613a"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0xd9}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1}})
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})

2.384134674s ago: executing program 0 (id=43):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', './file0'}, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x0)
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2})
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
fchown(r1, 0x0, 0xee01)

2.383380946s ago: executing program 2 (id=44):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r0, 0xc, 0x100000000000, 0xfff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x2)
read$FUSE(r0, &(0x7f0000000ac0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_GETXATTR(r1, &(0x7f0000000040)={0x18, 0x0, r2, {0x2}}, 0x18)
fallocate(r1, 0x20, 0x0, 0x8000)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x120040a, &(0x7f0000000740), 0x2, 0x25e, &(0x7f0000000b80)="$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")
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6370313235352c6b6565705f6c6173745f646f74732c6b6565705f6c6173745f646f74732c74696d655f6f66667365743d3078303030303030303030303030303030622c696f636861727365743d69736f383835392d332c666d61736b3d303030303030303030303030303030303030b0303030312c666d61736b3d30303030303030303030303030303030303130303030312c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,\x00'], 0x1, 0x1557, &(0x7f0000002b00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00'}, 0x10)
unshare(0x2c020400)
r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x42, 0x8, 0x2, 0x0, 0x1}, 0x48)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r8, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r9}, 0x3f)
recvmmsg(r9, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}, 0x501}], 0x1, 0x40, 0x0)
socket(0x10, 0x3, 0x0)

2.23368966s ago: executing program 0 (id=45):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000002c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1044}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@nojournal_checksum}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = socket$inet6(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000200", 0x24)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x101042, 0x100)
pwrite64(r1, &(0x7f0000000080)="32cb61", 0x3, 0xfece)
ftruncate(r1, 0x1)

1.853646729s ago: executing program 0 (id=46):
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad101020301090224000100000000090429"], 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@seclabel}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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")
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
bind$tipc(r1, 0x0, 0x0)
sendmsg$tipc(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)

1.441687252s ago: executing program 2 (id=47):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500100001a0013040000000000000000e000000100000000000000000000000020010000000000000000110000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="002701fbe00000000000ffffac1414bb0000000032000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000800000000020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f60000000000000000000000000000000000000002000101000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0)

1.35431458s ago: executing program 2 (id=48):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0})
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c930974b6801e6661fb20200aeb8"], 0xf)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x40d, 0x70bd28, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x3ff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000a40)={0x148, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0xa, 0x1, 0x33}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x10b, 0x1}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0x100a, 0x2}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/30, 0x1e, 0x0, 0x8}}, &(0x7f0000000540)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000680)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/203, 0xcb, 0x2, 0x36}, @flat=@binder={0x73622a85, 0x100a}, @flat=@binder={0x73622a85, 0xaf4c129ce514d754, 0x3}}, &(0x7f0000000700)={0x0, 0x28, 0x40}}, 0x400}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000740)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000007c0)={0x0, 0x18, 0x30}}}, @dead_binder_done, @acquire_done, @acquire={0x40046305, 0x3}], 0x81, 0x0, &(0x7f0000000980)="46ecbd6727a4849e7b21a2cd23c780db8d744399b3cf81710cbda25a2316e9fa591004c19de884e4a18c88f056bd0e9d1851a9cffcb25c706b7ebc3a77a5645985f05db8808fc1e7e927b5e3164d2b47f9a42399a96f0aea7088dcd7ee7258b627988782ce799910c8c2fb62c260f75c29ccc111ee17d5aa738f72462449762b90"})
dup3(r1, r0, 0x0)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3, 0x4, 0x1, {0x0, 0x0, r3}})
io_uring_enter(r5, 0x47f6, 0x0, 0x4, 0x0, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x80, 0x7, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x66, 0x2f, 0x0, 0x29, 0x0, @private=0xa0104fe, @dev={0xac, 0x14, 0x14, 0x27}}}}})

1.249263581s ago: executing program 2 (id=49):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000080), 0x80, 0x63d, &(0x7f00000001c0)="$eJzs3c9rHG0dAPDvzGbTpo2mFRFbFQMeWpBuk1qsemrrwR4KFuxBxENDk9TQ7Q+aFNpYaAoeFBREvIr04j8gXiVX8SaC9uZZqCJVD+/70n2Z2dlmu9lN9s1ms9vO5wO7+8w8k32e784++zzPzk4mgNKaze7SiBMRcSOJmGnLm45m5myx3av/PLmZ3ZJoNL737ySSYl1r+9fF49HsLmn+zV8uR3ymsr3c1cfrtxfqjaanEWfX7tw/u/p4/czKnYVbS7eW7s6f+8b5C3PfnP/T/sR5tHi8cvW7X/zFT3709eW/1s8kcTGuV3+8GB1x7JfZ5qsbWYjt6yci4kKW6PK6wEGqFO/HakR8Lmaiki81zcTKz0daOWCoGpVm/9SYbAClk8SoawCMRmsc0JrbD2MePM5eXsruH3WJf6KYvR/O50ZHXiVtM6NsbcSxfSh/IyI+enLyN9ktenwPMbEP5fQs/1lEfL7b/k/y+I/lkWbxp5G2/V2Wniu+28jq9+0B6pC0pft7/z0doLS3fZL42/dDFv/F4jFbf7nH8+/2Fc9sx3LZ2h8Ao7F5qejIs4FIbPV/2ciwNf6JzvFP4w/5saHOvmsvevd/6T48++7y8d9Et/6/1d8fzvvwtGMclsTG/651f8pq54p//OzKr3qVP9s2/stuWfmtsWAfBh4avnwWcbIj/p/mL33yZv8nXca/2SY3+izjO3/715VeeQPGP7DG84hTXec/W6PSLNVxfDKJ1vHJ8/Nnl1fqS3PN+65l/PHPP/xdr/JHHX+2/4+8Ff/6F5o5O+//bN39Psv4/bXnd5qpQ9vypneNP/3nZHI9T03m91vNazK5WmzSfHi0sLb24NzOdWltkz/ON+M//ZXu7b9H/PnkY6r1kdmH+9+//ar1OdppwP3/utHnhr1k8S/2eP/vtv9/2WcZ///Bwy91zWi9JG/Fv/WdxNQeYwIAAAAAAICySvNjsElae5NO01px4O2zcSSt31td++ryvYd3FyNO57+HrKatI90zzeUkW54vfg/bWj7Xsfy1iDgeEb+uTOXLtZvV+uKogwcAAAAAAAAAAAAAAAAAAIAxcbQ4//91cT2w/1bStFYbda2AAzPMC8wB4037h/LK2//BXG8NGDP6fyivru3fhwKUgqYO5aX9Q3lp/1Be2j+Ul/YP5dW7/W/LeTbsugAAAAAA++b4lzdfTETExrem8ltmssirjrRmwLB1tHFHAqFEKqOuADAybzp8p/9D6fQ1x/+g+OeAw68OcJB2mvHneY2dG/9mMpx6AQAAAAAAAAAAAADbnDqx+SJx/j+U0kCn/flvAfBO29v5/5W9/ykwNrp14bp1KAdzfCi5Pr4EONwrw/n/AAAAAAAAAAAAAHBgpvNbktaKnwFPR5rWahGfiohjUU2WV+pLcxHx6Yj4e6V6KFueH3WlAQAAAAAAAAAAAAAAAAAA4D2z+nj99kK9vvSgPfHhtjXvd6J1xdNxqU97IpKhF5FGx5qpiBiH2IeTmNhak0TERrbn9+OZk8HfPzEOr0+RGPEHEwAAAAAAAAAAAAAAAAAAlFDbucfdnfztAdcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7e1vX/h5cYdYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLvp4wAAAP//qOY5pA==")
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000600), 0x484080, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x9, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000005c0)=0x3e98, 0x4)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r8, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYRESOCT=r9], 0x18}}, 0x880)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000700), &(0x7f0000000740)=0x4)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2b4, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1300, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r10 = dup(r1)
write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[], [], 0x6b}})

1.05816081s ago: executing program 1 (id=50):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20044041}, 0x0)

895.477588ms ago: executing program 1 (id=51):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x52e, &(0x7f0000000500)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000020000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

720.307917ms ago: executing program 1 (id=52):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x311c406, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x9}}, {@data_journal}, {@acl}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x108)
write$P9_RSTATu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="630000007d010000004100ff0105000000400000000002000000000000000000a89bde000000ff7f00000600000000000000050076666174000500766661740003006f5b2b01005c0d005e402b000025242caf2e2e2c24", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x63)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@ipv6_newaddr={0x2c, 0x14, 0x400, 0xfffffffc, 0x0, {0xa, 0x0, 0x2, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x59}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r6=>0x0}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48011}, 0x20000000)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x64, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004810}, 0x240000c0) (async)
read$FUSE(r0, &(0x7f0000000d80)={0x2020}, 0x2020) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) (async)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r9=>0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
r10 = open(&(0x7f0000000180)='./bus\x00', 0x1c3bc2, 0x1c0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f00000008c0)={<r11=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000100)={r11, 0x1, r10, 0x7, 0x80000})
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x516, &(0x7f0000000740)="$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")
r12 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r12, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

662.553929ms ago: executing program 1 (id=53):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000000)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@errors_continue}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9}}]}, 0x3, 0x450, &(0x7f0000000f80)="$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")
r0 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0xe})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r2=>0x0})
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
recvmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x100, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r2, 0x0, <r4=>0x0, 0x0, 0x0, 0x1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000300)={0x48, 0xa, r7, 0x0, r8})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r4, 0x0, r2})
r9 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x58, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r10, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x24, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x2, 0x1, 0xffff939b}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x58}}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x80080)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r12, &(0x7f0000000080), &(0x7f0000000080)=""/11, 0x2}, 0x20)
r13 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$FUSE_LK(r13, &(0x7f00000001c0)={0x28, 0x0, 0x0, {{0x7, 0x8, 0x2}}}, 0x28)

559.686721ms ago: executing program 1 (id=54):
syz_mount_image$minix(&(0x7f0000000540), &(0x7f00000002c0)='./file1\x00', 0x8040, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES32], 0xfd, 0x1de, &(0x7f00000006c0)="$eJzs3Etu00Acx/GfHT9aHuK9YQsSbKhJkbBYINqbUKVuqXABUTatKhHESbgIV+ECjUQvgJHt2LGnJbgG5wHfjxRp/s6M5z+RJp5JZAvAf+u6JEuWXElJknx8dT+5draWNY/UAHQs0Y+kqedFGwD/iN73C1W3pGFnuQCYpdFmz84u6kPp2+nx4GT8co11wmotcsrSaDNvviHppNLea7j+GH3K9xZ3nXp7X9JKk/XLl7z9g6L/NLXT40EtX3MwZv/R1zyo9H+pcf75+B/eq+d/WdIVSVfTgfiT+jck3Txn/Nv1z8+/07B/4E9YWjPj2gFbO3tx9LiMXe14ivpl7GXvrxvxkzL2s3ht8Dbe7moIAFqyz8z/l3Y17ild8E/mv5PN5/7sEgTQmYPDo9dbcRy9b1Owhs0qW+27oNCq4OiCrbwpdYp/fxZgXOcUXMlegDSMwmf7L5xnZaY5pzvnyhHji6Lphh7A0gg+7L8LDg6PHu3tb+1Gu9Gb9fBZGEr9p2GQ7fyD+v4/N+UHNQBLo7j6r847EQAAAAAAAAAAAAAA0NotSbcn4cY8cwEAAADQrd/dGKTx436m3jz0YnyyX9QxuuRhggAAAAAAAAAAAAAAAAAAAEBLPwMAAP//T0g0uQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c)
ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000640)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x5})
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x84c, @ipv4={'\x00', '\xff\xff', @loopback}, 0x104}, 0x1c)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000240)=0xc)
r5 = fcntl$dupfd(r4, 0x0, r4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x56c}, 0x1, 0x0, 0x0, 0x40001}, 0x40000)
socket$packet(0x11, 0x2, 0x300)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000055000000000bfc2404e7ff000000000002", @ANYRESDEC], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x64881)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl724\x00', [0x4f27, 0x5, 0x4, 0x0, 0x7, 0xcc7, 0x6, 0x7, 0xa, 0x100, 0x2, 0x0, 0x1, 0x1, 0x6, 0x101, 0x1f, 0x6, 0x83, 0x40000003, 0x89, 0x9, 0x6, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0x160d]})
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r7, &(0x7f0000001f80)=""/4096, 0x1000)

399.128703ms ago: executing program 0 (id=55):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000080)={[{@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}]}, 0x1, 0x4b2, &(0x7f0000000bc0)="$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") (async)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1e, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100fffffffc9500000000000000bd0a0600000000002500f4fffcffffffb7080000000000007b8af8ff00000000b7080000ffffff7f7b0af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800002bb600fcffa50000a5bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async)
r2 = syz_io_uring_complete(0x0)
ioctl$CDROM_NEXT_WRITABLE(r2, 0x5394, &(0x7f0000000040)) (async)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x282, 0x140)

395.385878ms ago: executing program 2 (id=56):
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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") (async)
rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0x800000000}, 0x2}, 0x20, 0x0, 0x0) (async)
chroot(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00') (async)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./mnt\x00', &(0x7f0000000100), &(0x7f0000000180)={'L+', 0x2}, 0x16, 0x2)

91.307469ms ago: executing program 0 (id=57):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x0, 0x52e, &(0x7f0000000a40)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4008040)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

1.652972ms ago: executing program 2 (id=58):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
r0 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'adq12b\x00', [0x4, 0xe, 0x8, 0xfffffffb, 0x1000, 0x101, 0x6623, 0x6, 0x8b, 0x0, 0xfffffffa, 0x2, 0xfffffffe, 0x8, 0x6, 0x7, 0x81, 0x7, 0x4, 0xa261, 0x10, 0x5, 0x9, 0x9, 0x5, 0x4, 0x1, 0xc005, 0x59, 0x7, 0x4]})
preadv2(r1, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004a40)=""/159, 0x9f}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/253, 0xfd}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x7}}], 0x1, 0x0, 0x0)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='ext4_mballoc_alloc\x00', r3}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

0s ago: executing program 0 (id=59):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x42002, 0x0)
ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f0000000040)={0x2, &(0x7f00001219c0)=[{0x4000000, 0x0, 0x0, 0x0, 0x7}, {0x8000001, 0x0, 0x0, 0x9, 0x2}]}) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ftruncate(r3, 0x2000009)
syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x55}, "1bc1d71ff98028c8f727e0a0e1018a2175b178add1e670eb987cf89a65128c2a541e451d9af23c0f828e144393b00d71bc723a5a11cd71cc95b4010eb4684c444dfda37becc730294a68ff20f953fc0aaeedc50c83"}, 0x59)
write$cgroup_int(r2, &(0x7f00000000c0), 0x12) (async)
fsync(r0)
write$tun(r0, &(0x7f0000000380)={@void, @void, @eth={@multicast, @local, @val={@val, {0x4305}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x1, 0xb0, 0x66, 0x0, 0x2, 0x11, 0x0, @broadcast, @multicast2}, {0x4e23, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "805c9ba3f5309d234330bff7253433b904cc047874c507dbab6bd29a906fed9b", "25dd274466c3613c9125c264157306917b3a0458830dae0a556d115389b1e365a46730ac64527c78cf642f41cb804a7e", "2913b27927255afff04967b5f6c6d2b2f31ef96b76f3a5d70f8e58a2", {"221fde40a4e7c9af6ad2abba9e9bfd4f", "0243955eeb151cc32e5660b73e7d769b"}}}}}}}}, 0xc6) (async)
write$binfmt_script(r3, &(0x7f0000000140), 0xfcb8) (async)
mkdirat$cgroup(r0, 0x0, 0x1ff) (async)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:26627' (ED25519) to the list of known hosts.
syzkaller login: [   48.755192][ T5819] cgroup: Unknown subsys name 'net'
[   48.903057][ T5819] cgroup: Unknown subsys name 'cpuset'
[   48.907160][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.559240][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.661538][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.675842][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.678745][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.682458][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.685170][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.688028][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.691399][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.706921][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.709941][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.712367][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.715648][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.718408][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.720951][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.723870][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.726200][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.013678][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   55.021857][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   55.096870][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   55.126674][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.129326][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.131812][ T5836] bridge_slave_0: entered allmulticast mode
[   55.134634][ T5836] bridge_slave_0: entered promiscuous mode
[   55.139214][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.142615][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.144745][ T5836] bridge_slave_1: entered allmulticast mode
[   55.147338][ T5836] bridge_slave_1: entered promiscuous mode
[   55.205134][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.213057][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.215312][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.217517][ T5832] bridge_slave_0: entered allmulticast mode
[   55.220588][ T5832] bridge_slave_0: entered promiscuous mode
[   55.224716][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.241837][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.244578][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.247226][ T5832] bridge_slave_1: entered allmulticast mode
[   55.251051][ T5832] bridge_slave_1: entered promiscuous mode
[   55.289540][ T5836] team0: Port device team_slave_0 added
[   55.301475][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.304377][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.306730][ T5828] bridge_slave_0: entered allmulticast mode
[   55.310515][ T5828] bridge_slave_0: entered promiscuous mode
[   55.323638][ T5836] team0: Port device team_slave_1 added
[   55.327663][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.331053][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.333503][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.335657][ T5828] bridge_slave_1: entered allmulticast mode
[   55.338421][ T5828] bridge_slave_1: entered promiscuous mode
[   55.350756][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.396918][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.401656][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.403790][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.412253][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.418567][ T5832] team0: Port device team_slave_0 added
[   55.423164][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.426375][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.428680][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.436487][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.445103][ T5832] team0: Port device team_slave_1 added
[   55.473514][ T5828] team0: Port device team_slave_0 added
[   55.493797][ T5828] team0: Port device team_slave_1 added
[   55.512237][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.514398][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.522290][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.530131][ T5836] hsr_slave_0: entered promiscuous mode
[   55.532451][ T5836] hsr_slave_1: entered promiscuous mode
[   55.544908][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.547540][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.558572][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.563313][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.565938][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.575732][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.593220][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.595341][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.603397][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.660381][ T5832] hsr_slave_0: entered promiscuous mode
[   55.663260][ T5832] hsr_slave_1: entered promiscuous mode
[   55.665768][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.668752][ T5832] Cannot create hsr debugfs directory
[   55.692956][ T5828] hsr_slave_0: entered promiscuous mode
[   55.695390][ T5828] hsr_slave_1: entered promiscuous mode
[   55.697866][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.701045][ T5828] Cannot create hsr debugfs directory
[   55.927613][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.943238][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.948416][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.969229][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.007535][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.017925][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.024277][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.042867][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.076300][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.085098][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.092122][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.105965][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.211867][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.221752][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.242912][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   56.255420][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   56.258998][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.261462][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.273597][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.281250][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.283462][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.290422][ T4683] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.292662][ T4683] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.302564][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.304825][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.313584][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   56.323476][ T4683] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.325728][ T4683] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.353604][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.355722][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.410509][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.508328][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.517317][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.568624][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.572330][ T5828] veth0_vlan: entered promiscuous mode
[   56.593764][ T5828] veth1_vlan: entered promiscuous mode
[   56.598958][ T5836] veth0_vlan: entered promiscuous mode
[   56.615316][ T5836] veth1_vlan: entered promiscuous mode
[   56.629351][ T5832] veth0_vlan: entered promiscuous mode
[   56.642566][ T5828] veth0_macvtap: entered promiscuous mode
[   56.646912][ T5828] veth1_macvtap: entered promiscuous mode
[   56.651950][ T5832] veth1_vlan: entered promiscuous mode
[   56.668070][ T5836] veth0_macvtap: entered promiscuous mode
[   56.673223][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.676981][ T5836] veth1_macvtap: entered promiscuous mode
[   56.685502][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.694148][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.696867][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.700114][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.702676][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.717216][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.722128][ T5832] veth0_macvtap: entered promiscuous mode
[   56.735705][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.738118][ T5832] veth1_macvtap: entered promiscuous mode
[   56.753900][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.756598][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.759232][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.762925][ T5838] Bluetooth: hci2: command tx timeout
[   56.764799][ T5838] Bluetooth: hci1: command tx timeout
[   56.766806][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.769680][ T5831] Bluetooth: hci0: command tx timeout
[   56.807963][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.822220][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.838036][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.841077][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.843600][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.846159][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.858271][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.866816][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.909400][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.911824][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.933598][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.941602][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.950079][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.956465][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.962103][ T4683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.964434][ T4683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.002932][ T4683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.005332][ T4683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.006801][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.050446][ T5899] loop1: detected capacity change from 0 to 512
[   57.056940][ T5899] EXT4-fs: Ignoring removed bh option
[   57.058576][ T5899] EXT4-fs: inline encryption not supported
[   57.079132][ T5899] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   57.107238][ T5899] EXT4-fs (loop1): 1 truncate cleaned up
[   57.118048][ T5899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.137530][   T33] audit: type=1800 audit(1752850380.316:2): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[   57.144804][ T5903] loop2: detected capacity change from 0 to 512
[   57.225232][ T5903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   57.229135][ T5903] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.246108][ T5903] overlayfs: failed to resolve './file1': -2
[   57.257566][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.275904][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   58.083615][ T5905] loop0: detected capacity change from 0 to 262144
[   58.086119][ T5905] =======================================================
[   58.086119][ T5905] WARNING: The mand mount option has been deprecated and
[   58.086119][ T5905]          and is ignored by this kernel. Remove the mand
[   58.086119][ T5905]          option from the mount to silence this warning.
[   58.086119][ T5905] =======================================================
[   58.114073][ T5905] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1 (5905)
[   58.171086][ T5905] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   58.174373][ T5905] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   58.177137][ T5905] BTRFS info (device loop0): using free-space-tree
[   58.177280][ T5909] loop1: detected capacity change from 0 to 1024
[   58.197415][ T5913] loop2: detected capacity change from 0 to 512
[   58.226382][ T5909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.240466][ T5913] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.5: bad orphan inode 13
[   58.258750][ T5913] ext4_test_bit(bit=12, block=4) = 1
[   58.261187][ T5913] is_bad_inode(inode)=0
[   58.265359][ T5913] NEXT_ORPHAN(inode)=0
[   58.270528][ T5913] max_ino=32
[   58.271667][ T5913] i_nlink=1
[   58.276691][ T5913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.288280][ T5909] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.4: Abort forced by user
[   58.296623][ T5909] EXT4-fs (loop1): Remounting filesystem read-only
[   58.305616][ T5909] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[   58.335564][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.419280][ T5836] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   58.440059][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.585551][ T5937] loop1: detected capacity change from 0 to 512
[   58.698484][ T5942] loop0: detected capacity change from 0 to 512
[   58.713195][ T5937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.722050][ T5937] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   58.740682][ T5942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.760734][ T5942] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   58.783393][ T5942] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8: corrupted inode contents
[   58.789497][ T5942] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.8: mark_inode_dirty error
[   58.791691][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.810062][ T5942] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8: corrupted inode contents
[   58.814297][ T5942] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.8: mark_inode_dirty error
[   58.839895][ T5831] Bluetooth: hci0: command tx timeout
[   58.842162][ T5831] Bluetooth: hci1: command tx timeout
[   58.844227][ T5831] Bluetooth: hci2: command tx timeout
[   58.944717][ T5947] loop1: detected capacity change from 0 to 1024
[   58.970366][ T5947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.053098][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.080700][ T5896] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   59.116177][ T5951] loop1: detected capacity change from 0 to 512
[   59.145750][ T5951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   59.160154][ T5951] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.197617][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   59.263066][ T5955] loop1: detected capacity change from 0 to 512
[   59.268061][ T5955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   59.285441][ T5896] usb 1-1: Using ep0 maxpacket: 16
[   59.295208][ T5896] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 247, changing to 11
[   59.298696][ T5896] usb 1-1: config 1 interface 0 has no altsetting 0
[   59.316661][ T5896] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40
[   59.329773][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.334156][ T5896] usb 1-1: Product: syz
[   59.335469][ T5896] usb 1-1: Manufacturer: syz
[   59.336893][ T5896] usb 1-1: SerialNumber: syz
[   59.386426][ T5959] netdevsim netdevsim2: Direct firmware load for .. failed with error -2
[   59.389076][ T5959] netdevsim netdevsim2: Falling back to sysfs fallback for: ..
[   59.425583][ T5958] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.11: Unimplemented hash flags: 0x0001
[   59.429111][ T5958] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.11: Corrupt directory, running e2fsck is recommended
[   59.560482][ T5942] loop6: detected capacity change from 0 to 524287999
[   59.565168][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[   59.568696][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[   59.572410][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[   59.575295][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[   59.577908][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[   59.580926][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[   59.583507][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[   59.586617][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[   59.591282][ T5842] ldm_validate_partition_table(): Disk read failed.
[   59.594084][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[   59.596633][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[   59.599219][ T5842] Dev loop6: unable to read RDB block 0
[   59.601871][ T5842]  loop6: unable to read partition table
[   59.610339][ T5942] ldm_validate_partition_table(): Disk read failed.
[   59.612649][ T5962] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8'.
[   59.613860][ T5942] Dev loop6: unable to read RDB block 0
[   59.619182][ T5942]  loop6: unable to read partition table
[   59.622364][ T5942] loop_reread_partitions: partition scan of loop6 (3xC) failed (rc=-5)
[   59.637009][ T5896] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input4
[   59.662443][ T5896] usb 1-1: USB disconnect, device number 2
[   60.127065][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.168453][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.173485][ T5965] loop1: detected capacity change from 0 to 128
[   60.200528][ T5965] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   60.212913][ T5965] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   60.213991][ T5960] netdevsim netdevsim2: Direct firmware load for .. failed with error -2
[   60.246297][ T5970] loop0: detected capacity change from 0 to 1024
[   60.247250][ T5960] netdevsim netdevsim2: Falling back to sysfs fallback for: ..
[   60.248925][ T5970] EXT4-fs: Ignoring removed nobh option
[   60.268437][ T5828] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   60.300822][ T5970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.325989][ T5970] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.14: Allocating blocks 385-513 which overlap fs metadata
[   60.342973][ T5970] EXT4-fs (loop0): pa ffff8881090319f8: logic 16, phys. 129, len 24
[   60.345569][ T5970] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   60.348552][ T5977] loop1: detected capacity change from 0 to 1024
[   60.391534][ T5975] loop2: detected capacity change from 0 to 1024
[   60.392461][ T5977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 ro without journal. Quota mode: writeback.
[   60.428171][ T5977] EXT4-fs: Ignoring removed orlov option
[   60.436652][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.461410][ T5977] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.15: Abort forced by user
[   60.476216][ T5984] loop2: detected capacity change from 0 to 512
[   60.479778][ T5977] EXT4-fs (loop1): Remounting filesystem read-only
[   60.481747][ T5977] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-001000000000 r/w.
[   60.483652][ T5984] EXT4-fs: quotafile must be on filesystem root
[   60.501781][ T5984] loop2: detected capacity change from 0 to 256
[   60.507207][ T5984] exfat: Unknown parameter '_time'
[   60.526623][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[   60.613435][ T5994] Bluetooth: MGMT ver 1.23
[   60.624214][ T5994] loop1: detected capacity change from 0 to 1024
[   60.643328][ T5994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.662658][ T5994] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.19: Allocating blocks 497-513 which overlap fs metadata
[   60.668615][ T5994] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 3 with error 117
[   60.673978][ T5994] EXT4-fs (loop1): This should not happen!! Data will be lost
[   60.673978][ T5994] 
[   60.847920][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.912073][ T6011] netlink: 120 bytes leftover after parsing attributes in process `syz.1.20'.
[   60.919976][ T5831] Bluetooth: hci2: command tx timeout
[   60.921871][ T5831] Bluetooth: hci0: command tx timeout
[   60.923710][ T5831] Bluetooth: hci1: command tx timeout
[   60.937752][ T6011] loop1: detected capacity change from 0 to 1024
[   60.953385][ T6011] /dev/loop1: Can't open blockdev
[   61.055091][ T6020] loop1: detected capacity change from 0 to 512
[   61.133098][ T6022] loop0: detected capacity change from 0 to 2048
[   61.166035][ T6022] loop0: detected capacity change from 0 to 2048
[   61.185374][ T6022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   61.313160][ T6026] loop0: detected capacity change from 0 to 512
[   61.319702][ T5220] Bluetooth: Wrong link type (-57)
[   61.325887][ T5883] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   61.404995][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'.
[   61.407840][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'.
[   61.411506][ T6031] netlink: 'syz.2.27': attribute type 30 has an invalid length.
[   61.432179][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'.
[   61.455791][ T6028] loop0: detected capacity change from 0 to 512
[   61.469241][ T6028] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   61.487792][ T5883] usb 2-1: Using ep0 maxpacket: 8
[   61.490204][ T6028] EXT4-fs (loop0): orphan cleanup on readonly fs
[   61.493524][ T5883] usb 2-1: no configurations
[   61.495513][ T5883] usb 2-1: can't read configurations, error -22
[   61.496699][ T6028] Quota error (device loop0): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[   61.519694][ T6028] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   61.531745][ T6028] EXT4-fs (loop0): Cannot turn on quotas: error -117
[   61.535735][ T6028] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.26: bg 0: block 40: padding at end of block bitmap is not set
[   61.558731][ T6037] loop2: detected capacity change from 0 to 1024
[   61.574156][ T6028] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   61.590254][ T6028] EXT4-fs (loop0): 1 truncate cleaned up
[   61.592855][ T6028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   61.607291][ T6037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.619511][ T5883] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   61.642945][   T33] audit: type=1800 audit(1752850384.826:3): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.29" name="file1" dev="loop2" ino=15 res=0 errno=0
[   61.653148][ T6037] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt.
[   61.659520][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.728147][ T6041] loop0: detected capacity change from 0 to 1024
[   61.756277][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.758680][ T6041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.763226][ T6041] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.768958][ T6041] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   61.772390][ T5883] usb 2-1: Using ep0 maxpacket: 8
[   61.772979][ T5883] usb 2-1: no configurations
[   61.775823][ T5883] usb 2-1: can't read configurations, error -22
[   61.780078][ T5883] usb usb2-port1: attempt power cycle
[   61.807673][ T6041] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   61.825818][ T6041] EXT4-fs (loop0): Remounting filesystem read-only
[   61.844512][ T6046] loop2: detected capacity change from 0 to 736
[   61.848537][ T6041] syz.0.30 (6041) used greatest stack depth: 19896 bytes left
[   61.859075][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.877749][ T6046] rock: directory entry would overflow storage
[   61.880835][ T6046] rock: sig=0x3b10, size=4, remaining=3
[   62.122047][ T5883] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   62.140019][ T5883] usb 2-1: Using ep0 maxpacket: 8
[   62.142143][ T5883] usb 2-1: no configurations
[   62.143562][ T5883] usb 2-1: can't read configurations, error -22
[   62.165458][ T6059] loop2: detected capacity change from 0 to 256
[   62.178778][ T6059] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   62.180986][ T6059] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   62.255105][ T6062] loop2: detected capacity change from 0 to 512
[   62.264869][ T6062] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   62.269591][ T5883] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   62.272273][ T6062] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz.2.36: iget: bad extra_isize 1 (inode size 256)
[   62.276589][ T6062] EXT4-fs (loop2): get root inode failed
[   62.278454][ T6062] EXT4-fs (loop2): mount failed
[   62.291769][ T5883] usb 2-1: Using ep0 maxpacket: 8
[   62.294010][ T5883] usb 2-1: no configurations
[   62.295533][ T5883] usb 2-1: can't read configurations, error -22
[   62.297728][ T5883] usb usb2-port1: unable to enumerate USB device
[   62.349053][ T6066] loop2: detected capacity change from 0 to 1024
[   62.373533][ T6066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.382057][   T33] audit: type=1800 audit(1752850385.566:4): pid=6066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.37" name="file1" dev="loop2" ino=15 res=0 errno=0
[   62.439051][ T6066] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.37: Allocating blocks 497-513 which overlap fs metadata
[   62.452399][ T6065] EXT4-fs (loop2): pa ffff888109031488: logic 32, phys. 161, len 22
[   62.455030][ T6065] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[   62.473056][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.518444][ T6071] loop2: detected capacity change from 0 to 1024
[   62.542976][ T6071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.561231][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.601854][ T6077] loop2: detected capacity change from 0 to 512
[   62.605601][ T6077] EXT4-fs: Ignoring removed orlov option
[   62.614019][ T6077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   62.618721][ T6077] EXT4-fs (loop2): orphan cleanup on readonly fs
[   62.625722][ T6077] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.39: bg 0: block 248: padding at end of block bitmap is not set
[   62.631854][ T6077] Quota error (device loop2): write_blk: dquota write failed
[   62.634177][ T6077] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   62.637034][ T6077] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.39: Failed to acquire dquot type 1
[   62.642719][ T6077] EXT4-fs (loop2): 1 truncate cleaned up
[   62.651103][ T6077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   62.666896][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.697143][ T6082] loop2: detected capacity change from 0 to 512
[   62.790633][ T6090] loop2: detected capacity change from 0 to 512
[   62.803818][ T6090] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   62.816721][ T6092] loop0: detected capacity change from 0 to 4096
[   62.828686][ T6090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.833207][ T6090] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   62.837486][ T6092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.874837][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.985662][ T6098] loop0: detected capacity change from 0 to 1024
[   62.989091][ T6098] EXT4-fs: Ignoring removed oldalloc option
[   62.998700][ T6098] EXT4-fs: Ignoring removed orlov option
[   63.000839][ T5220] Bluetooth: hci1: command tx timeout
[   63.002452][ T5220] Bluetooth: hci0: command tx timeout
[   63.004069][ T5220] Bluetooth: hci2: command tx timeout
[   63.005200][ T6098] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   63.029882][ T6098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.263614][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.539556][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   63.677512][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.699747][    T9] usb 1-1: Using ep0 maxpacket: 16
[   63.714242][    T9] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[   63.716765][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   63.727195][    T9] usb 1-1: config 0 has no interface number 0
[   63.734511][    T9] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[   63.737196][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.743208][    T9] usb 1-1: Product: syz
[   63.745156][    T9] usb 1-1: Manufacturer: syz
[   63.746547][    T9] usb 1-1: SerialNumber: syz
[   63.754359][    T9] usb 1-1: config 0 descriptor??
[   63.764768][    T9] dm9601 1-1:0.41: probe with driver dm9601 failed with error -22
[   63.767764][    T9] sr9700 1-1:0.41: probe with driver sr9700 failed with error -22
[   63.795421][ T5831] Bluetooth: Unexpected start frame (len 10)
[   63.798865][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'.
[   63.802852][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'.
[   63.806241][ T6107] netlink: 'syz.2.48': attribute type 30 has an invalid length.
[   63.890482][ T6109] loop2: detected capacity change from 0 to 1024
[   63.893938][ T6109] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   63.908957][ T6109] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   63.912552][ T6109] EXT4-fs (loop2): orphan cleanup on readonly fs
[   63.920582][ T6109] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.49: Freeing blocks not in datazone - block = 0, count = 4096
[   63.929076][ T6109] EXT4-fs (loop2): 1 orphan inode deleted
[   63.936011][ T6109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   63.945503][ T6109] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.49: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[   63.967926][ T6103] loop0: detected capacity change from 0 to 512
[   64.008359][ T6103] fscrypt (loop0, inode 2): Error -61 getting encryption context
[   64.015116][ T6103] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61
[   64.018252][ T6103] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #13: comm syz.0.46: iget: bad i_size value: 12154757448730
[   64.024074][ T6103] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.46: couldn't read orphan inode 13 (err -117)
[   64.028581][ T6103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.077738][ T6103] tipc: Failed to remove unknown binding: 66,1,1/0:3492805227/3492805229
[   64.115536][ T5883] usb 1-1: USB disconnect, device number 3
[   64.191163][ T6115] Cannot find del_set index 0 as target
[   64.194575][ T6115] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.49: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[   64.350336][ T6117] loop1: detected capacity change from 0 to 512
[   64.372968][ T6117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   64.377134][ T6117] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.397201][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   64.438287][ T6121] loop1: detected capacity change from 0 to 512
[   64.484885][ T6126] loop1: detected capacity change from 0 to 512
[   64.487831][ T6126] EXT4-fs: Invalid want_extra_isize 9
[   64.497593][ T6126] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   64.508545][ T6126] iommufd_mock iommufd_mock1: Adding to iommu group 1
[   64.561881][ T6128] loop1: detected capacity change from 0 to 64
[   64.586303][ T6128] MINIX-fs: mounting file system with errors, running fsck is recommended
[   64.596455][   T33] audit: type=1800 audit(1752850387.776:5): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.54" name="file1" dev="loop1" ino=8 res=0 errno=0
[   64.724718][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.764895][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.006574][ T6132] loop0: detected capacity change from 0 to 512
[   65.009088][ T6132] ext4: Unknown parameter 'GPL'
[   65.048504][ T6136] loop2: detected capacity change from 0 to 128
[   65.056789][ T6136] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[   65.071083][ T6136] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[   65.078681][ T6140] loop0: detected capacity change from 0 to 512
[   65.106187][ T6140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   65.111594][ T5832] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   65.111844][ T6140] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.122968][ T6140] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   65.142047][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   65.173533][ T6145] loop2: detected capacity change from 0 to 512
[   65.194164][ T6145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.200273][ T6145] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   65.217469][ T6151] ------------[ cut here ]------------
[   65.217907][ T6145] comedi comedi0: adq12b: I/O port conflict (0x4,16)
[   65.219649][ T6151] WARNING: CPU: 0 PID: 6151 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x2c8/0x370
[   65.219684][ T6151] Modules linked in:
[   65.219704][ T6151] CPU: 0 UID: 0 PID: 6151 Comm: syz.0.59 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[   65.219715][ T6151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   65.219721][ T6151] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370
[   65.219731][ T6151] Code: 74 10 4c 89 e7 89 54 24 0c e8 24 14 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 3b 8f 76 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24
[   65.219752][ T6151] RSP: 0018:ffffc900048df960 EFLAGS: 00010246
[   65.219761][ T6151] RAX: ffffc900048df900 RBX: 0000000000000019 RCX: 0000000000000000
[   65.219767][ T6151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900048df9c8
[   65.219773][ T6151] RBP: ffffc900048dfa50 R08: ffffc900048df9c7 R09: 0000000000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   65.219779][ T6151] R10: ffffc900048df9a0 R11: fffff5200091bf39 R12: 0000000000000000
[   65.219785][ T6151] R13: 1ffff9200091bf30 R14: 0000000000040dc0 R15: dffffc0000000000
[   65.219791][ T6151] FS:  00007fd9046956c0(0000) GS:ffff8880b8626000(0000) knlGS:0000000000000000
[   65.219798][ T6151] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   65.219804][ T6151] CR2: 00007fd904694fc8 CR3: 0000000022fa6000 CR4: 00000000000006f0
[   65.219829][ T6151] Call Trace:
[   65.219834][ T6151]  <TASK>
[   65.219847][ T6151]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   65.219865][ T6151]  __alloc_pages_noprof+0xa/0x30
[   65.219874][ T6151]  ___kmalloc_large_node+0x85/0x210
[   65.234939][ T6145] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.58: corrupted inode contents
[   65.236591][ T6151]  __kmalloc_large_node_noprof+0x18/0x90
[   65.236612][ T6151]  __kmalloc_noprof+0x36f/0x4f0
[   65.236624][ T6151]  ? comedi_unlocked_ioctl+0x9ee/0xf40
[   65.236642][ T6151]  comedi_unlocked_ioctl+0x9ee/0xf40
[   65.248336][ T6150] loop0: detected capacity change from 0 to 512
[   65.248434][ T6151]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[   65.291483][ T6151]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[   65.293212][ T6151]  ? tomoyo_path_number_perm+0x4e2/0x5a0
[   65.294532][ T6145] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.58: mark_inode_dirty error
[   65.294919][ T6151]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[   65.301509][ T6151]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   65.303530][ T6151]  ? ktime_get+0x3e/0x1f0
[   65.304987][ T6151]  ? __lock_acquire+0xab9/0xd20
[   65.306493][ T6151]  ? __fget_files+0x2a/0x420
[   65.308249][ T6151]  ? __fget_files+0x2a/0x420
[   65.309722][ T6151]  ? __fget_files+0x3a0/0x420
[   65.311155][ T6151]  ? __fget_files+0x2a/0x420
[   65.312581][ T6151]  ? bpf_lsm_file_ioctl+0x9/0x20
[   65.314093][ T6151]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[   65.315860][ T6151]  __se_sys_ioctl+0xfc/0x170
[   65.317302][ T6151]  do_syscall_64+0xfa/0x3b0
[   65.319033][ T6151]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.320911][ T6151]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   65.322979][ T6151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.325172][ T6151] RIP: 0033:0x7fd90378e9a9
[   65.326580][ T6151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.332449][ T6151] RSP: 002b:00007fd904695038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   65.334983][ T6151] RAX: ffffffffffffffda RBX: 00007fd9039b6080 RCX: 00007fd90378e9a9
[   65.337397][ T6151] RDX: 0000200000000040 RSI: 000000008010640b RDI: 0000000000000005
[   65.340115][ T6151] RBP: 00007fd903810d69 R08: 0000000000000000 R09: 0000000000000000
[   65.342409][ T6151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   65.344821][ T6151] R13: 0000000000000000 R14: 00007fd9039b6080 R15: 00007ffd01655a48
[   65.347272][ T6151]  </TASK>
[   65.348279][ T6151] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   65.350443][ T6151] CPU: 0 UID: 0 PID: 6151 Comm: syz.0.59 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[   65.353970][ T6151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   65.356815][ T6151] Call Trace:
[   65.357977][ T6151]  <TASK>
[   65.359113][ T6151]  dump_stack_lvl+0x99/0x250
[   65.360677][ T6151]  ? __asan_memcpy+0x40/0x70
[   65.362431][ T6151]  ? __pfx_dump_stack_lvl+0x10/0x10
[   65.364369][ T6151]  ? __pfx__printk+0x10/0x10
[   65.366119][ T6151]  panic+0x2db/0x790
[   65.367312][ T6151]  ? __pfx_panic+0x10/0x10
[   65.369007][ T6151]  ? show_trace_log_lvl+0x4fb/0x550
[   65.371035][ T6151]  __warn+0x31b/0x4b0
[   65.372558][ T6151]  ? __alloc_frozen_pages_noprof+0x2c8/0x370
[   65.374830][ T6151]  ? __alloc_frozen_pages_noprof+0x2c8/0x370
[   65.377046][ T6151]  report_bug+0x2be/0x4f0
[   65.378687][ T6151]  ? __alloc_frozen_pages_noprof+0x2c8/0x370
[   65.381005][ T6151]  ? __alloc_frozen_pages_noprof+0x2c8/0x370
[   65.383229][ T6151]  ? __alloc_frozen_pages_noprof+0x2ca/0x370
[   65.385549][ T6151]  handle_bug+0x84/0x160
[   65.387178][ T6151]  exc_invalid_op+0x1a/0x50
[   65.388926][ T6151]  asm_exc_invalid_op+0x1a/0x20
[   65.390459][ T6151] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370
[   65.392859][ T6151] Code: 74 10 4c 89 e7 89 54 24 0c e8 24 14 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 3b 8f 76 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24
[   65.399214][ T6151] RSP: 0018:ffffc900048df960 EFLAGS: 00010246
[   65.401641][ T6151] RAX: ffffc900048df900 RBX: 0000000000000019 RCX: 0000000000000000
[   65.404399][ T6151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900048df9c8
[   65.406750][ T6151] RBP: ffffc900048dfa50 R08: ffffc900048df9c7 R09: 0000000000000000
[   65.409354][ T6151] R10: ffffc900048df9a0 R11: fffff5200091bf39 R12: 0000000000000000
[   65.411660][ T6151] R13: 1ffff9200091bf30 R14: 0000000000040dc0 R15: dffffc0000000000
[   65.414004][ T6151]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   65.415892][ T6151]  __alloc_pages_noprof+0xa/0x30
[   65.417408][ T6151]  ___kmalloc_large_node+0x85/0x210
[   65.419315][ T6151]  __kmalloc_large_node_noprof+0x18/0x90
[   65.421111][ T6151]  __kmalloc_noprof+0x36f/0x4f0
[   65.422537][ T6151]  ? comedi_unlocked_ioctl+0x9ee/0xf40
[   65.424118][ T6151]  comedi_unlocked_ioctl+0x9ee/0xf40
[   65.425700][ T6151]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[   65.427508][ T6151]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[   65.429153][ T6151]  ? tomoyo_path_number_perm+0x4e2/0x5a0
[   65.430791][ T6151]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[   65.432429][ T6151]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   65.434149][ T6151]  ? ktime_get+0x3e/0x1f0
[   65.435575][ T6151]  ? __lock_acquire+0xab9/0xd20
[   65.437046][ T6151]  ? __fget_files+0x2a/0x420
[   65.438757][ T6151]  ? __fget_files+0x2a/0x420
[   65.440161][ T6151]  ? __fget_files+0x3a0/0x420
[   65.441697][ T6151]  ? __fget_files+0x2a/0x420
[   65.443037][ T6151]  ? bpf_lsm_file_ioctl+0x9/0x20
[   65.444504][ T6151]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[   65.446227][ T6151]  __se_sys_ioctl+0xfc/0x170
[   65.447640][ T6151]  do_syscall_64+0xfa/0x3b0
[   65.448971][ T6151]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.450758][ T6151]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   65.452607][ T6151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.454355][ T6151] RIP: 0033:0x7fd90378e9a9
[   65.455710][ T6151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.461728][ T6151] RSP: 002b:00007fd904695038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   65.464187][ T6151] RAX: ffffffffffffffda RBX: 00007fd9039b6080 RCX: 00007fd90378e9a9
[   65.466576][ T6151] RDX: 0000200000000040 RSI: 000000008010640b RDI: 0000000000000005
[   65.468945][ T6151] RBP: 00007fd903810d69 R08: 0000000000000000 R09: 0000000000000000
[   65.471224][ T6151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   65.473537][ T6151] R13: 0000000000000000 R14: 00007fd9039b6080 R15: 00007ffd01655a48
[   65.475869][ T6151]  </TASK>
[   65.477406][ T6151] Kernel Offset: disabled
[   65.479080][ T6151] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:53:08  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900048df0b0
R8 =ffff888107df8237 R9 =1ffff11020fbf046 R10=dffffc0000000000 R11=ffffffff85460d30
R12=dffffc0000000000 R13=ffffffff99aee892 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460dac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd9046956c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd904694fc8 CR3=0000000022fa6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd903986478 00007fd903986450 XMM03=00007fd903986488 00007fd903986480
XMM04=00007fd9044ed100 00007fd903986440 XMM05=00007fd903986458 00007fd9039864a0
XMM06=00007fd903986498 00007fd903986490 XMM07=00007fd903986488 00007fd903986480
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fd903811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=c02bed749d9dfa00 RDX=0000000000000000
RSI=ffffffff8db837d7 RDI=ffffffff8be28c40 RBP=00000000ffffffff RSP=ffffc90002eff658
R8 =ffffffff8fa1d5f7 R9 =1ffffffff1f43abe R10=dffffc0000000000 R11=fffffbfff1f43abf
R12=0000000000000046 R13=ffff888107c89cc0 R14=ffffffff8e13f220 R15=0000000000000001
RIP=ffffffff8b6d5cf3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd904673fc8 CR3=0000000011944000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000006232
XMM02=00007f7b69786478 00007f7b69786450 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f7b69786458 00007f7b697864a0
XMM06=00007f7b69786498 00007f7b69786490 XMM07=00007f7b69786488 00007f7b69786480
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f7b69611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
